orchard/pkg/resource/v1/service_account_role.go

package v1

import (
	"errors"
	"fmt"
)

var ErrUnsupportedServiceAccountRole = errors.New("unsupported service account role")

type ServiceAccountRole string

const (
	ServiceAccountRoleComputeRead                  ServiceAccountRole = "compute:read"
	ServiceAccountRoleComputeWrite                 ServiceAccountRole = "compute:write"
	ServiceAccountRoleComputeConnect               ServiceAccountRole = "compute:connect"
	ServiceAccountRoleComputeConnectTartGuestAgent ServiceAccountRole = "compute:connect:tart-guest-agent"
	ServiceAccountRoleHostProcessWrite             ServiceAccountRole = "host-process:write"
	ServiceAccountRoleHostProcessConnect           ServiceAccountRole = "host-process:connect"
	ServiceAccountRoleAdminRead                    ServiceAccountRole = "admin:read"
	ServiceAccountRoleAdminWrite                   ServiceAccountRole = "admin:write"
)

func NewServiceAccountRole(name string) (ServiceAccountRole, error) {
	switch name {
	case string(ServiceAccountRoleComputeRead):
		return ServiceAccountRoleComputeRead, nil
	case string(ServiceAccountRoleComputeWrite):
		return ServiceAccountRoleComputeWrite, nil
	case string(ServiceAccountRoleComputeConnect):
		return ServiceAccountRoleComputeConnect, nil
	case string(ServiceAccountRoleComputeConnectTartGuestAgent):
		return ServiceAccountRoleComputeConnectTartGuestAgent, nil
	case string(ServiceAccountRoleHostProcessWrite):
		return ServiceAccountRoleHostProcessWrite, nil
	case string(ServiceAccountRoleHostProcessConnect):
		return ServiceAccountRoleHostProcessConnect, nil
	case string(ServiceAccountRoleAdminRead):
		return ServiceAccountRoleAdminRead, nil
	case string(ServiceAccountRoleAdminWrite):
		return ServiceAccountRoleAdminWrite, nil
	default:
		return "", fmt.Errorf("%w: %s", ErrUnsupportedServiceAccountRole, name)
	}
}

func AllServiceAccountRoles() []ServiceAccountRole {
	return []ServiceAccountRole{
		ServiceAccountRoleComputeRead,
		ServiceAccountRoleComputeWrite,
		ServiceAccountRoleComputeConnect,
		ServiceAccountRoleComputeConnectTartGuestAgent,
		ServiceAccountRoleHostProcessWrite,
		ServiceAccountRoleHostProcessConnect,
		ServiceAccountRoleAdminRead,
		ServiceAccountRoleAdminWrite,
	}
}