Function buildCELVariablesForDataExport

backend/runner/approval/runner.go:661–701

buildCELVariablesForDataExport builds CEL variables for DATABASE_EXPORT issues.

(ctx context.Context, stores *store.Store, issue *store.IssueMessage)

// buildCELVariablesForDataExport builds CEL variables for DATABASE_EXPORT issues.
func buildCELVariablesForDataExport(ctx context.Context, stores *store.Store, issue *store.IssueMessage) ([]map[string]any, bool, error) {
	if issue.PlanUID == nil {
		return nil, false, errors.Errorf("expected plan UID in issue %v", issue.UID)
	}
	plan, err := stores.GetPlan(ctx, &store.FindPlanMessage{ProjectID: issue.ProjectID, UID: issue.PlanUID})
	if err != nil {
		return nil, false, errors.Wrapf(err, "failed to get plan %v", *issue.PlanUID)
	}
	if plan == nil {
		return nil, false, errors.Errorf("plan %v not found", *issue.PlanUID)
	}

	// Unfold database groups and get all targets (only EXPORT_DATA targets)
	targets, err := unfoldSpecTargets(ctx, stores, plan.Config.GetSpecs(), issue.ProjectID)
	if err != nil {
		return nil, false, errors.Wrap(err, "failed to unfold spec targets")
	}

	var celVarsList []map[string]any
	for _, target := range targets {
		envID := ""
		if target.database.EffectiveEnvironmentID != nil {
			envID = *target.database.EffectiveEnvironmentID
		}

		celVars := map[string]any{
			common.CELAttributeResourceEnvironmentID: envID,
			common.CELAttributeResourceProjectID:     issue.ProjectID,
			common.CELAttributeResourceInstanceID:    target.database.InstanceID,
			common.CELAttributeResourceDatabaseName:  target.database.DatabaseName,
			common.CELAttributeResourceDBEngine:      target.database.Engine.String(),
		}
		celVarsList = append(celVarsList, celVars)
	}

	if len(celVarsList) == 0 {
		celVarsList = append(celVarsList, map[string]any{})
	}

	return celVarsList, true, nil
}

// buildCELVariablesForRoleGrant builds CEL variables for ROLE_GRANT issues.
func buildCELVariablesForRoleGrant(ctx context.Context, stores *store.Store, issue *store.IssueMessage) ([]map[string]any, bool, error) {