26 lines
924 B
Text
26 lines
924 B
Text
|
#!/usr/bin/env nu
|
||
|
|
def main [
|
||
|
|
--workspace: string = ""
|
||
|
|
--event-type: string = "key_rotation"
|
||
|
|
--key-type: string = ""
|
||
|
|
--dry-run
|
||
|
|
]: nothing -> nothing {
|
||
|
|
let ws = if ($workspace | is-not-empty) { $workspace } else { $env.PLAYBOOK_PARAM_WORKSPACE? | default "unknown" }
|
||
|
|
let ktype = if ($key_type | is-not-empty) { $key_type } else { $env.PLAYBOOK_PARAM_KEY_TYPE? | default "" }
|
||
|
|
|
||
|
|
let subject = $"ops.audit.($ws)"
|
||
|
|
let payload = { event_type: $event_type, key_type: $ktype, workspace: $ws, timestamp: (date now | format date "%Y-%m-%dT%H:%M:%SZ") } | to json
|
||
|
|
|
||
|
|
if $dry_run {
|
||
|
|
print $"[dry-run] would publish to ($subject): ($payload)"
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
let r = do { ^nats pub $subject $payload } | complete
|
||
|
|
if $r.exit_code != 0 {
|
||
|
|
print $"WARNING: audit emit failed: ($r.stderr | str trim)"
|
||
|
|
} else {
|
||
|
|
print $"audit event published to ($subject)"
|
||
|
|
}
|
||
|
|
}
|