feat(secret): implements batch delete with regex pattern

This commit implementes the support for deleting one or more secrets
using a regex pattern.

Fixes AB#18146

riocli/secret/delete.py

@@ -11,39 +11,144 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
+import functools
+import typing
+from queue import Queue
+
 import click
 from click_help_colors import HelpColorsCommand
 
 from riocli.config import new_v2_client
 from riocli.constants import Colors, Symbols
+from riocli.secret.util import fetch_secrets, print_secrets_for_confirmation
+from riocli.utils import tabulate_data
+from riocli.utils.execute import apply_func_with_result
 from riocli.utils.spinner import with_spinner
+from riocli.v2client.client import Client
+
 
 @click.command(
     'delete',
     cls=HelpColorsCommand,
     help_headers_color=Colors.YELLOW,
     help_options_color=Colors.GREEN,
 )
-@click.option('--force', '-f', '--silent', 'force', is_flag=True,
-              default=False, help='Skip confirmation')
-@click.argument('secret-name', type=str)
-@with_spinner(text='Deleting secret...')
-def delete_secret(force: str, secret_name: str, spinner=None) -> None:
-    """
-    Deletes a secret
+@click.option('--force', '-f', '--silent', is_flag=True, default=False,
+              help='Skip confirmation')
+@click.option('-a', '--all', 'delete_all', is_flag=True, default=False,
+              help='Deletes all secrets in the project')
+@click.option('--workers', '-w',
+              help="Number of parallel workers while running delete secret "
+                   "command. Defaults to 10.", type=int, default=10)
+@click.argument('secret-name-or-regex', type=str, default="")
+@with_spinner(text="Deleting secret...")
+def delete_secret(
+        secret_name_or_regex: str,
+        force: bool,
+        delete_all: bool = False,
+        workers: int = 10,
+        spinner=None,
+) -> None:
+    """Delete one or more secrets with a name or a regex pattern.
+
+    You can specify a secret name or a regex pattern to delete one
+    or more deployment.
+
+    If you want to delete all the secrets, then simply use the
+    ``--all`` flag.
+
+    If you want to delete secrets without confirmation, then use the
+    ``--force`` or ``--silent`` or ``-f``
+
+    Usage Examples:
+
+        Delete a secret by name
+
+            $ rio secret delete SECRET_NAME
+
+        Delete a secret without confirmation
+
+            $ rio secret delete SECRET_NAME --force
+
+        Delete all secrets in the project
+
+            $ rio secret delete --all
+
+        Delete secrets using regex pattern
+
+            $ rio secret delete "SECRET_NAME.*"
     """
+    client = new_v2_client()
+    if not (secret_name_or_regex or delete_all):
+        spinner.text = "Nothing to delete"
+        spinner.green.ok(Symbols.SUCCESS)
+        return
+
+    try:
+        routes = fetch_secrets(client, secret_name_or_regex, delete_all)
+    except Exception as e:
+        spinner.text = click.style(
+            'Failed to delete secret(s): {}'.format(e), Colors.RED)
+        spinner.red.fail(Symbols.ERROR)
+        raise SystemExit(1) from e
+
+    if not routes:
+        spinner.text = click.style("Secret(s) not found", Colors.RED)
+        spinner.red.fail(Symbols.ERROR)
+        raise SystemExit(1)
+
     with spinner.hidden():
-        if not force:
-            click.confirm(
-                'Deleting secret {} '.format(secret_name),
-                abort=True)
+        print_secrets_for_confirmation(routes)
+
+    spinner.write('')
+
+    if not force:
+        with spinner.hidden():
+            click.confirm('Do you want to delete the above secret(s)?', abort=True)
+        spinner.write('')
 
     try:
-        client = new_v2_client(with_project=True)
-        client.delete_secret(secret_name)
-        spinner.text = click.style('Secret deleted successfully.', fg=Colors.GREEN)
-        spinner.green.ok(Symbols.SUCCESS)
+        f = functools.partial(_apply_delete, client)
+        result = apply_func_with_result(f=f, items=routes, workers=workers, key=lambda x: x[0])
+
+        data, statuses = [], []
+        for name, status, msg in result:
+            fg = Colors.GREEN if status else Colors.RED
+            icon = Symbols.SUCCESS if status else Symbols.ERROR
+            statuses.append(status)
+            data.append([
+                click.style(name, fg),
+                click.style('{}  {}'.format(icon, msg), fg)
+            ])
+
+        with spinner.hidden():
+            tabulate_data(data, headers=['Name', 'Status'])
+
+        # When no route is deleted, raise an exception.
+        if not any(statuses):
+            spinner.write('')
+            spinner.text = click.style('Failed to delete secret(s).', Colors.RED)
+            spinner.red.fail(Symbols.ERROR)
+            raise SystemExit(1)
+
+        icon = Symbols.SUCCESS if all(statuses) else Symbols.WARNING
+        fg = Colors.GREEN if all(statuses) else Colors.YELLOW
+        text = "successfully" if all(statuses) else "partially"
+
+        spinner.write('')
+        spinner.text = click.style(
+            'Secret(s) deleted {}.'.format(text), fg)
+        spinner.ok(click.style(icon, fg))
     except Exception as e:
-        spinner.text = click.style('Failed to delete secret: {}'.format(e), fg=Colors.RED)
+        spinner.text = click.style(
+            'Failed to delete secret(s): {}'.format(e), Colors.RED)
         spinner.red.fail(Symbols.ERROR)
         raise SystemExit(1) from e
+
+
+def _apply_delete(client: Client, result: Queue, secret: typing.Any) -> None:
+    try:
+        client.delete_secret(secret.metadata.name)
+        result.put((secret.metadata.name, True, 'Secret deleted successfully'))
+    except Exception as e:
+        result.put((secret.metadata.name, False, str(e)))

riocli/secret/util.py

@@ -0,0 +1,50 @@
+# Copyright 2024 Rapyuta Robotics
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import re
+from typing import List
+
+from munch import Munch
+
+from riocli.utils import tabulate_data
+from riocli.v2client.client import Client
+
+
+def fetch_secrets(
+        client: Client,
+        secret_name_or_regex: str,
+        include_all: bool,
+) -> List[Munch]:
+    secrets = client.list_secrets()
+    result = []
+    for secret in secrets:
+        if (include_all or secret_name_or_regex == secret.metadata.name or
+                secret_name_or_regex == secret.metadata.guid or
+                (secret_name_or_regex not in secret.metadata.name and
+                 re.search(r'^{}$'.format(secret_name_or_regex), secret.metadata.name))):
+            result.append(secret)
+
+    return result
+
+
+def print_secrets_for_confirmation(secrets: List[Munch]):
+    data = []
+    for secret in secrets:
+        data.append([
+            secret.metadata.name,
+            secret.metadata.creatorGUID,
+            secret.metadata.createdAt,
+        ])
+
+    tabulate_data(data, ['Name', 'Creator', 'CreatedAt'])