Add protection support for destroy builds

lib/console/plural/context.ex

@@ -2,7 +2,7 @@ defmodule Console.Plural.Context do
   import Console
   alias Console.Deployer
 
-  defstruct [:configuration, :bundles, :smtp, :buckets, :domains]
+  defstruct [:configuration, :bundles, :smtp, :buckets, :domains, :protect]
 
   defmodule Smtp do
     defstruct [:user, :password, :server, :port, :sender]
@@ -34,6 +34,9 @@ defmodule Console.Plural.Context do
     }
   end
 
+  def protected?(%__MODULE__{protect: [_ | _] = protect}, repo), do: Enum.member?(protect, repo)
+  def protected?(_, _), do: false
+
   def get() do
     with {:ok, content} <- Deployer.file(location()),
          {:ok, %{"spec" => spec}} <- YamlElixir.read_from_string(content) do

lib/console/services/builds.ex

@@ -4,7 +4,10 @@ defmodule Console.Services.Builds do
   alias Kube.{Client, Application}
   alias Console.Schema.{Build, Command, User, Lock}
   alias Console.Services.{Changelogs, Rbac}
-  alias Console.Plural.Incidents
+  alias Console.Plural.{Incidents, Context}
+
+  @type error :: {:error, term}
+  @type build_resp :: {:ok, Build.t} | error
 
   def get!(id), do: Repo.get!(Build, id)
 
@@ -68,6 +71,14 @@ defmodule Console.Services.Builds do
     end
   end
 
+  @doc """
+  Creates a new build and goes from there
+
+  fails if:
+  * there is no current application for that repo
+  * if its a destroy build, the repo is protected
+  """
+  @spec create(map, User.t) :: build_resp
   def create(attrs, %User{id: id} = user) do
     start_transaction()
     |> add_operation(:build, fn _ ->
@@ -83,6 +94,16 @@ defmodule Console.Services.Builds do
           _ -> {:error, :invalid_repository}
         end
     end)
+    |> add_operation(:protect, fn
+      %{build: %Build{type: :destroy, repository: repo} = b} ->
+        with {:ok, ctx} <- Context.get(),
+             true <- Context.protected?(ctx, repo) do
+          {:error, "repo #{repo} is protected from being destroyed, update context.yaml if you really want to destroy it"}
+        else
+          _ -> {:ok, b}
+        end
+      %{build: b} -> {:ok, b}
+    end)
     |> execute(extract: :build)
     |> notify(:create, user)
   end

test/console/services/builds_test.exs

@@ -2,6 +2,7 @@ defmodule Console.Services.BuildsTest do
   use Console.DataCase, async: true
   use Mimic
   alias Console.Services.Builds
+  alias Console.Plural.Context
   alias Console.{PubSub, Storage.Git}
 
   describe "Command implements Collectable" do
@@ -56,6 +57,13 @@ defmodule Console.Services.BuildsTest do
 
       assert_receive {:event, %PubSub.BuildCreated{item: ^build}}
     end
+
+    test "destroy builds fail when protected" do
+      user = insert(:user)
+      expect(Kazan, :run, fn _ -> {:ok, %Kube.Application{}} end)
+      expect(Context, :get, fn -> {:ok, %Context{protect: ["repo"]}} end)
+      {:error, _} = Builds.create(%{type: :destroy, repository: "repo"}, user)
+    end
   end
 
   describe "#restart/2" do