Merge pull request #1 from redpanda-data/UX-457/sj/impersonation-role-sync-script

Ux 457/sj/impersonation role sync script

Author: sago2k8

.bunfig.toml

@@ -0,0 +1,10 @@
+[install]
+# set default registry as a string
+registry = "https://registry.npmjs.org"
+
+[install.lockfile]
+print = "yarn"
+
+[install.scopes]
+# registry for @buf packages
+"@buf" = "https://buf.build/gen/npm/v1"

.env.example

@@ -0,0 +1,13 @@
+# Redpanda Cloud API Token (required)
+# Get this bearer token from your Redpanda Cloud organization settings
+REDPANDA_CLOUD_API_TOKEN=your-cloud-api-bearer-token-here
+
+# Optional: Custom Cloud API URL (defaults to production)
+# REDPANDA_CLOUD_API_URL=https://api.redpanda.com
+
+# Optional: Redpanda Dataplane API Token (fallback authentication)
+# Only needed if Cloud API token doesn't work for dataplane operations
+# REDPANDA_DATAPLANE_TOKEN=your-dataplane-api-token
+
+# Optional: Enable debug logging
+# DEBUG=1

.github/workflows/ci.yml

@@ -0,0 +1,68 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  biome:
+    name: Biome
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Run Biome
+        uses: biomejs/setup-biome@v2
+        with:
+          version: latest
+
+      - name: Run Biome check
+        run: biome check .
+
+  test:
+    name: Run Tests
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run tests
+        run: bun test
+
+  build:
+    name: Build Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Build project
+        run: bun run build:js
+
+      - name: Check for uncommitted changes
+        run: |
+          if [ -n "$(git status --porcelain)" ]; then
+            echo "Build generated uncommitted changes:"
+            git status --porcelain
+            git diff
+            exit 1
+          fi
+

.gitignore

@@ -0,0 +1,53 @@
+# Dependencies
+node_modules/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Build outputs (keep dist/ for customer distribution)
+out/
+
+# Runtime logs
+*.log
+logs/
+
+# Environment variables
+.env
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+# IDE files
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS files
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db
+
+# Testing
+coverage/
+.nyc_output/
+.jest/
+
+# Temporary files
+*.tmp
+*.temp
+
+# Nix
+result
+result-*
+.direnv/
+
+# Lock files (keep for reproducibility)
+# package-lock.json
+# bun.lockb

.npmrc

@@ -0,0 +1,12 @@
+# Buf.build registry for generated protobuf packages
+@buf:registry=https://buf.build/gen/npm/v1/
+
+# Default npm registry
+registry=https://registry.npmjs.org/
+
+# Optional: Configure authentication for private registries if needed
+# //buf.build/gen/npm/v1/:_authToken=${BUF_TOKEN}
+
+# Optional: Always use exact versions for generated packages
+save-exact=true
+