forked from kubernetes-retired/kube-aws
/
credentials.go
70 lines (62 loc) · 1.93 KB
/
credentials.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
package render
import (
"crypto/rsa"
"crypto/x509"
"fmt"
"github.com/kubernetes-incubator/kube-aws/core/controlplane/config"
"github.com/kubernetes-incubator/kube-aws/core/root/defaults"
"github.com/kubernetes-incubator/kube-aws/tlsutil"
"io/ioutil"
"os"
)
type CredentialsRenderer interface {
RenderCredentials(config.CredentialsOptions) error
}
type credentialsRendererImpl struct {
c *config.Cluster
}
func NewCredentialsRenderer(c *config.Cluster) CredentialsRenderer {
return credentialsRendererImpl{
c: c,
}
}
func (r credentialsRendererImpl) RenderCredentials(renderCredentialsOpts config.CredentialsOptions) error {
cluster := r.c
fmt.Println("Generating credentials...")
var caKey *rsa.PrivateKey
var caCert *x509.Certificate
if renderCredentialsOpts.GenerateCA {
var err error
caKey, caCert, err = cluster.NewTLSCA()
if err != nil {
return fmt.Errorf("failed generating cluster CA: %v", err)
}
fmt.Printf("-> Generating new TLS CA\n")
} else {
fmt.Printf("-> Parsing existing TLS CA\n")
if caKeyBytes, err := ioutil.ReadFile(renderCredentialsOpts.CaKeyPath); err != nil {
return fmt.Errorf("failed reading ca key file %s : %v", renderCredentialsOpts.CaKeyPath, err)
} else {
if caKey, err = tlsutil.DecodePrivateKeyPEM(caKeyBytes); err != nil {
return fmt.Errorf("failed parsing ca key: %v", err)
}
}
if caCertBytes, err := ioutil.ReadFile(renderCredentialsOpts.CaCertPath); err != nil {
return fmt.Errorf("failed reading ca cert file %s : %v", renderCredentialsOpts.CaCertPath, err)
} else {
if caCert, err = tlsutil.DecodeCertificatePEM(caCertBytes); err != nil {
return fmt.Errorf("failed parsing ca cert: %v", err)
}
}
}
dir := defaults.AssetsDir
if err := os.MkdirAll(dir, 0700); err != nil {
return err
}
fmt.Println("-> Generating new assets")
_, err := cluster.NewAssetsOnDisk(dir, renderCredentialsOpts, caKey, caCert)
if err != nil {
return err
}
return nil
}