-
Notifications
You must be signed in to change notification settings - Fork 0
/
templates.go
126 lines (106 loc) · 3.36 KB
/
templates.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
package conjur
import (
"bytes"
"encoding/json"
"fmt"
"strings"
"github.com/cyberark/conjur-api-go/conjurapi"
"github.com/infamousjoeg/cyberark-aam-pkiaas/internal/types"
)
// CreateTemplate ...
func (c StorageBackend) CreateTemplate(template types.Template) error {
variableID := c.getTemplateVariableID(template.TemplateName)
// validate template does not exists
_, err := c.client.RetrieveSecret(variableID)
if err == nil {
return fmt.Errorf("Template '%s' already exists", template.TemplateName)
}
// Template name cannot contain a '/'
if strings.Contains(template.TemplateName, "/") {
return fmt.Errorf("Template name '%s' is invalid because it contains a '/'", template.TemplateName)
}
// replace template placeholders
newTemplatePolicy := bytes.NewReader([]byte(
ReplaceTemplate(template, c.templates.newTemplate)))
// cast the template stuct into json
templateJSON, err := json.Marshal(template)
if err != nil {
return err
}
// Load policy to create the variable
response, err := c.client.LoadPolicy(
conjurapi.PolicyModePatch,
c.getTemplatePolicyBranch(),
newTemplatePolicy,
)
if err != nil {
return fmt.Errorf("Failed to create template when loading policy. Message '%v'. %s", response, err)
}
// Set the Secret value
err = c.client.AddSecret(variableID, string(templateJSON))
return err
}
// ListTemplates ...
func (c StorageBackend) ListTemplates() ([]string, error) {
filter := &conjurapi.ResourceFilter{
Kind: "variable",
Search: "templates",
}
var templateNames []string
// List resources to get templates
resources, err := ListResources(c.client, filter)
if err != nil {
return templateNames, err
}
// Parse the template name for all of the template variables
for _, resource := range resources {
_, _, id := SplitConjurID(resource)
parts := strings.Split(id, "/")
templatesRoot := parts[len(parts)-2]
if templatesRoot == "templates" {
name := parts[len(parts)-1]
templateNames = append(templateNames, name)
}
}
return templateNames, err
}
// GetTemplate ...
func (c StorageBackend) GetTemplate(templateName string) (types.Template, error) {
variableID := c.getTemplateVariableID(templateName)
templateJSON, err := c.client.RetrieveSecret(variableID)
template := &types.Template{
StoreCertificate: true,
}
if err != nil {
return *template, fmt.Errorf("Failed to retrieve template with id '%s'. %s", variableID, err)
}
err = json.Unmarshal(templateJSON, template)
if err != nil {
return *template, fmt.Errorf("Failed to cast '%s' into types.Template. %s", string(templateJSON), err)
}
return *template, err
}
// DeleteTemplate ...
func (c StorageBackend) DeleteTemplate(templateName string) error {
// validate template resource exists
variableID := c.getTemplateVariableID(templateName)
_, err := c.client.RetrieveSecret(variableID)
if err != nil {
return fmt.Errorf("Failed to retrieve template with id '%s'. %s", variableID, err)
}
// remove the template resource
template := types.Template{
TemplateName: templateName,
}
deleteTemplatePolicy := bytes.NewReader([]byte(
ReplaceTemplate(template, c.templates.deleteTemplate)))
response, err := c.client.LoadPolicy(
conjurapi.PolicyModePatch,
c.getTemplatePolicyBranch(),
deleteTemplatePolicy,
)
if err != nil {
return fmt.Errorf("Failed to delete template with id '%s'. Message: '%v'. %s", variableID, response, err)
}
return err
}