-
Notifications
You must be signed in to change notification settings - Fork 786
/
step_git_credentials.go
143 lines (128 loc) · 3.78 KB
/
step_git_credentials.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
package cmd
import (
"bytes"
"fmt"
"io/ioutil"
"net/url"
"os"
"path/filepath"
"github.com/jenkins-x/jx/pkg/jx/cmd/templates"
"github.com/jenkins-x/jx/pkg/kube"
"github.com/jenkins-x/jx/pkg/log"
"github.com/jenkins-x/jx/pkg/util"
"github.com/spf13/cobra"
corev1 "k8s.io/api/core/v1"
)
const (
optionOutputFile = "output"
)
// StepGitCredentialsOptions contains the command line flags
type StepGitCredentialsOptions struct {
StepOptions
OutputFile string
}
var (
StepGitCredentialsLong = templates.LongDesc(`
This pipeline step generates a Git credentials file for the current Git provider pipeline Secrets
`)
StepGitCredentialsExample = templates.Examples(`
# generate the Git credentials file in the canonical location
jx step git credentials
# generate the Git credentials to a output file
jx step git credentials -o /tmp/mycreds
`)
)
func NewCmdStepGitCredentials(commonOpts *CommonOptions) *cobra.Command {
options := StepGitCredentialsOptions{
StepOptions: StepOptions{
CommonOptions: commonOpts,
},
}
cmd := &cobra.Command{
Use: "credentials",
Short: "Creates the Git credentials file for the current pipeline Git credentials",
Aliases: []string{"nexus_stage"},
Long: StepGitCredentialsLong,
Example: StepGitCredentialsExample,
Run: func(cmd *cobra.Command, args []string) {
options.Cmd = cmd
options.Args = args
err := options.Run()
CheckErr(err)
},
}
cmd.Flags().StringVarP(&options.OutputFile, optionOutputFile, "o", "", "The output file name")
return cmd
}
func (o *StepGitCredentialsOptions) Run() error {
outFile := o.OutputFile
if outFile == "" {
// lets figure out the default output file
cfgHome := os.Getenv("XDG_CONFIG_HOME")
if cfgHome == "" {
cfgHome = util.HomeDir()
}
if cfgHome != "" {
outFile = filepath.Join(cfgHome, "git", "credentials")
}
}
if outFile == "" {
return util.MissingOption(optionOutputFile)
}
dir, _ := filepath.Split(outFile)
if dir != "" {
err := os.MkdirAll(dir, util.DefaultWritePermissions)
if err != nil {
return err
}
}
secrets, err := o.LoadPipelineSecrets(kube.ValueKindGit, "")
if err != nil {
return err
}
return o.createGitCredentialsFile(outFile, secrets)
}
func (o *StepGitCredentialsOptions) createGitCredentialsFile(fileName string, secrets *corev1.SecretList) error {
data := o.CreateGitCredentialsFromSecrets(secrets)
err := ioutil.WriteFile(fileName, data, util.DefaultWritePermissions)
if err != nil {
return fmt.Errorf("Failed to write to %s: %s", fileName, err)
}
log.Infof("Generated Git credentials file %s\n", util.ColorInfo(fileName))
return nil
}
// CreateGitCredentialsFromSecrets Creates git credentials from secrets
func (o *StepGitCredentialsOptions) CreateGitCredentialsFromSecrets(secretList *corev1.SecretList) []byte {
var buffer bytes.Buffer
if secretList != nil {
for _, secret := range secretList.Items {
labels := secret.Labels
annotations := secret.Annotations
data := secret.Data
if labels != nil && labels[kube.LabelKind] == kube.ValueKindGit && annotations != nil {
u := annotations[kube.AnnotationURL]
if u != "" && data != nil {
username := data[kube.SecretDataUsername]
pwd := data[kube.SecretDataPassword]
if len(username) > 0 && len(pwd) > 0 {
u2, err := url.Parse(u)
if err != nil {
log.Warnf("Ignoring invalid Git service URL %s for pipeline credential %s\n", u, secret.Name)
} else {
u2.User = url.UserPassword(string(username), string(pwd))
buffer.WriteString(u2.String() + "\n")
// lets write the other http protocol for completeness
if u2.Scheme == "https" {
u2.Scheme = "http"
} else {
u2.Scheme = "https"
}
buffer.WriteString(u2.String() + "\n")
}
}
}
}
}
}
return buffer.Bytes()
}