-
Notifications
You must be signed in to change notification settings - Fork 222
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: implement git backend environments storage
- Loading branch information
Showing
90 changed files
with
5,392 additions
and
4,952 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,131 @@ | ||
| package config | ||
|
|
||
| import ( | ||
| "errors" | ||
| "fmt" | ||
|
|
||
| "github.com/spf13/viper" | ||
| ) | ||
|
|
||
| type CredentialsConfig map[string]*CredentialConfig | ||
|
|
||
| func (c *CredentialsConfig) validate() error { | ||
| for name, v := range *c { | ||
| if err := v.validate(); err != nil { | ||
| return fmt.Errorf("credential %q: %w", name, err) | ||
| } | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func (c *CredentialsConfig) setDefaults(v *viper.Viper) error { | ||
| credentials, ok := v.AllSettings()["credentials"].(map[string]any) | ||
| if !ok { | ||
| return nil | ||
| } | ||
|
|
||
| for name := range credentials { | ||
| getString := func(s string) string { | ||
| return v.GetString("credentials." + name + "." + s) | ||
| } | ||
|
|
||
| setDefault := func(k string, s any) { | ||
| v.SetDefault("credentials."+name+"."+k, s) | ||
| } | ||
|
|
||
| switch getString("type") { | ||
| case string(CredentialTypeSSH): | ||
| if getString("ssh.password") != "" || | ||
| getString("ssh.private_key_path") != "" || | ||
| getString("ssh.private_key_bytes") != "" { | ||
| setDefault("ssh.user", "git") | ||
| } | ||
| } | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| type CredentialType string | ||
|
|
||
| const ( | ||
| CredentialTypeBasic = CredentialType("basic") | ||
| CredentialTypeSSH = CredentialType("ssh") | ||
| CredentialTypeAccessToken = CredentialType("access_token") | ||
| ) | ||
|
|
||
| type CredentialConfig struct { | ||
| Type CredentialType `json:"type,omitempty" mapstructure:"type" yaml:"type,omitempty"` | ||
| Basic *BasicAuthConfig `json:"basic,omitempty" mapstructure:"basic" yaml:"basic,omitempty"` | ||
| SSH *SSHAuthConfig `json:"-" mapstructure:"ssh,omitempty" yaml:"-"` | ||
| AccessToken *string `json:"-" mapstructure:"access_token" yaml:"-"` | ||
| } | ||
|
|
||
| func (c *CredentialConfig) validate() error { | ||
| switch c.Type { | ||
| case CredentialTypeBasic: | ||
| if err := c.Basic.validate(); err != nil { | ||
| return err | ||
| } | ||
| case CredentialTypeSSH: | ||
| if err := c.SSH.validate(); err != nil { | ||
| return err | ||
| } | ||
| case CredentialTypeAccessToken: | ||
| if c.AccessToken == nil || *c.AccessToken == "" { | ||
| return errFieldRequired("", "access_token") | ||
| } | ||
| default: | ||
| return fmt.Errorf("unexpected credential type %q", c.Type) | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| // BasicAuthConfig has configuration for authenticating with private git repositories | ||
| // with basic auth. | ||
| type BasicAuthConfig struct { | ||
| Username string `json:"-" mapstructure:"username" yaml:"-"` | ||
| Password string `json:"-" mapstructure:"password" yaml:"-"` | ||
| } | ||
|
|
||
| func (b BasicAuthConfig) validate() error { | ||
| if (b.Username != "" && b.Password == "") || (b.Username == "" && b.Password != "") { | ||
| return errors.New("both username and password need to be provided for basic auth") | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| // SSHAuthConfig provides configuration support for SSH private key credentials when | ||
| // authenticating with private git repositories | ||
| type SSHAuthConfig struct { | ||
| User string `json:"-" mapstructure:"user" yaml:"-" ` | ||
| Password string `json:"-" mapstructure:"password" yaml:"-" ` | ||
| PrivateKeyBytes string `json:"-" mapstructure:"private_key_bytes" yaml:"-" ` | ||
| PrivateKeyPath string `json:"-" mapstructure:"private_key_path" yaml:"-" ` | ||
| InsecureIgnoreHostKey bool `json:"-" mapstructure:"insecure_ignore_host_key" yaml:"-"` | ||
| } | ||
|
|
||
| func (a *SSHAuthConfig) validate() (err error) { | ||
| defer func() { | ||
| if err != nil { | ||
| err = fmt.Errorf("ssh authentication: %w", err) | ||
| } | ||
| }() | ||
|
|
||
| if a == nil { | ||
| return errors.New("configuration is mising") | ||
| } | ||
|
|
||
| if a.Password == "" { | ||
| return errors.New("password required") | ||
| } | ||
|
|
||
| if (a.PrivateKeyBytes == "" && a.PrivateKeyPath == "") || (a.PrivateKeyBytes != "" && a.PrivateKeyPath != "") { | ||
| return errors.New("please provide exclusively one of private_key_bytes or private_key_path") | ||
| } | ||
|
|
||
| return nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.