constellation/cli/cmd/verify_azure.go

package cmd

import (
	"github.com/edgelesssys/constellation/cli/file"
	"github.com/edgelesssys/constellation/coordinator/atls"
	"github.com/edgelesssys/constellation/coordinator/attestation/azure"
	"github.com/edgelesssys/constellation/internal/config"
	"github.com/spf13/afero"
	"github.com/spf13/cobra"
)

func newVerifyAzureCmd() *cobra.Command {
	cmd := &cobra.Command{
		Use:               "azure IP PORT",
		Short:             "Verify the confidential properties of your Constellation on Azure.",
		Long:              "Verify the confidential properties of your Constellation on Azure.",
		Args:              cobra.ExactArgs(2),
		ValidArgsFunction: verifyCompletion,
		RunE:              runVerifyAzure,
	}

	return cmd
}

func runVerifyAzure(cmd *cobra.Command, args []string) error {
	fileHandler := file.NewHandler(afero.NewOsFs())
	devConfigName, err := cmd.Flags().GetString("dev-config")
	if err != nil {
		return err
	}
	config, err := config.FromFile(fileHandler, devConfigName)
	if err != nil {
		return err
	}

	validators, err := getAzureValidator(cmd, *config.Provider.GCP.PCRs)
	if err != nil {
		return err
	}

	return runVerify(cmd, args, *config.Provider.GCP.PCRs, validators)
}

// getAzureValidator returns an Azure validator.
func getAzureValidator(cmd *cobra.Command, pcrs map[uint32][]byte) (atls.Validator, error) {
	if err := prepareValidator(cmd, pcrs); err != nil {
		return nil, err
	}

	return azure.NewValidator(pcrs), nil
}