mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-10-01 01:36:09 -04:00
60fc73e0e7
* terraform: move module to legacy-directory * constellation-lib: refactor service account marshalling * terraform-provider: normalize Azure image URIs * constellation-lib: refactor Kubeconfig endpoint rewriting * terraform-provider: add conversion functions for AWS and GCP * terraform-provider: implement `constellation_cluster` resource * terraform-provider: refactor conversion * terraform-provider: implement image and k8s upgrades * terraform-provider: fix linter checks * terraform-provider: refactor to bundle init & upgrade method * constellation-lib: rewrite Kubeconfig endpoint in init * terraform-provider: bind logger and dialer constructors to struct * terraform-provider: move applier to function pointer * terraform-provider: gcp conversion fixes Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform-provider: fix Azure UAMI input * terraform-provider: rename Kubeconfig variable * terraform-provider: tidy * terraform-provider: regenerate docs * constellation-lib: provide Kubeconfig in testing initserver --------- Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
55 lines
2.0 KiB
Go
55 lines
2.0 KiB
Go
/*
|
|
Copyright (c) Edgeless Systems GmbH
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
|
|
package cloudcmd
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/edgelesssys/constellation/v2/internal/cloud/azureshared"
|
|
"github.com/edgelesssys/constellation/v2/internal/cloud/cloudprovider"
|
|
"github.com/edgelesssys/constellation/v2/internal/cloud/gcpshared"
|
|
"github.com/edgelesssys/constellation/v2/internal/cloud/openstack"
|
|
"github.com/edgelesssys/constellation/v2/internal/config"
|
|
"github.com/edgelesssys/constellation/v2/internal/constellation"
|
|
"github.com/edgelesssys/constellation/v2/internal/file"
|
|
)
|
|
|
|
// GetMarshaledServiceAccountURI returns the service account URI for the given cloud provider.
|
|
func GetMarshaledServiceAccountURI(config *config.Config, fileHandler file.Handler) (string, error) {
|
|
payload := constellation.ServiceAccountPayload{}
|
|
switch config.GetProvider() {
|
|
case cloudprovider.GCP:
|
|
var key gcpshared.ServiceAccountKey
|
|
if err := fileHandler.ReadJSON(config.Provider.GCP.ServiceAccountKeyPath, &key); err != nil {
|
|
return "", fmt.Errorf("reading service account key: %w", err)
|
|
}
|
|
payload.GCP = key
|
|
|
|
case cloudprovider.Azure:
|
|
payload.Azure = azureshared.ApplicationCredentials{
|
|
TenantID: config.Provider.Azure.TenantID,
|
|
Location: config.Provider.Azure.Location,
|
|
PreferredAuthMethod: azureshared.AuthMethodUserAssignedIdentity,
|
|
UamiResourceID: config.Provider.Azure.UserAssignedIdentity,
|
|
}
|
|
|
|
case cloudprovider.OpenStack:
|
|
payload.OpenStack = openstack.AccountKey{
|
|
AuthURL: config.Provider.OpenStack.AuthURL,
|
|
Username: config.Provider.OpenStack.Username,
|
|
Password: config.Provider.OpenStack.Password,
|
|
ProjectID: config.Provider.OpenStack.ProjectID,
|
|
ProjectName: config.Provider.OpenStack.ProjectName,
|
|
UserDomainName: config.Provider.OpenStack.UserDomainName,
|
|
ProjectDomainName: config.Provider.OpenStack.ProjectDomainName,
|
|
RegionName: config.Provider.OpenStack.RegionName,
|
|
}
|
|
|
|
}
|
|
return constellation.MarshalServiceAccountURI(config.GetProvider(), payload)
|
|
}
|