mirror of
https://github.com/hanzoai/cd.git
synced 2026-10-30 14:56:45 +00:00
zeekay
31c64ef661
Rename test names, comments, fixture data, and mock GitHub/webhook responses that still said Argo/ArgoCD/argocd/argoproj in our own voice, matching the hanzocd-* binary/configmap names and the apps.hanzo.ai CRD/annotation domain already established elsewhere in the fork. Also drop the dated argov1alpha1/argoprojiov1alpha1 import aliases for our own v1alpha1 API package. Restore the CRD groups a prior blind rename had mangled on a vendored third-party Argo Workflows example manifest back to the real argoproj.io, and fix several places where an earlier half-finished rename had gone silently wrong instead of just being cosmetic: stale CD_BINARY_NAME values and a stale --argocd-repo-server flag no longer recognized by the binary, cert filenames and an ssh_known_hosts alias that didn't match what's actually on disk, a namespace and a kustomize image substitution that were silent no-ops, and a test assertion regex that could never match its own fixture. External lookup keys we don't control are left byte-exact: quay.io/argoprojlabs images, the docker.io/argoproj CI builder image, live argoproj/argo-workflows release URLs, the generated ArgoprojV1alpha1() clientset method, and the Makefile-coupled /tmp/argo-e2e and GOPATH mount conventions.
64 lines
1.8 KiB
Go
64 lines
1.8 KiB
Go
package utils
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/hanzoai/cd/common"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
|
|
"github.com/hanzoai/cd/pkg/apis/application/v1alpha1"
|
|
)
|
|
|
|
var ErrDisallowedSecretAccess = fmt.Errorf("secret must have label %q=%q", common.LabelKeySecretType, common.LabelValueSecretTypeSCMCreds)
|
|
|
|
// GetSecretRef gets the value of the key for the specified Secret resource.
|
|
func GetSecretRef(ctx context.Context, k8sClient client.Client, ref *v1alpha1.SecretRef, namespace string, tokenRefStrictMode bool) (string, error) {
|
|
if ref == nil {
|
|
return "", nil
|
|
}
|
|
|
|
secret := &corev1.Secret{}
|
|
err := k8sClient.Get(
|
|
ctx,
|
|
client.ObjectKey{
|
|
Name: ref.SecretName,
|
|
Namespace: namespace,
|
|
},
|
|
secret)
|
|
if err != nil {
|
|
return "", fmt.Errorf("error fetching secret %s/%s: %w", namespace, ref.SecretName, err)
|
|
}
|
|
|
|
if tokenRefStrictMode && secret.GetLabels()[common.LabelKeySecretType] != common.LabelValueSecretTypeSCMCreds {
|
|
return "", fmt.Errorf("secret %s/%s is not a valid SCM creds secret: %w", namespace, ref.SecretName, ErrDisallowedSecretAccess)
|
|
}
|
|
|
|
tokenBytes, ok := secret.Data[ref.Key]
|
|
if !ok {
|
|
return "", fmt.Errorf("key %q in secret %s/%s not found", ref.Key, namespace, ref.SecretName)
|
|
}
|
|
return string(tokenBytes), nil
|
|
}
|
|
|
|
func GetConfigMapData(ctx context.Context, k8sClient client.Client, ref *v1alpha1.ConfigMapKeyRef, namespace string) ([]byte, error) {
|
|
if ref == nil {
|
|
return nil, nil
|
|
}
|
|
|
|
configMap := &corev1.ConfigMap{}
|
|
err := k8sClient.Get(ctx, client.ObjectKey{Name: ref.ConfigMapName, Namespace: namespace}, configMap)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
data, ok := configMap.Data[ref.Key]
|
|
if !ok {
|
|
return nil, fmt.Errorf("key %s not found in ConfigMap %s", ref.Key, configMap.Name)
|
|
}
|
|
|
|
return []byte(data), nil
|
|
}
|