mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
1ab6e799c1
go.mod still declared `module github.com/hanzoai/deploy` after the repo was renamed. A Go module path is not cosmetic — it is the resolvable location. So `go get github.com/hanzoai/cd` could not work, and anything importing this module had to spell a name that no longer exists at that address. The build log of v3.6.0 is where it surfaced: the compiler was still emitting github.com/hanzoai/deploy/cmd/cd/commands. 3541 import paths across 690 .go, 19 .proto, 4 .yaml, 3 .sh, 2 .mod, Procfile and Makefile. Plus the 62 ghcr.io/hanzoai/deploy image references, moved to ghcr.io/hanzoai/cd to match hanzo.yml's build target — a distinct string from the module path, replaced separately so neither could clobber the other. go mod tidy clean, CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build ./... clean. Co-authored-by: Hanzo Dev <[email protected]>
74 lines
2.4 KiB
Go
74 lines
2.4 KiB
Go
package certificate
|
|
|
|
import (
|
|
"context"
|
|
|
|
certificatepkg "github.com/hanzoai/cd/pkg/apiclient/certificate"
|
|
appsv1 "github.com/hanzoai/cd/pkg/apis/application/v1alpha1"
|
|
"github.com/hanzoai/cd/util/db"
|
|
"github.com/hanzoai/cd/util/rbac"
|
|
)
|
|
|
|
// Server provides a Certificate service
|
|
type Server struct {
|
|
db db.DB
|
|
enf *rbac.Enforcer
|
|
}
|
|
|
|
// NewServer returns a new instance of the Certificate service
|
|
func NewServer(db db.DB, enf *rbac.Enforcer) *Server {
|
|
return &Server{
|
|
db: db,
|
|
enf: enf,
|
|
}
|
|
}
|
|
|
|
// TODO: RBAC policies are currently an all-or-nothing approach, so there is no
|
|
// fine grained control for certificate manipulation. Either a user has access
|
|
// to a given certificate operation (get/create/delete), or it doesn't.
|
|
|
|
// Returns a list of configured certificates that match the query
|
|
func (s *Server) ListCertificates(ctx context.Context, q *certificatepkg.RepositoryCertificateQuery) (*appsv1.RepositoryCertificateList, error) {
|
|
if err := s.enf.EnforceErr(ctx.Value("claims"), rbac.ResourceCertificates, rbac.ActionGet, ""); err != nil {
|
|
return nil, err
|
|
}
|
|
certList, err := s.db.ListRepoCertificates(ctx, &db.CertificateListSelector{
|
|
HostNamePattern: q.GetHostNamePattern(),
|
|
CertType: q.GetCertType(),
|
|
CertSubType: q.GetCertSubType(),
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return certList, nil
|
|
}
|
|
|
|
// Batch creates certificates for verifying repositories
|
|
func (s *Server) CreateCertificate(ctx context.Context, q *certificatepkg.RepositoryCertificateCreateRequest) (*appsv1.RepositoryCertificateList, error) {
|
|
if err := s.enf.EnforceErr(ctx.Value("claims"), rbac.ResourceCertificates, rbac.ActionCreate, ""); err != nil {
|
|
return nil, err
|
|
}
|
|
certs, err := s.db.CreateRepoCertificate(ctx, q.Certificates, q.Upsert)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return certs, nil
|
|
}
|
|
|
|
// Batch deletes a list of certificates that match the query
|
|
func (s *Server) DeleteCertificate(ctx context.Context, q *certificatepkg.RepositoryCertificateQuery) (*appsv1.RepositoryCertificateList, error) {
|
|
if err := s.enf.EnforceErr(ctx.Value("claims"), rbac.ResourceCertificates, rbac.ActionDelete, ""); err != nil {
|
|
return nil, err
|
|
}
|
|
certs, err := s.db.RemoveRepoCertificates(ctx, &db.CertificateListSelector{
|
|
HostNamePattern: q.GetHostNamePattern(),
|
|
CertType: q.GetCertType(),
|
|
CertSubType: q.GetCertSubType(),
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return certs, nil
|
|
}
|