mirror of
https://github.com/hanzokms/cli.git
synced 2026-10-30 20:30:00 +00:00
zeekayandHanzo Dev
8f643abe3b
Two call sites, two different reasons they were wrong. `bootstrap --output k8-secret` dialled the cluster and created-or-updated a corev1.Secret from a Go template. Nothing invokes it — zero references across hanzo/kms, hanzo/kms-operator and hanzo/universe — and writing per-service Secrets is the kms-operator's job, not a CLI's. Deleted, along with --output and the three --k8-secret-* flags: one legal output value is not a choice. `pam kubernetes access` never dialled a cluster at all. It used clientcmd to splice a cluster/user/context into the operator's own ~/.kube/config, flip current-context, and revert on shutdown. It now writes a self-contained session kubeconfig (0600, removed on shutdown) and prints KUBECONFIG=<path>. That is a net code decrease — the whole revert block goes — and it closes the three TODOs the original left admitting it took no lock: a SIGKILLed proxy or two concurrent sessions could leave the real kubeconfig pointing at a dead port. It is never read or written now. Verified by rendering one and running kubectl config view --minify against it, which resolves only if current-context, cluster and user cross-reference. go.mod loses every k8s.io/* entry (-30 go.mod, -65 go.sum). Co-authored-by: Hanzo Dev <[email protected]>
117 lines
3.1 KiB
Go
117 lines
3.1 KiB
Go
/*
|
|
Copyright (c) 2024 Hanzo AI Inc.
|
|
*/
|
|
package cmd
|
|
|
|
import (
|
|
"encoding/json"
|
|
"os"
|
|
|
|
"github.com/hanzokms/cli/packages/api"
|
|
"github.com/hanzokms/cli/packages/util"
|
|
"github.com/rs/zerolog/log"
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
var bootstrapCmd = &cobra.Command{
|
|
Use: "bootstrap",
|
|
Short: "Used to bootstrap your Hanzo KMS instance",
|
|
DisableFlagsInUseLine: true,
|
|
Example: "kms bootstrap",
|
|
Args: cobra.NoArgs,
|
|
Run: func(cmd *cobra.Command, args []string) {
|
|
email, _ := cmd.Flags().GetString("email")
|
|
if email == "" {
|
|
if envEmail, ok := os.LookupEnv(util.KMS_BOOTSTRAP_EMAIL_NAME); ok {
|
|
email = envEmail
|
|
}
|
|
}
|
|
|
|
if email == "" {
|
|
log.Error().Msg("email is required")
|
|
return
|
|
}
|
|
|
|
password, _ := cmd.Flags().GetString("password")
|
|
if password == "" {
|
|
if envPassword, ok := os.LookupEnv(util.KMS_BOOTSTRAP_PASSWORD_NAME); ok {
|
|
password = envPassword
|
|
}
|
|
}
|
|
|
|
if password == "" {
|
|
log.Error().Msg("password is required")
|
|
return
|
|
}
|
|
|
|
organization, _ := cmd.Flags().GetString("organization")
|
|
if organization == "" {
|
|
if envOrganization, ok := os.LookupEnv(util.KMS_BOOTSTRAP_ORGANIZATION_NAME); ok {
|
|
organization = envOrganization
|
|
}
|
|
}
|
|
|
|
if organization == "" {
|
|
log.Error().Msg("organization is required")
|
|
return
|
|
}
|
|
|
|
domain, _ := cmd.Flags().GetString("domain")
|
|
if domain == "" {
|
|
if envDomain, ok := os.LookupEnv("KMS_API_URL"); ok {
|
|
domain = envDomain
|
|
}
|
|
}
|
|
|
|
if domain == "" {
|
|
log.Error().Msg("domain is required")
|
|
return
|
|
}
|
|
|
|
httpClient, err := util.GetRestyClientWithCustomHeaders()
|
|
if err != nil {
|
|
log.Error().Msgf("Failed to get resty client with custom headers: %v", err)
|
|
return
|
|
}
|
|
|
|
ignoreIfBootstrapped, err := cmd.Flags().GetBool("ignore-if-bootstrapped")
|
|
if err != nil {
|
|
log.Error().Msgf("Failed to get ignore-if-bootstrapped flag: %v", err)
|
|
return
|
|
}
|
|
|
|
httpClient.SetHeader("Accept", "application/json")
|
|
|
|
bootstrapResponse, err := api.CallBootstrapInstance(httpClient, api.BootstrapInstanceRequest{
|
|
Domain: util.AppendAPIEndpoint(domain),
|
|
Email: email,
|
|
Password: password,
|
|
Organization: organization,
|
|
})
|
|
|
|
if err != nil {
|
|
if !ignoreIfBootstrapped {
|
|
log.Error().Msgf("Failed to bootstrap instance: %v", err)
|
|
}
|
|
return
|
|
}
|
|
|
|
responseJSON, err := json.MarshalIndent(bootstrapResponse, "", " ")
|
|
if err != nil {
|
|
log.Fatal().Msgf("Failed to convert response to JSON: %v", err)
|
|
return
|
|
}
|
|
|
|
util.PrintlnStdout(string(responseJSON))
|
|
},
|
|
}
|
|
|
|
func init() {
|
|
bootstrapCmd.Flags().String("domain", "", "The domain of your self-hosted Hanzo KMS instance")
|
|
bootstrapCmd.Flags().String("email", "", "The desired email address of the instance admin")
|
|
bootstrapCmd.Flags().String("password", "", "The desired password of the instance admin")
|
|
bootstrapCmd.Flags().String("organization", "", "The name of the organization to create for the instance")
|
|
bootstrapCmd.Flags().Bool("ignore-if-bootstrapped", false, "Whether to continue on error if the instance has already been bootstrapped")
|
|
RootCmd.AddCommand(bootstrapCmd)
|
|
}
|