mirror of https://github.com/portainer/portainer
97 lines
2.2 KiB
Go
97 lines
2.2 KiB
Go
package cli
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"strconv"
|
|
|
|
"github.com/pkg/errors"
|
|
portainer "github.com/portainer/portainer/api"
|
|
v1 "k8s.io/api/core/v1"
|
|
k8serrors "k8s.io/apimachinery/pkg/api/errors"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
)
|
|
|
|
const (
|
|
secretDockerConfigKey = ".dockerconfigjson"
|
|
)
|
|
|
|
type (
|
|
dockerConfig struct {
|
|
Auths map[string]registryDockerConfig `json:"auths"`
|
|
}
|
|
|
|
registryDockerConfig struct {
|
|
Username string `json:"username"`
|
|
Password string `json:"password"`
|
|
Email string `json:"email"`
|
|
}
|
|
)
|
|
|
|
func (kcl *KubeClient) DeleteRegistrySecret(registry *portainer.Registry, namespace string) error {
|
|
err := kcl.cli.CoreV1().Secrets(namespace).Delete(registrySecretName(registry), &metav1.DeleteOptions{})
|
|
if err != nil && !k8serrors.IsNotFound(err) {
|
|
return errors.Wrap(err, "failed removing secret")
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (kcl *KubeClient) CreateRegistrySecret(registry *portainer.Registry, namespace string) error {
|
|
config := dockerConfig{
|
|
Auths: map[string]registryDockerConfig{
|
|
registry.URL: {
|
|
Username: registry.Username,
|
|
Password: registry.Password,
|
|
},
|
|
},
|
|
}
|
|
|
|
configByte, err := json.Marshal(config)
|
|
if err != nil {
|
|
return errors.Wrap(err, "failed marshal config")
|
|
}
|
|
|
|
secret := &v1.Secret{
|
|
TypeMeta: metav1.TypeMeta{},
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Name: registrySecretName(registry),
|
|
Annotations: map[string]string{
|
|
"portainer.io/registry.id": strconv.Itoa(int(registry.ID)),
|
|
},
|
|
},
|
|
Data: map[string][]byte{
|
|
secretDockerConfigKey: configByte,
|
|
},
|
|
Type: v1.SecretTypeDockerConfigJson,
|
|
}
|
|
|
|
_, err = kcl.cli.CoreV1().Secrets(namespace).Create(secret)
|
|
if err != nil && !k8serrors.IsAlreadyExists(err) {
|
|
return errors.Wrap(err, "failed saving secret")
|
|
}
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
func (cli *KubeClient) IsRegistrySecret(namespace, secretName string) (bool, error) {
|
|
secret, err := cli.cli.CoreV1().Secrets(namespace).Get(secretName, metav1.GetOptions{})
|
|
if err != nil {
|
|
if k8serrors.IsNotFound(err) {
|
|
return false, nil
|
|
}
|
|
|
|
return false, err
|
|
}
|
|
|
|
isSecret := secret.Type == v1.SecretTypeDockerConfigJson
|
|
|
|
return isSecret, nil
|
|
|
|
}
|
|
|
|
func registrySecretName(registry *portainer.Registry) string {
|
|
return fmt.Sprintf("registry-%d", registry.ID)
|
|
}
|