mirror of
https://github.com/quay/quay.git
synced 2026-01-26 06:21:37 +03:00
63 lines
1.9 KiB
Python
63 lines
1.9 KiB
Python
import argparse
|
|
|
|
from dateutil.parser import parse as parse_date
|
|
|
|
from app import app
|
|
from data import model
|
|
from data.database import ServiceKeyApprovalType
|
|
from data.logs_model import logs_model
|
|
|
|
|
|
def generate_key(service, name, expiration_date=None, notes=None):
|
|
metadata = {
|
|
"created_by": "CLI tool",
|
|
}
|
|
|
|
# Generate a key with a private key that we *never save*.
|
|
(private_key, key) = model.service_keys.generate_service_key(
|
|
service, expiration_date, metadata=metadata, name=name
|
|
)
|
|
# Auto-approve the service key.
|
|
model.service_keys.approve_service_key(
|
|
key.kid, ServiceKeyApprovalType.AUTOMATIC, notes=notes or ""
|
|
)
|
|
|
|
# Log the creation and auto-approval of the service key.
|
|
key_log_metadata = {
|
|
"kid": key.kid,
|
|
"preshared": True,
|
|
"service": service,
|
|
"name": name,
|
|
"expiration_date": expiration_date,
|
|
"auto_approved": True,
|
|
}
|
|
|
|
logs_model.log_action("service_key_create", metadata=key_log_metadata)
|
|
logs_model.log_action("service_key_approve", metadata=key_log_metadata)
|
|
return private_key, key.kid
|
|
|
|
|
|
def valid_date(s):
|
|
try:
|
|
return parse_date(s)
|
|
except ValueError:
|
|
msg = "Not a valid date: '{0}'.".format(s)
|
|
raise argparse.ArgumentTypeError(msg)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
parser = argparse.ArgumentParser(description="Generates a preshared key")
|
|
parser.add_argument("service", help="The service name for which the key is being generated")
|
|
parser.add_argument("name", help="The friendly name for the key")
|
|
parser.add_argument(
|
|
"--expiration",
|
|
default=None,
|
|
type=valid_date,
|
|
help="The optional expiration date for the key",
|
|
)
|
|
parser.add_argument("--notes", help="Optional notes about the key", default=None)
|
|
|
|
args = parser.parse_args()
|
|
generated, _ = generate_key(args.service, args.name, args.expiration, args.notes)
|
|
print generated.exportKey("PEM")
|