-
Notifications
You must be signed in to change notification settings - Fork 3
/
main.go
84 lines (68 loc) · 2.95 KB
/
main.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
/*
Copyright © 2022 maxgio92 [email protected]
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package main
import (
"flag"
"fmt"
"os"
"github.com/pkg/errors"
"k8s.io/client-go/kubernetes"
"github.com/maxgio92/proxy-kubeconfig-generator/pkg/generator"
"github.com/maxgio92/proxy-kubeconfig-generator/pkg/utils"
)
const (
DefaultTLSecretCAKey = "ca"
DefaultNamespace = "default"
DefaultKubeconfigSecretKey = "kubeconfig"
)
func main() {
serviceAccountName := flag.String("serviceaccount", "", "The name of the service account for which to create the kubeconfig")
namespace := flag.String("namespace", DefaultNamespace, "(optional) The namespace of the service account and where the kubeconfig secret will be created.")
server := flag.String("server", "", "The server url of the kubeconfig where API requests will be sent")
serverTLSSecretNamespace := flag.String("server-tls-secret-namespace", DefaultNamespace, "(optional) The namespace of the server TLS secret.")
serverTLSSecretName := flag.String("server-tls-secret-name", "", "The server TLS secret name")
serverTLSSecretCAKey := flag.String("server-tls-secret-ca-key", DefaultTLSecretCAKey, "(optional) The CA key in the server TLS secret.")
kubeconfigSecretKey := flag.String("kubeconfig-secret-key", DefaultKubeconfigSecretKey, "(optional) The key of the kubeconfig in the secret that will be created")
flag.Parse()
if *serviceAccountName == "" {
flag.Usage()
fmt.Println(errors.New("missing service account name"))
os.Exit(1)
}
if *server == "" {
fmt.Println(errors.New("missing server url"))
os.Exit(1)
}
if *serverTLSSecretName == "" {
flag.Usage()
fmt.Println(errors.New("missing server TLS secret name"))
os.Exit(1)
}
config, err := utils.BuildClientConfig()
if err != nil {
fmt.Println(errors.Wrap(err, "error building client config"))
os.Exit(1)
}
clientset := kubernetes.NewForConfigOrDie(config)
tenantConfig, err := generator.GenerateProxyKubeconfigFromSA(clientset, *serviceAccountName, *namespace, *server, *serverTLSSecretName, *serverTLSSecretCAKey, *serverTLSSecretNamespace, *kubeconfigSecretKey)
if err != nil {
fmt.Println(errors.Wrap(err, "error generating kubeconfig from service account"))
os.Exit(1)
}
err = utils.CreateKubeconfigSecret(clientset, tenantConfig, *namespace, *serviceAccountName+"-kubeconfig", *kubeconfigSecretKey)
if err != nil {
fmt.Println(errors.Wrap(err, "error creating kubeconfig secret"))
os.Exit(1)
}
fmt.Println("Proxy kubeconfig Secret created")
}