devops-armory 0.6.7

Library to make DevOps work easier, based on russh and actix.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

use gcp_auth::{CustomServiceAccount, TokenProvider};

/// Below function uses Service Account credentials to generate token
pub async fn gcp_get_credentials_token_sa(project: Option<String>, credentials: Option<String>) -> Result<String, std::io::Error> {

    let token: String = match project {

        Some(p) if !p.is_empty() => {
            let cred = credentials.unwrap_or_default();
            let service_account = CustomServiceAccount::from_file(cred);
            let scopes = &["https://www.googleapis.com/auth/cloud-platform"];
            let token = service_account.expect("No token available").token(scopes).await.expect("Missing scopes for existing token");
            let tok = token.as_str();

            tok.to_owned()
        },
        Some(_) => {
            let unknown_str = "Unknown project selected".to_string();
            unknown_str
        },
        None => {
            let error_msg = "No project provided".to_string();
            error_msg
        }
    };

    Ok(token)

}


/// Below function uses current system log in credentials obtained via gcloud auth login command
pub async fn gcp_get_credentials_token_iam() -> Result<String, std::io::Error> {

    let provider = gcp_auth::provider().await.unwrap();
    let scopes = &["https://www.googleapis.com/auth/cloud-platform"];
    let token = provider.token(scopes).await.unwrap();

    let t = token.as_str();

    Ok(t.to_string())

}

/// Below function uses type of authentication to GCP account you want to use - you can choose either
pub async fn gcp_get_authentication_method(auth_method: String) -> Result<(), std::io::Error> {

    match auth_method.trim() {

        "Service Account" => {
            gcp_get_credentials_token_sa(None, None).await.unwrap_or_default();
        },
        "IAM" => {
            gcp_get_credentials_token_iam().await.unwrap_or_default();
        },
        _ => {
            eprintln!("Unkown authentication method to GCP")
        }
        
    }

    Ok(())

}