needroleshere 0.4.0

Yet another AWS IAM Roles Anywhere helper
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

#[derive(clap::Parser)]
#[clap(author, version, long_about = None)]
#[clap(about = "Yet Another rolesanywhere-credential-helper")]
#[clap(propagate_version = true)]
struct Cli {
    /// Base URL where a Needroleshere server is listening to
    #[clap(long, global = true)]
    url: Option<String>,

    /// Configuration directory. Default to $RUNTIME_DIRECTORY
    #[clap(long, global = true)]
    configuration_directory: Option<String>,

    #[clap(subcommand)]
    command: Commands,
}

#[derive(clap::Subcommand)]
enum Commands {
    /// Run as a credential_process program; Compatible with original helper
    CredentialProcess(needroleshere::cmd::credential_process::CredentialProcessArgs),
    /// Create or update a role binding
    Bind(needroleshere::cmd::bind::BindArgs),
    /// Delete a role binding
    Unbind(needroleshere::cmd::unbind::UnbindArgs),
    /// Start a server mode
    Serve(needroleshere::cmd::serve::ServeArgs),
}

impl TryInto<needroleshere::config::Config> for &Cli {
    type Error = needroleshere::error::Error;

    fn try_into(self) -> Result<needroleshere::config::Config, Self::Error> {
        needroleshere::config::Config::new(
            self.configuration_directory.clone().map(|v| v.into()),
            needroleshere::config::ConfigData {
                url: self.url.clone(),
            },
        )
    }
}

fn main() -> Result<(), anyhow::Error> {
    use clap::Parser;
    let cli = Cli::parse();

    match &cli.command {
        Commands::CredentialProcess(params) => {
            enable_tracing(true);
            needroleshere::cmd::credential_process::run(params)?;
        }
        Commands::Bind(params) => {
            enable_tracing(false);
            needroleshere::cmd::bind::run(&(&cli).try_into()?, params)?;
        }
        Commands::Unbind(params) => {
            enable_tracing(false);
            needroleshere::cmd::unbind::run(&(&cli).try_into()?, params)?;
        }
        Commands::Serve(params) => {
            enable_tracing(false);
            needroleshere::cmd::serve::run(&(&cli).try_into()?, params)?;
        }
    };
    Ok(())
}

fn enable_tracing(stderr: bool) {
    if stderr {
        tracing_subscriber::fmt()
            .with_writer(std::io::stderr)
            .with_env_filter(tracing_subscriber::EnvFilter::from_default_env())
            .init();
    } else {
        if std::env::var_os("RUST_LOG").is_none() {
            std::env::set_var("RUST_LOG", "info");
        }
        tracing_subscriber::fmt::init();
    }
}