Skip to main content

devops_armory/cloud/gcp/gke/ssl/
create.rs

1use std::time::Duration;
2
3use awc::{
4    Client, Connector,
5};
6
7use openssl::ssl::{
8    SslConnector, 
9    SslMethod, 
10    SslVerifyMode
11};
12
13use super::models::GkeSslCert;
14
15/// Create GKE SSL cert
16/// Token, GKE endpoint and namespace need to be provided
17pub async fn create_gke_ssl(
18    token: String,
19    gke_cluster_endpoint: String,
20    gke_cluster_namespace: String,
21    gke_ssl: GkeSslCert
22) -> Result<(), std::io::Error> {
23
24    let ssl_gke = gke_ssl;
25
26    let mut builder = SslConnector::builder(SslMethod::tls()).unwrap();
27    builder.set_verify(SslVerifyMode::NONE);
28    let myconnector = builder.build();
29    let client = Client::builder()
30        .connector(Connector::new().openssl(myconnector))
31        .finish();
32
33    let create_gke_ssl_request = client
34        .post(format!("https://{gke_cluster_endpoint}:443/apis/networking.gke.io/v1/namespaces/{gke_cluster_namespace}/managedcertificates"))
35        .bearer_auth(format!("{token}"))
36        .timeout(Duration::from_secs(30))
37        .send_json(&ssl_gke)
38        .await
39        .expect("Failed to get pods in current namespace");
40
41    let mut req = create_gke_ssl_request;
42    let req_status = req.status().as_u16();
43    let respone = req.body().await.unwrap_or_default();
44
45    match req_status {
46        200 => {
47            println!("Request has been successfull: Status: {:?}, {:?}", req_status, respone);
48        },
49        201 => {
50            println!("Successfully created Frontend Config: {:?}", respone);
51        }
52        400 => {
53            println!("Bad Request. Check URL parameters or body: {:?}", respone);
54        },
55        403 => {
56            println!("You don't have access to perform such request: {:?}", respone);
57        }
58        404 => {
59            println!("Requested resource does not exists: {:?}", respone);
60        },
61        409 => {
62            println!("Requested resource already exists! {:?}", respone)
63        }
64        _ => {
65            println!("Request status mismatch. Check response: {:?}", respone);
66        }
67    }
68
69    Ok(())
70    
71}