118 lines
2.5 KiB
Go
118 lines
2.5 KiB
Go
package bootstrap
|
|
|
|
import (
|
|
"flag"
|
|
"fmt"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/hashicorp/consul/api"
|
|
"github.com/hashicorp/consul/command/acl/token"
|
|
"github.com/hashicorp/consul/command/flags"
|
|
"github.com/hashicorp/consul/command/helpers"
|
|
"github.com/mitchellh/cli"
|
|
)
|
|
|
|
func New(ui cli.Ui) *cmd {
|
|
c := &cmd{UI: ui}
|
|
c.init()
|
|
return c
|
|
}
|
|
|
|
type cmd struct {
|
|
UI cli.Ui
|
|
flags *flag.FlagSet
|
|
http *flags.HTTPFlags
|
|
help string
|
|
format string
|
|
}
|
|
|
|
func (c *cmd) init() {
|
|
c.flags = flag.NewFlagSet("", flag.ContinueOnError)
|
|
c.flags.StringVar(
|
|
&c.format,
|
|
"format",
|
|
token.PrettyFormat,
|
|
fmt.Sprintf("Output format {%s}", strings.Join(token.GetSupportedFormats(), "|")),
|
|
)
|
|
c.http = &flags.HTTPFlags{}
|
|
flags.Merge(c.flags, c.http.ClientFlags())
|
|
flags.Merge(c.flags, c.http.ServerFlags())
|
|
c.help = flags.Usage(help, c.flags)
|
|
}
|
|
|
|
func (c *cmd) Run(args []string) int {
|
|
if err := c.flags.Parse(args); err != nil {
|
|
return 1
|
|
}
|
|
|
|
args = c.flags.Args()
|
|
if l := len(args); l < 0 || l > 1 {
|
|
c.UI.Error("This command takes up to one argument")
|
|
return 1
|
|
}
|
|
|
|
var terminalToken string
|
|
var err error
|
|
|
|
if len(args) == 1 {
|
|
terminalToken, err = helpers.LoadDataSourceNoRaw(args[0], os.Stdin)
|
|
if err != nil {
|
|
c.UI.Error(fmt.Sprintf("Error reading provided token: %v", err))
|
|
return 1
|
|
}
|
|
}
|
|
|
|
// Remove newline from the token if it was passed by stdin
|
|
boottoken := strings.TrimSpace(terminalToken)
|
|
|
|
client, err := c.http.APIClient()
|
|
if err != nil {
|
|
c.UI.Error(fmt.Sprintf("Error connecting to Consul agent: %s", err))
|
|
return 1
|
|
}
|
|
|
|
var t *api.ACLToken
|
|
t, _, err = client.ACL().BootstrapWithToken(boottoken)
|
|
if err != nil {
|
|
c.UI.Error(fmt.Sprintf("Failed ACL bootstrapping: %v", err))
|
|
return 1
|
|
}
|
|
|
|
formatter, err := token.NewFormatter(c.format, false)
|
|
if err != nil {
|
|
c.UI.Error(err.Error())
|
|
return 1
|
|
}
|
|
out, err := formatter.FormatToken(t)
|
|
if err != nil {
|
|
c.UI.Error(err.Error())
|
|
return 1
|
|
}
|
|
if out != "" {
|
|
c.UI.Info(out)
|
|
}
|
|
|
|
return 0
|
|
}
|
|
|
|
func (c *cmd) Synopsis() string {
|
|
return synopsis
|
|
}
|
|
|
|
func (c *cmd) Help() string {
|
|
return flags.Usage(c.help, nil)
|
|
}
|
|
|
|
const synopsis = "Bootstrap Consul's ACL system"
|
|
|
|
// TODO (ACL-V2) - maybe embed link to bootstrap reset docs
|
|
const help = `
|
|
Usage: consul acl bootstrap [options]
|
|
|
|
The bootstrap command will request Consul to generate a new token with unlimited privileges to use
|
|
for management purposes and output its details. This can only be done once and afterwards bootstrapping
|
|
will be disabled. If all tokens are lost and you need to bootstrap again you can follow the bootstrap
|
|
reset procedure
|
|
`
|