steve/pkg/auth/cli/webhookcli.go

package cli

import (
	"os"
	"time"

	"github.com/rancher/steve/pkg/auth"
	"github.com/urfave/cli/v2"

	"k8s.io/client-go/tools/clientcmd"
)

type WebhookConfig struct {
	WebhookAuthentication bool
	WebhookKubeconfig     string
	WebhookURL            string
	CacheTTLSeconds       int
}

func (w *WebhookConfig) MustWebhookMiddleware() auth.Middleware {
	m, err := w.WebhookMiddleware()
	if err != nil {
		panic("failed to create webhook middleware: " + err.Error())
	}
	return m
}

func (w *WebhookConfig) WebhookMiddleware() (auth.Middleware, error) {
	if !w.WebhookAuthentication {
		return nil, nil
	}

	config := w.WebhookKubeconfig
	if config == "" && w.WebhookURL != "" {
		tempFile, err := auth.WebhookConfigForURL(w.WebhookURL)
		if err != nil {
			return nil, err
		}
		defer os.Remove(tempFile)
		config = tempFile
	}

	kubeConfig, err := clientcmd.BuildConfigFromFlags("", config)
	if err != nil {
		return nil, err
	}

	return auth.NewWebhookMiddleware(time.Duration(w.CacheTTLSeconds)*time.Second, kubeConfig)
}

func Flags(config *WebhookConfig) []cli.Flag {
	return []cli.Flag{
		&cli.BoolFlag{
			Name:        "webhook-auth",
			EnvVars:     []string{"WEBHOOK_AUTH"},
			Destination: &config.WebhookAuthentication,
		},
		&cli.StringFlag{
			Name:        "webhook-kubeconfig",
			EnvVars:     []string{"WEBHOOK_KUBECONFIG"},
			Destination: &config.WebhookKubeconfig,
		},
		&cli.StringFlag{
			Name:        "webhook-url",
			EnvVars:     []string{"WEBHOOK_URL"},
			Destination: &config.WebhookURL,
		},
		&cli.IntFlag{
			Name:        "webhook-cache-ttl",
			EnvVars:     []string{"WEBHOOK_CACHE_TTL"},
			Destination: &config.CacheTTLSeconds,
		},
	}
}