pki.go

package cmd

import (
	"github.com/AlecAivazis/survey/v2"
	"github.com/defenseunicorns/zarf/cli/config"
	"github.com/defenseunicorns/zarf/cli/internal/pki"
	"github.com/defenseunicorns/zarf/cli/internal/utils"
	"github.com/sirupsen/logrus"
	"github.com/spf13/cobra"
)

var tempState config.ZarfState

var pkiCmd = &cobra.Command{
	Use:   "pki",
	Short: "PKI-related commands",
}

var pkiRegenerate = &cobra.Command{
	Use:   "regenerate",
	Short: "Regenerate the pki certs for the cluster ingress",
	Run: func(cmd *cobra.Command, args []string) {
		// Prompt for a hostname if it wasn't provided as a command flag
		if tempState.TLS.Host == "" {
			prompt := &survey.Input{
				Message: "Enter a host DNS entry or IP Address for the gitops service ingress. If using localhost, use 127.0.0.1",
			}
			_ = survey.AskOne(prompt, &tempState.TLS.Host, survey.WithValidator(survey.Required))
		}

		// Verify the hostname provided is valid
		if !utils.CheckHostName(tempState.TLS.Host) {
			logrus.Fatalf("The hostname provided (%v) was not a valid hostname. The hostname can only contain: 'a-z', 'A-Z', '0-9', '-', and '.' characters as defined by RFC-1035. If using localhost, you must use the 127.0.0.1.\n", tempState.TLS.Host)
		}

		pki.GeneratePKI()
		if err := config.WriteState(state); err != nil {
			logrus.Debug(err)
			logrus.Fatal("Unable to save the zarf state file.")
		}
	},
}

var pkiImport = &cobra.Command{
	Use:   "import",
	Short: "Import an existing key pair for the cluster ingress",
	Run: func(cmd *cobra.Command, args []string) {
		pki.HandlePKI()
		if err := config.WriteState(state); err != nil {
			logrus.Debug(err)
			logrus.Fatal("Unable to save the zarf state file.")
		}
	},
}

func init() {
	rootCmd.AddCommand(pkiCmd)
	pkiCmd.AddCommand(pkiRegenerate)
	pkiCmd.AddCommand(pkiImport)

	pkiRegenerate.Flags().StringVar(&tempState.TLS.Host, "host", "", "Specify the host or IP for the gitops service ingress")

	pkiImport.Flags().StringVar(&tempState.TLS.CertPublicPath, "server-crt", "", "Path to the server public key if not generating unique PKI")
	pkiImport.Flags().StringVar(&tempState.TLS.CertPrivatePath, "server-key", "", "Path to the server private key if not generating unique PKI")
}