fix pre-commit and cleanup
This commit is contained in:
Kjeld Schouten
@@ -1,120 +1,120 @@
|
||||
package sops
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"os"
|
||||
"regexp"
|
||||
"fmt"
|
||||
"os"
|
||||
"regexp"
|
||||
|
||||
"github.com/rs/zerolog/log"
|
||||
"github.com/truecharts/public/clustertool/pkg/helper"
|
||||
"github.com/rs/zerolog/log"
|
||||
"github.com/truecharts/public/clustertool/pkg/helper"
|
||||
)
|
||||
|
||||
// EncryptAllFiles encrypts all unencrypted files as specified in the .sops.yaml configuration.
|
||||
func EncryptAllFiles() error {
|
||||
files, err := ExecuteCheck(false) // Get the list of files and their encryption status
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
files, err := ExecuteCheck(false) // Get the list of files and their encryption status
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
for _, file := range files {
|
||||
if err := processFileEncryption(file); err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
for _, file := range files {
|
||||
if err := processFileEncryption(file); err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
|
||||
log.Info().Msg("Encryption pipeline placeholders added to all eligible files")
|
||||
return nil
|
||||
log.Info().Msg("Encryption pipeline placeholders added to all eligible files")
|
||||
return nil
|
||||
}
|
||||
|
||||
// Helper function that handles the encryption process for an individual file
|
||||
func processFileEncryption(file EncrFileData) error {
|
||||
// Skip files that are already encrypted
|
||||
if file.Encrypted {
|
||||
log.Info().Msgf("File %s is already encrypted, skipping.\n", file.Path)
|
||||
return nil
|
||||
}
|
||||
// Skip files that are already encrypted
|
||||
if file.Encrypted {
|
||||
log.Info().Msgf("File %s is already encrypted, skipping.\n", file.Path)
|
||||
return nil
|
||||
}
|
||||
|
||||
// Check if the file is partially staged
|
||||
fullyStaged, err := helper.IsFileFullyStaged(file.Path)
|
||||
if err != nil {
|
||||
return fmt.Errorf("error checking staged status of file %s: %v", file.Path, err)
|
||||
}
|
||||
// Check if the file is partially staged
|
||||
fullyStaged, err := helper.IsFileFullyStaged(file.Path)
|
||||
if err != nil {
|
||||
return fmt.Errorf("error checking staged status of file %s: %v", file.Path, err)
|
||||
}
|
||||
|
||||
// If the file is not fully staged, stage it
|
||||
if !fullyStaged {
|
||||
log.Info().Msgf("File %s is partially staged, staging fully...\n", file.Path)
|
||||
err := helper.StageFile(file.Path)
|
||||
if err != nil {
|
||||
return fmt.Errorf("error staging file %s: %v", file.Path, err)
|
||||
}
|
||||
log.Info().Msgf("File %s fully staged.\n", file.Path)
|
||||
}
|
||||
// If the file is not fully staged, stage it
|
||||
if !fullyStaged {
|
||||
log.Info().Msgf("File %s is partially staged, staging fully...\n", file.Path)
|
||||
err := helper.StageFile(file.Path)
|
||||
if err != nil {
|
||||
return fmt.Errorf("error staging file %s: %v", file.Path, err)
|
||||
}
|
||||
log.Info().Msgf("File %s fully staged.\n", file.Path)
|
||||
}
|
||||
|
||||
// Encrypt the file
|
||||
err = encryptFile(file.Path)
|
||||
if err != nil {
|
||||
return fmt.Errorf("error encrypting file %s: %v", file.Path, err)
|
||||
}
|
||||
// Encrypt the file
|
||||
err = encryptFile(file.Path)
|
||||
if err != nil {
|
||||
return fmt.Errorf("error encrypting file %s: %v", file.Path, err)
|
||||
}
|
||||
|
||||
log.Info().Msgf("File %s encrypted successfully.\n", file.Path)
|
||||
return nil
|
||||
log.Info().Msgf("File %s encrypted successfully.\n", file.Path)
|
||||
return nil
|
||||
}
|
||||
|
||||
// encryptFilePlaceholder encrypts the content of the specified file and replaces the file with the encrypted data.
|
||||
func encryptFile(filePath string) error {
|
||||
// Read the content of the file
|
||||
content, err := os.ReadFile(filePath)
|
||||
log.Info().Msgf("Encrypting '%s'... \n", filePath)
|
||||
if err != nil {
|
||||
return fmt.Errorf("error reading file: %v", err)
|
||||
}
|
||||
// Read the content of the file
|
||||
content, err := os.ReadFile(filePath)
|
||||
log.Info().Msgf("Encrypting '%s'... \n", filePath)
|
||||
if err != nil {
|
||||
return fmt.Errorf("error reading file: %v", err)
|
||||
}
|
||||
|
||||
// Ensure the regex covers the whole content
|
||||
sopsConfig, err := LoadSopsConfig()
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
// Ensure the regex covers the whole content
|
||||
sopsConfig, err := LoadSopsConfig()
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
encrRegex := mergeRegex(filePath, sopsConfig)
|
||||
encrRegex := mergeRegex(filePath, sopsConfig)
|
||||
|
||||
// Encrypt the content
|
||||
encryptedData, err := EncryptWithAgeKey(content, encrRegex, GetFormat(filePath))
|
||||
if err != nil {
|
||||
return fmt.Errorf("error encrypting data: %v", err)
|
||||
}
|
||||
// Encrypt the content
|
||||
encryptedData, err := EncryptWithAgeKey(content, encrRegex, GetFormat(filePath))
|
||||
if err != nil {
|
||||
return fmt.Errorf("error encrypting data: %v", err)
|
||||
}
|
||||
|
||||
// Write the encrypted data back to the file
|
||||
if err := os.WriteFile(filePath, encryptedData, 0644); err != nil {
|
||||
return fmt.Errorf("error writing encrypted data to file: %v", err)
|
||||
}
|
||||
// Write the encrypted data back to the file
|
||||
if err := os.WriteFile(filePath, encryptedData, 0644); err != nil {
|
||||
return fmt.Errorf("error writing encrypted data to file: %v", err)
|
||||
}
|
||||
|
||||
return nil
|
||||
return nil
|
||||
}
|
||||
|
||||
func mergeRegex(filePath string, config SopsConfig) string {
|
||||
// Initialize an empty string for merged regex
|
||||
mergedRegex := ""
|
||||
// Initialize an empty string for merged regex
|
||||
mergedRegex := ""
|
||||
|
||||
// Iterate through each creation rule
|
||||
for _, rule := range config.CreationRules {
|
||||
// Compile the regex pattern
|
||||
r, err := regexp.Compile(rule.PathRegex)
|
||||
if err != nil {
|
||||
log.Info().Msgf("Error compiling regex: %v", err)
|
||||
continue
|
||||
}
|
||||
// Iterate through each creation rule
|
||||
for _, rule := range config.CreationRules {
|
||||
// Compile the regex pattern
|
||||
r, err := regexp.Compile(rule.PathRegex)
|
||||
if err != nil {
|
||||
log.Info().Msgf("Error compiling regex: %v", err)
|
||||
continue
|
||||
}
|
||||
|
||||
// Check if the given path matches the current rule's path regex
|
||||
if r.MatchString(filePath) {
|
||||
// Merge the encrypted regex into the mergedRegex string
|
||||
mergedRegex += rule.EncryptedRegex + "|"
|
||||
}
|
||||
}
|
||||
// Check if the given path matches the current rule's path regex
|
||||
if r.MatchString(filePath) {
|
||||
// Merge the encrypted regex into the mergedRegex string
|
||||
mergedRegex += rule.EncryptedRegex + "|"
|
||||
}
|
||||
}
|
||||
|
||||
// Remove the trailing "|" if mergedRegex is not empty
|
||||
if mergedRegex != "" {
|
||||
mergedRegex = mergedRegex[:len(mergedRegex)-1]
|
||||
}
|
||||
// Remove the trailing "|" if mergedRegex is not empty
|
||||
if mergedRegex != "" {
|
||||
mergedRegex = mergedRegex[:len(mergedRegex)-1]
|
||||
}
|
||||
|
||||
return mergedRegex
|
||||
return mergedRegex
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user