-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.go
104 lines (85 loc) · 2.71 KB
/
main.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
package main
import (
"context"
"fmt"
"os"
"strings"
"syscall"
secretmanager "cloud.google.com/go/secretmanager/apiv1beta1"
joonix "github.com/joonix/log"
log "github.com/sirupsen/logrus"
"golang.org/x/oauth2/google"
"google.golang.org/api/compute/v1"
secretmanagerpb "google.golang.org/genproto/googleapis/cloud/secretmanager/v1beta1"
"gopkg.in/alecthomas/kingpin.v2"
)
var (
logJSON = kingpin.Flag("log-json", "Use structured logging in JSON format").Default("false").Bool()
logFluentd = kingpin.Flag("log-fluentd", "Use structured logging in GKE Fluentd format").Default("false").Bool()
logLevel = kingpin.Flag("log-level", "The level of logging").Default("info").Enum("debug", "info", "warn", "error", "panic", "fatal")
googleCredentials = kingpin.Flag("google-credentials", "Google credentials json file").ExistingFile()
googleProject = kingpin.Flag("google-project-id", "Google project id").Envar("GOOGLE_CLOUD_PROJECT").String()
secrets = kingpin.Flag("secret", "Secret name (may be repeated)").Short('s').StringMap()
command = kingpin.Arg("command", "Command to run").Required().String()
args = kingpin.Arg("arg", "Argument").Strings()
)
func main() {
kingpin.HelpFlag.Short('h')
kingpin.CommandLine.DefaultEnvars()
kingpin.Parse()
switch strings.ToLower(*logLevel) {
case "debug":
log.SetLevel(log.DebugLevel)
case "warn":
log.SetLevel(log.WarnLevel)
case "error":
log.SetLevel(log.ErrorLevel)
case "panic":
log.SetLevel(log.PanicLevel)
default:
log.SetLevel(log.InfoLevel)
}
if *logJSON {
log.SetFormatter(&log.JSONFormatter{})
}
if *logFluentd {
log.SetFormatter(joonix.NewFormatter())
}
log.SetOutput(os.Stderr)
ctx := context.Background()
client, err := secretmanager.NewClient(ctx)
if err != nil {
log.Fatal(err)
}
credentials, error := google.FindDefaultCredentials(ctx, compute.ComputeScope)
if error != nil {
log.Fatal(err)
}
environ := os.Environ()
for env, name := range *secrets {
secretPath := name
if !strings.Contains(secretPath, "/") {
project := credentials.ProjectID
if googleProject != nil {
project = *googleProject
}
secretPath = fmt.Sprintf("projects/%s/secrets/%s/versions/latest", project, name)
}
log.Debugf("Setting env %s from secret %s", env, secretPath)
req := &secretmanagerpb.AccessSecretVersionRequest{Name: secretPath}
result, err := client.AccessSecretVersion(ctx, req)
if err != nil {
log.Fatal(err)
}
environ = append(environ, fmt.Sprintf("%s=%s", env, string(result.Payload.Data)))
}
log.Debug(environ)
argv := []string{*command}
for _, a := range *args {
argv = append(argv, a)
}
err = syscall.Exec(*command, argv, environ)
if err != nil {
log.Fatal(err)
}
}