cli.go

package main

import (
	"os"

	"github.com/urfave/cli"
)

const (
	cliName = "sekret"
	cliDesc = "Work with encrypted Kubernetes Secrets"

	decodeBase64FlagName = "decode-base64"
	editorFlagName       = "editor"
	keyFlagName          = "key"
)

func newCLI() *cli.App {
	app := cli.NewApp()

	app.Name = cliName
	app.Usage = cliDesc
	app.Version = cliVer

	keyFlag := cli.StringFlag{
		Name:   keyFlagName,
		Usage:  "Encryption key (16 or 32 bytes)",
		EnvVar: "ENCRYPTION_KEY",
	}

	decodeBase64Flag := cli.BoolTFlag{
		Name:  decodeBase64FlagName,
		Usage: "Decode base64 data",
	}

	editorFlag := cli.StringFlag{
		Name:   editorFlagName,
		Usage:  "Editor",
		EnvVar: "EDITOR",
	}

	app.Flags = []cli.Flag{keyFlag}

	app.Commands = []cli.Command{
		{
			Name:      "edit",
			Usage:     "Edit secret YAML as plain text",
			ArgsUsage: "file",
			Flags: []cli.Flag{
				keyFlag,
				decodeBase64Flag,
				editorFlag,
			},
			Action: editAction,
		},
		{
			Name:      "new",
			Usage:     "Create new encrypted secret YAML and edit it",
			ArgsUsage: "file",
			Flags: []cli.Flag{
				keyFlag,
				decodeBase64Flag,
				editorFlag,
			},
			Action: newAction,
		},
		{
			Name:      "show",
			Usage:     "Show decrypted secret YAML",
			ArgsUsage: "file",
			Flags: []cli.Flag{
				keyFlag,
				decodeBase64Flag,
			},
			Action: showAction,
		},
		{
			Name:      "encrypt",
			ShortName: "enc",
			Usage:     "Encrypt file",
			ArgsUsage: "file",
			Flags:     []cli.Flag{keyFlag},
			Action:    encryptAction,
		},
		{
			Name:      "decrypt",
			ShortName: "dec",
			Usage:     "Decrypt encrypted file",
			ArgsUsage: "file",
			Flags:     []cli.Flag{keyFlag},
			Action:    decryptAction,
		},
	}

	return app
}

func editAction(c *cli.Context) error {
	cmd, err := editCommandFromContext(c)
	if err != nil {
		return err
	}
	return cmd.run()
}

func newAction(c *cli.Context) error {
	cmd, err := newCommandFromContext(c)
	if err != nil {
		return err
	}
	return cmd.run()
}

func showAction(c *cli.Context) error {
	cmd, err := showCommandFromContext(c)
	if err != nil {
		return err
	}
	return cmd.run()
}

func encryptAction(c *cli.Context) error {
	cmd, err := encryptCommandFromContext(c)
	if err != nil {
		return err
	}

	in, err := os.Open(cmd.filename)
	if err != nil {
		return err
	}
	defer in.Close()

	return cmd.run(in, os.Stdout)
}

func decryptAction(c *cli.Context) error {
	cmd, err := decryptCommandFromContext(c)
	if err != nil {
		return err
	}

	in, err := os.Open(cmd.filename)
	if err != nil {
		return err
	}
	defer in.Close()

	return cmd.run(in, os.Stdout)
}