1import * as _ from 'lodash-es'
2import { secretTemplate } from "../k8sF/k8sSecF.mts"
3import { secretsDir } from '../../serverF/secretsDirF.mts'
4import { getKlusterCtx, getDockregCanonicalHost } from '../k8sF/ctxF/klusterCtxF.mts'
5import { assertDefined } from '../../sharedF/assertsF/assertDefinedF.mts'
6import { getOptJsonSecret } from '../../serverF/secretsF/getSecretF.mts'
7import { type secretNameType } from '../../serverF/secretsF/getPlainSecAI.mts'
8import { randomUrlSafeBytes } from '../../sharedF/randomBytesF.mts'
9import fs from 'fs'
10
11type RegCredSecNameProps = { name?: string, dockreg_host: string, cluster_name?: string }
12
13export const regCredSecName = ({name, dockreg_host, cluster_name}: RegCredSecNameProps) => {
14  cluster_name ||= getKlusterCtx().cluster_name
15  name ||= dockreg_host.split('.')[0]
16  return [`regcred`, name, cluster_name].join('-')
17}
18
19export const genRegCredSecName = (dockreg_host: string, cluster_name?: string) => {
20  dockreg_host = getDockregCanonicalHost(dockreg_host)
21  const baseName = regCredSecName({dockreg_host, cluster_name})
22  return baseName + '.json'
23}
24
25type GetCredsProps = { dockreg_host: string }
26
27export const getCreds = ({dockreg_host}: GetCredsProps) => {
28  dockreg_host = getDockregCanonicalHost(dockreg_host)
29  assertDefined(dockreg_host)
30
31  const secretName = genRegCredSecName(dockreg_host) as secretNameType
32  const secretPath = `${secretsDir}/${secretName}`
33
34  let sec = getOptJsonSecret(secretName)
35  if (!sec) {
36    const username = 'reguser'
37    const password = randomUrlSafeBytes(24)
38    sec = {username, password}
39    fs.writeFileSync(secretPath, JSON.stringify(sec, null, 2))
40    console.log(`Generated registry credentials: ${secretPath}`)
41  }
42  if (_.isString(sec)) {
43    sec = JSON.parse(sec)
44  }
45  const {username, password} = sec
46
47  const auth = Buffer.from(username + ':' + password).toString('base64')
48
49  return {username, password, auth}
50}
51
52type RegcredSecTemplProps = {
53  name?: string
54  dockreg_host: string
55  cluster_name?: string
56  dockLanHost?: string
57}
58
59export const regcredSecTempl = ({name, dockreg_host, dockLanHost}: RegcredSecTemplProps) => {
60  assertDefined(dockreg_host)
61
62  name ||= regCredSecName({name, dockreg_host})
63
64  const {auth} = getCreds({dockreg_host})
65
66  const auths: Record<string, {auth: string}> = {[`https://${dockreg_host}`]: { auth }}
67  if (dockLanHost) {
68    auths[`https://${dockLanHost}`] = { auth }
69  }
70  const jsonS = JSON.stringify({auths})
71  const secretsH = {
72    '.dockerconfigjson': jsonS
73  }
74  
75  return {
76    ...secretTemplate({name, secretsH}),
77    type: 'kubernetes.io/dockerconfigjson'
78  }
79}
80