org.springframework.cloud.kubernetes.config.SecretsPropertySource.java Source code

Introduction

Here is the source code for org.springframework.cloud.kubernetes.config.SecretsPropertySource.java

Source

/*
 * Copyright (C) 2016 to the original authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *         http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 */
package org.springframework.cloud.kubernetes.config;

import java.io.IOException;
import java.nio.file.Files;
import java.nio.file.Path;
import java.nio.file.Paths;
import java.util.Base64;
import java.util.HashMap;
import java.util.Map;

import io.fabric8.kubernetes.api.model.Secret;
import io.fabric8.kubernetes.client.KubernetesClient;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.core.env.Environment;
import org.springframework.core.env.MapPropertySource;
import org.springframework.util.StringUtils;

import static org.springframework.cloud.kubernetes.config.ConfigUtils.*;

public class SecretsPropertySource extends MapPropertySource {
    private static final Log LOG = LogFactory.getLog(SecretsPropertySource.class);

    private static final String PREFIX = "secrets";

    public SecretsPropertySource(KubernetesClient client, Environment env, SecretsConfigProperties config) {
        super(getSourceName(client, env, config), getSourceData(client, env, config));
    }

    private static String getSourceName(KubernetesClient client, Environment env, SecretsConfigProperties config) {
        return new StringBuilder().append(PREFIX).append(Constants.PROPERTY_SOURCE_NAME_SEPARATOR)
                .append(getApplicationName(env, config)).append(Constants.PROPERTY_SOURCE_NAME_SEPARATOR)
                .append(getApplicationNamespace(client, env, config)).toString();
    }

    private static Map<String, Object> getSourceData(KubernetesClient client, Environment env,
            SecretsConfigProperties config) {
        String name = getApplicationName(env, config);
        String namespace = getApplicationNamespace(client, env, config);
        Map<String, Object> result = new HashMap<>();

        if (config.isEnableApi()) {
            try {
                // Read for secrets api (named)
                if (StringUtils.isEmpty(namespace)) {
                    putAll(client.secrets().withName(name).get(), result);
                } else {
                    putAll(client.secrets().inNamespace(namespace).withName(name).get(), result);
                }

                // Read for secrets api (label)
                if (!config.getLabels().isEmpty()) {
                    if (StringUtils.isEmpty(namespace)) {
                        client.secrets().withLabels(config.getLabels()).list().getItems()
                                .forEach(s -> putAll(s, result));
                    } else {
                        client.secrets().inNamespace(namespace).withLabels(config.getLabels()).list().getItems()
                                .forEach(s -> putAll(s, result));
                    }
                }
            } catch (Exception e) {
                LOG.warn("Can't read secret with name: [" + name + "] or labels [" + config.getLabels()
                        + "] in namespace:[" + namespace + "] (cause: " + e.getMessage() + "). Ignoring");
            }
        }

        // read for secrets mount
        config.getPaths().stream().map(Paths::get).filter(Files::exists).forEach(p -> putAll(p, result));

        return result;
    }

    // *****************************
    // Helpers
    // *****************************
    private static void putAll(Secret secret, Map<String, Object> result) {
        if (secret != null && secret.getData() != null) {
            secret.getData().forEach((k, v) -> result.put(k, new String(Base64.getDecoder().decode(v)).trim()));
        }
    }

    private static void putAll(Path path, Map<String, Object> result) {
        try {
            Files.walk(path).filter(Files::isRegularFile).forEach(p -> readFile(p, result));
        } catch (IOException e) {
            LOG.warn("", e);
        }
    }

    private static void readFile(Path path, Map<String, Object> result) {
        try {
            result.put(path.getFileName().toString(), new String(Files.readAllBytes(path)).trim());
        } catch (IOException e) {
            LOG.warn("", e);
        }
    }
}