git.squeep.com Git - awsible/blob - generate-ansible-vpcaccess-vars.sh

   1 #!/bin/sh
   2
   3 set -e
   4 set -o pipefail
   5
   6 if [ $# -ne 2 ]
   7 then
   8         echo "usage: $(basename "$0") environment region"
   9         exit 64
  10 fi
  11
  12 ca_cert="${1}_ca/pki/ca.crt"
  13 crl_pem="${1}_ca/pki/crl.pem"
  14 cert="${1}_ca/pki/issued/${2}.${1}.crt"
  15 key="${1}_ca/pki/private/${2}.${1}.key"
  16 ta_secret="${1}_ca/pki/ta.key"
  17
  18 # reuse any extant quagga password
  19 for v in "${1}"/group_vars/*vpcaccess*
  20 do
  21         if [ -n "${quagga_password}" ]
  22         then
  23                 echo "found multiple potential quagga passwords; the chosen one may not be correct" 1>&2
  24         fi
  25         quagga_password=$(awk '/QUAGGA_PASSWORD:/{print $2}' "${v}")
  26 done
  27 if [ -z "${quagga_password}" ]
  28 then
  29         quagga_password=$(pwgen -y 16)
  30 fi
  31
  32 function onlycert(){
  33         sed -n '/-----BEGIN /,/-----END /p' "$@"
  34 }
  35 function indent(){
  36         sed 's/^/  /' "$@"
  37 }
  38
  39 cat<<EOF
  40 ---
  41 QUAGGA_PASSWORD: "${quagga_password}"
  42 ca_name: $1
  43 ca_cert: |
  44 $(indent "${ca_cert}")
  45 crl_pem: |
  46 $(indent "${crl_pem}")
  47 cert: |
  48 $(onlycert "${cert}" | indent)
  49 key: |
  50 $(indent "${key}")
  51 ta_secret: |
  52 $(indent "${ta_secret}")
  53 EOF