wip - add exec command to run a task locally

cmd/cmds/exec.go

@@ -0,0 +1,120 @@
+package cmds
+
+import (
+ "fmt"
+ "github.com/spf13/cobra"
+ "github.com/springernature/halfpipe/manifest"
+ "os"
+ "strings"
+)
+
+func init() {
+ rootCmd.AddCommand(execCmd)
+}
+
+var execCmd = &cobra.Command{
+ Use: "exec <task name>",
+ Short: "Execute a task locally",
+ Args: cobra.ExactArgs(1),
+ Run: func(cmd *cobra.Command, args []string) {
+ taskName := args[0]
+ man, controller := getManifestAndController(formatInput(Input))
+ man, err := controller.DefaultAndMap(man)
+ if err != nil {
+ printErr(err)
+ os.Exit(1)
+ }
+
+ found, task := man.Tasks.GetRunTask(taskName)
+ if !found {
+ printErr(fmt.Errorf("run task not found '%s'", taskName))
+ os.Exit(1)
+ }
+ fmt.Println(renderShellCommand(task, man.Team))
+ },
+}
+
+func renderShellCommand(task manifest.Run, team string) string {
+ s := []string{
+ "docker run -it",
+ `-v "$PWD":/app`,
+ "-w /app",
+ }
+
+ for k, v := range task.Vars {
+ s = append(s, fmt.Sprintf("-e %s=%s", k, vaultLookup(v, team)))
+ }
+
+ s = append(s, task.Docker.Image, task.Script)
+
+ return strings.Join(s, " \\ \n ")
+}
+
+func vaultLookup(s string, team string) string {
+ if !isSecret(s) {
+ return s
+ }
+ s = strings.TrimSpace(s[2 : len(s)-2])
+
+ if isKeyValueSecret(s) {
+ parts := strings.Split(s, ".")
+ vaultFolder := team
+ if isShared(parts[0]) {
+ vaultFolder = "shared"
+ }
+ return fmt.Sprintf("$(vault kv get -field=%s /springernature/%s/%s)", parts[1], vaultFolder, parts[0])
+ }
+
+ if isAbsolutePathSecret(s) {
+ parts := strings.Split(s, " ")
+ return fmt.Sprintf("$(vault kv get -field=%s /springernature/%s/%s)", parts[1], team, parts[0])
+ }
+
+ return s
+}
+
+// **************************************************
+// all this copied from renderers/actions/secrets.go
+
+// check if a secret matches one of the shared secrets
+// vault kv list /springernature/shared
+func isShared(s string) bool {
+ return map[string]bool{
+ "PPG-gradle-version-reporter": true,
+ "PPG-owasp-dependency-reporter": true,
+ "artifactory": true,
+ "artifactory-support": true,
+ "artifactory_test": true,
+ "bla": true,
+ "burpsuiteenterprise": true,
+ "content_hub-casper-credentials-live": true,
+ "content_hub-casper-credentials-qa": true,
+ "contrastsecurity": true,
+ "eas-sigrid": true,
+ "ee-sso-route-service": true,
+ "fastly": true,
+ "grafana": true,
+ "halfpipe-artifacts": true,
+ "halfpipe-docker-config": true,
+ "halfpipe-gcr": true,
+ "halfpipe-github": true,
+ "halfpipe-ml-deploy": true,
+ "halfpipe-semver": true,
+ "halfpipe-slack": true,
+ "katee-tls-dev": true,
+ "katee-tls-prod": true,
+ "sentry-release-integration": true,
+ }[s]
+}
+
+func isSecret(s string) bool {
+ return strings.HasPrefix(s, "((") && strings.HasSuffix(s, "))")
+}
+
+func isAbsolutePathSecret(s string) bool {
+ return len(strings.Split(s, " ")) == 2
+}
+
+func isKeyValueSecret(s string) bool {
+ return len(strings.Split(s, ".")) == 2
+}

manifest/manifest.go

@@ -69,6 +69,15 @@ func (tl TaskList) Flatten() (updated TaskList) {
  return
 }
 
+func (tl TaskList) GetRunTask(name string) (found bool, task Run) {
+ for _, t := range tl.Flatten() {
+ if t.GetName() == name {
+ return true, t.(Run)
+ }
+ }
+ return false, Run{}
+}
+
 func (tl TaskList) PreviousTaskNames(currentIndex int) []string {
  if currentIndex == 0 {
  return []string{}