102 lines
2.5 KiB
Go
102 lines
2.5 KiB
Go
|
package gcloud
|
||
|
|
|
||
|
|
import (
|
||
|
|
"cloud.google.com/go/storage"
|
||
|
|
"context"
|
||
|
|
"fmt"
|
||
|
|
"github.com/hashicorp/terraform/backend"
|
||
|
|
"github.com/hashicorp/terraform/helper/pathorcontents"
|
||
|
|
"github.com/hashicorp/terraform/helper/schema"
|
||
|
|
googleContext "golang.org/x/net/context"
|
||
|
|
"golang.org/x/oauth2"
|
||
|
|
"golang.org/x/oauth2/google"
|
||
|
|
"google.golang.org/api/option"
|
||
|
|
)
|
||
|
|
|
||
|
|
func New() backend.Backend {
|
||
|
|
s := &schema.Backend{
|
||
|
|
Schema: map[string]*schema.Schema{
|
||
|
|
"bucket": {
|
||
|
|
Type: schema.TypeString,
|
||
|
|
Required: true,
|
||
|
|
Description: "The name of the Google Cloud Storage bucket",
|
||
|
|
},
|
||
|
|
|
||
|
|
"state_dir": {
|
||
|
|
Type: schema.TypeString,
|
||
|
|
Optional: true,
|
||
|
|
Description: "The directory where state files will be saved inside the bucket",
|
||
|
|
},
|
||
|
|
|
||
|
|
"credentials": {
|
||
|
|
Type: schema.TypeString,
|
||
|
|
Optional: true,
|
||
|
|
Description: "Google Cloud JSON Account Key",
|
||
|
|
Default: "",
|
||
|
|
},
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
result := &Backend{Backend: s}
|
||
|
|
result.Backend.ConfigureFunc = result.configure
|
||
|
|
return result
|
||
|
|
}
|
||
|
|
|
||
|
|
type Backend struct {
|
||
|
|
*schema.Backend
|
||
|
|
|
||
|
|
storageClient *storage.Client
|
||
|
|
storageContext googleContext.Context
|
||
|
|
|
||
|
|
bucketName string
|
||
|
|
stateDir string
|
||
|
|
}
|
||
|
|
|
||
|
|
func (b *Backend) configure(ctx context.Context) error {
|
||
|
|
if b.storageClient != nil {
|
||
|
|
return nil
|
||
|
|
}
|
||
|
|
|
||
|
|
storageOAuth2Scope := "https://www.googleapis.com/auth/devstorage.read_write"
|
||
|
|
|
||
|
|
data := schema.FromContextBackendConfig(ctx)
|
||
|
|
|
||
|
|
b.bucketName = data.Get("bucket").(string)
|
||
|
|
b.stateDir = data.Get("state_dir").(string)
|
||
|
|
b.storageContext = googleContext.Background()
|
||
|
|
|
||
|
|
credentials := data.Get("credentials").(string)
|
||
|
|
|
||
|
|
var tokenSource oauth2.TokenSource
|
||
|
|
|
||
|
|
if credentials != "" {
|
||
|
|
credentialsJson, _, err := pathorcontents.Read(data.Get("credentials").(string))
|
||
|
|
if err != nil {
|
||
|
|
return fmt.Errorf("Error loading credentials: %v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
jwtConfig, err := google.JWTConfigFromJSON([]byte(credentialsJson), storageOAuth2Scope)
|
||
|
|
if err != nil {
|
||
|
|
return fmt.Errorf("Failed to get Google OAuth2 token: %v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
tokenSource = jwtConfig.TokenSource(b.storageContext)
|
||
|
|
} else {
|
||
|
|
defaultTokenSource, err := google.DefaultTokenSource(b.storageContext, storageOAuth2Scope)
|
||
|
|
if err != nil {
|
||
|
|
return fmt.Errorf("Failed to get Google Application Default Credentials: %v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
tokenSource = defaultTokenSource
|
||
|
|
}
|
||
|
|
|
||
|
|
client, err := storage.NewClient(b.storageContext, option.WithTokenSource(tokenSource))
|
||
|
|
if err != nil {
|
||
|
|
return fmt.Errorf("Failed to create Google Storage client: %v", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
b.storageClient = client
|
||
|
|
|
||
|
|
return nil
|
||
|
|
}
|