Module: Terrafying::Components::CA
- Included in:
- LetsEncrypt, SelfSignedCA
- Defined in:
- lib/terrafying/components/ca.rb
Instance Method Summary collapse
- #<=>(other) ⇒ Object
- #ca?(name) ⇒ Boolean
- #create_keypair(name, options = {}) ⇒ Object
- #find_keypair(name) ⇒ Object
- #object_arn(name, type, version = '*') ⇒ Object
- #object_ident(name) ⇒ Object
- #object_key(name, type, version = '') ⇒ Object
- #object_name(name, type) ⇒ Object
- #object_url(name, type, version: '') ⇒ Object
- #reference_keypair(ctx, name, key_version:, cert_version:) ⇒ Object
Instance Method Details
#<=>(other) ⇒ Object
94 95 96 |
# File 'lib/terrafying/components/ca.rb', line 94 def <=>(other) @name <=> other.name end |
#ca?(name) ⇒ Boolean
10 11 12 |
# File 'lib/terrafying/components/ca.rb', line 10 def ca?(name) name == @name end |
#create_keypair(name, options = {}) ⇒ Object
6 7 8 |
# File 'lib/terrafying/components/ca.rb', line 6 def create_keypair(name, = {}) create_keypair_in(self, name, ) end |
#find_keypair(name) ⇒ Object
44 45 46 47 48 49 50 |
# File 'lib/terrafying/components/ca.rb', line 44 def find_keypair(name) reference_keypair( nil, name, key_version: aws.s3_object(@bucket, object_key(name, :key, 'latest')[1..-1]), cert_version: aws.s3_object(@bucket, object_key(name, :cert, 'latest')[1..-1]), ) end |
#object_arn(name, type, version = '*') ⇒ Object
32 33 34 35 36 |
# File 'lib/terrafying/components/ca.rb', line 32 def object_arn(name, type, version = '*') key = object_key(name, type, version) "arn:aws:s3:::#{@bucket}#{key}" end |
#object_ident(name) ⇒ Object
14 15 16 |
# File 'lib/terrafying/components/ca.rb', line 14 def object_ident(name) (ca? name) ? @name : "#{@name}-#{tf_safe(name)}" end |
#object_key(name, type, version = '') ⇒ Object
22 23 24 25 26 27 28 29 30 |
# File 'lib/terrafying/components/ca.rb', line 22 def object_key(name, type, version = '') if ca? name File.join('', @prefix, @name, "ca.#{type}") else raise 'A non-ca object must have a version' if version.empty? File.join('', @prefix, @name, name, version, type.to_s) end end |
#object_name(name, type) ⇒ Object
18 19 20 |
# File 'lib/terrafying/components/ca.rb', line 18 def object_name(name, type) "#{object_ident(name)}-#{type}" end |
#object_url(name, type, version: '') ⇒ Object
38 39 40 41 42 |
# File 'lib/terrafying/components/ca.rb', line 38 def object_url(name, type, version: '') key = object_key(name, type, version) File.join('s3://', "#{@bucket}#{key}") end |
#reference_keypair(ctx, name, key_version:, cert_version:) ⇒ Object
52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 |
# File 'lib/terrafying/components/ca.rb', line 52 def reference_keypair(ctx, name, key_version:, cert_version:) resources = [] if ctx != nil resources += [ "aws_s3_bucket_object.#{object_name(name, :key)}", "aws_s3_bucket_object.#{object_name(name, :cert)}" ] if ctx == self resources << "aws_s3_bucket_object.#{object_name(@name, :cert)}" end end ref = { name: name, ca: self, path: { cert: File.join('/etc/ssl', @name, name, 'cert'), key: File.join('/etc/ssl', @name, name, 'key') }, source: { cert: object_url(name, :cert, version: cert_version), key: object_url(name, :key, version: key_version) }, resources: resources, iam_statement: { Effect: 'Allow', Action: [ 's3:GetObjectAcl', 's3:GetObject' ], Resource: [ object_arn(@name, :cert), object_arn(name, :cert), object_arn(name, :key) ] } } ref end |