mirror of https://github.com/docker/cli.git
80 lines
2.0 KiB
Go
80 lines
2.0 KiB
Go
package swarm
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
"github.com/docker/docker/api/types/swarm"
|
|
"github.com/docker/docker/cli"
|
|
"github.com/docker/docker/cli/command"
|
|
"github.com/pkg/errors"
|
|
"golang.org/x/net/context"
|
|
)
|
|
|
|
func newUnlockKeyCommand(dockerCli *command.DockerCli) *cobra.Command {
|
|
var rotate, quiet bool
|
|
|
|
cmd := &cobra.Command{
|
|
Use: "unlock-key [OPTIONS]",
|
|
Short: "Manage the unlock key",
|
|
Args: cli.NoArgs,
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
client := dockerCli.Client()
|
|
ctx := context.Background()
|
|
|
|
if rotate {
|
|
flags := swarm.UpdateFlags{RotateManagerUnlockKey: true}
|
|
|
|
swarm, err := client.SwarmInspect(ctx)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if !swarm.Spec.EncryptionConfig.AutoLockManagers {
|
|
return errors.New("cannot rotate because autolock is not turned on")
|
|
}
|
|
|
|
err = client.SwarmUpdate(ctx, swarm.Version, swarm.Spec, flags)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if !quiet {
|
|
fmt.Fprintf(dockerCli.Out(), "Successfully rotated manager unlock key.\n\n")
|
|
}
|
|
}
|
|
|
|
unlockKeyResp, err := client.SwarmGetUnlockKey(ctx)
|
|
if err != nil {
|
|
return errors.Wrap(err, "could not fetch unlock key")
|
|
}
|
|
|
|
if unlockKeyResp.UnlockKey == "" {
|
|
return errors.New("no unlock key is set")
|
|
}
|
|
|
|
if quiet {
|
|
fmt.Fprintln(dockerCli.Out(), unlockKeyResp.UnlockKey)
|
|
} else {
|
|
printUnlockCommand(ctx, dockerCli, unlockKeyResp.UnlockKey)
|
|
}
|
|
return nil
|
|
},
|
|
}
|
|
|
|
flags := cmd.Flags()
|
|
flags.BoolVar(&rotate, flagRotate, false, "Rotate unlock key")
|
|
flags.BoolVarP(&quiet, flagQuiet, "q", false, "Only display token")
|
|
|
|
return cmd
|
|
}
|
|
|
|
func printUnlockCommand(ctx context.Context, dockerCli *command.DockerCli, unlockKey string) {
|
|
if len(unlockKey) == 0 {
|
|
return
|
|
}
|
|
|
|
fmt.Fprintf(dockerCli.Out(), "To unlock a swarm manager after it restarts, run the `docker swarm unlock`\ncommand and provide the following key:\n\n %s\n\nPlease remember to store this key in a password manager, since without it you\nwill not be able to restart the manager.\n", unlockKey)
|
|
return
|
|
}
|