- #!/usr/bin/python

- # Copyright 2012  Patrick Uiterwijk <puiterwijk@fedoraproject.org>

- # This file has been released as LGPLv3+, see COPYING for the complete license

- import sys

- import string

- import ConfigParser

- from argparse import ArgumentParser

- from fedora.client import AccountSystem

- from oshift_mod import Openshift

- from getpass import getpass

- import os

- 

- os.environ['OPENSHIFT_REST_API'] = '1.5'

- 

- def get_keys(host,user,passwd):

-     os = Openshift(host=host,user=user,passwd=passwd)

-     (resp, content) = os.keys_list()

-     if resp != 200:

-         print('ERROR! Result: %(resp)s' % {'resp': resp})

-         sys.exit(1)

-     return os.rest.response.json()['data']

- 

- def add_key(host,user,passwd,key_name,key_type,key_contents, verbose=False):

-     if verbose:

-         print('Adding key %(keyname)s' % {'keyname': key_name})

-     os = Openshift(host=host,user=user,passwd=passwd)

-     (resp, content) = os.key_add(name=key_name, type=key_type, key_str=key_contents)

-     # 200 = ok, 201 = created, 422 = error in key format

-     # The latest one is an error, but shouldn't break adding the rest of the keys

-     if resp != 200 and resp != 201 and resp != 422:

-         print('ERROR! Result: %(resp)s' % {'resp': resp})

-         sys.exit(2)

-     if verbose:

-         print('Done')

-     return os.rest.response.json()['data']

- 

- def remove_key(host,user,passwd,key_name, verbose=False):

-     if verbose:

-         print('Removing key %(keyname)s' % {'keyname': key_name})

-     os = Openshift(host=host,user=user,passwd=passwd)

-     (resp, content) = os.key_delete(key_name)

-     if resp != 200:

-         print 'ERROR! Result: %(resp)s' % {'resp': resp}

-         sys.exit(3)

-     if verbose:

-         print('Done')

-     return os.rest.response.json()['data']

- 

- def get_users_to_have_access(fas, groups):

-     all_users = set()

-     for group in groups:

-         new_users = fas.group_members(group)

-         for new_user in new_users:

-             all_users.add(new_user['username'])

-     return all_users

- 

- def get_users_ssh_keys(fas, users):

-     keys = {}

-     user_data = fas.user_data()

-     for userid in user_data.keys():

-         if user_data[userid]['username'] in users:

-             if user_data[userid]['ssh_key']:

-                 contents = user_data[userid]['ssh_key']

-                 if contents.split(' ') > 1:

-                     key_type = contents.split(' ')[0]

-                     key_contents = contents.split(' ')[1]

-                     keys[user_data[userid]['username']] = {'type': key_type, 

-                                                        'contents': key_contents,

-                                                        'username': user_data[userid]['username']}

-     return keys

- 

- def get_keys_to_remove(keys_in_openshift, keys_in_fas):

-     keys_to_remove = set()

-     for key in keys_in_openshift:

-         keys_to_remove.add(key['name'])

-         for key_in_fas in keys_in_fas:

-             if keys_in_fas[key_in_fas]['contents'] == key['content']:

-                 keys_to_remove.remove(key['name'])

-     return keys_to_remove

- 

- def get_keys_to_add(keys_in_openshift, keys_in_fas):

-     usernames_to_add = set()

-     for username in keys_in_fas:

-         usernames_to_add.add(username)

-         for key in keys_in_openshift:

-             if key['content'] == keys_in_fas[username]['contents']:

-                 usernames_to_add.remove(username)

-     keys_to_add = []

-     for username in usernames_to_add:

-         keys_to_add.append(keys_in_fas[username])

-     return keys_to_add

- 

- def remove_keys(openshift_host, openshift_user, openshift_pass, to_remove, verbose=False):

-     if verbose:

-         print('Removing the following keys:')

-         print(to_remove)

-     for key in to_remove:

-         remove_key(openshift_host, openshift_user, openshift_pass, key, verbose=verbose)

-     if verbose:

-         print('Done')

- 

- def add_keys(openshift_host, openshift_user, openshift_pass, to_add, prefix, verbose=False):

-     if verbose:

-         print('Adding the following keys:')

-         print(to_add)

-     for key in to_add:

-         add_key(openshift_host, openshift_user, openshift_pass, '%(prefix)s%(username)s' % {'prefix': prefix, 'username': key['username']}, key['type'], key['contents'], verbose=verbose)

-     if verbose:

-         print('Done')

- 

- if __name__ == '__main__':

-     parser = ArgumentParser()

-     parser.add_argument('-config_file', help='The configuration file to use', default='/etc/sync-openshift-keys.conf')

-     parser.add_argument('--verbose', '-v', help='Make the script more verbose', action='store_true')

-     args = parser.parse_args()

-     config = ConfigParser.ConfigParser()

-     config.read(args.config_file)

-     fas = AccountSystem(config.get('fas', 'url'), username=config.get('fas', 'user'), password=config.get('fas', 'pass'))

-     fas.insecure = True

-     if args.verbose:

-         print('Getting users...')

-     users = get_users_to_have_access(fas, string.split(config.get('general', 'groups'), ','))

-     if args.verbose:

-         print('Done: %s' % users)

-         print('Getting keys in FAS...')

-     keys_fas = get_users_ssh_keys(fas, users)

-     if args.verbose:

-         print('Done: %s')

-         print('Getting keys in Openshift...')

-     keys_openshift = get_keys(config.get('openshift', 'host'), config.get('openshift', 'user'), config.get('openshift', 'pass'))

-     if args.verbose:

-         print('Done')

-         print('Getting keys to remove...')

-     keys_to_remove = get_keys_to_remove(keys_openshift, keys_fas)

-     if args.verbose:

-         print('Done')

-         print('Getting keys to add...')

-     keys_to_add = get_keys_to_add(keys_openshift, keys_fas)

-     if args.verbose:

-         print('Done')

-     remove_keys(config.get('openshift', 'host'), config.get('openshift', 'user'), config.get('openshift', 'pass'), keys_to_remove, verbose=args.verbose)

-     add_keys(config.get('openshift', 'host'), config.get('openshift', 'user'), config.get('openshift', 'pass'), keys_to_add, config.get('general', 'keyname_prefix'), verbose=args.verbose)