3 HOSTPORT="127.0.0.1:3904"
7 # dictionary of API Keys and the tpics owned by each API key
10 ["anonymous"]="APPC-CL APPC-TEST2 PDPD-CONFIGURATION POLICY-CL-MGT DCAE-CL-EVENT unauthenticated.SEC_MEASUREMENT_OUTPUT unauthenticated.TCA_EVENT_OUTPUT " \
11 ["apikey-SDC1"]="SDC-DISTR-NOTIF-TOPIC-SDC-OPENSOURCE-ENV1 SDC-DISTR-STATUS-TOPIC-SDC-OPENSOURCE-ENV1" \
12 ["apikey-APPC1"]="APPC-TEST1" \
13 ["apikey-PORTAL1"]="ECOMP-PORTAL-INBOX" \
14 ["apikey-PORTALAPP1"]="ECOMP-PORTAL-OUTBOX-APP1" \
15 ["apikey-PORTALDBC1"]="ECOMP-PORTAL-OUTBOX-DBC1" \
16 ["apikey-PORTALSDC1"]="ECOMP-PORTAL-OUTBOX-SDC1" \
17 ["apikey-PORTALVID1"]="ECOMP-PORTAL-OUTBOX-VID1" \
18 ["apikey-PORTALPOL1"]="ECOMP-PORTAL-OUTBOX-POL1" \
21 # dictionary of producers for each topic
22 declare -A acl_producers
24 ["SDC-DISTR-NOTIF-TOPIC-SDC-OPENSOURCE-ENV1"]="apikey-sdc1" \
25 ["SDC-DISTR-STATUS-TOPIC-SDC-OPENSOURCE-ENV1"]="apikey-sdc1" \
26 ["ECOMP-PORTAL-INBOX"]="apikey-PORTALAPP1 apikey-PORTALDBC1 apikey-PORTALSDC1 apikey-PORTALVID1 apikey-PORTALPOL1" \
27 ["ECOMP-PORTAL-OUTBOX-APP1"]="apikey-PORTAL1" \
28 ["ECOMP-PORTAL-OUTBOX-DBC1"]="apikey-PORTAL1" \
29 ["ECOMP-PORTAL-OUTBOX-SDC1"]="apikey-PORTAL1" \
30 ["ECOMP-PORTAL-OUTBOX-VID1"]="apikey-PORTAL1" \
31 ["ECOMP-PORTAL-OUTBOX-POL1"]="apikey-PORTAL1" \
32 ["APPC-TEST1"]="apikey-APPC1" \
35 # dictionary of consumers for each topic
36 declare -A acl_consumers
38 ["SDC-DISTR-NOTIF-TOPIC-SDC-OPENSOURCE-ENV1"]="apikey-sdc1" \
39 ["SDC-DISTR-STATUS-TOPIC-SDC-OPENSOURCE-ENV1"]="apikey-sdc1" \
40 ["ECOMP-PORTAL-INBOX"]="apikey-PORTAL1" \
41 ["ECOMP-PORTAL-OUTBOX-APP1"]="apikey-PORTALAPP1" \
42 ["ECOMP-PORTAL-OUTBOX-DBC1"]="apikey-PORTALDBC1" \
43 ["ECOMP-PORTAL-OUTBOX-SDC1"]="apikey-PORTALSDC1" \
44 ["ECOMP-PORTAL-OUTBOX-VID1"]="apikey-PORTALVID1" \
45 ["ECOMP-PORTAL-OUTBOX-POL1"]="apikey-PORTALPOL1" \
46 ["APPC-TEST1"]="apikey-APPC1" \
58 echo "look for owner for $target_topic"
59 for o in "${!topics[@]}"; do
60 keytopics=${topics[$o]}
61 for topic in ${keytopics}; do
62 if [ "$topic" == "-" ]; then
65 if [ "$topic" == "$target_topic" ]; then
78 echo " adding $client to group $acl_group for topic $2"
80 getowner "$topic" owner
81 echo "==owner for $topic is $owner"
84 if [ -z "$owner" ]; then
85 echo "No owner API key found for topic $topic"
88 OWNER_API_KEYFILE="${KEYDIR}/${owner}.key"
89 if [ ! -e $API_KEYFILE ]; then
90 echo "No API key file $OWNER_API_KEYFILE for owner $owner of topic $topic, exit "
94 CLIENT_API_KEYFILE="${KEYDIR}/${client}.key"
95 if [ ! -e $CLIENT_API_KEYFILE ]; then
96 echo "No API key file $CLIENT_API_KEYFILE for client $client, exit "
99 CLIENTKEY=`cat ${CLIENT_API_KEYFILE} |jq -r ".key"`
100 UEBAPIKEYSECRET=`cat ${OWNER_API_KEYFILE} |jq -r ".secret"`
101 UEBAPIKEYKEY=`cat ${OWNER_API_KEYFILE} |jq -r ".key"`
102 time=`date --iso-8601=seconds`
103 signature=$(echo -n "$time" | openssl sha1 -hmac $UEBAPIKEYSECRET -binary | openssl base64)
104 xAuth=$UEBAPIKEYKEY:$signature
106 CMD="curl -i -H \"Content-Type: application/json\" -H \"X-CambriaAuth:$xAuth\" -H \"X-CambriaDate:$xDate\" -X PUT http://${HOSTPORT}/topics/${topic}/${acl_group}/${CLIENTKEY}"
112 for key in "${!topics[@]}"; do
113 # try to create key if no such key exists
114 API_KEYFILE="${KEYDIR}/${key}.key"
115 if [ "$key" != "anonymous" ]; then
116 if [ -e ${API_KEYFILE} ]; then
117 echo "API key for $key already exists, no need to create new"
119 echo "generating API key $key"
120 echo '{"email":"no email","description":"API key for '$key'"}' > /tmp/input.txt
122 CMD="curl -s -o ${API_KEYFILE} -H \"Content-Type: application/json\" -X POST -d @/tmp/input.txt http://${HOSTPORT}/apiKeys/create"
124 echo "API key for $key has been created: "; cat ${API_KEYFILE}
125 echo "generating API key $key done"; echo
129 # create the topics for this key
130 keytopics=${topics[$key]}
131 for topic in ${keytopics}; do
132 if [ "$topic" == "-" ]; then
135 if [ "$key" == "anonymous" ]; then
136 echo "creating anonymous topic $topic"
137 CMD="curl -H \"Content-Type:text/plain\" -X POST -d @/tmp/sample.txt http://${HOSTPORT}/events/${topic}"
139 echo "done creating anonymous topic $topic"; echo
141 echo "creating API key secured topic $topic for API key $key"
142 UEBAPIKEYSECRET=`cat ${API_KEYFILE} |jq -r ".secret"`
143 UEBAPIKEYKEY=`cat ${API_KEYFILE} |jq -r ".key"`
144 echo '{"topicName":"'${topic}'","topicDescription":"'$key' API Key secure topic","partitionCount":"1","replicationCount":"1","transactionEnabled":"true"}' > /tmp/topicname.txt
145 time=`date --iso-8601=seconds`
146 signature=$(echo -n "$time" | openssl sha1 -hmac $UEBAPIKEYSECRET -binary | openssl base64)
147 xAuth=$UEBAPIKEYKEY:$signature
149 CMD="curl -i -H \"Content-Type: application/json\" -H \"X-CambriaAuth: $xAuth\" -H \"X-CambriaDate: $xDate\" -X POST -d @/tmp/topicname.txt http://${HOSTPORT}/topics/create"
151 echo "done creating api key topic $topic"
159 echo "============ post loading state of topics ================="
160 CMD="curl http://${HOSTPORT}/topics"
162 for key in "${!topics[@]}"; do
163 keytopics=${topics[$key]}
164 echo "---------- key: ${key} "
165 for topic in ${keytopics}; do
166 if [ "$topic" == "-" ]; then
169 CMD="curl http://${HOSTPORT}/topics/${topic}"
173 echo "end of key: ${key} secured topics"
177 # adding publisher and subscriber ACL
178 for topic in "${!acl_consumers[@]}"; do
179 consumers=${acl_consumers[$topic]}
180 for consumer in ${consumers}; do
181 add_acl "consumers" "$topic" "$consumer"
185 for topic in "${!acl_producers[@]}"; do
186 producers=${acl_producers[$topic]}
187 for producer in ${producers}; do
188 add_acl "producers" "$topic" "$producer"