TLS sdc-be-init: truststore & keystore handling
[sdc.git] / catalog-be / sdc-backend-init / chef-repo / cookbooks / sdc-catalog-be-setup / recipes / 1_create_consumer_and_user.rb
1 require 'base64'
2 if node['disableHttp']
3   protocol = "https"
4   https_flag = "--https"
5   be_port = node['BE']['https_port']
6   if node['BE-init']['tls_cert'] && node['BE-init']['tls_key']
7     tls_key = "--tls_key " + node['BE-init']['tls_key']
8     tls_cert = "--tls_cert " + node['BE-init']['tls_cert']
9     if node['BE-init']['tls_password']
10       tls_key_pw = "--tls_key_pw " + node['BE-init']['tls_password']
11     end
12   end
13   if node['BE-init']['ca_cert']
14     ca_cert =  "--ca_cert " + node['BE-init']['ca_cert']
15   end
16 else
17   protocol = "http"
18   https_flag = ""
19   be_port = node['BE']['http_port']
20 end
21
22 if node['BE']['user_conf']
23   user_conf_dir = "--conf " + node['BE']['user_conf']
24 else
25   # set default user configuration file
26   user_conf_dir = ""
27 end
28
29 if node['basic_auth']
30   basic_auth_enabled = node['basic_auth']['enabled']
31   basic_auth_user = node['basic_auth']['user_name']
32   basic_auth_pass = node['basic_auth']['user_pass']
33   if basic_auth_enabled
34     basic_auth_config = "--header " + Base64.strict_encode64(basic_auth_user + ":" + basic_auth_pass)
35   else
36     # set default user configuration file
37     basic_auth_config = ""
38   end
39 end
40
41 execute "executing-create_users" do
42   command "sdcuserinit -i #{node['Nodes']['BE']} -p #{be_port} #{basic_auth_config} #{user_conf_dir} #{https_flag} #{tls_cert} #{tls_key} #{tls_key_pw} #{ca_cert}"
43   action :run
44 end
45 execute "executing-create_consumers" do
46   command "sdcconsumerinit -i #{node['Nodes']['BE']} -p #{be_port} #{basic_auth_config} #{https_flag} #{tls_cert} #{tls_key} #{tls_key_pw} #{ca_cert}"
47   action :run
48 end