mirror of https://github.com/hashicorp/terraform
backend/azurerm: Support for authenticating using the Azure CLI (#19465)
* Upgrading to 2.0.0 of github.com/hashicorp/go-azure-helpers * Support for authenticating using Azure CLI * backend/azurerm: support for authenticating using the Azure CLIpull/19605/head
Tom Harvey
7 years ago
committed by
GitHub
parent
a475b766de
commit
383bc98f5c
@ -1,8 +1,13 @@
|
||||
language: go
|
||||
|
||||
script:
|
||||
- go vet ./...
|
||||
- go test -v ./...
|
||||
|
||||
go:
|
||||
- 1.3
|
||||
- 1.4
|
||||
- 1.5
|
||||
- 1.6
|
||||
- 1.7
|
||||
- tip
|
||||
|
||||
146
vendor/github.com/hashicorp/go-azure-helpers/authentication/auth_method_azure_cli_token.go
generated
vendored
146
vendor/github.com/hashicorp/go-azure-helpers/authentication/auth_method_azure_cli_token.go
generated
vendored
@ -0,0 +1,146 @@
|
||||
package authentication
|
||||
|
||||
import (
|
||||
"bytes"
|
||||
"encoding/json"
|
||||
"fmt"
|
||||
"os/exec"
|
||||
"strings"
|
||||
|
||||
"github.com/Azure/go-autorest/autorest"
|
||||
"github.com/Azure/go-autorest/autorest/adal"
|
||||
"github.com/Azure/go-autorest/autorest/azure/cli"
|
||||
"github.com/hashicorp/go-multierror"
|
||||
)
|
||||
|
||||
type azureCliTokenAuth struct {
|
||||
profile *azureCLIProfile
|
||||
}
|
||||
|
||||
func (a azureCliTokenAuth) build(b Builder) (authMethod, error) {
|
||||
auth := azureCliTokenAuth{
|
||||
profile: &azureCLIProfile{
|
||||
clientId: b.ClientID,
|
||||
environment: b.Environment,
|
||||
subscriptionId: b.SubscriptionID,
|
||||
tenantId: b.TenantID,
|
||||
},
|
||||
}
|
||||
profilePath, err := cli.ProfilePath()
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("Error loading the Profile Path from the Azure CLI: %+v", err)
|
||||
}
|
||||
|
||||
profile, err := cli.LoadProfile(profilePath)
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("Azure CLI Authorization Profile was not found. Please ensure the Azure CLI is installed and then log-in with `az login`.")
|
||||
}
|
||||
|
||||
auth.profile.profile = profile
|
||||
|
||||
err = auth.profile.populateFields()
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
err = auth.profile.populateClientId()
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("Error populating Client ID from the Azure CLI: %+v", err)
|
||||
}
|
||||
|
||||
return auth, nil
|
||||
}
|
||||
|
||||
func (a azureCliTokenAuth) isApplicable(b Builder) bool {
|
||||
return b.SupportsAzureCliToken
|
||||
}
|
||||
|
||||
func (a azureCliTokenAuth) getAuthorizationToken(oauthConfig *adal.OAuthConfig, endpoint string) (*autorest.BearerAuthorizer, error) {
|
||||
// the Azure CLI appears to cache these, so to maintain compatibility with the interface this method is intentionally not on the pointer
|
||||
token, err := obtainAuthorizationToken(endpoint, a.profile.subscriptionId)
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("Error obtaining Authorization Token from the Azure CLI: %s", err)
|
||||
}
|
||||
|
||||
adalToken, err := token.ToADALToken()
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("Error converting Authorization Token to an ADAL Token: %s", err)
|
||||
}
|
||||
|
||||
spt, err := adal.NewServicePrincipalTokenFromManualToken(*oauthConfig, a.profile.clientId, endpoint, adalToken)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
auth := autorest.NewBearerAuthorizer(spt)
|
||||
return auth, nil
|
||||
}
|
||||
|
||||
func (a azureCliTokenAuth) name() string {
|
||||
return "Obtaining a token from the Azure CLI"
|
||||
}
|
||||
|
||||
func (a azureCliTokenAuth) populateConfig(c *Config) error {
|
||||
c.ClientID = a.profile.clientId
|
||||
c.Environment = a.profile.environment
|
||||
c.SubscriptionID = a.profile.subscriptionId
|
||||
c.TenantID = a.profile.tenantId
|
||||
return nil
|
||||
}
|
||||
|
||||
func (a azureCliTokenAuth) validate() error {
|
||||
var err *multierror.Error
|
||||
|
||||
errorMessageFmt := "A %s was not found in your Azure CLI Credentials.\n\nPlease login to the Azure CLI again via `az login`"
|
||||
|
||||
if a.profile == nil {
|
||||
return fmt.Errorf("Azure CLI Profile is nil - this is an internal error and should be reported.")
|
||||
}
|
||||
|
||||
if a.profile.clientId == "" {
|
||||
err = multierror.Append(err, fmt.Errorf(errorMessageFmt, "Client ID"))
|
||||
}
|
||||
|
||||
if a.profile.subscriptionId == "" {
|
||||
err = multierror.Append(err, fmt.Errorf(errorMessageFmt, "Subscription ID"))
|
||||
}
|
||||
|
||||
if a.profile.tenantId == "" {
|
||||
err = multierror.Append(err, fmt.Errorf(errorMessageFmt, "Tenant ID"))
|
||||
}
|
||||
|
||||
return err.ErrorOrNil()
|
||||
}
|
||||
|
||||
func obtainAuthorizationToken(endpoint string, subscriptionId string) (*cli.Token, error) {
|
||||
var stderr bytes.Buffer
|
||||
var stdout bytes.Buffer
|
||||
|
||||
cmd := exec.Command("az", "account", "get-access-token", "--resource", endpoint, "--subscription", subscriptionId, "-o=json")
|
||||
|
||||
cmd.Stderr = &stderr
|
||||
cmd.Stdout = &stdout
|
||||
|
||||
if err := cmd.Start(); err != nil {
|
||||
return nil, fmt.Errorf("Error launching Azure CLI: %+v", err)
|
||||
}
|
||||
|
||||
if err := cmd.Wait(); err != nil {
|
||||
return nil, fmt.Errorf("Error waiting for the Azure CLI: %+v", err)
|
||||
}
|
||||
|
||||
stdOutStr := stdout.String()
|
||||
stdErrStr := stderr.String()
|
||||
|
||||
if stdErrStr != "" {
|
||||
return nil, fmt.Errorf("Error retrieving access token from Azure CLI: %s", strings.TrimSpace(stdErrStr))
|
||||
}
|
||||
|
||||
var token *cli.Token
|
||||
err := json.Unmarshal([]byte(stdOutStr), &token)
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("Error unmarshaling Access Token from the Azure CLI: %s", err)
|
||||
}
|
||||
|
||||
return token, nil
|
||||
}
|
||||
7
vendor/github.com/hashicorp/go-azure-helpers/authentication/azure_cli_profile.go
generated
vendored
7
vendor/github.com/hashicorp/go-azure-helpers/authentication/azure_cli_profile.go
generated
vendored
@ -0,0 +1 @@
|
||||
module github.com/mitchellh/go-homedir
|
||||
Loading…
Reference in new issue