add auto init/unseal for vault

pkg/secrets_storage/commands.go

@@ -0,0 +1,98 @@
+package secrets_storage
+
+import (
+	"fmt"
+	"kube-forge/pkg/config"
+	"kube-forge/pkg/kubernetes_client"
+	"kube-forge/pkg/templates"
+	"regexp"
+	"strings"
+)
+
+func InitVault() {
+	_, err := kubernetes_client.GetPodByName("vault-0", "secrets-storage")
+	if err != nil {
+		fmt.Println(err.Error())
+		return
+	}
+	err = commandToInitVault()
+	if err != nil {
+		fmt.Println(err.Error())
+		return
+	}
+	fmt.Println("Vault initialized")
+	templates.ApplyVaultInitKeysTemplate()
+}
+
+func UnsealVault() {
+	_, err := kubernetes_client.GetPodByName("vault-0", "secrets-storage")
+	if err != nil {
+		fmt.Println(err.Error())
+		return
+	}
+	commandToUnsealVault()
+}
+
+// func getRunningVault(ctx context.Context, podName string, podNamespace string, responseChan chan<- error) {
+// 	time.Sleep(1 * time.Minute)
+// 	_, err := kubernetes_client.GetPodByName(ctx, podName, podNamespace)
+// 	if err != nil {
+// 		responseChan <- err
+// 	}
+
+// 	commandToUnsealVault()
+// 	responseChan <- nil
+// 	close(responseChan)
+// }
+
+func commandToInitVault() error {
+	config := config.GetConfig()
+
+	command := fmt.Sprintf(
+		"vault operator init -key-shares=%d -key-threshold=%d",
+		config.Modules.SecretsStorage.KeyShares,
+		config.Modules.SecretsStorage.KeyThreshold,
+	)
+	output, err := kubernetes_client.ExecuteCommandInPodContainer(
+		command, "secrets-storage", "vault-0", "vault",
+	)
+	if err != nil && strings.Contains(output, "Vault is already initialized") {
+		return VaultAlreadyInitialised
+	}
+
+	unsealKeys, rootToken := parseVaultInitKeys(output)
+	config.Modules.SecretsStorage.UnsealKeys = unsealKeys
+	config.Modules.SecretsStorage.RootToken = rootToken
+	return nil
+}
+
+func parseVaultInitKeys(input string) ([]string, string) {
+	unsealKeyPattern := regexp.MustCompile(`Unseal Key \d+: (\S+)`)
+	rootTokenPattern := regexp.MustCompile(`Initial Root Token: (\S+)`)
+
+	unsealKeysMatches := unsealKeyPattern.FindAllStringSubmatch(input, -1)
+	var unsealKeys []string
+	for _, match := range unsealKeysMatches {
+		unsealKeys = append(unsealKeys, match[1])
+	}
+
+	rootTokenMatches := rootTokenPattern.FindStringSubmatch(input)
+	rootToken := rootTokenMatches[1]
+
+	return unsealKeys, rootToken
+}
+
+func commandToUnsealVault() {
+	config := config.GetConfig()
+
+	for _, unsealKey := range config.Modules.SecretsStorage.UnsealKeys {
+		command := fmt.Sprintf(
+			"vault operator unseal %s",
+			unsealKey,
+		)
+		kubernetes_client.ExecuteCommandInPodContainer(
+			command, "secrets-storage", "vault-0", "vault",
+		)
+	}
+	fmt.Println("Vault unsealed")
+}