fluke/devops-service/app/api2/routes/key.rb

require "json"

module Devops
  module API2_0
    module Routes
      module KeyRoutes

        def self.registered(app)
          # Get list of available ssh keys
          #
          # * *Request*
          #   - method : GET
          #   - headers :
          #     - Accept: application/json
          #
          # * *Returns* : array of strings
          #   [
          #     {
          #       "scope": "system", -> 'system' - key was added by server, 'user' - key was added by user
          #       "id": "devops"
          #     }
          #   ]
          app.get_with_headers "/keys", :headers => [:accept] do
            check_privileges("key", "r")
            json Devops::API2_0::Handler::Key.new.keys
          end

          # Create ssh key on devops server
          #
          # * *Request*
          #   - method : POST
          #   - headers :
          #     - Accept: application/json
          #     - Content-Type: application/json
          #   - body :
          #     {
          #       "file_name": "key file name",
          #       "key_name": "key name",
          #       "content": "key content"
          #     }
          #
          # * *Returns* :
          #   201 - Created
          app.post_with_headers "/key", :headers => [:accept, :content_type] do
            check_privileges("key", "w")
            key = create_object_from_json_body
            fname = check_filename(key["file_name"], "Parameter 'file_name' must be a not empty string")
            kname = check_string(key["key_name"], "Parameter 'key_name' should be a not empty string")
            content = check_string(key["content"], "Parameter 'content' should be a not empty string")
            file_name = File.join(settings.keys_dir, fname)
            halt(400, "File '#{fname}' already exist") if File.exists?(file_name)
            Devops::API2_0::Handler::Key.new.create(key, file_name)
            create_response("Created", nil, 201)
          end

          # Delete ssh key from devops server
          #
          # * *Request*
          #   - method : DELETE
          #   - headers :
          #     - Accept: application/json
          #
          # * *Returns* :
          #   200 - Deleted
          app.delete_with_headers "/key/:key", :headers => [:accept] do
            check_privileges("key", "w")
            servers = settings.mongo.servers_by_key params[:key]
            unless servers.empty?
              s_str = servers.map{|s| s.id}.join(", ")
              raise DependencyError.new "Deleting is forbidden: Key is used in servers: #{s_str}"
            end

            k = settings.mongo.key params[:key]
            begin
              FileUtils.rm(k.path)
            rescue
              logger.error "Missing key file for #{params[:key]} - #{k.filename}"
            end
            r = settings.mongo.key_delete params[:key]

            r = Devops::API2_0::Handler::Key.new.delete params[:key]
            return [500, r["err"].inspect] unless r["err"].nil?
            create_response("Key '#{params[:key]}' removed")

          end

          puts "Key routes initialized"
        end

      end
    end
  end
end