mirror of
https://github.com/goharbor/harbor.git
synced 2024-12-19 07:07:42 +01:00
33 lines
1.1 KiB
Python
33 lines
1.1 KiB
Python
import os
|
|
import sys
|
|
import click
|
|
import pathlib
|
|
from subprocess import check_call, PIPE, STDOUT
|
|
|
|
from utils.cert import openssl_installed
|
|
from utils.misc import get_realpath
|
|
|
|
gen_tls_script = pathlib.Path(__file__).parent.parent.joinpath('scripts/gencert.sh').absolute()
|
|
|
|
@click.command()
|
|
@click.option('-p', '--path', required=True, type=str,help='the path to store generated cert files')
|
|
@click.option('-d', '--days', default='365', type=str, help='the expired time for cert')
|
|
def gencert(path, days):
|
|
"""
|
|
gencert command will generate cert files for internal TLS
|
|
"""
|
|
path = get_realpath(path)
|
|
click.echo('Check openssl ...')
|
|
if not openssl_installed():
|
|
raise(Exception('openssl not installed'))
|
|
|
|
click.echo("start generate internal tls certs")
|
|
if not os.path.exists(path):
|
|
click.echo('path {} not exist, create it...'.format(path))
|
|
os.makedirs(path, exist_ok=True)
|
|
|
|
shell_stat = check_call([gen_tls_script, days], stdout=PIPE, stderr=STDOUT, cwd=path)
|
|
if shell_stat != 0:
|
|
click.echo('Can not generate internal tls certs')
|
|
sys.exit(-1)
|