com.netflix.spinnaker.clouddriver.artifacts.gcs.GcsArtifactCredentials.java Source code

Introduction

Here is the source code for com.netflix.spinnaker.clouddriver.artifacts.gcs.GcsArtifactCredentials.java

Source

/*
 * Copyright 2017 Google, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 */

package com.netflix.spinnaker.clouddriver.artifacts.gcs;

import com.fasterxml.jackson.annotation.JsonIgnore;
import com.google.api.client.googleapis.auth.oauth2.GoogleCredential;
import com.google.api.client.googleapis.javanet.GoogleNetHttpTransport;
import com.google.api.client.http.HttpTransport;
import com.google.api.client.json.JsonFactory;
import com.google.api.client.json.jackson2.JacksonFactory;
import com.google.api.services.storage.Storage;
import com.google.api.services.storage.StorageScopes;
import com.netflix.spinnaker.clouddriver.artifacts.config.ArtifactCredentials;
import com.netflix.spinnaker.kork.artifacts.model.Artifact;
import lombok.Data;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang.StringUtils;

import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.security.GeneralSecurityException;
import java.util.Collections;

@Slf4j
@Data
public class GcsArtifactCredentials implements ArtifactCredentials {
    @JsonIgnore
    private final Storage storage;
    private final String name;

    public GcsArtifactCredentials(String applicationName, GcsArtifactAccount account)
            throws IOException, GeneralSecurityException {
        HttpTransport transport = GoogleNetHttpTransport.newTrustedTransport();
        JsonFactory jsonFactory = JacksonFactory.getDefaultInstance();
        String credentialsPath = account.getJsonPath();

        GoogleCredential credential;

        if (!StringUtils.isEmpty(credentialsPath)) {
            FileInputStream stream = new FileInputStream(credentialsPath);
            credential = GoogleCredential.fromStream(stream, transport, jsonFactory)
                    .createScoped(Collections.singleton(StorageScopes.DEVSTORAGE_READ_ONLY));

            log.info("Loaded credentials from {}", credentialsPath);
        } else {
            log.info(
                    "artifacts.gcs.enabled without artifacts.gcs.[].jsonPath. Using default application credentials.");

            credential = GoogleCredential.getApplicationDefault();
        }

        name = account.getName();
        storage = new Storage.Builder(transport, jsonFactory, credential).setApplicationName(applicationName)
                .build();
    }

    public InputStream download(Artifact artifact) throws IOException {
        String reference = artifact.getReference();
        if (reference.startsWith("gs://")) {
            reference = reference.substring("gs://".length());
        }

        int slash = reference.indexOf("/");
        if (slash <= 0) {
            throw new IllegalArgumentException(
                    "GCS references must be of the format gs://<bucket>/<file-path>, got: " + artifact);
        }

        String bucketName = reference.substring(0, slash);
        String path = reference.substring(slash + 1);
        Storage.Objects.Get get = storage.objects().get(bucketName, path);
        return get.executeMediaAsInputStream();
    }

    @Override
    public boolean handlesType(String type) {
        return type.equals("gcs/object");
    }
}