116 lines
3.5 KiB
Ruby
116 lines
3.5 KiB
Ruby
require 'google/apis/container_v1'
|
|
require 'google/apis/cloudbilling_v1'
|
|
require 'google/apis/cloudresourcemanager_v1'
|
|
|
|
module GoogleApi
|
|
module CloudPlatform
|
|
class Client < GoogleApi::Auth
|
|
SCOPE = 'https://www.googleapis.com/auth/cloud-platform'.freeze
|
|
LEAST_TOKEN_LIFE_TIME = 10.minutes
|
|
|
|
class << self
|
|
def session_key_for_token
|
|
:cloud_platform_access_token
|
|
end
|
|
|
|
def session_key_for_expires_at
|
|
:cloud_platform_expires_at
|
|
end
|
|
|
|
def new_session_key_for_redirect_uri
|
|
SecureRandom.hex.tap do |state|
|
|
yield session_key_for_redirect_uri(state)
|
|
end
|
|
end
|
|
|
|
def session_key_for_redirect_uri(state)
|
|
"cloud_platform_second_redirect_uri_#{state}"
|
|
end
|
|
end
|
|
|
|
def scope
|
|
SCOPE
|
|
end
|
|
|
|
def validate_token(expires_at)
|
|
return false unless access_token
|
|
return false unless expires_at
|
|
|
|
# Making sure that the token will have been still alive during the cluster creation.
|
|
return false if token_life_time(expires_at) < LEAST_TOKEN_LIFE_TIME
|
|
|
|
true
|
|
end
|
|
|
|
def projects_list
|
|
service = Google::Apis::CloudresourcemanagerV1::CloudResourceManagerService.new
|
|
service.authorization = access_token
|
|
|
|
service.fetch_all(items: :projects) do |token|
|
|
service.list_projects(page_token: token, options: user_agent_header)
|
|
end
|
|
end
|
|
|
|
def projects_get_billing_info(project_id)
|
|
service = Google::Apis::CloudbillingV1::CloudbillingService.new
|
|
service.authorization = access_token
|
|
|
|
service.get_project_billing_info("projects/#{project_id}", options: user_agent_header)
|
|
end
|
|
|
|
def projects_zones_clusters_get(project_id, zone, cluster_id)
|
|
service = Google::Apis::ContainerV1::ContainerService.new
|
|
service.authorization = access_token
|
|
|
|
service.get_zone_cluster(project_id, zone, cluster_id, options: user_agent_header)
|
|
end
|
|
|
|
def projects_zones_clusters_create(project_id, zone, cluster_name, cluster_size, machine_type:)
|
|
service = Google::Apis::ContainerV1::ContainerService.new
|
|
service.authorization = access_token
|
|
|
|
request_body = Google::Apis::ContainerV1::CreateClusterRequest.new(
|
|
{
|
|
"cluster": {
|
|
"name": cluster_name,
|
|
"initial_node_count": cluster_size,
|
|
"node_config": {
|
|
"machine_type": machine_type
|
|
},
|
|
"legacy_abac": {
|
|
"enabled": true
|
|
}
|
|
}
|
|
}
|
|
)
|
|
|
|
service.create_cluster(project_id, zone, request_body, options: user_agent_header)
|
|
end
|
|
|
|
def projects_zones_operations(project_id, zone, operation_id)
|
|
service = Google::Apis::ContainerV1::ContainerService.new
|
|
service.authorization = access_token
|
|
|
|
service.get_zone_operation(project_id, zone, operation_id, options: user_agent_header)
|
|
end
|
|
|
|
def parse_operation_id(self_link)
|
|
m = self_link.match(%r{projects/.*/zones/.*/operations/(.*)})
|
|
m[1] if m
|
|
end
|
|
|
|
private
|
|
|
|
def token_life_time(expires_at)
|
|
DateTime.strptime(expires_at, '%s').to_time.utc - Time.now.utc
|
|
end
|
|
|
|
def user_agent_header
|
|
Google::Apis::RequestOptions.new.tap do |options|
|
|
options.header = { 'User-Agent': "GitLab/#{Gitlab::VERSION.match('(\d+\.\d+)').captures.first} (GPN:GitLab;)" }
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|