org.kuali.common.deploy.channel.spring.DefaultSecureChannelConfig Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of kuali-deploy Show documentation

Project containing deployment logic for Kuali applications

The newest version!

package org.kuali.common.deploy.channel.spring;

import java.util.List;

import org.kuali.common.deploy.env.spring.DefaultDeployEnvironmentConfig;
import org.kuali.common.deploy.env.spring.DeployEnvironmentConfig;
import org.kuali.common.util.secure.channel.DefaultSecureChannel;
import org.kuali.common.util.secure.channel.SecureChannel;
import org.kuali.common.util.secure.channel.spring.SecureChannelConfig;
import org.kuali.common.util.spring.SpringUtils;
import org.kuali.common.util.spring.env.EnvironmentService;
import org.kuali.common.util.spring.service.SpringServiceConfig;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Import;
import org.springframework.util.Assert;

@Configuration
@Import({ DefaultDeployEnvironmentConfig.class, SpringServiceConfig.class })
public class DefaultSecureChannelConfig implements SecureChannelConfig {

	private static final String USERNAME_KEY = "channel.username";
	private static final String HOSTNAME_KEY = "channel.hostname";

	private static final String ROOT = "root";

	@Autowired
	DeployEnvironmentConfig envConfig;

	@Autowired
	EnvironmentService env;

	@Override
	@Bean
	public SecureChannel secureChannel() {

		// User to connect as
		String username = env.getString(USERNAME_KEY, ROOT);

		// Hostname to connect to
		String hostname = env.getString(HOSTNAME_KEY, envConfig.deployEnvironment().getDns().getHostname());

		// Turn off strict host key checking by default
		boolean strictHostKeyChecking = env.getBoolean("channel.strictHostKeyChecking", false);

		// Turn off use of ~/.ssh/config
		boolean useConfigFile = env.getBoolean("channel.useConfigFile", false);

		// Don't check file system locations for private keys
		boolean includeDefaultPrivateKeyLocations = env.getBoolean("channel.includeDefaultPrivateKeyLocations", false);

		// Require at least one private key string
		List privateKeyStrings = SpringUtils.getNoneSensitiveListFromCSV(env, "channel.privateKeyStrings");

		Assert.isTrue(privateKeyStrings.size() > 0, "no private key strings");

		// Setup the channel
		return new DefaultSecureChannel.Builder(username, hostname).strictHostKeyChecking(strictHostKeyChecking).useConfigFile(useConfigFile)
				.includeDefaultPrivateKeyLocations(includeDefaultPrivateKeyLocations).privateKeyStrings(privateKeyStrings).build();

	}

}