Support uploading config files. #14

telackey · 2024-08-24T05:03:49Z

telackey commented

2024-08-24 05:03:49 +00:00

This adds a new /upload/config endpoint to the API for uploading encrypted configuration files for later use by the deployer.

The payload takes the form:

authorized:
  - accounta
  - accountb
config:
  env:
    FOO: bar
    BAR: baz

The request is the encrypted using the deployer's public key (discoverable from its WebappDeployer record). This is handled automatically by laconic-so but can also be handled manually using standard CLI tools like gpg and curl.

For example:

# Get the key
$ laconic -c ~/.laconic/testnet-a-cercio.yml registry name resolve lrn://laconic/deployers/webapp-deployer-api.dev.vaasl.io | jq -r '.[0].attributes.publicKey' | base64 -d > webapp-deployer-api.dev.vaasl.io.pgp.pub

# Import it
$ gpg --import webapp-deployer-api.dev.vaasl.io.pgp.pub

# Encrypt your config file.
$ gpg --yes --encrypt --recipient webapp-deployer-api.dev.vaasl.io --trust-model always config.yaml

# Post it
$ curl -s -X POST -d '@config.yaml.gpg' https://webapp-deployer-api.dev.vaasl.io/upload/config | jq
{
  "id": "B56C65AB96B741B7B219520A3ABFCD10"
}

This adds a new `/upload/config` endpoint to the API for uploading encrypted configuration files for later use by the deployer. The payload takes the form: ``` authorized: - accounta - accountb config: env: FOO: bar BAR: baz ``` The request is the encrypted using the deployer's public key (discoverable from its `WebappDeployer` record). This is handled automatically by `laconic-so` but can also be handled manually using standard CLI tools like `gpg` and `curl`. For example: ``` # Get the key $ laconic -c ~/.laconic/testnet-a-cercio.yml registry name resolve lrn://laconic/deployers/webapp-deployer-api.dev.vaasl.io | jq -r '.[0].attributes.publicKey' | base64 -d > webapp-deployer-api.dev.vaasl.io.pgp.pub # Import it $ gpg --import webapp-deployer-api.dev.vaasl.io.pgp.pub # Encrypt your config file. $ gpg --yes --encrypt --recipient webapp-deployer-api.dev.vaasl.io --trust-model always config.yaml # Post it $ curl -s -X POST -d '@config.yaml.gpg' https://webapp-deployer-api.dev.vaasl.io/upload/config | jq { "id": "B56C65AB96B741B7B219520A3ABFCD10" } ```

telackey added 1 commit 2024-08-24 05:03:50 +00:00

WIP: Config upload dcab6e0db7

telackey added 1 commit 2024-08-24 05:04:27 +00:00

WIP: Config upload 2cce37ef1f

telackey added 1 commit 2024-08-26 18:19:26 +00:00

Minor refactoring. e578605777

telackey added 1 commit 2024-08-26 22:02:39 +00:00

run options e74724c998

telackey added 1 commit 2024-08-26 22:13:02 +00:00

Minor tweaks 6bafd2e5af

telackey changed title from ~~WIP: Config upload~~ to Support uploading config files.

2024-08-27 03:06:54 +00:00