Raito Bezarius
c595477002
Change-Id: I791f3f3f49ecd5884c9e86b5d3b617fc139e031f Signed-off-by: Raito Bezarius <raito@lix.systems>
23 lines
824 B
Python
23 lines
824 B
Python
import subprocess
|
|
import json
|
|
from . import environment
|
|
|
|
|
|
def get_ephemeral_key(
|
|
env: environment.RelengEnvironment) -> environment.S3Credentials:
|
|
output = None
|
|
command = [
|
|
'garage-ephemeral-key', 'new', '--name', f'releng-{env.name}', '--read',
|
|
'--write', '--age-secs', '3600',
|
|
env.releases_bucket.removeprefix('s3://'),
|
|
env.cache_bucket.removeprefix('s3://'),
|
|
env.docs_bucket.removeprefix('s3://'),
|
|
]
|
|
if env.s3_ssh_host is not None:
|
|
command = ['ssh', f'{env.s3_ssh_user}@{env.s3_ssh_host}', *command]
|
|
output = subprocess.check_output(command)
|
|
d = json.loads(output.decode())
|
|
return environment.S3Credentials(name=d['name'],
|
|
id=d['id'],
|
|
secret_key=d['secret_key'])
|