def setUpClass(cls):
cls.rc = redstone.service("ResourceController")
cls.instance_id, cls.crn = cls.rc.create_instance(
name="redstone-keyprotect-integration-tests",
plan_id=cls.rc.KEYPROTECT_PLAN_ID,
region="us-south",
)
cls.kp = redstone.service(
"KeyProtect", region="us-south", service_instance_id=cls.instance_id
)
def cleanup_instances(self):
rc = redstone.service("ResourceController")
to_delete = filter(
lambda x: x.get("name").startswith(TEST_INSTANCE_NAME_PREFIX),
rc.list_instances())
for inst in to_delete:
rc.delete_instance(inst.get("id"))
def test_delete_with_id(self):
rc = redstone.service("ResourceController")
inst_id, crn = rc.create_instance(name=TEST_INSTANCE_NAME_PREFIX,
plan_id=rc.KEYPROTECT_PLAN_ID,
region="us-south")
rc.delete_instance(inst_id)
self.assertIsNone(rc.get_instance(crn))
def _main():
p = argparse.ArgumentParser()
p.add_argument("--instance-id", "-i")
subp = p.add_subparsers(dest="action")
ilp = subp.add_parser("list-instances")
lp = subp.add_parser("list")
cp = subp.add_parser("create")
cp.add_argument("name")
cp.add_argument("--data")
cp.add_argument("--exportable", action="store_true")
gp = subp.add_parser("get")
gp.add_argument("key_id")
dp = subp.add_parser("delete")
dp.add_argument("key_id", nargs="+")
wp = subp.add_parser("wrap")
wp.add_argument("key_id")
wp.add_argument("--data")
wp.add_argument("--aad")
uwp = subp.add_parser("unwrap")
uwp.add_argument("key_id")
uwp.add_argument("data")
uwp.add_argument("--aad")
uwp.add_argument("--override-handle")
rotate_p = subp.add_parser("rotate")
rotate_p.add_argument("key_id")
rotate_p.add_argument("--data")
args = p.parse_args()
if not args.action:
p.print_usage()
if args.action == "list-instances":
rc = redstone.service("ResourceController")
instances = rc.list_instances()
kms_instances = list(
filter(
lambda x: x["type"] == "service_instance" and x.get("sub_type")
== "kms",
instances,
))
render_list(
kms_instances,
fields=["guid", "name", "region_id"],
titles=["ID", "NAME", "REGION"],
)
return
instance_id = args.instance_id or os.environ.get("KP_INSTANCE_ID")
if not instance_id:
print("No instance ID given, set KP_INSTANCE_ID or pass --instance-id")
return 1
instance_data = lookup_instance(instance_id)
if not instance_data:
print("No instace found for ID: %s" % instance_id)
return 1
kp = redstone.service("KeyProtect",
service_instance_id=instance_id,
region=instance_data["region_id"])
if args.action == "list":
fields = ["id", "name", "extractable"]
render_list(kp.keys(),
fields=fields,
titles=map(lambda x: x.upper(), fields))
elif args.action == "create":
key_data = None
if args.data:
key_data = args.data
key = kp.create(args.name,
raw_payload=key_data,
root=not args.exportable)
pp_json(key)
elif args.action == "get":
key = kp.get(args.key_id)
pp_json(key)
elif args.action == "delete":
for key_id in args.key_id:
resp = kp.delete(key_id)
print("Deleted key %s" % key_id)
elif args.action == "wrap":
plaintext = None
if args.data:
plaintext = args.data.encode()
resp = kp.wrap(args.key_id, plaintext, args.aad)
pp_json(resp)
elif args.action == "unwrap":
if args.override_handle:
unpacked = json.loads(
base64.b64decode(args.data.encode()).decode())
unpacked["handle"] = args.override_handle
data = base64.b64encode(json.dumps(unpacked).encode()).decode()
else:
data = args.data
res = kp.unwrap(args.key_id, data, args.aad)
print(base64.b64encode(res).decode())
elif args.action == "rotate":
new_key_data = None
if args.data:
new_key_data = args.data.encode()
res = kp.rotate(args.key_id, new_key_data)
print(res)
def lookup_instance(instance_id):
rc = redstone.service("ResourceController")
instance = rc.get_instance(instance_id)
return instance
def Client(*args, **kwargs): # noqa: N802
cl = redstone.service("KeyProtect", *args, **kwargs)
return cl
