2017-12-19 21:24:35 +00:00
|
|
|
package google
|
|
|
|
|
|
|
|
import (
|
|
|
|
"google.golang.org/api/cloudkms/v1"
|
|
|
|
|
|
|
|
"encoding/base64"
|
|
|
|
"fmt"
|
|
|
|
"github.com/hashicorp/terraform/helper/schema"
|
|
|
|
"log"
|
|
|
|
"time"
|
|
|
|
)
|
|
|
|
|
|
|
|
func dataSourceGoogleKmsSecret() *schema.Resource {
|
|
|
|
return &schema.Resource{
|
|
|
|
Read: dataSourceGoogleKmsSecretRead,
|
|
|
|
Schema: map[string]*schema.Schema{
|
2018-12-14 20:51:11 +00:00
|
|
|
"crypto_key": {
|
2017-12-19 21:24:35 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Required: true,
|
|
|
|
},
|
2018-12-14 20:51:11 +00:00
|
|
|
"ciphertext": {
|
2017-12-19 21:24:35 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Required: true,
|
|
|
|
},
|
2018-12-14 20:51:11 +00:00
|
|
|
"plaintext": {
|
2017-12-19 21:24:35 +00:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Computed: true,
|
|
|
|
Sensitive: true,
|
|
|
|
},
|
|
|
|
},
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func dataSourceGoogleKmsSecretRead(d *schema.ResourceData, meta interface{}) error {
|
|
|
|
config := meta.(*Config)
|
|
|
|
|
|
|
|
cryptoKeyId, err := parseKmsCryptoKeyId(d.Get("crypto_key").(string), config)
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
ciphertext := d.Get("ciphertext").(string)
|
|
|
|
|
|
|
|
kmsDecryptRequest := &cloudkms.DecryptRequest{
|
|
|
|
Ciphertext: ciphertext,
|
|
|
|
}
|
|
|
|
|
|
|
|
decryptResponse, err := config.clientKms.Projects.Locations.KeyRings.CryptoKeys.Decrypt(cryptoKeyId.cryptoKeyId(), kmsDecryptRequest).Do()
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("Error decrypting ciphertext: %s", err)
|
|
|
|
}
|
|
|
|
|
|
|
|
plaintext, err := base64.StdEncoding.DecodeString(decryptResponse.Plaintext)
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("Error decoding base64 response: %s", err)
|
|
|
|
}
|
|
|
|
|
|
|
|
log.Printf("[INFO] Successfully decrypted ciphertext: %s", ciphertext)
|
|
|
|
|
|
|
|
d.Set("plaintext", string(plaintext[:]))
|
|
|
|
d.SetId(time.Now().UTC().String())
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|