mirror of
https://github.com/letic/terraform-provider-google.git
synced 2024-09-07 09:36:44 +00:00
![Michael Parker](/assets/img/avatar_default.png)
* Create google_kms_secret datasource * Create google_kms_secret datasource documentation * Remove duplicated code * Create acceptance test * Fix indentation * Add documentation to sidebar * Update Cloud SDK link in docs * Oxford comma * Rename variable to make it clear which resource is under test * Update test to use utils from provider_test
68 lines
1.5 KiB
Go
68 lines
1.5 KiB
Go
package google
|
|
|
|
import (
|
|
"google.golang.org/api/cloudkms/v1"
|
|
|
|
"encoding/base64"
|
|
"fmt"
|
|
"github.com/hashicorp/terraform/helper/schema"
|
|
"log"
|
|
"time"
|
|
)
|
|
|
|
func dataSourceGoogleKmsSecret() *schema.Resource {
|
|
return &schema.Resource{
|
|
Read: dataSourceGoogleKmsSecretRead,
|
|
Schema: map[string]*schema.Schema{
|
|
"crypto_key": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Required: true,
|
|
},
|
|
"ciphertext": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Required: true,
|
|
},
|
|
"plaintext": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Computed: true,
|
|
Sensitive: true,
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func dataSourceGoogleKmsSecretRead(d *schema.ResourceData, meta interface{}) error {
|
|
config := meta.(*Config)
|
|
|
|
cryptoKeyId, err := parseKmsCryptoKeyId(d.Get("crypto_key").(string), config)
|
|
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
ciphertext := d.Get("ciphertext").(string)
|
|
|
|
kmsDecryptRequest := &cloudkms.DecryptRequest{
|
|
Ciphertext: ciphertext,
|
|
}
|
|
|
|
decryptResponse, err := config.clientKms.Projects.Locations.KeyRings.CryptoKeys.Decrypt(cryptoKeyId.cryptoKeyId(), kmsDecryptRequest).Do()
|
|
|
|
if err != nil {
|
|
return fmt.Errorf("Error decrypting ciphertext: %s", err)
|
|
}
|
|
|
|
plaintext, err := base64.StdEncoding.DecodeString(decryptResponse.Plaintext)
|
|
|
|
if err != nil {
|
|
return fmt.Errorf("Error decoding base64 response: %s", err)
|
|
}
|
|
|
|
log.Printf("[INFO] Successfully decrypted ciphertext: %s", ciphertext)
|
|
|
|
d.Set("plaintext", string(plaintext[:]))
|
|
d.SetId(time.Now().UTC().String())
|
|
|
|
return nil
|
|
}
|