blob: 541b05fb3acf5903a0fdfa32c20448bf4823fedf (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
#include "helpers.h"
#include <ydb/public/sdk/cpp/client/iam/iam.h>
#include <ydb/public/sdk/cpp/client/resources/ydb_ca.h>
#include <ydb/public/sdk/cpp/client/impl/ydb_internal/common/parser.h>
#include <ydb/public/sdk/cpp/client/impl/ydb_internal/common/getenv.h>
#include <util/stream/file.h>
namespace NYdb {
TDriverConfig CreateFromEnvironment(const TStringType& connectionString) {
TDriverConfig driverConfig;
if (connectionString != "") {
auto connectionInfo = ParseConnectionString(connectionString);
driverConfig.SetEndpoint(connectionInfo.Endpoint);
driverConfig.SetDatabase(connectionInfo.Database);
if (connectionInfo.EnableSsl) {
TStringType rootCertsFile = GetStrFromEnv("YDB_SSL_ROOT_CERTIFICATES_FILE", "");
TStringType rootCerts = GetRootCertificate();
if (rootCertsFile != "") {
TFileInput in(rootCertsFile);
rootCerts += in.ReadAll();
}
driverConfig.UseSecureConnection(rootCerts);
}
}
TStringType saKeyFile = GetStrFromEnv("YDB_SERVICE_ACCOUNT_KEY_FILE_CREDENTIALS", "");
if (!saKeyFile.empty()) {
driverConfig.SetCredentialsProviderFactory(
CreateIamJwtFileCredentialsProviderFactory({.JwtFilename = saKeyFile}));
return driverConfig;
}
bool anonymousUsed = GetStrFromEnv("YDB_ANONYMOUS_CREDENTIALS", "0") == "1";
if (anonymousUsed) {
return driverConfig;
}
bool useMetadataCredentials = GetStrFromEnv("YDB_METADATA_CREDENTIALS", "0") == "1";
if (useMetadataCredentials){
auto factory = CreateIamCredentialsProviderFactory();
try {
factory->CreateProvider();
} catch (yexception& e) {
ythrow yexception() << "Unable to get token from metadata service: " << e.what();
}
driverConfig.SetCredentialsProviderFactory(factory);
return driverConfig;
}
TStringType accessToken = GetStrFromEnv("YDB_ACCESS_TOKEN_CREDENTIALS", "");
if (accessToken != ""){
driverConfig.SetAuthToken(accessToken);
return driverConfig;
}
ythrow yexception() << "Unable to create driver config from environment";
}
TDriverConfig CreateFromSaKeyFile(const TStringType& saKeyFile, const TStringType& connectionString) {
TDriverConfig driverConfig(connectionString);
driverConfig.SetCredentialsProviderFactory(
CreateIamJwtFileCredentialsProviderFactory({.JwtFilename = saKeyFile}));
return driverConfig;
}
} // namespace NYdb
|
