69 lines
2.4 KiB
Python
Executable File
69 lines
2.4 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
import base64
|
|
import os
|
|
from kubernetes import client, config
|
|
from kubernetes.client.api_client import ApiClient
|
|
from subprocess import Popen, PIPE
|
|
from flask import Flask, request, send_file
|
|
from urllib.parse import urlparse
|
|
|
|
TOKEN = os.environ["TOKEN"]
|
|
app = Flask(__name__)
|
|
|
|
if os.getenv("KUBECONFIG"):
|
|
config.load_kube_config()
|
|
else:
|
|
config.load_incluster_config()
|
|
|
|
|
|
def generate_targets():
|
|
with ApiClient() as api:
|
|
v1 = client.CoreV1Api(api)
|
|
api_instance = client.CustomObjectsApi(api)
|
|
for i in v1.list_namespace().items:
|
|
# Handle MongoDB community operator
|
|
targets = api_instance.list_namespaced_custom_object(
|
|
"mongodbcommunity.mongodb.com",
|
|
"v1",
|
|
i.metadata.name,
|
|
"mongodbcommunity")
|
|
for target in targets["items"]:
|
|
for user in target["spec"]["users"]:
|
|
for role in user["roles"]:
|
|
yield i.metadata.name, "mongodbcommunity", \
|
|
user["name"], role["db"]
|
|
|
|
|
|
@app.route("/cronjob.sh")
|
|
def generate_script():
|
|
if request.headers.get("Authorization") != TOKEN:
|
|
raise
|
|
base = urlparse(request.base_url)._replace(path="", params="", query="", fragment="").geturl()
|
|
|
|
def generate():
|
|
for z in generate_targets():
|
|
path = "/stream/%s/%s/%s/%s\n" % z
|
|
yield "wget --content-disposition --header \"Authorization: %s\" %s%s" % (TOKEN, base, path)
|
|
return app.response_class(generate(), mimetype="text/plain")
|
|
|
|
|
|
@app.route("/stream/<namespace>/mongodbcommunity/<user>/<database>")
|
|
def stream(namespace, user, database):
|
|
if request.headers.get("Authorization") != TOKEN:
|
|
raise
|
|
with ApiClient() as api:
|
|
v1 = client.CoreV1Api(api)
|
|
secret_name = "mongodb-%s-%s" % (database, user)
|
|
secret = v1.read_namespaced_secret(secret_name, namespace)
|
|
uri = base64.b64decode(secret.data["connectionString.standard"]).decode("ascii")
|
|
cmd = "/usr/bin/mongodump", "--uri", uri, "--gzip", "--archive", "--quiet"
|
|
print("Executing:", cmd)
|
|
process = Popen(cmd, stdout=PIPE, stdin=PIPE, close_fds=True, bufsize=4096 * 1024)
|
|
return send_file(process.stdout,
|
|
mimetype="application/tar+gzip",
|
|
as_attachment=True,
|
|
download_name="%s.tar.gz" % secret_name)
|
|
|
|
|
|
app.run(host="0.0.0.0", debug=False, threaded=True)
|