1import { createHash } from 'crypto'
2import { genericIngressTmpl } from '../k8sF/generic1IngressTmplF.mts'
3import { secretTemplate } from '../k8sF/k8sSecF.mts'
4import { resourcesAction } from '../k8sF/resourcesActionF.mts'
5import { genPlainSecretIfMissing } from '../secretF/genSecretAI.mts'
6
7const authSecretName = 'ethrpc-basic-auth', authUsername = 'ethrpc'
8
9const basicAuthAnnotationsH = {
10  'nginx.ingress.kubernetes.io/auth-type': 'basic',
11  'nginx.ingress.kubernetes.io/auth-secret': authSecretName,
12  'nginx.ingress.kubernetes.io/auth-realm': 'ETH RPC',
13}
14
15const shaHtpasswd = (username: string, password: string) => {
16  const sha1 = createHash('sha1').update(password).digest('base64')
17  return `${username}:{SHA}${sha1}`
18}
19
20export const k8sEthRpcIngress = async ({execHostname, beaconHostname, execSvcName, execPortNo = 8545, beaconSvcName, beaconPortNo}: {execHostname: string, beaconHostname: string, execSvcName: string, execPortNo?: number, beaconSvcName: string, beaconPortNo: number}) => {
21  const password = await genPlainSecretIfMissing({secretName: authSecretName, autoYes: true}) as string
22  const htpasswdLine = shaHtpasswd(authUsername, password)
23
24  const resources = [
25    secretTemplate({name: authSecretName, secretsH: {auth: htpasswdLine}}),
26    genericIngressTmpl({
27      name: 'ethrpc', svcName: execSvcName, hostname: execHostname, portNo: execPortNo,
28      ingressAnnotationsH: basicAuthAnnotationsH,
29    }),
30    genericIngressTmpl({
31      name: 'ethbeacon', svcName: beaconSvcName, hostname: beaconHostname, portNo: beaconPortNo,
32      ingressAnnotationsH: basicAuthAnnotationsH,
33    }),
34  ]
35  await resourcesAction({resources})
36}
37