kubernetes-watch 0.1.8__py3-none-any.whl → 0.1.9__py3-none-any.whl

kube_watch/modules/providers/git.py

@@ -1,11 +1,99 @@
 import os
 from git import Repo
+import shutil
+import subprocess
+import tempfile
+from pathlib import Path
 
 from prefect import get_run_logger
 
 logger = get_run_logger()
 
-def clone_repo(git_pat, git_url, clone_base_path):
+
+def clone_ssh_repo(
+    git_url: str,
+    clone_base_path: str,
+    repo_dir_name: str = "manifest-repo",
+    depth: int = 1,
+    ssh_key_env: str = "GIT_SSH_PRIVATE_KEY",
+    known_hosts_env: str = "GIT_SSH_KNOWN_HOSTS",
+) -> Path:
+    """
+    Clone or update a Git repo using an SSH private key & known_hosts provided via env vars.
+
+    Env vars:
+      - GIT_SSH_PRIVATE_KEY: the full private key (RSA/ED25519) including BEGIN/END lines
+      - GIT_SSH_KNOWN_HOSTS: one or more known_hosts lines (from `ssh-keyscan github.com`)
+
+    Args:
+        git_url: SSH URL like 'git@github.com:your-org/your-repo.git'
+        clone_base_path: directory where repo_dir_name will be created
+        repo_dir_name: folder name for the clone
+        depth: shallow clone depth (1 == latest)
+
+    Returns:
+        Path to the cloned/updated repository.
+    """
+    if not git_url.startswith("git@"):
+        raise ValueError("git_url must be an SSH URL like 'git@github.com:org/repo.git'")
+
+    priv_key = os.environ.get(ssh_key_env)
+    kh_data  = os.environ.get(known_hosts_env)
+    if not priv_key:
+        raise ValueError(f"Missing env var {ssh_key_env}")
+    if not kh_data:
+        raise ValueError(f"Missing env var {known_hosts_env}")
+
+    base = Path(clone_base_path).expanduser().resolve()
+    base.mkdir(parents=True, exist_ok=True)
+    repo_path = base / repo_dir_name
+
+    # Secure temp dir for SSH material
+    tmpdir = Path(tempfile.mkdtemp(prefix="git_ssh_"))
+    key_path = tmpdir / "id_rsa"
+    kh_path  = tmpdir / "known_hosts"
+
+    try:
+        key_path.write_text(priv_key, encoding="utf-8")
+        kh_path.write_text(kh_data, encoding="utf-8")
+
+        try:
+            os.chmod(key_path, 0o600)
+        except PermissionError:
+            pass  # Windows quirk
+
+        ssh_cmd = (
+            f"ssh -i {key_path} -o IdentitiesOnly=yes "
+            f"-o UserKnownHostsFile={kh_path} "
+            f"-o StrictHostKeyChecking=yes -o StrictModes=no"
+        )
+
+        env = os.environ.copy()
+        env["GIT_SSH_COMMAND"] = ssh_cmd
+
+        if not repo_path.exists():
+            cmd = ["git", "clone"]
+            if depth and depth > 0:
+                cmd += ["--depth", str(depth)]
+            cmd += [git_url, str(repo_path)]
+            subprocess.check_call(cmd, env=env)
+        else:
+            if not (repo_path / ".git").exists():
+                raise RuntimeError(f"Path exists but is not a git repo: {repo_path}")
+            subprocess.check_call(["git", "remote", "set-url", "origin", git_url], cwd=repo_path, env=env)
+            subprocess.check_call(["git", "fetch", "--all", "--prune"], cwd=repo_path, env=env)
+            subprocess.check_call(["git", "pull", "--ff-only", "origin"], cwd=repo_path, env=env)
+
+        return repo_path
+
+    finally:
+        try:
+            shutil.rmtree(tmpdir)
+        except Exception:
+            pass
+
+
+def clone_pat_repo(git_pat, git_url, clone_base_path):
     # Retrieve environment variables
     access_token = git_pat # os.environ.get('GIT_PAT')
     repo_url = git_url # os.environ.get('GIT_URL')

{kubernetes_watch-0.1.8.dist-info → kubernetes_watch-0.1.9.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: kubernetes-watch
-Version: 0.1.8
+Version: 0.1.9
 Summary: 
 Author: bmotevalli
 Author-email: b.motevalli@gmail.com

{kubernetes_watch-0.1.8.dist-info → kubernetes_watch-0.1.9.dist-info}/RECORD

@@ -23,14 +23,14 @@ kube_watch/modules/mock/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG
 kube_watch/modules/mock/mock_generator.py,sha256=BKKQFCxxQgFW_GFgeIbkyIbuNU4328xTTaFfTwFLsS8,1262
 kube_watch/modules/providers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 kube_watch/modules/providers/aws.py,sha256=oly88Bihn-vR0NdOoCT-P1MNgPw8FLNfS1Ha4hc_4bc,8375
-kube_watch/modules/providers/git.py,sha256=Cb0iulruhd0vlmWiIqkowc1e5HVjoSFwE0jR1Ea9Cxo,1151
+kube_watch/modules/providers/git.py,sha256=BevjDv8czDJOJ9M1x8WYIRcXCxtZKow6ZQYiD6MCtGs,4104
 kube_watch/modules/providers/github.py,sha256=eQY8sLy2U6bOWMpFxA73DFCPVuswhTXSG25KmYSuo5s,5212
 kube_watch/modules/providers/vault.py,sha256=etzzHbTrUDsTUpeUN-xg0Xh8ulqC0-1FA3tHRZinIOo,7193
 kube_watch/standalone/metarecogen/ckan_to_gn.py,sha256=LWd7ikyxRIC1IGt6CtALnDOEoyuG07a8NoDHhgMkX4o,4635
 kube_watch/watch/__init__.py,sha256=9KE0Sf1nLUTNaFvXbiQCgf11vpG8Xgmb5ddeMAmak3Q,88
 kube_watch/watch/helpers.py,sha256=8BQnQ6AeLHs0JEq54iKYDvWURb1F-kROJxwIcl_nv_Y,6276
 kube_watch/watch/workflow.py,sha256=CaXHFuEWVsFjBv5dU4IfVMeTlGJWyKaE1But9-YzVWk,9769
-kubernetes_watch-0.1.8.dist-info/LICENSE,sha256=_H2QdL-2dXbivDmOpJ11DnqJewSFhSJwGpHx_WAE-CA,1075
-kubernetes_watch-0.1.8.dist-info/METADATA,sha256=mloy8yyoPpvpKY1icFj0Mf_hC0kEjlybthnILlDJICc,5056
-kubernetes_watch-0.1.8.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
-kubernetes_watch-0.1.8.dist-info/RECORD,,
+kubernetes_watch-0.1.9.dist-info/LICENSE,sha256=_H2QdL-2dXbivDmOpJ11DnqJewSFhSJwGpHx_WAE-CA,1075
+kubernetes_watch-0.1.9.dist-info/METADATA,sha256=isBj78h77s8CXFHssio69S4RgLmb_sU0_cfYQUfSO5I,5056
+kubernetes_watch-0.1.9.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
+kubernetes_watch-0.1.9.dist-info/RECORD,,