sysdigapi/sysdig.py at main · ePlusPS/sysdigapi · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
#!/usr/bin/env python
# Demo script to add Sysdig service account in a team role
# W Embrey - IGXGlobal

# import the modules we need for this script
importrequests
importjson
importtime
importcalendar
importsys
importos


# import the variables from the config file
try:
fromconfigimport*
exceptExceptionase:
print('\nNo config file detected')


# declare vars from config file
defdeclare_variables():
ifbool(sysdig_url):
print(f'Using host: {sysdig_url}')
ifbool(sysdig_apikey):
print(f'Using sysdig_apikey: {sysdig_apikey}')
ifbool(team_id):
print(f'Using team_id: {team_id}')
ifbool(team_role):
print(f'Using team_role: {team_role}')
ifbool(name):
print(f'Using Account name: {name}')

# set global variables
# you can leave these blank because we will check for them
spacer= ('-'*100) +'\n'


defget_creds():
# set the variables to global so we adjust the globals
globalsysdig_url
globalsysdig_apikey
globalcustomer_id
globalteam_id
globalteam_role
globalname


# gather the hostname and credentials if they were not set
ifnotbool(sysdig_url):
sysdig_url=input('Enter Sysdig URL from the GUI: ')
ifnotbool(sysdig_apikey):
sysdig_apikey=input('Enter Sysdig API key: ')
ifnotbool(team_id):
team_id=input('Enter the team ID for the service account: ')
ifnotbool(team_role):
team_role=input('Enter team role ID for the service account: ')
ifnotbool(name):
name=input('Enter account name for the service account: ')
return

defget_duration():
# get the number of days for token validity
days_input=input('\nEnter the number of days for token validity or press enter to accept default 365: ')
ifnotbool(days_input):
days=365
else:
try:
days=int(days_input)
exceptExceptionase:
print(f'Invalid number. Error: {e}\nDefaulting to 365 days')
days=365

#work out key duration in seconds
key_life=days*86400
key_expiry=key_life+calendar.timegm(time.gmtime())
print(f'\nKey set to expire: {time.ctime(key_expiry)}')
key_date=int(str(key_expiry) +'999')
returnkey_date


defcreate_account(url, key, name, team, role, date):
apikey=''

#set the JSON payload
json_payload= {
"name": name,
"teamRole": role,
"systemRole": "ROLE_SERVICE_ACCOUNT",
"teamId": team,
"expirationDate": date
 }
payload=json.dumps(json_payload)
print(f'Payload: {json.dumps(json_payload)}')
headers= {
'Accept': 'application/json',
'Authorization': 'Bearer '+key,
'Content-Type': 'application/json'
 }

try:
response=requests.request("POST", url, headers=headers, data=payload)

response_json=json.loads(response.text)
apikey=response_json["apiKey"]
ifbool(apikey):
print(f'Service account key: {apikey}')
else:
print(f'Account creation failed: {response.text}')

exceptExceptionase:
print(f'\nFailed with error:\n{e}')


defmain():
os.system('clear')
print(spacer)
print("Sysdig service account creation POC tool - IGXGlobal ePlus\n")

# Set the credentials
declare_variables()
get_creds()

# Get the intended key duration
key_expiry=get_duration()

#create the account
create_account(sysdig_url, sysdig_apikey, name, team_id, team_role, key_expiry)

print(spacer)
print('All done, closing script!')
sys.exit()


if__name__=="__main__":
main()