Added experimental support for reflections to FortiOS devices (#27)

Author: winromulus

ES.Kubernetes.Reflector.CertManager/SecretEtcher.cs

@@ -136,6 +136,18 @@ void MatchAnnotations(Dictionary<string, string> pairs)
                 {
                     Annotations.CertManagerCertificate.SecretReflectionAutoNamespaces,
                     Annotations.Reflection.AutoNamespaces
+                },
+                {
+                    Annotations.CertManagerCertificate.SecretFortiEnabled,
+                    Annotations.Reflection.FortiEnabled
+                },
+                {
+                    Annotations.CertManagerCertificate.SecretFortiHosts,
+                    Annotations.Reflection.FortiHosts
+                },
+                {
+                    Annotations.CertManagerCertificate.SecretFortiCertificate,
+                    Annotations.Reflection.FortiCertificate
                 }
             });
 

ES.Kubernetes.Reflector.Core/Constants/Annotations.cs

@@ -14,6 +14,11 @@ public static class Reflection
             public static string AutoNamespaces => $"{Prefix}/reflection-auto-namespaces";
 
 
+            public static string FortiEnabled => $"{Prefix}/reflection-forti-enabled";
+            public static string FortiHosts => $"{Prefix}/reflection-forti-hosts";
+            public static string FortiCertificate => $"{Prefix}/reflection-forti-certificate";
+
+
             public static string AutoReflects => $"{Prefix}/auto-reflects";
             public static string Reflects => $"{Prefix}/reflects";
             public static string ReflectedVersion => $"{Prefix}/reflected-version";
@@ -27,6 +32,10 @@ public static class CertManagerCertificate
 
             public static string SecretReflectionAutoEnabled => $"{Prefix}/secret-reflection-auto-enabled";
             public static string SecretReflectionAutoNamespaces => $"{Prefix}/secret-reflection-auto-namespaces";
+
+            public static string SecretFortiEnabled => $"{Prefix}/secret-reflection-forti-enabled";
+            public static string SecretFortiHosts => $"{Prefix}/secret-reflection-forti-hosts";
+            public static string SecretFortiCertificate => $"{Prefix}/secret-reflection-forti-certificate";
         }
     }
 }

ES.Kubernetes.Reflector.Core/Extensions/MetadataExtensions.cs

@@ -112,5 +112,31 @@ private static bool PatternListMatch(string patternList, string value)
                 .Select(pattern => Regex.Match(value, pattern))
                 .Any(match => match.Success && match.Value.Length == value.Length);
         }
+
+        public static bool FortiReflectionEnabled(this V1ObjectMeta metadata)
+        {
+            if (metadata.SafeAnnotations().TryGetValue(Annotations.Reflection.FortiEnabled, out var raw) &&
+                bool.TryParse(raw, out var value))
+                return value;
+            return false;
+        }
+
+        public static string[] FortiReflectionHosts(this V1ObjectMeta metadata)
+        {
+            return metadata.SafeAnnotations().TryGetValue(Annotations.Reflection.FortiHosts, out var raw)
+                ? string.IsNullOrWhiteSpace(raw) ? Array.Empty<string>() :
+                raw.Split(new[] {","}, StringSplitOptions.RemoveEmptyEntries)
+                    .Where(s => !string.IsNullOrWhiteSpace(s))
+                    .Select(s => s.Trim()).Distinct().ToArray()
+                : Array.Empty<string>();
+        }
+
+        public static string FortiCertificate(this V1ObjectMeta metadata)
+        {
+            return metadata.SafeAnnotations().TryGetValue(Annotations.Reflection.FortiCertificate, out var raw)
+                ? string.IsNullOrWhiteSpace(raw) ? null : raw
+                : null;
+        }
+
     }
 }

ES.Kubernetes.Reflector.Secrets/ES.Kubernetes.Reflector.Secrets.csproj

@@ -4,6 +4,10 @@
     <TargetFramework>netstandard2.1</TargetFramework>
   </PropertyGroup>
 
+  <ItemGroup>
+    <PackageReference Include="SSH.NET" Version="2016.1.0" />
+  </ItemGroup>
+
   <ItemGroup>
     <ProjectReference Include="..\ES.Kubernetes.Reflector.Core\ES.Kubernetes.Reflector.Core.csproj" />
   </ItemGroup>