1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
package nodemarket
import (
"errors"
"fmt"
"os"
"path/filepath"
"github.com/johnandersen777/socialweb-computer-kcp/internal/instance"
)
const NodePasswordName = "node-password"
func NodePasswordPath(dataDir string) string { return filepath.Join(dataDir, NodePasswordName) }
func MintOrReadNodePassword(path string) (string, error) {
raw, err := os.ReadFile(path)
if err == nil && len(raw) > 0 {
return string(raw), nil
}
if err != nil && !errors.Is(err, os.ErrNotExist) {
return "", fmt.Errorf("nodemarket: reading this node's own node password at %s: %w -- "+
"this credential is per node and unlike the join token; k3s refuses a password it did "+
"not issue for that node name as a duplicate hostname", path, err)
}
password, err := instance.New(nil)
if err != nil {
return "", fmt.Errorf("nodemarket: minting a per-node password for this node: %w", err)
}
if err := os.WriteFile(path, []byte(password), 0o600); err != nil {
return "", fmt.Errorf("nodemarket: writing this node's own password to %s: %w -- it "+
"is NOT the cluster join token and must never become one", path, err)
}
return string(password), nil
}
