Impart Security

import * as pulumi from "@pulumi/pulumi";
import * as impart from "@impart-security/pulumi-impart";
import * as crypto from "crypto";
import * as fs from "fs";

const hashSum = crypto.createHash("sha256");
const specSource = fs.readFileSync(`./spec.yaml`).toString();

const spec = new impart.Spec("spec", {
  name: "example_spec",
  sourceFile: "spec.yaml",
  //optional to track source files changes
  sourceHash: hashSum.update(specSource).digest("hex"),
});

const apiBinding = new impart.ApiBinding("api_binding", {
  name: "api_binding_example",
  port: 8080,
  hostname: "example.com",
  basePath: "/",
  specId: spec.id,
});

const logBinding = new impart.LogBinding("log_binding", {
  name: "log_binding_example",
  patternType: "grok",
  pattern: `%{HTTPDATE:timestamp} "(?:%{WORD:http_method}|-) (?:%{GREEDYDATA:request}|-) (?:HTTP/%{NUMBER:httpversion}|-( )?)" (?:%{NUMBER:response_code}|-)`,
  specId: spec.id,
});

package main

import (
	"crypto/sha256"
	"fmt"
	"io"
	"os"

	"github.com/impart-security/pulumi-impart/sdk/go/impart"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		specFile := "./spec.yaml"
		specHash, err := getFileHash(specFile)
		if err != nil {
			return err
		}
		spec, err := impart.NewSpec(ctx, "example", &impart.SpecArgs{
			Name:       pulumi.String("spec_example"),
			SourceFile: pulumi.String(specFile),
			SourceHash: pulumi.String(specHash),
		})
		if err != nil {
			return err
		}

		_, err = impart.NewApiBinding(ctx, "example", &impart.ApiBindingArgs{
			Name:     pulumi.String("api_binding_example"),
			Port:     pulumi.Int(443),
			SpecId:   spec.ID().ToStringOutput(),
			Hostname: pulumi.String("example.com"),
			BasePath: pulumi.String("/"),
		})
		if err != nil {
			return err
		}

		_, err = impart.NewLogBinding(ctx, "example", &impart.LogBindingArgs{
			Name:        pulumi.String("log_binding_example"),
			SpecId:      spec.ID().ToStringOutput(),
			PatternType: pulumi.String("grok"),
			Pattern:     pulumi.String(`%{HTTPDATE:timestamp} "(?:%{WORD:http_method}|-) (?:%{GREEDYDATA:request}|-) (?:HTTP/%{NUMBER:httpversion}|-( )?)" (?:%{NUMBER:response_code}|-)`),
		})
		if err != nil {
			return err
		}

		return nil
	})
}

func getFileHash(filePath string) (string, error) {
	file, err := os.Open(filePath)
	if err != nil {
		return "", err
	}
	defer file.Close()
	hash := sha256.New()
	if _, err := io.Copy(hash, file); err != nil {
		return "", err
	}
	return string(hash.Sum(nil)), nil
}