fleet/cmd/fleetctl/fleetctl/apply.go

package fleetctl

import (
	"errors"
	"fmt"
	"os"
	"path/filepath"
	"strings"

	"github.com/fleetdm/fleet/v4/pkg/spec"
	"github.com/fleetdm/fleet/v4/server/fleet"
	"github.com/urfave/cli/v2"
)

func applyCommand() *cli.Command {
	var (
		flFilename string
		flForce    bool
		flDryRun   bool
	)
	return &cli.Command{
		Name:      "apply",
		Usage:     "Use for one-off imports and backwards compatibility GitOps",
		UsageText: `fleetctl apply [options]`,
		Flags: []cli.Flag{
			&cli.StringFlag{
				Name:        "f",
				EnvVars:     []string{"FILENAME"},
				Value:       "",
				Destination: &flFilename,
				Usage:       "A file to apply",
			},
			&cli.BoolFlag{
				Name:        "force",
				EnvVars:     []string{"FORCE"},
				Destination: &flForce,
				Usage:       "Force applying the file even if it raises validation errors (only supported for 'config' and 'fleet' specs)",
			},
			&cli.BoolFlag{
				Name:        "dry-run",
				EnvVars:     []string{"DRY_RUN"},
				Destination: &flDryRun,
				Usage:       "Do not apply the file, just validate it (only supported for 'config' and 'fleet' specs)",
			},
			&cli.StringFlag{
				Name:    "policies-fleet",
				Aliases: []string{"policies-team"},
				Usage:   "A fleet's name, this flag is only used on policies specs (overrides 'fleet' key in the policies file). This allows to easily import a group of policies to a fleet.",
			},
			configFlag(),
			contextFlag(),
			debugFlag(),
			enableLogTopicsFlag(),
			disableLogTopicsFlag(),
		},
		Before: func(c *cli.Context) error {
			logDeprecatedFlagName(c, "policies-team", "policies-fleet")
			return nil
		},
		Action: func(c *cli.Context) error {
			// Apply log topic overrides from flags/env vars.
			applyLogTopicFlags(c)

			if flFilename == "" {
				return errors.New("-f must be specified")
			}
			b, err := os.ReadFile(flFilename)
			if err != nil {
				return err
			}
			fleetClient, err := clientFromCLI(c)
			if err != nil {
				return err
			}

			// Check if the file has a .yml or .yaml extension
			ext := strings.ToLower(filepath.Ext(flFilename))
			if ext == "" {
				return errors.New("Missing file extension: only .yml or .yaml files can be applied")
			}
			if ext != ".yml" && ext != ".yaml" {
				return fmt.Errorf("Invalid file extension %s: only .yml or .yaml files can be applied", ext)
			}

			logf := func(format string, a ...interface{}) {
				fmt.Fprintf(c.App.Writer, format, a...)
			}

			specs, err := spec.GroupFromBytes(b, spec.GroupFromBytesOpts{
				LogFn: logf,
			})
			if err != nil {
				return err
			}

			opts := fleet.ApplyClientSpecOptions{
				ApplySpecOptions: fleet.ApplySpecOptions{
					Force:  flForce,
					DryRun: flDryRun,
				},
			}
			if policiesTeamName := c.String("policies-fleet"); policiesTeamName != "" {
				opts.TeamForPolicies = policiesTeamName
			}
			baseDir := filepath.Dir(flFilename)

			teamsSoftwareInstallers := make(map[string][]fleet.SoftwarePackageResponse)
			teamsVPPApps := make(map[string][]fleet.VPPAppResponse)
			teamsScripts := make(map[string][]fleet.ScriptResponse)

			_, _, _, _, err = fleetClient.ApplyGroup(c.Context, false, specs, baseDir, logf, nil, opts, teamsSoftwareInstallers, teamsVPPApps, teamsScripts, nil, nil)
			if err != nil {
				return err
			}
			return nil
		},
	}
}