diff --git a/.circleci/config.yml b/.circleci/config.yml new file mode 100644 index 0000000..a3d803d --- /dev/null +++ b/.circleci/config.yml @@ -0,0 +1,90 @@ +version: 2.1 +jobs: + test: + machine: true + steps: + - checkout + + - run: + name: Build application Docker image + command: docker-compose build + + - run: + name: Lint + command: | + make lint-in-docker + + - run: + name: Test + command: | + make test-in-docker + + deploy: + machine: true + steps: + - checkout + + - run: + name: Setup system + command: | + docker login -u="$DOCKER_LOGIN" -p="$DOCKER_PASS" $DOCKER_SERVER + - run: + name: Build application Docker image + command: | + docker-compose build + - run: + name: Build static version and create target image + command: | + make build-in-docker docker + + - run: + name: Install jinja2-cli + command: | + pip install jinja2-cli[yaml] + - run: + name: Install gcloud and kubectl + command: | + sudo /opt/google-cloud-sdk/bin/gcloud --quiet components update + sudo /opt/google-cloud-sdk/bin/gcloud --quiet components install kubectl + sudo chown circleci:circleci ~/.config/gcloud/ -R + + - run: + name: Build and deploy + command: | + make decrypt + + if [ "$CIRCLE_BRANCH" == "master" ]; then + echo $GCLOUD_STG_SERVICE_KEY > gcloud-service-key.json + gcloud auth activate-service-account --key-file=gcloud-service-key.json + gcloud container clusters get-credentials syncano-stg --zone europe-west1 --project syncano-staging + + make deploy-staging + + elif [ "$CIRCLE_BRANCH" == "stable" ]; then + echo $GCLOUD_EU1_SERVICE_KEY > gcloud-service-key.json + gcloud auth activate-service-account --key-file=gcloud-service-key.json + gcloud container clusters get-credentials syncano-eu1 --zone europe-west1 --project pioner-syncano-prod-9cfb + + make deploy-production + fi + + make clean + +workflows: + test: + jobs: + - test: + filters: + branches: + ignore: + - master + - stable + + deploy: + jobs: + - deploy: + filters: + branches: + only: + - master + - stable diff --git a/.github/ISSUE_TEMPLATE/---bug-report.md b/.github/ISSUE_TEMPLATE/---bug-report.md new file mode 100644 index 0000000..60dbba2 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/---bug-report.md @@ -0,0 +1,18 @@ +--- +name: "\U0001F41B Bug report" +about: Create a report to help us improve + +--- + +**Describe the bug** +A clear and concise description of what the bug is. + +**To Reproduce** +Steps to reproduce the behavior: +1. Go to '...' +2. Click on '....' +3. Scroll down to '....' +4. See error + +**Expected behavior** +A clear and concise description of what you expected to happen. diff --git a/.github/ISSUE_TEMPLATE/---feature-request.md b/.github/ISSUE_TEMPLATE/---feature-request.md new file mode 100644 index 0000000..55ddf7c --- /dev/null +++ b/.github/ISSUE_TEMPLATE/---feature-request.md @@ -0,0 +1,14 @@ +--- +name: "\U0001F680 Feature request" +about: Suggest an idea for this project + +--- + +**Is your feature request related to a problem? Please describe.** +A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] + +**Describe the solution you'd like** +A clear and concise description of what you want to happen. + +**Additional context** +Add any other context or screenshots about the feature request here. diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..dec3333 --- /dev/null +++ b/.gitignore @@ -0,0 +1,6 @@ +/build/acme* +/certs +coverage*.out +/dev/ +/debug* +*.unenc diff --git a/.golangci.yml b/.golangci.yml new file mode 100644 index 0000000..17e554d --- /dev/null +++ b/.golangci.yml @@ -0,0 +1,90 @@ +run: + timeout: 2m + tests: false + skip-dirs: + - assets + - dev + - proto + - mocks + +issues: + exclude-rules: + - text: declaration of "err" shadows declaration + linters: + - govet + +linters-settings: + govet: + check-shadowing: true + golint: + min-confidence: 0 + gocyclo: + min-complexity: 20 + maligned: + suggest-new: true + dupl: + threshold: 150 + goconst: + min-len: 3 + min-occurrences: 3 + misspell: + locale: US + gocritic: + enabled-tags: + - diagnostic + - experimental + - opinionated + - performance + - style + disabled-checks: + - whyNoLint + - commentedOutCode + +linters: + disable-all: true + enable: + - bodyclose + - deadcode + - depguard + - dogsled + - dupl + - errcheck + - exhaustive + - goconst + - gocritic + - gocyclo + - gofmt + - goimports + - golint + - goprintffuncname + - gosec + - gosimple + - govet + - ineffassign + - interfacer + - misspell + - nakedret + - noctx + - nolintlint + - rowserrcheck + - scopelint + - staticcheck + - structcheck + - stylecheck + - typecheck + - unconvert + - unparam + - unused + - varcheck + - whitespace + - wsl + + # don't enable: + # - funlen + # - gochecknoglobals + # - gochecknoinits + # - godox + # - gocognit + # - gomnd + # - lll + # - maligned diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..2885881 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,7 @@ +FROM golang:1.15 +ARG EMAIL=devops@syncano.com +ENV GOPROXY=https://proxy.golang.org +WORKDIR /opt/build + +COPY go.mod go.sum ./ +RUN go mod download diff --git a/Makefile b/Makefile new file mode 100644 index 0000000..d1d497c --- /dev/null +++ b/Makefile @@ -0,0 +1,104 @@ +ifndef DOCKERIMAGE +DOCKERIMAGE := syncano/acme-proxy +endif + +CURRENTPACKAGE := github.com/Syncano/acme-proxy +EXECNAME := acme_proxy + +PATH := $(PATH):$(GOPATH)/bin +GOFILES=$(shell find . -mindepth 2 -type f -name '*.go' ! -path "./.*" ! -path "./dev/*" ! -path "*/proto/*") +GOTESTPACKAGES = $(shell find . -mindepth 2 -type f -name '*.go' ! -path "./.*" ! -path "./internal/*" ! -path "./dev/*" ! -path "*/mocks/*" ! -path "*/proto/*" | xargs -n1 dirname | sort | uniq) + +BUILDTIME = $(shell date +%Y-%m-%dT%H:%M) +GITSHA = $(shell git rev-parse --short HEAD) + +LDFLAGS = -s -w \ + -X github.com/Syncano/acme-proxy/app/version.GitSHA=$(GITSHA) \ + -X github.com/Syncano/acme-proxy/app/version.buildtimeStr=$(BUILDTIME) + + +.PHONY: help clean lint fmt test stest cov goconvey lint-in-docker test-in-docker build build-in-docker docker deploy-staging deploy-production start migrate devserver run-server +.DEFAULT_GOAL := help +$(VERBOSE).SILENT: + +help: + @grep -E '^[a-zA-Z0-9_-]+:.*?## .*$$' $(MAKEFILE_LIST) | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}' + +require-%: + if ! hash ${*} 2>/dev/null; then \ + echo "! ${*} not installed"; \ + exit 1; \ + fi + +clean: ## Cleanup repository + go clean ./... + rm -f build/$(EXECNAME) + find deploy -name "*.unenc" -delete + git clean -f + +lint: ## Run lint checks + echo "=== lint ===" + if ! hash golangci-lint 2>/dev/null; then \ + echo "Installing golangci-lint"; \ + curl -sfL https://install.goreleaser.com/github.com/golangci/golangci-lint.sh | sh -s -- -b $$(go env GOPATH)/bin v1.30.0; \ + fi + golangci-lint run $(ARGS) + +fmt: ## Format code through goimports + gofmt -s -w $(GOFILES) + go run golang.org/x/tools/cmd/goimports -local $(CURRENTPACKAGE) -w $(GOFILES) + +test: ## Run unit with race check and create coverage profile + echo "=== unit test ===" + echo "mode: atomic" > coverage-all.out + $(foreach pkg,$(GOTESTPACKAGES),\ + go test -timeout 5s -short -race -coverprofile=coverage.out -covermode=atomic $(ARGS) $(pkg) || exit;\ + tail -n +2 coverage.out >> coverage-all.out 2>/dev/null;) + +stest: ## Run only short tests (unit tests) without race check + echo "=== short test ===" + go test -timeout 5s -short $(ARGS) $(GOTESTPACKAGES) + +cov: ## Show per function coverage generated by test + echo "=== coverage ===" + go tool cover -func=coverage-all.out + +goconvey: ## Run goconvey test server + go run github.com/smartystreets/goconvey -excludedDirs "dev,internal,mocks,proto,assets,deploy,build" -timeout 5s -depth 2 + +lint-in-docker: require-docker-compose ## Run lint in docker environment + docker-compose run --no-deps --rm server make lint + +test-in-docker: require-docker-compose ## Run full test suite in docker environment + docker-compose run --rm server make build test + +build: ## Build + go build -ldflags "$(LDFLAGS)" -o ./build/$(EXECNAME) + +build-in-docker: require-docker-compose ## Build in docker environment + docker-compose run --no-deps --rm -e CGO_ENABLED=0 server make build + +docker: require-docker ## Builds docker image for application (requires static version to be built first) + docker build -t $(DOCKERIMAGE) build + +deploy-staging: require-kubectl ## Deploy application to staging + echo "=== deploying staging ===" + kubectl config use-context gke_syncano-staging_europe-west1_syncano-stg + ./deploy.sh --migration staging $(GITSHA) $(ARGS) + +deploy-production: require-kubectl ## Deploy application to production + echo "=== deploying eu1 ===" + kubectl config use-context gke_pioner-syncano-prod-9cfb_europe-west1_syncano-eu1 + ./deploy.sh --migration eu1 $(GITSHA) + +start: require-docker-compose ## Run docker-compose of an app + docker-compose -f docker-compose.yml -f build/docker-compose.yml up + +migrate: ## Migrate SQL structure + go run . db up + +devserver: ## Run devserver + SERVICE_NAME=acme-proxy DEBUG=1 FORCE_TERM=1 go run github.com/cespare/reflex --regex='\.go$$' --inverse-regex='_test\.go$$' --start-service -- go run . server + +run-server: build ## Build and run server binary + ./build/$(EXECNAME) $(ARGS) server diff --git a/app/models/certificate.go b/app/models/certificate.go new file mode 100644 index 0000000..668fa81 --- /dev/null +++ b/app/models/certificate.go @@ -0,0 +1,184 @@ +package models + +import ( + "context" + "crypto" + "crypto/tls" + "crypto/x509" + "errors" + "fmt" + "time" + + "github.com/Syncano/acme-proxy/pkg/acme" + "github.com/Syncano/acme-proxy/pkg/cert" + "github.com/Syncano/pkg-go/v2/database/fields" + pb "github.com/Syncano/syncanoapis/gen/go/syncano/hosting/acme/v1" + "github.com/go-acme/lego/v3/certcrypto" + "github.com/go-acme/lego/v3/certificate" + "github.com/golang/protobuf/ptypes" + "github.com/golang/protobuf/ptypes/timestamp" +) + +// CertificateStatus enum. +type CertificateStatus int + +const ( + CertificateStatusUnknown CertificateStatus = iota + CertificateStatusOK + CertificateStatusInvalidDomain + CertificateStatusDomainVerificationFailed +) + +type Certificate struct { + tableName struct{} `pg:"certificate"` // nolint + + ID int + AcmeUserID int + Domain string + URL string + StableURL string + + PrivateKey []byte + PrivateKeyType cert.KeyType + Certificate [][]byte `pg:",array"` + IssuerCertificate []byte + CSR []byte + Status CertificateStatus + Failures int + + AutoRefresh bool + RefreshBeforeDays int + + CreatedAt fields.Time + UpdatedAt fields.Time + ExpiresAt fields.Time +} + +func (c *Certificate) String() string { + return fmt.Sprintf("Certificate", c.ID, c.Domain) +} + +func (c *Certificate) BeforeUpdate(ctx context.Context) (context.Context, error) { + c.UpdatedAt.Set(time.Now()) // nolint: errcheck + return ctx, nil +} + +func (c *Certificate) AcmeCertificate() (acme.Certificate, error) { + var ( + privateKey []byte + crt, issuerCrt, csr []byte + ) + + if len(c.PrivateKey) > 0 { + key, err := cert.ParsePrivateKeyByType(c.PrivateKey, c.PrivateKeyType) + if err != nil { + return nil, fmt.Errorf("parsing certificate private key error: %w", err) + } + + privateKey = certcrypto.PEMEncode(key) + } + + if len(c.Certificate) > 0 { + for _, crtBytes := range c.Certificate { + crt = append(crt, certcrypto.PEMEncode(certcrypto.DERCertificateBytes(crtBytes))...) + } + } + + if len(c.IssuerCertificate) > 0 { + issuerCrt = certcrypto.PEMEncode(certcrypto.DERCertificateBytes(c.IssuerCertificate)) + } + + if len(c.CSR) > 0 { + csr = certcrypto.PEMEncode(certcrypto.DERCertificateBytes(c.CSR)) + } + + return &certificate.Resource{ + Domain: c.Domain, + CertURL: c.URL, + CertStableURL: c.StableURL, + PrivateKey: privateKey, + Certificate: crt, + IssuerCertificate: issuerCrt, + CSR: csr, + }, nil +} + +func (c *Certificate) TLSCertificate() (*tls.Certificate, error) { + var ( + privateKey crypto.PrivateKey + err error + ) + + if len(c.PrivateKey) > 0 { + privateKey, err = cert.ParsePrivateKeyByType(c.PrivateKey, c.PrivateKeyType) + } + + return &tls.Certificate{ + Certificate: c.Certificate, + PrivateKey: privateKey, + }, err +} + +func (c *Certificate) Proto() *pb.Certificate { + var exp *timestamp.Timestamp + + if c.ExpiresAt.IsNull() { + exp, _ = ptypes.TimestampProto(c.ExpiresAt.Get().(time.Time)) + } + + return &pb.Certificate{ + Domain: c.Domain, + Status: pb.Status(c.Status), + Expiration: exp, + Refresh: &pb.Refresh{ + AutoRefresh: c.AutoRefresh, + RefreshBeforeDays: uint32(c.RefreshBeforeDays), + }, + } +} + +func (c *Certificate) FromAcmeCertificate(crt acme.Certificate) error { + var ( + keyBytes []byte + keyType cert.KeyType + err error + expiresAt time.Time + ) + + // Parse certificates. + certBytes := cert.DecodePEMToBytesArray(crt.Certificate) + x509Cert, err := x509.ParseCertificate(certBytes[0]) + + if len(certBytes) == 0 { + return errors.New("no certificates were found while parsing the bundle") + } + + if x509Cert.IsCA { + return fmt.Errorf("certificate for %s bundle starts with a CA certificate", crt.Domain) + } + + expiresAt = x509Cert.NotAfter + + // Parse private key. + if len(crt.PrivateKey) > 0 { + keyBytes, keyType, err = cert.MarshalPrivateKey(crt.PrivateKey) + } + + now := time.Now() + + c.Domain = crt.Domain + c.URL = crt.CertURL + c.StableURL = crt.CertStableURL + + c.PrivateKey = keyBytes + c.PrivateKeyType = keyType + c.Certificate = certBytes + c.IssuerCertificate = cert.DecodePEMToBytes(crt.IssuerCertificate) + c.CSR = cert.DecodePEMToBytes(crt.CSR) + c.Status = CertificateStatusOK + + c.CreatedAt = fields.NewTime(&now) + c.ExpiresAt = fields.NewTime(expiresAt) + + return err +} diff --git a/app/models/user.go b/app/models/user.go new file mode 100644 index 0000000..7e74218 --- /dev/null +++ b/app/models/user.go @@ -0,0 +1,72 @@ +package models + +import ( + "fmt" + "time" + + "github.com/Syncano/acme-proxy/pkg/acme" + "github.com/Syncano/acme-proxy/pkg/cert" + "github.com/Syncano/pkg-go/v2/database/fields" + jsoniter "github.com/json-iterator/go" +) + +type User struct { + tableName struct{} `pg:"acme_user"` // nolint + + ID int + Email string + PrivateKey []byte + PrivateKeyType cert.KeyType + Registration fields.JSONB + + CreatedAt fields.Time +} + +func (m *User) String() string { + return fmt.Sprintf("User", m.ID, m.Email) +} + +func (m *User) AcmeUser() (*acme.User, error) { + var json = jsoniter.ConfigCompatibleWithStandardLibrary + + key, err := cert.ParsePrivateKeyByType(m.PrivateKey, m.PrivateKeyType) + if err != nil { + return nil, fmt.Errorf("parsing user private key error: %w", err) + } + + acmeUser := &acme.User{ + Email: m.Email, + Key: key, + } + + err = json.Unmarshal(m.Registration.Bytes, &acmeUser.Registration) + if err != nil { + return nil, fmt.Errorf("unmarshaling registration bytes error: %w", err) + } + + return acmeUser, nil +} + +func NewUserFromAcmeUser(u *acme.User) (*User, error) { + var json = jsoniter.ConfigCompatibleWithStandardLibrary + + keyBytes, keyType, err := cert.MarshalPrivateKey(u.Key) + if err != nil { + return nil, fmt.Errorf("marshaling user private key error: %w", err) + } + + regBytes, err := json.Marshal(u.Registration) + if err != nil { + return nil, fmt.Errorf("marshaling user registration bytes error: %w", err) + } + + now := time.Now() + + return &User{ + Email: u.Email, + PrivateKey: keyBytes, + PrivateKeyType: keyType, + Registration: fields.NewJSONB(regBytes), + CreatedAt: fields.NewTime(&now), + }, nil +} diff --git a/app/query/certificate.go b/app/query/certificate.go new file mode 100644 index 0000000..df6dcb6 --- /dev/null +++ b/app/query/certificate.go @@ -0,0 +1,62 @@ +package query + +import ( + "context" + "fmt" + + "github.com/Syncano/acme-proxy/app/models" + "github.com/Syncano/pkg-go/v2/database" + "github.com/Syncano/pkg-go/v2/database/manager" + "github.com/Syncano/pkg-go/v2/rediscache" + "github.com/go-pg/pg/v9" + "github.com/go-pg/pg/v9/orm" + "google.golang.org/protobuf/types/known/timestamppb" +) + +// CertManager represents Cert manager. +type CertManager struct { + *manager.Manager + c *rediscache.Cache +} + +// NewCertManager creates and returns new Cert manager. +func (q *Factory) NewCertManager(ctx context.Context) *CertManager { + return &CertManager{Manager: manager.NewManager(database.WrapContext(ctx, nil), q.db), c: q.c} +} + +// OneByDomain outputs object filtered by domain. +func (m *CertManager) OneByDomain(o *models.Certificate) error { + return manager.RequireOne( + m.c.SimpleModelCache(m.DB(), o, fmt.Sprintf("d=%s", o.Domain), func() (interface{}, error) { + return o, m.ByDomainsQ(o, []string{o.Domain}).Select() + }), + ) +} + +// ByDomains filters object filtered by domains (IN). +func (m *CertManager) ByDomainsQ(o interface{}, domains []string) *orm.Query { + return m.Query(o).Where("domain IN (?)", pg.In(domains)) +} + +func (m *CertManager) ForRefreshQ(o interface{}, failureThreshold int) *orm.Query { + return m.Query(o).Where( + "failures < ? AND auto_refresh IS TRUE AND updated_at < NOW() - INTERVAL '5 minute' AND expires_at > NOW() + refresh_before_days * INTERVAL '1 day'", failureThreshold) +} + +func (m *CertManager) ListQ(o interface{}, domains []string, expirationLte *timestamppb.Timestamp, status models.CertificateStatus) *orm.Query { + q := m.Query(o) + + if len(domains) > 0 { + q = q.Where("domain IN (?)", pg.In(domains)) + } + + if expirationLte != nil { + q = q.Where("expires_at < ?", expirationLte.AsTime()) + } + + if status != 0 { + q = q.Where("status = ?", status) + } + + return q +} diff --git a/app/query/query.go b/app/query/query.go new file mode 100644 index 0000000..b60f32e --- /dev/null +++ b/app/query/query.go @@ -0,0 +1,50 @@ +package query + +import ( + "github.com/Syncano/acme-proxy/app/models" + "github.com/Syncano/pkg-go/v2/database" + "github.com/Syncano/pkg-go/v2/rediscache" + "github.com/go-pg/pg/v9/orm" +) + +type Factory struct { + db *database.DB + c *rediscache.Cache +} + +func NewFactory(db *database.DB, c *rediscache.Cache) *Factory { + f := &Factory{ + db: db, + c: c, + } + + for _, model := range []interface{}{ + (*models.Certificate)(nil), + (*models.User)(nil), + } { + db.AddModelDeleteHook(model, f.cacheDeleteHook) + db.AddModelSoftDeleteHook(model, f.cacheDeleteHook) + db.AddModelSaveHook(model, f.cacheSaveHook) + } + + return f +} + +func (q *Factory) cacheSaveHook(c database.DBContext, db orm.DB, created bool, m interface{}) error { + if created { + return nil + } + + q.c.ModelCacheInvalidate(db, m) + + return nil +} + +func (q *Factory) cacheDeleteHook(c database.DBContext, db orm.DB, m interface{}) error { + q.c.ModelCacheInvalidate(db, m) + return nil +} + +func (q *Factory) Database() *database.DB { + return q.db +} diff --git a/app/query/user.go b/app/query/user.go new file mode 100644 index 0000000..7a7119e --- /dev/null +++ b/app/query/user.go @@ -0,0 +1,33 @@ +package query + +import ( + "context" + "reflect" + + "github.com/Syncano/acme-proxy/app/models" + "github.com/Syncano/pkg-go/v2/database" + "github.com/Syncano/pkg-go/v2/database/manager" + "github.com/go-pg/pg/v9/orm" +) + +// UserManager represents User manager. +type UserManager struct { + *Factory + *manager.Manager +} + +// NewUserManager creates and returns new User manager. +func (q *Factory) NewUserManager(ctx context.Context) *UserManager { + return &UserManager{Factory: q, Manager: manager.NewManager(database.WrapContext(ctx, nil), q.db)} +} + +func (m *UserManager) LockTable() error { + var o *models.User + _, err := m.DB().ExecContext(m.DBContext().Context(), "LOCK TABLE ?", orm.GetTable(reflect.TypeOf(o).Elem()).FullName) + + return err +} + +func (m *UserManager) First(o *models.User) error { + return m.Query(o).First() +} diff --git a/app/server/certs.go b/app/server/certs.go new file mode 100644 index 0000000..e9b4da0 --- /dev/null +++ b/app/server/certs.go @@ -0,0 +1,123 @@ +package server + +import ( + "context" + "fmt" + + "github.com/Syncano/acme-proxy/app/models" + "github.com/Syncano/acme-proxy/app/query" + "github.com/Syncano/acme-proxy/app/settings" + "github.com/Syncano/pkg-go/v2/database/manager" + "github.com/go-pg/pg/v9" + "github.com/go-pg/pg/v9/orm" + "go.uber.org/zap" +) + +func (s *Server) certAutoRefresh(ctx context.Context) (isDone bool, err error) { + l := s.log.Logger() + + var certs []*models.Certificate + + mgr := s.qf.NewCertManager(ctx) + q := mgr.ForRefreshQ(&certs, settings.Server.RefreshFailureThreshold).Order("id").Limit(settings.Server.AutoRefreshBatch) + + l.Debug("Starting auto refresh of certs") + + success, failed, err := s.certRefresh(mgr, certs, q) + successDomains := make([]string, len(success)) + failedDomains := make([]string, len(failed)) + + for i, crt := range success { + successDomains[i] = crt.Domain + } + + for i, crt := range failed { + failedDomains[i] = crt.Domain + } + + // Log success and failures. + l = l.With(zap.Strings("success", successDomains)) + + if len(failed) == 0 { + l.Info("Refreshing done") + } else { + l.With(zap.Strings("failed", failedDomains)).Warn("Refreshing done with some refreshes failed") + } + + return (len(success) + len(failed)) < settings.Server.AutoRefreshBatch, err +} + +func (s *Server) certRefresh(mgr *query.CertManager, certs []*models.Certificate, q *orm.Query) (success, failed []*models.Certificate, err error) { + err = mgr.RunInTransaction(func(*pg.Tx) error { + err := manager.Lock(q) + if err == pg.ErrNoRows { + return nil + } + + if err != nil { + return err + } + + for _, cert := range certs { + ctx, cancel := context.WithTimeout(context.Background(), settings.Server.DomainVerifyTimeout) + + // Check and verify domain. + if err = s.checkDomain(ctx, cert.Domain); err != nil { + cert.Status = models.CertificateStatusInvalidDomain + } else if err = s.verifyDomain(ctx, cert.Domain); err != nil { + cert.Status = models.CertificateStatusDomainVerificationFailed + } + + cancel() + + if err != nil { + cert.Failures++ + failed = append(failed, cert) + + if err := mgr.Update(cert, "status", "failures"); err != nil { + return err + } + + continue + } + + // Perform actual refresh after internal verification. + acmeCert, err := cert.AcmeCertificate() + if err != nil { + return err + } + + acmeCert, err = s.acme.Refresh(acmeCert) + if err != nil { + return err + } + + err = cert.FromAcmeCertificate(acmeCert) + if err != nil { + return err + } + + // Reset failures. + cert.Failures = 0 + success = append(success, cert) + } + + if len(certs) == 0 { + return nil + } + + return mgr.Update(certs) + }) + if err != nil { + return nil, nil, fmt.Errorf("refresh transaction failed: %w", err) + } + + for _, suc := range success { + err = s.cert.InvalidateMatch(suc.Domain) + if err != nil { + err = fmt.Errorf("invalidate match error: %w", err) + } + } + + return success, failed, err +} diff --git a/app/server/grpc.go b/app/server/grpc.go new file mode 100644 index 0000000..9fcd2ea --- /dev/null +++ b/app/server/grpc.go @@ -0,0 +1,189 @@ +package server + +import ( + "context" + "fmt" + + "github.com/Syncano/acme-proxy/app/models" + "github.com/Syncano/acme-proxy/app/settings" + "github.com/Syncano/pkg-go/v2/database/manager" + pb "github.com/Syncano/syncanoapis/gen/go/syncano/hosting/acme/v1" + "github.com/go-pg/pg/v9" + "go.uber.org/zap" +) + +func (s *Server) Create(ctx context.Context, req *pb.CreateRequest) (*pb.CreateResponse, error) { + log := s.log.Logger().With(zap.String("domain", req.GetDomain())) + + if req.GetDomain() == "" { + return nil, fmt.Errorf("create failed, empty domain") + } + + ctx, cancel := context.WithTimeout(context.Background(), settings.Server.DomainVerifyTimeout) + + // Check and verify doamin. + if err := s.checkDomain(ctx, req.Domain); err != nil { + log.With(zap.Error(err)).Warn("Domain checking failed") + cancel() + + return &pb.CreateResponse{ + Certificate: &pb.Certificate{ + Domain: req.Domain, + Status: pb.Status_INVALID_DOMAIN, + }, + }, nil + } + + if err := s.verifyDomain(ctx, req.Domain); err != nil { + log.With(zap.Error(err)).Warn("Domain verification failed") + cancel() + + return &pb.CreateResponse{ + Certificate: &pb.Certificate{ + Domain: req.Domain, + Status: pb.Status_DOMAIN_VERIFICATION_FAILED, + }, + }, nil + } + + cancel() + + if !req.Wait { + s.jobRunner.Go(func() { + _, err := s.obtainCertificate(ctx, req) + log.With(zap.Error(err)).Warn("Failed to obtain certificate with wait=false") + }) + + return nil, nil + } + + crt, err := s.obtainCertificate(ctx, req) + if err != nil { + return nil, err + } + + return &pb.CreateResponse{ + Certificate: crt.Proto(), + }, nil +} + +func (s *Server) obtainCertificate(ctx context.Context, req *pb.CreateRequest) (*models.Certificate, error) { + acmeCrt, err := s.acme.Obtain(req.Domain) + if err != nil { + return nil, fmt.Errorf("create failed, obtain error: %w", err) + } + + crt := &models.Certificate{ + AcmeUserID: s.user.ID, + } + + err = crt.FromAcmeCertificate(acmeCrt) + if err != nil { + return nil, fmt.Errorf("create failed, convert error: %w", err) + } + + if refresh := req.GetRefresh(); refresh != nil { + crt.AutoRefresh = refresh.AutoRefresh + crt.RefreshBeforeDays = int(refresh.RefreshBeforeDays) + } + + err = s.qf.NewCertManager(ctx).Insert(crt) + if err != nil { + return nil, fmt.Errorf("create failed, insert failed: %w", err) + } + + return crt, nil +} + +func (s *Server) List(ctx context.Context, req *pb.ListRequest) (*pb.ListResponse, error) { + var certs []*models.Certificate + + mgr := s.qf.NewCertManager(ctx) + if err := mgr.ListQ(&certs, req.GetDomains(), req.GetExpirationLte(), models.CertificateStatus(req.Status)).Limit(settings.Server.CertListLimit).Select(); err != nil { + return nil, err + } + + res := &pb.ListResponse{ + Certificates: make([]*pb.Certificate, len(certs)), + } + + for i, cert := range certs { + res.Certificates[i] = cert.Proto() + } + + return res, nil +} + +func (s *Server) Get(ctx context.Context, req *pb.GetRequest) (*pb.GetResponse, error) { + domain := req.GetDomain() + + if domain == "" { + return nil, fmt.Errorf("delete failed, empty domain") + } + + crt := &models.Certificate{Domain: domain} + mgr := s.qf.NewCertManager(ctx) + err := mgr.OneByDomain(crt) + + if err != nil { + return nil, err + } + + return &pb.GetResponse{ + Certificate: crt.Proto(), + }, nil +} + +func (s *Server) Refresh(ctx context.Context, req *pb.RefreshRequest) (*pb.RefreshResponse, error) { + var certs []*models.Certificate + + mgr := s.qf.NewCertManager(ctx) + q := mgr.ListQ(&certs, req.GetDomains(), req.GetExpirationLte(), models.CertificateStatus(req.Status)).Limit(settings.Server.CertListLimit) + res := &pb.RefreshResponse{} + + success, failed, err := s.certRefresh(mgr, certs, q) + if err != nil { + return nil, err + } + + res.Refreshed = make([]*pb.Certificate, len(success)) + res.Failed = make([]*pb.Certificate, len(failed)) + + for i, cert := range success { + res.Refreshed[i] = cert.Proto() + } + + for i, cert := range failed { + res.Failed[i] = cert.Proto() + } + + return res, nil +} + +func (s *Server) Delete(ctx context.Context, req *pb.DeleteRequest) (*pb.DeleteResponse, error) { + domain := req.GetDomain() + + if domain == "" { + return nil, fmt.Errorf("delete failed, empty domain") + } + + crt := &models.Certificate{Domain: domain} + mgr := s.qf.NewCertManager(ctx) + q := mgr.ByDomainsQ(crt, []string{domain}) + + err := mgr.RunInTransaction(func(*pg.Tx) error { + err := manager.Lock(q) + if err == pg.ErrNoRows { + return nil + } + + return mgr.Delete(crt) + }) + if err != nil { + return nil, err + } + + err = s.cert.InvalidateMatch(crt.Domain) + + return &pb.DeleteResponse{}, err +} diff --git a/app/server/route.go b/app/server/route.go new file mode 100644 index 0000000..5dc4282 --- /dev/null +++ b/app/server/route.go @@ -0,0 +1,27 @@ +package server + +import "net/url" + +type Route struct { + Path string + Headers map[string]string + Targets []*YAMLURL +} + +type YAMLURL struct { + *url.URL +} + +func (j *YAMLURL) UnmarshalYAML(unmarshal func(interface{}) error) error { + var s string + + err := unmarshal(&s) + if err != nil { + return err + } + + urll, err := url.Parse(s) + j.URL = urll + + return err +} diff --git a/app/server/server.go b/app/server/server.go new file mode 100644 index 0000000..55c9e87 --- /dev/null +++ b/app/server/server.go @@ -0,0 +1,244 @@ +package server + +import ( + "context" + "crypto/tls" + "fmt" + "io/ioutil" + "net/http" + _ "net/http/pprof" // nolint:gosec // using pprof when debug is true + "strings" + + sentryecho "github.com/getsentry/sentry-go/echo" + "github.com/go-pg/pg/v9" + "github.com/labstack/echo/v4" + "github.com/labstack/echo/v4/middleware" + "go.uber.org/zap" + "gopkg.in/yaml.v2" + + "github.com/Syncano/acme-proxy/app/models" + "github.com/Syncano/acme-proxy/app/query" + "github.com/Syncano/acme-proxy/app/settings" + "github.com/Syncano/acme-proxy/pkg/acme" + "github.com/Syncano/acme-proxy/pkg/cert" + echo_middleware "github.com/Syncano/pkg-go/v2/echo_middleware" + "github.com/Syncano/pkg-go/v2/jobs" + "github.com/Syncano/pkg-go/v2/log" +) + +// Server defines a Web server. +type Server struct { + jobRunner *jobs.Runner + acme *acme.Client + qf *query.Factory + log *log.Logger + cert *cert.Storage + routes []*Route + user *models.User + debug bool +} + +const certRefreshName = "server.CertAutoRefresh" + +// New initializes new server. +func New(jobRunner *jobs.Runner, acmeClient *acme.Client, qf *query.Factory, logger *log.Logger, stor *cert.Storage, + email, routeFilePath string, debug bool) (*Server, error) { + // Load routes. + routesFile, err := ioutil.ReadFile(routeFilePath) + if err != nil { + return nil, err + } + + var routes []*Route + + err = yaml.Unmarshal(routesFile, &routes) + if err != nil { + return nil, err + } + + s := &Server{ + jobRunner: jobRunner, + acme: acmeClient, + qf: qf, + log: logger, + cert: stor, + routes: routes, + debug: debug, + } + + // Load user. + ctx, cancel := context.WithTimeout(context.Background(), settings.Server.UserFetchTimeout) + defer cancel() + + mgr := qf.NewUserManager(ctx) + user := &models.User{} + + err = mgr.RunInTransaction(func(tx *pg.Tx) error { + err := mgr.LockTable() + if err != nil { + return err + } + + err = mgr.First(user) + if err != nil && err != pg.ErrNoRows { + return err + } + + // If user already exists, use it. + if err == nil { + acmeUser, err := user.AcmeUser() + if err != nil { + return err + } + + _, err = acmeClient.InitializeUser(acmeUser) + + return err + } + + // Register new user. + acmeUser, err := acmeClient.InitializeUser(&acme.User{Email: email}) + if err != nil { + return err + } + + user, err = models.NewUserFromAcmeUser(acmeUser) + if err != nil { + return err + } + + err = mgr.Insert(user) + if err != nil { + return err + } + + return nil + }) + + s.user = user + + s.jobRunner.Run(&jobs.PeriodicJob{ + Name: certRefreshName, + Func: s.certAutoRefresh, + Timeout: settings.Server.CertRefreshTimeout, + Period: settings.Server.CertRefreshPeriod, + }) + + return s, err +} + +func (s *Server) HTTPServer() *http.Server { + stdlog, _ := zap.NewStdLogAt(s.log.Logger(), zap.WarnLevel) + + return &http.Server{ + ReadTimeout: settings.Server.ServerReadTimeout, + WriteTimeout: settings.Server.ServerWriteTimeout, + IdleTimeout: settings.Server.ServerIdleTimeout, + ErrorLog: stdlog, + TLSConfig: &tls.Config{ //nolint:gosec + // Causes servers to use Go's default ciphersuite preferences, + // which are tuned to avoid attacks. Does nothing on clients. + PreferServerCipherSuites: true, + // Only use curves which have assembly implementations + CurvePreferences: []tls.CurveID{ + tls.CurveP256, + tls.X25519, // Go 1.8 only + }, + MinVersion: tls.VersionTLS10, + GetCertificate: s.getCertificate, + }, + Handler: s.setupRouter(), + } +} + +func (s *Server) getCertificate(hi *tls.ClientHelloInfo) (*tls.Certificate, error) { + domain := strings.TrimSpace(strings.ToLower(hi.ServerName)) + + ctx, cancel := context.WithTimeout(context.Background(), settings.Server.CertFetchTimeout) + defer cancel() + + return s.cert.Match(domain, func(domain string) (*tls.Certificate, error) { + o := &models.Certificate{ + Domain: domain, + } + + err := s.qf.NewCertManager(ctx).OneByDomain(o) + if err != nil { + if err == pg.ErrNoRows { + return nil, nil + } + + return nil, err + } + + return o.TLSCertificate() + }) +} + +func (s *Server) setupRouter() http.Handler { + e := echo.New() + // Bottom up middlewares + e.Use( + echo_middleware.RequestID(), + middleware.CORSWithConfig(middleware.CORSConfig{MaxAge: 86400}), + echo_middleware.OpenCensus(), + sentryecho.New(sentryecho.Options{ + Repanic: true, + }), + echo_middleware.Logger(s.log), + echo_middleware.Recovery(s.log), + ) + + // Register profiling if debug is on. + // go tool pprof http://.../debug/pprof/profile + // go tool pprof http://.../debug/pprof/heap + if s.debug { + e.GET("/debug/pprof/*", echo.WrapHandler(http.DefaultServeMux)) + } + + e.GET("/.well-known/acme-challenge/:acme_key", func(c echo.Context) error { + acmeKey := c.Param("acme_key") + thumb, err := s.acme.Thumbprint() + if err != nil { + return err + } + + return c.String(http.StatusOK, fmt.Sprintf("%s.%s", acmeKey, thumb)) + }) + + e.GET("/.well-known/echo/:acme_key", func(c echo.Context) error { + return c.String(http.StatusOK, c.Param("acme_key")) + }) + + // Create proxy balancer targets. + for _, r := range s.routes { + var ( + balancer middleware.ProxyBalancer + targets []*middleware.ProxyTarget + ) + + for _, t := range r.Targets { + targets = append(targets, &middleware.ProxyTarget{ + URL: t.URL, + }) + } + + balancer = middleware.NewRoundRobinBalancer(targets) + + e.Group(r.Path, func(next echo.HandlerFunc) echo.HandlerFunc { + return func(c echo.Context) error { + h := c.Request().Header + + for k, v := range r.Headers { // nolint:scopelint + h.Set(k, v) + } + + return next(c) + } + }, middleware.ProxyWithConfig(middleware.ProxyConfig{ + Balancer: balancer, + })) + } + + return e +} diff --git a/app/server/verify.go b/app/server/verify.go new file mode 100644 index 0000000..e2efbe2 --- /dev/null +++ b/app/server/verify.go @@ -0,0 +1,43 @@ +package server + +import ( + "context" + "fmt" + "io" + "net" + "net/http" + "strings" + + "github.com/Syncano/pkg-go/v2/util" +) + +const checkKeyLength = 8 + +func (s *Server) checkDomain(ctx context.Context, domain string) error { + _, err := net.DefaultResolver.LookupHost(ctx, domain) + return err +} + +func (s *Server) verifyDomain(ctx context.Context, domain string) error { + key := util.GenerateRandomString(checkKeyLength) + + resp, err := http.NewRequestWithContext(ctx, http.MethodGet, fmt.Sprintf("http://%s/.well-known/echo/%s/", domain, key), nil) + if err != nil { + return err + } + + defer resp.Body.Close() + + buf := make([]byte, checkKeyLength) + + _, err = io.ReadFull(resp.Body, buf) + if err != nil { + return err + } + + if strings.Compare(key, string(buf)) != 0 { + return fmt.Errorf("keys mismatch") + } + + return nil +} diff --git a/app/settings/settings.go b/app/settings/settings.go new file mode 100644 index 0000000..ebae484 --- /dev/null +++ b/app/settings/settings.go @@ -0,0 +1,46 @@ +package settings + +import ( + "time" + + "github.com/caarlos0/env/v6" + + "github.com/Syncano/pkg-go/v2/util" +) + +type server struct { + UserFetchTimeout time.Duration `env:"USER_FETCH_TIMEOUT"` + CertFetchTimeout time.Duration `env:"CERT_FETCH_TIMEOUT"` + DomainVerifyTimeout time.Duration `env:"DOMAIN_VERIFY_TIMEOUT"` + + ServerReadTimeout time.Duration `env:"SERVER_READ_TIMEOUT"` + ServerWriteTimeout time.Duration `env:"SERVER_WRITE_TIMEOUT"` + ServerIdleTimeout time.Duration `env:"SERVER_IDLE_TIMEOUT"` + + AutoRefreshBatch int `env:"AUTO_REFRESH_BATCH"` + RefreshFailureThreshold int `env:"REFRESH_FAILURE_THRESHOLD"` + CertRefreshTimeout time.Duration `env:"CERT_REFRESH_TIMEOUT"` + CertRefreshPeriod time.Duration `env:"CERT_REFRESH_PERIOD"` + + CertListLimit int `env:"CERT_LIST_LIMIT"` +} + +var Server = &server{ + UserFetchTimeout: 30 * time.Second, + CertFetchTimeout: 10 * time.Second, + DomainVerifyTimeout: 5 * time.Second, + ServerReadTimeout: 1 * time.Minute, + ServerWriteTimeout: 6 * time.Minute, + ServerIdleTimeout: 2 * time.Minute, + + AutoRefreshBatch: 10, + RefreshFailureThreshold: 3, + CertRefreshTimeout: 30 * time.Second, + CertRefreshPeriod: 6 * time.Hour, + + CertListLimit: 100, +} + +func init() { + util.Must(env.Parse(Server)) +} diff --git a/app/version/version.go b/app/version/version.go new file mode 100644 index 0000000..27fe2e4 --- /dev/null +++ b/app/version/version.go @@ -0,0 +1,34 @@ +package version + +import ( + "time" + + "github.com/blang/semver" +) + +// GitSHA, buildtimeStr and versionStr are set during a build. +var ( + Buildtime time.Time + Current semver.Version + GitSHA = "dev" + buildtimeStr string + versionStr = "0.0.1" +) + +func mustParseBuildtime(buildtimeStr string) time.Time { + if buildtimeStr == "" { + return time.Now() + } + + b, err := time.Parse("2006-01-02T15:04", buildtimeStr) + if err != nil { + panic(err) + } + + return b +} + +func init() { + Current = semver.MustParse(versionStr) + Buildtime = mustParseBuildtime(buildtimeStr) +} diff --git a/app/version/version_test.go b/app/version/version_test.go new file mode 100644 index 0000000..431c79c --- /dev/null +++ b/app/version/version_test.go @@ -0,0 +1,20 @@ +package version + +import ( + "testing" + "time" + + . "github.com/smartystreets/goconvey/convey" +) + +func TestParsing(t *testing.T) { + Convey("Given some build time string", t, func() { + Convey("of proper time format, parsing succeeds", func() { + t := mustParseBuildtime("2010-02-01T11:01") + So(t, ShouldResemble, time.Date(2010, 02, 01, 11, 01, 0, 0, time.UTC)) + }) + Convey("of improper value, parsing panics", func() { + So(func() { mustParseBuildtime("bla") }, ShouldPanic) + }) + }) +} diff --git a/build/Dockerfile b/build/Dockerfile new file mode 100644 index 0000000..d2ee2a3 --- /dev/null +++ b/build/Dockerfile @@ -0,0 +1,12 @@ +FROM alpine:3.11 +ARG UID=1000 +ARG GID=1000 + +RUN set -ex \ + && addgroup -S -g $GID acme-proxy \ + && adduser -S -D -G acme-proxy -u $UID acme-proxy +COPY acme_proxy /usr/local/bin/acme_proxy + +WORKDIR /home/acme-proxy +COPY migrations /home/acme-proxy/migrations +USER acme-proxy diff --git a/build/docker-compose.yml b/build/docker-compose.yml new file mode 100644 index 0000000..8183c16 --- /dev/null +++ b/build/docker-compose.yml @@ -0,0 +1,15 @@ +version: '3' + +services: + server: + command: acme_proxy --debug server + image: syncano/acme-proxy + build: . + ports: + - "8080:8000" + depends_on: + - postgresql + - redis + environment: + - SERVICE_NAME=acme-proxy + - TRACING_SAMPLING=1 diff --git a/cmd/app.go b/cmd/app.go new file mode 100644 index 0000000..ddbe42f --- /dev/null +++ b/cmd/app.go @@ -0,0 +1,186 @@ +package cmd + +import ( + _ "expvar" // Register expvar default http handler. + "math/rand" + "runtime" + "time" + + "contrib.go.opencensus.io/exporter/jaeger" + "github.com/getsentry/sentry-go" + "github.com/go-redis/redis/v7" + "github.com/urfave/cli/v2" + "go.opencensus.io/trace" + "go.uber.org/zap" + "go.uber.org/zap/zapcore" + "go.uber.org/zap/zapgrpc" + "google.golang.org/grpc/grpclog" + + "github.com/Syncano/acme-proxy/app/version" + "github.com/Syncano/pkg-go/v2/database" + "github.com/Syncano/pkg-go/v2/log" + "github.com/Syncano/pkg-go/v2/rediscache" + "github.com/Syncano/pkg-go/v2/rediscli" +) + +var ( + // App is the main structure of a cli application. + App = cli.NewApp() + + dbOptions = database.DefaultOptions + redisOptions = redis.Options{} + + db *database.DB + jaegerExporter *jaeger.Exporter + storRedis *rediscli.Redis + cache *rediscache.Cache + logger *log.Logger +) + +func init() { + App.Name = "acme-proxy" + App.Usage = "Application that enables running user provided unsecure code in a secure docker environment." + App.Compiled = version.Buildtime + App.Version = version.Current.String() + App.Authors = []*cli.Author{ + { + Name: "Robert Kopaczewski", + Email: "rk@23doors.com", + }, + } + App.Copyright = "Syncano" + App.Flags = []cli.Flag{ + &cli.StringFlag{ + Name: "log-level", Usage: "logging level", + EnvVars: []string{"LOG_LEVEL"}, Value: zapcore.InfoLevel.String(), + }, + &cli.IntFlag{ + Name: "metrics-port", Aliases: []string{"mp"}, Usage: "port for metrics", + EnvVars: []string{"METRICS_PORT"}, Value: 9080, + }, + &cli.BoolFlag{ + Name: "debug", Usage: "enable debug mode", + EnvVars: []string{"DEBUG"}, + }, + + // Database options. + &cli.StringFlag{ + Name: "db-name", Usage: "database name", + EnvVars: []string{"DB_NAME", "PGDATABASE"}, Value: "acme-proxy", Destination: &dbOptions.Database, + }, + &cli.StringFlag{ + Name: "db-user", Usage: "database user", + EnvVars: []string{"DB_USER", "PGUSER"}, Value: "acme-proxy", Destination: &dbOptions.User, + }, + &cli.StringFlag{ + Name: "db-pass", Usage: "database password", + EnvVars: []string{"DB_PASS", "PGPASSWORD"}, Value: "acme-proxy", Destination: &dbOptions.Password, + }, + &cli.StringFlag{ + Name: "db-host", Usage: "database host", + EnvVars: []string{"DB_HOST", "PGHOST"}, Value: "postgresql", Destination: &dbOptions.Host, + }, + &cli.StringFlag{ + Name: "db-port", Usage: "database port", + EnvVars: []string{"DB_PORT", "PGPORT"}, Value: "5432", Destination: &dbOptions.Port, + }, + + // Tracing options. + &cli.StringFlag{ + Name: "jaeger-collector-endpoint", Usage: "jaeger collector endpoint", + EnvVars: []string{"JAEGER_COLLECTOR_ENDPOINT"}, Value: "http://jaeger:14268/api/traces", + }, + &cli.Float64Flag{ + Name: "tracing-sampling", Usage: "tracing sampling probability value", + EnvVars: []string{"TRACING_SAMPLING"}, Value: 0, + }, + &cli.StringFlag{ + Name: "service-name", Aliases: []string{"n"}, Usage: "service name", + EnvVars: []string{"SERVICE_NAME"}, Value: "acme-proxy", + }, + + // Redis options. + &cli.StringFlag{ + Name: "redis-addr", Usage: "redis TCP address", + EnvVars: []string{"REDIS_ADDR"}, Value: "redis:6379", Destination: &redisOptions.Addr, + }, + } + + App.Before = func(c *cli.Context) error { + // Initialize random seed. + rand.Seed(time.Now().UnixNano()) + + numCPUs := runtime.NumCPU() + runtime.GOMAXPROCS(numCPUs + 1) // numCPUs hot threads + one for async tasks. + + // Initialize logging. + if err := sentry.Init(sentry.ClientOptions{}); err != nil { + return err + } + + var err error + if logger, err = log.New(sentry.CurrentHub().Client(), + log.WithLogLevel(c.String("log_level")), + log.WithDebug(c.Bool("debug")), + ); err != nil { + return err + } + + logg := logger.Logger() + + // Set grpc logger. + var zapgrpcOpts []zapgrpc.Option + if c.Bool("debug") { + zapgrpcOpts = append(zapgrpcOpts, zapgrpc.WithDebug()) + } + + grpclog.SetLogger(zapgrpc.NewLogger(logg, zapgrpcOpts...)) // nolint: staticcheck + + // Initialize tracing. + jaegerExporter, err = jaeger.NewExporter(jaeger.Options{ + CollectorEndpoint: c.String("jaeger-collector-endpoint"), + Process: jaeger.Process{ + ServiceName: c.String("service-name"), + }, + OnError: func(err error) { + logg.With(zap.Error(err)).Warn("Jaeger tracing error") + }, + }) + if err != nil { + logg.With(zap.Error(err)).Fatal("Jaeger exporter misconfiguration") + } + + trace.RegisterExporter(jaegerExporter) + trace.ApplyConfig(trace.Config{ + DefaultSampler: trace.ProbabilitySampler(c.Float64("tracing-sampling")), + }) + + return nil + } + App.After = func(c *cli.Context) error { + // Redis teardown. + if storRedis != nil { + storRedis.Shutdown() // nolint: errcheck + } + + // Database teardown. + if db != nil { + db.Shutdown() // nolint: errcheck + } + + // Sync loggers. + if logger != nil { + logger.Sync() + } + + // Close tracing reporter. + if jaegerExporter != nil { + jaegerExporter.Flush() + } + + // Flush remaining sentry events. + sentry.Flush(5 * time.Second) + + return nil + } +} diff --git a/cmd/db.go b/cmd/db.go new file mode 100644 index 0000000..f03e5da --- /dev/null +++ b/cmd/db.go @@ -0,0 +1,70 @@ +package cmd + +import ( + "database/sql" + "fmt" + + _ "github.com/lib/pq" // add pq to binary + "github.com/pressly/goose" + "github.com/urfave/cli/v2" + "go.uber.org/zap" + + "github.com/Syncano/acme-proxy/app/version" +) + +const usageCommands = ` +Commands: + create NAME [go|sql] Create new migration + up Migrate the DB to the most recent version available + up-to VERSION Migrate the DB to a specific VERSION + down Roll back the version by 1 + down-to VERSION Roll back to a specific VERSION + redo Re-run the latest migration + status Dump the migration status for the current DB + version Print the current version of the database +` + +var migrationCmd = &cli.Command{ + Name: "db", + Usage: "Migrate acme proxy server database structure.", + Flags: []cli.Flag{ + &cli.StringFlag{ + Name: "dir", Usage: "migration directory", + EnvVars: []string{"MIGRATION_DIR"}, Value: "./migrations", + }, + }, + Action: func(c *cli.Context) error { + db, err := sql.Open("postgres", + fmt.Sprintf("postgres://%s:%s@%s:%s/%s?sslmode=disable", + dbOptions.User, dbOptions.Password, c.String("db-host"), c.String("db-port"), dbOptions.Database), + ) + if err != nil { + return err + } + + if !c.Args().Present() { + fmt.Println(usageCommands) + + return nil + } + + stdlog, _ := zap.NewStdLogAt(logger.Logger(), zap.InfoLevel) + goose.SetLogger(stdlog) + + logg := logger.Logger() + + if c.Args().First() == "up" { + logg.With( + zap.String("version", App.Version), + zap.String("gitsha", version.GitSHA), + zap.Time("buildtime", App.Compiled), + ).Info("Migration starting") + } + + return goose.Run(c.Args().First(), db, c.String("dir"), c.Args().Tail()...) + }, +} + +func init() { + App.Commands = append(App.Commands, migrationCmd) +} diff --git a/cmd/server.go b/cmd/server.go new file mode 100644 index 0000000..edd0307 --- /dev/null +++ b/cmd/server.go @@ -0,0 +1,269 @@ +package cmd + +import ( + "context" + "fmt" + "net" + "net/http" + "os" + "os/signal" + "syscall" + "time" + + "contrib.go.opencensus.io/exporter/prometheus" + "github.com/bsm/redislock" + lego_log "github.com/go-acme/lego/v3/log" + "github.com/urfave/cli/v2" + "go.opencensus.io/plugin/ocgrpc" + "go.opencensus.io/plugin/ochttp" + "go.opencensus.io/stats/view" + "go.uber.org/zap" + "google.golang.org/grpc" + + "github.com/Syncano/acme-proxy/app/query" + "github.com/Syncano/acme-proxy/app/server" + "github.com/Syncano/acme-proxy/app/version" + "github.com/Syncano/acme-proxy/pkg/acme" + "github.com/Syncano/acme-proxy/pkg/cert" + "github.com/Syncano/pkg-go/v2/database" + "github.com/Syncano/pkg-go/v2/jobs" + "github.com/Syncano/pkg-go/v2/rediscache" + "github.com/Syncano/pkg-go/v2/rediscli" + pb "github.com/Syncano/syncanoapis/gen/go/syncano/hosting/acme/v1" +) + +var serverCmd = &cli.Command{ + Name: "server", + Usage: "Starts acme proxy server.", + Flags: []cli.Flag{ + &cli.IntFlag{ + Name: "http-port", Usage: "port for http", + EnvVars: []string{"HTTP_PORT"}, Value: 8000, + }, + &cli.IntFlag{ + Name: "https-port", Usage: "port for https", + EnvVars: []string{"HTTPS_PORT"}, Value: 8010, + }, + &cli.IntFlag{ + Name: "grpc-port", Usage: "port for grpc", + EnvVars: []string{"GRPC_PORT"}, Value: 9000, + }, + + // Acme settings. + &cli.StringFlag{ + Name: "acme-email", Usage: "acme email", + EnvVars: []string{"ACME_EMAIL"}, Value: "test@example.com", + }, + &cli.StringFlag{ + Name: "acme-ca-dir", Usage: "acme CA directory", + EnvVars: []string{"ACME_CA_DIR"}, Value: "https://acme-staging-v02.api.letsencrypt.org/directory", + }, + + // Cert storage settings. + &cli.BoolFlag{ + Name: "local-certs-enabled", Usage: "load local certs from certs path on start", + EnvVars: []string{"LOCAL_CERTS_ENABLED"}, Value: true, + }, + &cli.DurationFlag{ + Name: "local-certs-refresh-period", Usage: "local certs refresh period", + EnvVars: []string{"LOCAL_CERTS_REFRESH_PERIOD"}, Value: 12 * time.Hour, + }, + &cli.StringFlag{ + Name: "local-certs-path", Usage: "certs path to load", + EnvVars: []string{"LOCAL_CERTS_PATH"}, Value: "./certs", + }, + &cli.StringFlag{ + Name: "cert-default", Usage: "default cert server name to use as a fallback", + EnvVars: []string{"CERT_DEFAULT"}, + }, + + // Proxy settings. + &cli.StringFlag{ + Name: "routes-file", Usage: "routes file path", + EnvVars: []string{"ROUTES_FILE"}, Value: "./routes.yaml", + }, + + // Cache settings. + &cli.IntFlag{ + Name: "cache-version", Usage: "cache version", + EnvVars: []string{"CACHE_VERSION"}, Value: 1, + }, + &cli.DurationFlag{ + Name: "cache-timeout", Usage: "cache timeout", + EnvVars: []string{"CACHE_TIMEOUT"}, Value: 12 * time.Hour, + }, + &cli.DurationFlag{ + Name: "local-cache-timeout", Usage: "local cache version", + EnvVars: []string{"LOCAL_CACHE_TIMEOUT"}, Value: 1 * time.Hour, + }, + }, + Action: func(c *cli.Context) error { + logg := logger.Logger() + + // Setup prometheus handler. + exporter, err := prometheus.NewExporter(prometheus.Options{}) + if err != nil { + logg.With(zap.Error(err)).Fatal("Prometheus exporter misconfiguration") + } + + var views []*view.View + views = append(views, ochttp.DefaultClientViews...) + views = append(views, ochttp.DefaultServerViews...) + views = append(views, ocgrpc.DefaultClientViews...) + views = append(views, ocgrpc.DefaultServerViews...) + + if err := view.Register(views...); err != nil { + logg.With(zap.Error(err)).Fatal("Opencensus views registration failed") + } + + // Serve prometheus metrics. + http.Handle("/metrics", exporter) + + // Setup health check. + http.HandleFunc("/health", func(w http.ResponseWriter, r *http.Request) { + w.WriteHeader(200) + }) + + // Initialize database client. + db = database.NewDB(&dbOptions, nil, logger, c.Bool("debug")) + + // Initialize redis client. + storRedis = rediscli.NewRedis(&redisOptions) + cache = rediscache.New(storRedis.Client(), db, + rediscache.WithServiceKey("acme"), + rediscache.WithTimeout(c.Duration("local-cache-timeout"), c.Duration("cache-timeout")), + rediscache.WithVersion(c.Int("cache-version")), + ) + + logg.With( + zap.String("version", App.Version), + zap.String("gitsha", version.GitSHA), + zap.Time("buildtime", App.Compiled), + ).Info("Server starting") + + // Initialize query factory. + qf := query.NewFactory(db, cache) + + // Initialize jobRunner + jobRunner := jobs.New(logg, storRedis.Client(), jobs.WithServiceKey("acme")) + + // Initialize acme client. + lego_log.Logger, _ = zap.NewStdLogAt(logger.Logger(), zap.DebugLevel) + + locker := redislock.New(storRedis.Client()) + acmeClient := acme.NewClient( + c.String("acme-ca-dir"), + cache, locker, logger) + + // Initialize cert storage. + stor := cert.NewStorage( + c.String("cert-default"), + cache) + if c.Bool("local-certs-enabled") { + path := c.String("local-certs-path") + + if err := stor.LoadDir(path); err != nil { + return err + } + + go func() { + timer := time.NewTimer(c.Duration("local-certs-refresh-period")) + + for { + <-timer.C + if err := stor.LoadDir(path); err != nil { + logg.With(zap.Error(err)).Error("Load certificates during refresh") + } + } + }() + } + + // Create new http server. + srv, err := server.New( + jobRunner, + acmeClient, + qf, + logger, + stor, + c.String("acme-email"), + c.String("routes-file"), + c.Bool("debug")) + if err != nil { + return err + } + + webServer := srv.HTTPServer() + + httpLis, err := net.Listen("tcp", fmt.Sprintf(":%d", c.Int("http-port"))) + if err != nil { + return err + } + + httpsLis, err := net.Listen("tcp", fmt.Sprintf(":%d", c.Int("https-port"))) + if err != nil { + return err + } + + go func() { + if err := webServer.Serve(httpLis); err != nil && err != http.ErrServerClosed { + logg.With(zap.Error(err)).Fatal("HTTP serve error") + } + }() + go func() { + if err := webServer.ServeTLS(httpsLis, "", ""); err != nil && err != http.ErrServerClosed { + logg.With(zap.Error(err)).Fatal("HTTPS serve error") + } + }() + + logg.With( + zap.Int("http-port", c.Int("http-port")), + zap.Int("https-port", c.Int("https-port"))).Info("Serving web") + + // Create new grpc server. + grpcLis, err := net.Listen("tcp", fmt.Sprintf(":%d", c.Int("grpc-port"))) + if err != nil { + return err + } + grpcServer := grpc.NewServer( + grpc.StatsHandler(&ocgrpc.ServerHandler{}), + ) + + // Register all servers. + pb.RegisterAcmeProxyServer(grpcServer, srv) + + // Serve a new gRPC service. + go func() { + if err = grpcServer.Serve(grpcLis); err != nil && err != grpc.ErrServerStopped { + logg.With(zap.Error(err)).Fatal("gRPC serve error") + } + }() + logg.With(zap.Int("port", c.Int("grpc-port"))).Info("Serving gRPC") + + // Serve metrics. + logg.With(zap.Int("metrics-port", c.Int("metrics-port"))).Info("Serving http for metrics") + metricsServer := http.Server{Addr: fmt.Sprintf(":%d", c.Int("metrics-port"))} + + go func() { + if err := metricsServer.ListenAndServe(); err != nil && err != http.ErrServerClosed { + logg.With(zap.Error(err)).Fatal("Serve error") + } + }() + + // Handle SIGINT and SIGTERM. + ch := make(chan os.Signal, 1) + signal.Notify(ch, syscall.SIGINT, syscall.SIGTERM) + <-ch + + // Graceful shutdown. + logg.Info("Shutting down") + jobRunner.GracefulStop() + metricsServer.Shutdown(context.Background()) // nolint: errcheck + webServer.Shutdown(context.Background()) // nolint: errcheck + grpcServer.GracefulStop() + return nil + }, +} + +func init() { + App.Commands = append(App.Commands, serverCmd) +} diff --git a/deploy.sh b/deploy.sh new file mode 100755 index 0000000..68c6641 --- /dev/null +++ b/deploy.sh @@ -0,0 +1,125 @@ +#!/usr/bin/env bash +export DOCKERIMAGE=${DOCKERIMAGE:-syncano/acme-proxy} +export VERSION="$2" + +TARGET="$1" +PUSH=true +MIGRATIONS=false + +usage() { echo "* Usage: $0 [--skip-gitlog][--skip-push][--migration]" >&2; exit 1; } +[[ -n $TARGET ]] || usage +[[ -n $VERSION ]] || usage + +set -euo pipefail + +if ! command -v kubectl > /dev/null; then + echo "! kubectl not installed" >&2; exit 1 +fi + +if [[ ! -f "deploy/env/${TARGET}.env" ]]; then + echo "! environment ${TARGET} does not exist in deploy/env/"; exit 1 +fi + + +# Parse last git message (for PR integration). +GITLOG=$(git log -1) +[[ $GITLOG == *"[migration]"* ]] && MIGRATIONS=true + +# Parse arguments. +for PARAM in "${@:3}"; do + case $PARAM in + --migration) + MIGRATIONS=true + ;; + --skip-push) + PUSH=false + ;; + *) + usage + ;; + esac +done + +envsubst() { + for var in $(compgen -e); do + echo "$var: \"${!var//\"/\\\"}\"" + done | PYTHONWARNINGS=ignore jinja2 "$1" +} + + +echo "* Starting deployment for $TARGET at $VERSION for $DOCKERIMAGE." + +# Setup environment variables. +set -a +# shellcheck disable=SC1090 +source deploy/env/"${TARGET}".env +set +a +BUILDTIME=$(date +%Y-%m-%dT%H%M) +export BUILDTIME + + +# Push docker image. +if $PUSH; then + echo "* Tagging $DOCKERIMAGE $VERSION." + docker tag "$DOCKERIMAGE" "$DOCKERIMAGE":"$VERSION" + + echo "* Pushing $DOCKERIMAGE:$VERSION." + docker push "$DOCKERIMAGE":"$VERSION" +fi + +IMAGE="$DOCKERIMAGE":"$VERSION" +export IMAGE + + +# Create configmap. +echo "* Updating ConfigMap." +CONFIGMAP="apiVersion: v1\nkind: ConfigMap\nmetadata:\n name: acme-proxy\ndata:\n" +while read -r line; do + if [[ -n "${line}" && "${line}" != "#"* ]]; then + CONFIGMAP+=" ${line%%=*}: \"${line#*=}\"\n" + fi +done < deploy/env/"${TARGET}".env +echo -e "$CONFIGMAP" | kubectl apply -f - + +kubectl create configmap acme-proxy-routes --from-file=deploy/routes.yaml -o yaml --dry-run | kubectl apply -f - + + +# Migrate database. +if $MIGRATIONS; then + echo "* Starting migration job." + kubectl delete job/acme-proxy-migration 2>/dev/null || true + envsubst deploy/yaml/migration-job.yml.j2 | kubectl apply -f - + + for _ in {1..300}; do + echo ". Waiting for migration job." + sleep 1 + PODNAME=$(kubectl get pods -l job-name=acme-proxy-migration -a --sort-by=.status.startTime -o name 2>/dev/null | tail -n1) + [ -z "$PODNAME" ] && continue + + kubectl attach "$PODNAME" 2> /dev/null || true + SUCCESS=$(kubectl get jobs acme-proxy-migration -o jsonpath='{.status.succeeded}' 2>/dev/null | grep -v 0 || true) + [ -n "$SUCCESS" ] && break + done + + if [ -z "$SUCCESS" ]; then + echo "! Migration failed!" + exit 1 + fi + kubectl delete job/acme-proxy-migration +fi + +# Start with deployment (server). +echo "* Deploying Server." +REPLICAS=$(kubectl get deployment/acme-proxy -o jsonpath='{.spec.replicas}' 2>/dev/null || echo "${WEB_MIN}") +export REPLICAS +envsubst deploy/yaml/server-deployment.yml.j2 | kubectl apply -f - +envsubst deploy/yaml/server-hpa.yml.j2 | kubectl apply -f - + +echo "* Deploying Service for Server." +envsubst deploy/yaml/server-internal-service.yml.j2 | kubectl apply -f - +envsubst deploy/yaml/server-service.yml.j2 | kubectl apply -f - + +# Wait for server deployments to finish. +echo +echo ". Waiting for deployment to finish..." +kubectl rollout status deployment/acme-proxy diff --git a/deploy/env/eu1.env b/deploy/env/eu1.env new file mode 100644 index 0000000..01a4f28 --- /dev/null +++ b/deploy/env/eu1.env @@ -0,0 +1,3 @@ +CERT_DEFAULT="wildcard.eu1.syncano.space" +DEBUG=0 +SENTRY_ENVIRONMENT=eu1 diff --git a/deploy/env/staging.env b/deploy/env/staging.env new file mode 100644 index 0000000..75712de --- /dev/null +++ b/deploy/env/staging.env @@ -0,0 +1,2 @@ +CERT_DEFAULT="wildcard.syncano.site" +DEBUG=1 diff --git a/deploy/routes.yaml b/deploy/routes.yaml new file mode 100644 index 0000000..47a400d --- /dev/null +++ b/deploy/routes.yaml @@ -0,0 +1,4 @@ +- path: "/*" + headers: {} + targets: + - http://nginx-ingress-controller.ingress:80 diff --git a/deploy/yaml/migration-job.yml.j2 b/deploy/yaml/migration-job.yml.j2 new file mode 100644 index 0000000..7c580e7 --- /dev/null +++ b/deploy/yaml/migration-job.yml.j2 @@ -0,0 +1,29 @@ +kind: Job +apiVersion: batch/v1 +metadata: + name: acme-proxy-migration +spec: + template: + metadata: + name: acme-proxy-migration + spec: + restartPolicy: Never + containers: + - name: acme-proxy + image: {{ IMAGE }} + command: + - "acme-proxy" + - "db" + - "up" + resources: + requests: + memory: "256Mi" + cpu: 250m + limits: + memory: "512Mi" + cpu: 500m + envFrom: + - configMapRef: + name: acme-proxy + - secretRef: + name: acme-proxy-db-credentials diff --git a/deploy/yaml/server-deployment.yml.j2 b/deploy/yaml/server-deployment.yml.j2 new file mode 100644 index 0000000..f743db9 --- /dev/null +++ b/deploy/yaml/server-deployment.yml.j2 @@ -0,0 +1,81 @@ +kind: Deployment +apiVersion: apps/v1 +metadata: + name: acme-proxy + labels: + app: acme-proxy +spec: + replicas: {{ REPLICAS }} + selector: + matchLabels: + app: acme-proxy + + template: + metadata: + labels: + buildtime: {{ BUILDTIME }} + app: acme-proxy + spec: + terminationGracePeriodSeconds: 360 + imagePullSecrets: + - name: syncano-k8s-pull-secret + securityContext: + fsGroup: 1000 + containers: + - name: proxy + image: {{ IMAGE }} + command: + - "acme_proxy" + - "server" + securityContext: + runAsGroup: 1000 + runAsNonRoot: true + runAsUser: 1000 + resources: + requests: + memory: "256Mi" + cpu: 100m + limits: + memory: "512Mi" + cpu: 250m + ports: + - name: http + containerPort: 8000 + - name: https + containerPort: 8010 + - name: grpc + containerPort: 9000 + - name: http-metrics + containerPort: 9080 + env: + - name: SERVICE_NAME + value: acme-proxy + - name: ROUTES_FILE + value: /etc/acme-proxy/routes/routes.yaml + - name: LOCAL_CERTS_PATH + value: /etc/acme-proxy/certs/ + envFrom: + - configMapRef: + name: acme-proxy + - secretRef: + name: acme-proxy-db-credentials + livenessProbe: + httpGet: + path: /health + port: 9080 + initialDelaySeconds: 5 + + volumeMounts: + - name: routes + mountPath: /etc/acme-proxy/routes + - name: hosting-tls + mountPath: /etc/acme-proxy/certs/hosting + volumes: + - name: routes + configMap: + name: acme-proxy-routes + defaultMode: 0744 + - name: hosting-cert + secret: + name: hosting-tls + defaultMode: 0744 diff --git a/deploy/yaml/server-hpa.yml.j2 b/deploy/yaml/server-hpa.yml.j2 new file mode 100644 index 0000000..8659aed --- /dev/null +++ b/deploy/yaml/server-hpa.yml.j2 @@ -0,0 +1,18 @@ +apiVersion: autoscaling/v2beta2 +kind: HorizontalPodAutoscaler +metadata: + name: acme-proxy +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: acme-proxy + minReplicas: {{ SERVER_MIN }} + maxReplicas: {{ SERVER_MAX }} + metrics: + - type: Resource + resource: + name: cpu + target: + type: Utilization + averageUtilization: 80 diff --git a/deploy/yaml/server-internal-service.yml.j2 b/deploy/yaml/server-internal-service.yml.j2 new file mode 100644 index 0000000..7fcf14d --- /dev/null +++ b/deploy/yaml/server-internal-service.yml.j2 @@ -0,0 +1,19 @@ +kind: Service +apiVersion: v1 +metadata: + name: acme-proxy-internal + labels: + k8s-app: acme-proxy +spec: + type: ClusterIP + selector: + app: acme-proxy + ports: + - name: grpc + protocol: TCP + port: 8000 + targetPort: grpc + - name: http-metrics + protocol: TCP + port: 9080 + targetPort: http-metrics diff --git a/deploy/yaml/server-service.yml.j2 b/deploy/yaml/server-service.yml.j2 new file mode 100644 index 0000000..3f9661c --- /dev/null +++ b/deploy/yaml/server-service.yml.j2 @@ -0,0 +1,19 @@ +kind: Service +apiVersion: v1 +metadata: + name: acme-proxy + labels: + k8s-app: acme-proxy +spec: + type: LoadBalancer + selector: + app: acme-proxy + ports: + - name: http + protocol: TCP + port: 80 + targetPort: http + - name: https + protocol: TCP + port: 443 + targetPort: https diff --git a/docker-compose.yml b/docker-compose.yml new file mode 100644 index 0000000..9fc8f7a --- /dev/null +++ b/docker-compose.yml @@ -0,0 +1,47 @@ +version: '3' + +services: + server: + command: go run main.go --debug server + build: . + image: acme_app + volumes: + - .:/opt/build + environment: + SERVICE_NAME: acme-proxy + + postgresql: + image: mdillon/postgis:11-alpine + environment: + - POSTGRES_USER=acme-proxy + - POSTGRES_PASSWORD=acme-proxy + - POSTGRES_DB=acme-proxy + - PGDATA=/var/lib/postgresql/data/pgdata + volumes: + - ./db/:/docker-entrypoint-initdb.d/ + ports: + - "5432" + + redis: + image: redis:5-alpine + volumes: + - data-redis:/data + ports: + - "6379" + + jaeger: + image: jaegertracing/all-in-one:1.17 + environment: + - COLLECTOR_ZIPKIN_HTTP_PORT=9411 + ports: + - "5775" + - "6831" + - "6832" + - "5778" + - "16686:16686" + - "14268:14268" + - "14250" + - "9411:9411" + +volumes: + data-redis: diff --git a/go.mod b/go.mod new file mode 100644 index 0000000..11b33a0 --- /dev/null +++ b/go.mod @@ -0,0 +1,36 @@ +module github.com/Syncano/acme-proxy + +go 1.15 + +require ( + contrib.go.opencensus.io/exporter/jaeger v0.2.1 + contrib.go.opencensus.io/exporter/prometheus v0.2.0 + github.com/Syncano/pkg-go/v2 v2.7.4 + github.com/Syncano/syncanoapis/gen v1.2.0 + github.com/blang/semver v3.5.1+incompatible + github.com/bsm/redislock v0.5.0 + github.com/caarlos0/env/v6 v6.3.0 + github.com/cespare/reflex v0.3.0 + github.com/cpuguy83/go-md2man/v2 v2.0.0 // indirect + github.com/getsentry/sentry-go v0.7.0 + github.com/go-acme/lego/v3 v3.8.0 + github.com/go-pg/pg/v9 v9.1.7 + github.com/go-redis/redis/v7 v7.4.0 + github.com/golang/protobuf v1.4.2 + github.com/json-iterator/go v1.1.10 + github.com/labstack/echo/v4 v4.1.17 + github.com/lib/pq v1.8.0 + github.com/pressly/goose v2.6.0+incompatible + github.com/prometheus/client_golang v1.7.1 // indirect + github.com/shopspring/decimal v1.2.0 // indirect + github.com/smartystreets/goconvey v1.6.4 + github.com/urfave/cli/v2 v2.2.0 + github.com/vektra/mockery v1.1.2 + go.opencensus.io v0.22.4 + go.uber.org/zap v1.15.0 + golang.org/x/tools v0.0.0-20200828161849-5deb26317202 + google.golang.org/grpc v1.31.1 + google.golang.org/protobuf v1.25.0 + gopkg.in/square/go-jose.v2 v2.5.1 + gopkg.in/yaml.v2 v2.3.0 +) diff --git a/go.sum b/go.sum new file mode 100644 index 0000000..01f6a95 --- /dev/null +++ b/go.sum @@ -0,0 +1,1053 @@ +cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= +cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= +cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU= +cloud.google.com/go v0.44.1/go.mod h1:iSa0KzasP4Uvy3f1mN/7PiObzGgflwredwwASm/v6AU= +cloud.google.com/go v0.44.2/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY= +cloud.google.com/go v0.45.1/go.mod h1:RpBamKRgapWJb87xiFSdk4g1CME7QZg3uwTez+TSTjc= +cloud.google.com/go v0.46.3/go.mod h1:a6bKKbmY7er1mI7TEI4lsAkts/mkhTSZK8w33B4RAg0= +cloud.google.com/go v0.50.0/go.mod h1:r9sluTvynVuxRIOHXQEHMFffphuXHOMZMycpNR5e6To= +cloud.google.com/go v0.52.0/go.mod h1:pXajvRH/6o3+F9jDHZWQ5PbGhn+o8w9qiu/CffaVdO4= +cloud.google.com/go v0.53.0/go.mod h1:fp/UouUEsRkN6ryDKNW/Upv/JBKnv6WDthjR6+vze6M= +cloud.google.com/go v0.54.0/go.mod h1:1rq2OEkV3YMf6n/9ZvGWI3GWw0VoqH/1x2nd8Is/bPc= +cloud.google.com/go v0.56.0/go.mod h1:jr7tqZxxKOVYizybht9+26Z/gUq7tiRzu+ACVAMbKVk= +cloud.google.com/go v0.57.0 h1:EpMNVUorLiZIELdMZbCYX/ByTFCdoYopYAGxaGVz9ms= +cloud.google.com/go v0.57.0/go.mod h1:oXiQ6Rzq3RAkkY7N6t3TcE6jE+CIBBbA36lwQ1JyzZs= +cloud.google.com/go v0.62.0/go.mod h1:jmCYTdRCQuc1PHIIJ/maLInMho30T/Y0M4hTdTShOYc= +cloud.google.com/go/bigquery v1.0.1/go.mod h1:i/xbL2UlR5RvWAURpBYZTtm/cXjCha9lbfbpx4poX+o= +cloud.google.com/go/bigquery v1.3.0/go.mod h1:PjpwJnslEMmckchkHFfq+HTD2DmtT67aNFKH1/VBDHE= +cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvftPBK2Dvzc= +cloud.google.com/go/bigquery v1.5.0/go.mod h1:snEHRnqQbz117VIFhE8bmtwIDY80NLUZUMb4Nv6dBIg= +cloud.google.com/go/bigquery v1.7.0 h1:a/O/bK/vWrYGOTFtH8di4rBxMZnmkjy+Y5LxpDwo+dA= +cloud.google.com/go/bigquery v1.7.0/go.mod h1://okPTzCYNXSlb24MZs83e2Do+h+VXtc4gLoIoXIAPc= +cloud.google.com/go/bigquery v1.8.0/go.mod h1:J5hqkt3O0uAFnINi6JXValWIb1v0goeZM77hZzJN/fQ= +cloud.google.com/go/datastore v1.0.0/go.mod h1:LXYbyblFSglQ5pkeyhO+Qmw7ukd3C+pD7TKLgZqpHYE= +cloud.google.com/go/datastore v1.1.0 h1:/May9ojXjRkPBNVrq+oWLqmWCkr4OU5uRY29bu0mRyQ= +cloud.google.com/go/datastore v1.1.0/go.mod h1:umbIZjpQpHh4hmRpGhH4tLFup+FVzqBi1b3c64qFpCk= +cloud.google.com/go/pubsub v1.0.1/go.mod h1:R0Gpsv3s54REJCy4fxDixWD93lHJMoZTyQ2kNxGRt3I= +cloud.google.com/go/pubsub v1.1.0/go.mod h1:EwwdRX2sKPjnvnqCa270oGRyludottCI76h+R3AArQw= +cloud.google.com/go/pubsub v1.2.0/go.mod h1:jhfEVHT8odbXTkndysNHCcx0awwzvfOlguIAii9o8iA= +cloud.google.com/go/pubsub v1.3.1 h1:ukjixP1wl0LpnZ6LWtZJ0mX5tBmjp1f8Sqer8Z2OMUU= +cloud.google.com/go/pubsub v1.3.1/go.mod h1:i+ucay31+CNRpDW4Lu78I4xXG+O1r/MAHgjpRVR+TSU= +cloud.google.com/go/storage v1.0.0/go.mod h1:IhtSnM/ZTZV8YYJWCY8RULGVqBDmpoyjwiyrjsg+URw= +cloud.google.com/go/storage v1.5.0/go.mod h1:tpKbwo567HUNpVclU5sGELwQWBDZ8gh0ZeosJ0Rtdos= +cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohlUTyfDhBk= +cloud.google.com/go/storage v1.8.0 h1:86K1Gel7BQ9/WmNWn7dTKMvTLFzwtBe5FNqYbi9X35g= +cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs= +cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9ullr3+Kg0= +contrib.go.opencensus.io/exporter/jaeger v0.2.1 h1:yGBYzYMewVL0yO9qqJv3Z5+IRhPdU7e9o/2oKpX4YvI= +contrib.go.opencensus.io/exporter/jaeger v0.2.1/go.mod h1:Y8IsLgdxqh1QxYxPC5IgXVmBaeLUeQFfBeBi9PbeZd0= +contrib.go.opencensus.io/exporter/ocagent v0.4.12/go.mod h1:450APlNTSR6FrvC3CTRqYosuDstRB9un7SOx2k/9ckA= +contrib.go.opencensus.io/exporter/prometheus v0.2.0 h1:9PUk0/8V0LGoPqVCrf8fQZJkFGBxudu8jOjQSMwoD6w= +contrib.go.opencensus.io/exporter/prometheus v0.2.0/go.mod h1:TYmVAyE8Tn1lyPcltF5IYYfWp2KHu7lQGIZnj8iZMys= +dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU= +github.com/AndreasBriese/bbloom v0.0.0-20190306092124-e2d15f34fcf9/go.mod h1:bOvUY6CB00SOBii9/FifXqc0awNKxLFCL/+pkDPuyl8= +github.com/Azure/azure-sdk-for-go v32.4.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc= +github.com/Azure/go-autorest/autorest v0.1.0/go.mod h1:AKyIcETwSUFxIcs/Wnq/C+kwCtlEYGUVd7FPNb2slmg= +github.com/Azure/go-autorest/autorest v0.5.0/go.mod h1:9HLKlQjVBH6U3oDfsXOeVc56THsLPw1L03yban4xThw= +github.com/Azure/go-autorest/autorest/adal v0.1.0/go.mod h1:MeS4XhScH55IST095THyTxElntu7WqB7pNbZo8Q5G3E= +github.com/Azure/go-autorest/autorest/adal v0.2.0/go.mod h1:MeS4XhScH55IST095THyTxElntu7WqB7pNbZo8Q5G3E= +github.com/Azure/go-autorest/autorest/azure/auth v0.1.0/go.mod h1:Gf7/i2FUpyb/sGBLIFxTBzrNzBo7aPXXE3ZVeDRwdpM= +github.com/Azure/go-autorest/autorest/azure/cli v0.1.0/go.mod h1:Dk8CUAt/b/PzkfeRsWzVG9Yj3ps8mS8ECztu43rdU8U= +github.com/Azure/go-autorest/autorest/date v0.1.0/go.mod h1:plvfp3oPSKwf2DNjlBjWF/7vwR+cUD/ELuzDCXwHUVA= +github.com/Azure/go-autorest/autorest/mocks v0.1.0/go.mod h1:OTyCOPRA2IgIlWxVYxBee2F5Gr4kF2zd2J5cFRaIDN0= +github.com/Azure/go-autorest/autorest/to v0.2.0/go.mod h1:GunWKJp1AEqgMaGLV+iocmRAJWqST1wQYhyyjXJ3SJc= +github.com/Azure/go-autorest/autorest/validation v0.1.0/go.mod h1:Ha3z/SqBeaalWQvokg3NZAlQTalVMtOIAs1aGK7G6u8= +github.com/Azure/go-autorest/logger v0.1.0/go.mod h1:oExouG+K6PryycPJfVSxi/koC6LSNgds39diKLz7Vrc= +github.com/Azure/go-autorest/tracing v0.1.0/go.mod h1:ROEEAFwXycQw7Sn3DXNtEedEvdeRAgDr0izn4z5Ij88= +github.com/BurntSushi/toml v0.3.1 h1:WXkYYl6Yr3qBf1K79EBnL4mak0OimBfB0XUf9Vl28OQ= +github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= +github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo= +github.com/CloudyKit/fastprinter v0.0.0-20170127035650-74b38d55f37a/go.mod h1:EFZQ978U7x8IRnstaskI3IysnWY5Ao3QgZUKOXlsAdw= +github.com/CloudyKit/jet v2.1.3-0.20180809161101-62edd43e4f88+incompatible/go.mod h1:HPYO+50pSWkPoj9Q/eq0aRGByCL6ScRlUmiEX5Zgm+w= +github.com/Joker/hpp v1.0.0/go.mod h1:8x5n+M1Hp5hC0g8okX3sR3vFQwynaX/UgSOM9MeBKzY= +github.com/Joker/jade v1.0.1-0.20190614124447-d475f43051e7/go.mod h1:6E6s8o2AE4KhCrqr6GRJjdC/gNfTdxkIXvuGZZda2VM= +github.com/OpenDNS/vegadns2client v0.0.0-20180418235048-a3fa4a771d87/go.mod h1:iGLljf5n9GjT6kc0HBvyI1nOKnGQbNB66VzSNbK5iks= +github.com/Shopify/goreferrer v0.0.0-20181106222321-ec9c9a553398/go.mod h1:a1uqRtAwp2Xwc6WNPJEufxJ7fx3npB4UV/JOLmbu5I0= +github.com/Shopify/sarama v1.19.0/go.mod h1:FVkBWblsNy7DGZRfXLU0O9RCGt5g3g3yEuWXgklEdEo= +github.com/Shopify/toxiproxy v2.1.4+incompatible/go.mod h1:OXgGpZ6Cli1/URJOF1DMxUHB2q5Ap20/P/eIdh4G0pI= +github.com/Syncano/pkg-go/v2 v2.7.3 h1:Eqa8ljfQ2UkffsgArxZVgaemQapiO3MPN7+nNL7R43M= +github.com/Syncano/pkg-go/v2 v2.7.3/go.mod h1:T3HV28yPrYtzs7yKOUOiwI2XsOBcO9e+uGa+m68lxjU= +github.com/Syncano/pkg-go/v2 v2.7.4 h1:6oXM+SzP9xyuIJ8fwZnKnRaWjp9ajF1xJzs5L+xMJMg= +github.com/Syncano/pkg-go/v2 v2.7.4/go.mod h1:T3HV28yPrYtzs7yKOUOiwI2XsOBcO9e+uGa+m68lxjU= +github.com/Syncano/syncanoapis/gen v1.2.0 h1:U+oBiE/FEOhPY/qqhfhOiMZrxQ+LM0x/CH/w4z9HzlI= +github.com/Syncano/syncanoapis/gen v1.2.0/go.mod h1:I1+7CW9sF/sLeKhuAN83+sPVi/iveumVkxx/+oTHsGE= +github.com/TheZeroSlave/zapsentry v1.5.0 h1:TpZcIE2Ie9L96WU08w49TfaDKgiaq2rGAwLT8NIkPlk= +github.com/TheZeroSlave/zapsentry v1.5.0/go.mod h1:DnlnJaAHnU0ocnEAa32e1SB6+ZQ7FR/Km7uHqoZMUss= +github.com/ajg/form v1.5.1/go.mod h1:uL1WgH+h2mgNtvBq0339dVnzXdBETtL2LeUXaIv25UY= +github.com/akamai/AkamaiOPEN-edgegrid-golang v0.9.8/go.mod h1:aVvklgKsPENRkl29bNwrHISa1F+YLGTHArMxZMBqWM8= +github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc= +github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751 h1:JYp7IbQjafoB+tBA3gMyHYHrpOtNuDiK/uB5uXxq5wM= +github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc= +github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0= +github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4 h1:Hs82Z41s6SdL1CELW+XaDYmOH4hkBN4/N9og/AsOv7E= +github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0= +github.com/alexandrevicenzi/unchained v1.3.0 h1:oFU4ANCe7/r/b69MfcP3M5Yks4jar+UCOjnPoOPzpJM= +github.com/alexandrevicenzi/unchained v1.3.0/go.mod h1:uxW6vYNh0D47NKgo+eULGrbNAJAC8aEryNd+u/+UQSg= +github.com/aliyun/alibaba-cloud-sdk-go v1.61.112/go.mod h1:pUKYbK5JQ+1Dfxk80P0qxGqe5dkxDoabbZS7zOcouyA= +github.com/apache/thrift v0.12.0/go.mod h1:cp2SuWMxlEZw2r+iP2GNCdIi4C1qmUzdZFSVb+bacwQ= +github.com/armon/consul-api v0.0.0-20180202201655-eb2c6b5be1b6/go.mod h1:grANhF5doyWs3UAsr3K4I6qtAmlQcZDesFNEHPZAzj8= +github.com/aws/aws-sdk-go v1.30.20/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZveU8YkpAk0= +github.com/aws/aws-sdk-go v1.34.7/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZveU8YkpAk0= +github.com/aymerick/raymond v2.0.3-0.20180322193309-b565731e1464+incompatible/go.mod h1:osfaiScAUVup+UC9Nfq76eWqDhXlp+4UYaA8uhTBO6g= +github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q= +github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8= +github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM= +github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw= +github.com/blang/semver v3.5.1+incompatible h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ= +github.com/blang/semver v3.5.1+incompatible/go.mod h1:kRBLl5iJ+tD4TcOOxsy/0fnwebNt5EWlYSAyrTnjyyk= +github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8= +github.com/bsm/redislock v0.5.0 h1:ODM11/cbuUXQqLgZWK6XQnufaTjsBE2UcwBc2EAFNDA= +github.com/bsm/redislock v0.5.0/go.mod h1:qagqKlV+xiLy26iV34Y3zRPxRcJjQYbV7pZfWFeSZ8M= +github.com/caarlos0/env/v6 v6.3.0 h1:PaqGnS5iHScZ5SnZNBPvQbA2VE/eMAwlp51mKGuEZLg= +github.com/caarlos0/env/v6 v6.3.0/go.mod h1:nXKfztzgWXH0C5Adnp+gb+vXHmMjKdBnMrSVSczSkiw= +github.com/cenkalti/backoff/v4 v4.0.0 h1:6VeaLF9aI+MAUQ95106HwWzYZgJJpZ4stumjj6RFYAU= +github.com/cenkalti/backoff/v4 v4.0.0/go.mod h1:eEew/i+1Q6OrCDZh3WiXYv3+nJwBASZ8Bog/87DQnVg= +github.com/census-instrumentation/opencensus-proto v0.2.0/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU= +github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU= +github.com/cespare/reflex v0.3.0 h1:9q8ZXMh+oW4quohPBcLsT56TFl4/DeQsTjZASe4wgoY= +github.com/cespare/reflex v0.3.0/go.mod h1:I+0Pnu2W693i7Hv6ZZG76qHTY0mgUa7uCIfCtikXojE= +github.com/cespare/xxhash/v2 v2.1.0/go.mod h1:dgIUBU3pDso/gPgZ1osOZ0iQf77oPR28Tjxl5dIMyVM= +github.com/cespare/xxhash/v2 v2.1.1 h1:6MnRN8NT7+YBpUIWxHtefFZOKTAPgGjpQSxqLNn0+qY= +github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= +github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI= +github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI= +github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU= +github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw= +github.com/cloudflare/cloudflare-go v0.10.2/go.mod h1:qhVI5MKwBGhdNU89ZRz2plgYutcJ5PCekLxXn56w6SY= +github.com/cloudfoundry/gosigar v1.1.0/go.mod h1:3qLfc2GlfmwOx2+ZDaRGH3Y9fwQ0sQeaAleo2GV5pH0= +github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc= +github.com/cockroachdb/apd v1.1.0 h1:3LFP3629v+1aKXU5Q37mxmRxX/pIu1nijXydLShEq5I= +github.com/cockroachdb/apd v1.1.0/go.mod h1:8Sl8LxpKi29FqWXR16WEFZRNSz3SoPzUzeMeY4+DwBQ= +github.com/codegangsta/inject v0.0.0-20150114235600-33e0aa1cb7c0/go.mod h1:4Zcjuz89kmFXt9morQgcfYZAYZ5n8WHjt81YYWIwtTM= +github.com/codemodus/kace v0.5.1 h1:4OCsBlE2c/rSJo375ggfnucv9eRzge/U5LrrOZd47HA= +github.com/codemodus/kace v0.5.1/go.mod h1:coddaHoX1ku1YFSe4Ip0mL9kQjJvKkzb9CfIdG1YR04= +github.com/coreos/etcd v3.3.10+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE= +github.com/coreos/go-etcd v2.0.0+incompatible/go.mod h1:Jez6KQU2B/sWsbdaef3ED8NzMklzPG4d5KIOhIy30Tk= +github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk= +github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4= +github.com/coreos/go-systemd v0.0.0-20190719114852-fd7a80b32e1f/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4= +github.com/cpu/goacmedns v0.0.2/go.mod h1:4MipLkI+qScwqtVxcNO6okBhbgRrr7/tKXUSgSL0teQ= +github.com/cpuguy83/go-md2man v1.0.10 h1:BSKMNlYxDvnunlTymqtgONjNnaRV1sTpcovwwjF22jk= +github.com/cpuguy83/go-md2man v1.0.10/go.mod h1:SmD6nW6nTyfqj6ABTjUi3V3JVMnlJmwcJI5acqYI6dE= +github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU= +github.com/cpuguy83/go-md2man/v2 v2.0.0 h1:EoUDS0afbrsXAZ9YQ9jdu/mZ2sXgT1/2yyNng4PGlyM= +github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU= +github.com/creack/pty v1.1.7 h1:6pwm8kMQKCmgUg0ZHTm5+/YvRK0s3THD/28+T6/kk4A= +github.com/creack/pty v1.1.7/go.mod h1:lj5s0c3V2DBrqTV7llrYr5NG6My20zk30Fl46Y7DoTY= +github.com/creack/pty v1.1.11 h1:07n33Z8lZxZ2qwegKbObQohDhXDQxiMMz1NOUGYlesw= +github.com/creack/pty v1.1.11/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= +github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= +github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/dgraph-io/badger v1.6.0/go.mod h1:zwt7syl517jmP8s94KqSxTlM6IMsdhYy6psNgSztDR4= +github.com/dgrijalva/jwt-go v3.2.0+incompatible h1:7qlOGliEKZXTDg6OTjfoBKDXWrumCAMpl/TFQ4/5kLM= +github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ= +github.com/dgryski/go-farm v0.0.0-20190423205320-6a90982ecee2/go.mod h1:SqUrOPUnsFjfmXRMNPybcSiG0BgUW2AuFH8PAnS2iTw= +github.com/dimchansky/utfbom v1.1.0/go.mod h1:rO41eb7gLfo8SF1jd9F8HplJm1Fewwi4mQvIirEdv+8= +github.com/dnaeon/go-vcr v0.0.0-20180814043457-aafff18a5cc2/go.mod h1:aBB1+wY4s93YsC3HHjMBMrwTj2R9FHDzUr9KyGc8n1E= +github.com/dnsimple/dnsimple-go v0.60.0/go.mod h1:O5TJ0/U6r7AfT8niYNlmohpLbCSG+c71tQlGr9SeGrg= +github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk= +github.com/eapache/go-resiliency v1.1.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs= +github.com/eapache/go-xerial-snappy v0.0.0-20180814174437-776d5712da21/go.mod h1:+020luEh2TKB4/GOp8oxxtq0Daoen/Cii55CzbTV6DU= +github.com/eapache/queue v1.1.0/go.mod h1:6eCeP0CKFpHLu8blIFXhExK/dRa7WDZfr6jVFPTqq+I= +github.com/eknkc/amber v0.0.0-20171010120322-cdade1c07385/go.mod h1:0vRUJqYpeSZifjYj7uP3BG/gKcuzL9xWVV/Y+cK33KM= +github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= +github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= +github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98= +github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c= +github.com/etcd-io/bbolt v1.3.3/go.mod h1:ZF2nL25h33cCyBtcyWeZ2/I3HQOfTP+0PIEvHjkjCrw= +github.com/exoscale/egoscale v0.18.1/go.mod h1:Z7OOdzzTOz1Q1PjQXumlz9Wn/CddH0zSYdCF3rnBKXE= +github.com/fasthttp-contrib/websocket v0.0.0-20160511215533-1f3b11f56072/go.mod h1:duJ4Jxv5lDcvg4QuQr0oowTf7dz4/CR8NtyCooz9HL8= +github.com/fatih/structs v1.1.0/go.mod h1:9NiDSp5zOcgEDl+j00MP/WkGVPOlPRLejGD8Ga6PJ7M= +github.com/flosch/pongo2 v0.0.0-20190707114632-bbf5a6c351f4/go.mod h1:T9YF2M40nIgbVgp3rreNmTged+9HrbNTIQf1PsaIiTA= +github.com/fsnotify/fsnotify v1.4.7 h1:IXs+QLmnXW2CcXuY+8Mzv/fWEsPGWxqefPtCP5CnV9I= +github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo= +github.com/fsnotify/fsnotify v1.4.9 h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4= +github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ= +github.com/gavv/httpexpect v2.0.0+incompatible/go.mod h1:x+9tiU1YnrOvnB725RkpoLv1M62hOWzwo5OXotisrKc= +github.com/getsentry/sentry-go v0.7.0 h1:MR2yfR4vFfv/2+iBuSnkdQwVg7N9cJzihZ6KJu7srwQ= +github.com/getsentry/sentry-go v0.7.0/go.mod h1:pLFpD2Y5RHIKF9Bw3KH6/68DeN2K/XBJd8awjdPnUwg= +github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04= +github.com/gin-contrib/sse v0.0.0-20190301062529-5545eab6dad3/go.mod h1:VJ0WA2NBN22VlZ2dKZQPAPnyWw5XTlK1KymzLKsr59s= +github.com/gin-gonic/gin v1.4.0/go.mod h1:OW2EZn3DO8Ln9oIKOvM++LBO+5UPHJJDH72/q/3rZdM= +github.com/go-acme/lego/v3 v3.8.0 h1:9OOEn54eZvEPRRdM7xiC5f7EBW0MlEeChr+kzlIhdN8= +github.com/go-acme/lego/v3 v3.8.0/go.mod h1:kYiHYgSRzb1l2NQPWvWvkVG5etNCusGFsZc2MTak3m0= +github.com/go-check/check v0.0.0-20180628173108-788fd7840127/go.mod h1:9ES+weclKsC9YodN5RgxqK/VD9HM9JsCSh7rNhMZE98= +github.com/go-cmd/cmd v1.0.5/go.mod h1:y8q8qlK5wQibcw63djSl/ntiHUHXHGdCkPk0j4QeW4s= +github.com/go-errors/errors v1.0.1 h1:LUHzmkK3GUKUrL/1gfBUxAHzcev3apQlezX/+O7ma6w= +github.com/go-errors/errors v1.0.1/go.mod h1:f4zRHt4oKfwPJE5k8C9vpYG+aDHdBFUsgrm6/TyX73Q= +github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU= +github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= +github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= +github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as= +github.com/go-kit/kit v0.9.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as= +github.com/go-logfmt/logfmt v0.3.0/go.mod h1:Qt1PoO58o5twSAckw1HlFXLmHsOX5/0LbT9GBnD5lWE= +github.com/go-logfmt/logfmt v0.4.0/go.mod h1:3RMwSq7FuexP4Kalkev3ejPJsZTpXXBr9+V4qmtdjCk= +github.com/go-martini/martini v0.0.0-20170121215854-22fa46961aab/go.mod h1:/P9AEU963A2AYjv4d1V5eVL1CQbEJq6aCNHDDjibzu8= +github.com/go-pg/pg/v9 v9.0.0-beta.14/go.mod h1:T2Sr6bpTCOr2lUqOUMiXLMJqZHSUBKk1LdgSqjwhZfA= +github.com/go-pg/pg/v9 v9.0.3/go.mod h1:Tm/Q3Vt6gdQOH6TTN1H/xLlIXc+Qrka7TZ6uREtu/eA= +github.com/go-pg/pg/v9 v9.1.7 h1:JSAszC/xbOHmvS86fPnvxCQ288lR0ecX7yqxiPnBoNo= +github.com/go-pg/pg/v9 v9.1.7/go.mod h1:QM13HBLkdml4zcKOfUfGLymM6hb72aKTJLrmaH8rsFg= +github.com/go-pg/urlstruct v0.1.0/go.mod h1:2Nag+BIny6G/KYCkdt++ZnqU/VinzimGapKfs4kwlN0= +github.com/go-pg/urlstruct v0.2.6/go.mod h1:dxENwVISWSOX+k87hDt0ueEJadD+gZWv3tHzwfmZPu8= +github.com/go-pg/urlstruct v0.3.0 h1:ORiTb205uT7v7lvq4VUOQ4ddJ5TjFRlVRWqWsMBgek4= +github.com/go-pg/urlstruct v0.3.0/go.mod h1:/XKyiUOUUS3onjF+LJxbfmSywYAdl6qMfVbX33Q8rgg= +github.com/go-pg/zerochecker v0.1.1 h1:av77Qe7Gs+1oYGGh51k0sbZ0bUaxJEdeP0r8YE64Dco= +github.com/go-pg/zerochecker v0.1.1/go.mod h1:NJZ4wKL0NmTtz0GKCoJ8kym6Xn/EQzXRl2OnAe7MmDo= +github.com/go-redis/cache/v7 v7.0.2 h1:JscRcbfC+YxlUpvTMv6zOap5oiQYCQ0qeF4/XL6Ss+I= +github.com/go-redis/cache/v7 v7.0.2/go.mod h1:xgIRNy8uqTjOAI+QKu32ueP/PerqdkJ+7HycaOrd048= +github.com/go-redis/redis/v7 v7.0.0-beta.4/go.mod h1:xhhSbUMTsleRPur+Vgx9sUHtyN33bdjxY+9/0n9Ig8s= +github.com/go-redis/redis/v7 v7.2.0/go.mod h1:JDNMw23GTyLNC4GZu9njt15ctBQVn7xjRfnwdHj/Dcg= +github.com/go-redis/redis/v7 v7.4.0 h1:7obg6wUoj05T0EpY0o8B59S9w5yeMWql7sw2kwNW1x4= +github.com/go-redis/redis/v7 v7.4.0/go.mod h1:JDNMw23GTyLNC4GZu9njt15ctBQVn7xjRfnwdHj/Dcg= +github.com/go-sql-driver/mysql v1.5.0/go.mod h1:DCzpHaOWr8IXmIStZouvnhqoel9Qv2LBy8hT2VhHyBg= +github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY= +github.com/gobwas/httphead v0.0.0-20180130184737-2c6c146eadee/go.mod h1:L0fX3K22YWvt/FAX9NnzrNzcI4wNYi9Yku4O0LKYflo= +github.com/gobwas/pool v0.2.0/go.mod h1:q8bcK0KcYlCgd9e7WYLm9LpyS+YeLd8JVDW6WezmKEw= +github.com/gobwas/ws v1.0.2/go.mod h1:szmBTxLgaFppYjEmNtny/v3w89xOydFnnZMcgRRu/EM= +github.com/gofrs/uuid v3.2.0+incompatible h1:y12jRkkFxsd7GpqdSZ+/KCs/fJbqpEXSGd4+jfEaewE= +github.com/gofrs/uuid v3.2.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM= +github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ= +github.com/gogo/protobuf v1.2.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ= +github.com/goji/httpauth v0.0.0-20160601135302-2da839ab0f4d/go.mod h1:nnjvkQ9ptGaCkuDUx6wNykzzlUixGxvkme+H/lnzb+A= +github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= +github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/groupcache v0.0.0-20191027212112-611e8accdfc9/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e h1:1r7pUrabqp18hOBcwBwiTsbnFeTZHV9eER/QT5JVZxY= +github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A= +github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A= +github.com/golang/mock v1.3.1/go.mod h1:sBzyDLLjw3U8JLTeZvSv8jJB+tU5PVekmnlKIyFUx0Y= +github.com/golang/mock v1.4.0/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw= +github.com/golang/mock v1.4.1/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw= +github.com/golang/mock v1.4.3/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw= +github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw= +github.com/golang/protobuf v1.3.4/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw= +github.com/golang/protobuf v1.3.5 h1:F768QJ1E9tib+q5Sc8MkdJi1RxLTbRcTf8LJV56aRls= +github.com/golang/protobuf v1.3.5/go.mod h1:6O5/vntMXwX2lRkT1hjjk0nAC1IDOTvTlVgjlRvqsdk= +github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8= +github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA= +github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs= +github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w= +github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0= +github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8= +github.com/golang/protobuf v1.4.2 h1:+Z5KGCizgyZCbGh1KZqA0fcLLkwbsjIzS4aV2v7wJX0= +github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI= +github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q= +github.com/gomodule/redigo v1.7.1-0.20190724094224-574c33c3df38/go.mod h1:B4C85qUVwatsJoIUNIfCRsp7qO0iAmpGFZ4EELWSbC4= +github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ= +github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ= +github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M= +github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= +github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= +github.com/google/go-cmp v0.4.0 h1:xsAVV57WRhGj6kEIi8ReJzQlHHqcBYCElAvkovg3B/4= +github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.4.1 h1:/exdXoGamhu5ONeUJH0deniYLWYvQwW66yvlfiiKTu0= +github.com/google/go-cmp v0.4.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.1 h1:JFrFEBb2xKufg6XkJsJr+WbKb4FQlURi5RUcBveYu9k= +github.com/google/go-cmp v0.5.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-querystring v1.0.0/go.mod h1:odCYkC5MyYFN7vkCjXpyrEuKhc/BUO6wN/zVPAxq5ck= +github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/martian v2.1.0+incompatible h1:/CP5g8u/VJHijgedC/Legn3BAbAaWPgecwXBIDzw5no= +github.com/google/martian v2.1.0+incompatible/go.mod h1:9I4somxYTbIHy5NJKHRl3wXiIaQGbYVAs8BPL6v8lEs= +github.com/google/martian/v3 v3.0.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0= +github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc= +github.com/google/pprof v0.0.0-20190515194954-54271f7e092f/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc= +github.com/google/pprof v0.0.0-20191218002539-d4f498aebedc/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20200212024743-f11f1df84d12/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20200229191704-1ebb73c60ed3/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20200430221834-fc25d7d30c6d/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20200708004538-1a94d8640e99/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI= +github.com/google/uuid v1.1.1 h1:Gkbcsh/GbpXz7lPftLA3P6TYMwjCLYm83jiFQZF/3gY= +github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg= +github.com/googleapis/gax-go/v2 v2.0.5 h1:sjZBwGj9Jlw33ImPtvFviGYvseOtDM7hkSKB7+Tv3SM= +github.com/googleapis/gax-go/v2 v2.0.5/go.mod h1:DWXyrwAJ9X0FpwwEdw+IPEYBICEFu5mhpdKc/us6bOk= +github.com/gophercloud/gophercloud v0.3.0/go.mod h1:vxM41WHh5uqHVBMZHzuwNOHh8XEoIEcSTewFxm1c5g8= +github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY= +github.com/gopherjs/gopherjs v0.0.0-20200217142428-fce0ec30dd00 h1:l5lAOZEym3oK3SQ2HBHWsJUfbNBiTXJDeW2QDxw9AQ0= +github.com/gopherjs/gopherjs v0.0.0-20200217142428-fce0ec30dd00/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY= +github.com/gorilla/context v1.1.1/go.mod h1:kBGZzfjB9CEq2AlWe17Uuf7NDRt0dE0s8S51q0aT7Yg= +github.com/gorilla/mux v1.6.2/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs= +github.com/gorilla/mux v1.7.3/go.mod h1:1lud6UwP+6orDFRuTfBEV8e9/aOM/c4fVVCaMa2zaAs= +github.com/gorilla/websocket v1.4.0/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ= +github.com/grpc-ecosystem/grpc-gateway v1.8.5/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY= +github.com/h2non/parth v0.0.0-20190131123155-b4df798d6542/go.mod h1:Ow0tF8D4Kplbc8s8sSb3V2oUCygFHVp8gC3Dn6U4MNI= +github.com/hashicorp/go-cleanhttp v0.5.1/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtngrth3wmdIIUrZ80= +github.com/hashicorp/go-hclog v0.9.2/go.mod h1:5CU+agLiy3J7N7QjHK5d05KxGsuXiQLrjA0H7acj2lQ= +github.com/hashicorp/go-retryablehttp v0.6.6/go.mod h1:vAew36LZh98gCBJNLH42IQ1ER/9wtLZZ8meHqQvEYWY= +github.com/hashicorp/go-version v1.2.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA= +github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8= +github.com/hashicorp/golang-lru v0.5.1 h1:0hERBMJE1eitiLkihrMvRVBYAkpHzc/J3QdDN+dAcgU= +github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8= +github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ= +github.com/hashicorp/yamux v0.0.0-20200609203250-aecfd211c9ce h1:7UnVY3T/ZnHUrfviiAgIUjg2PXxsQfs5bphsG8F7Keo= +github.com/hashicorp/yamux v0.0.0-20200609203250-aecfd211c9ce/go.mod h1:+NfK9FKeTrX5uv1uIXGdwYDTeHna2qgaIlx54MXqjAM= +github.com/hnakamur/zap-ltsv v0.0.0-20170731143423-10a3dd1d839c h1:fMBledu2JwuheEJDMu5Z9doso1iKGI/HVDSqwdLHRTI= +github.com/hnakamur/zap-ltsv v0.0.0-20170731143423-10a3dd1d839c/go.mod h1:OIeMUc48Jh1XT7GOXJ2l0tK3+vFq+yqWJ2gPVz0YHEI= +github.com/hpcloud/tail v1.0.0 h1:nfCOvKYfkgYP8hkirhJocXT2+zOD8yUNjXaWfTlyFKI= +github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU= +github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc= +github.com/iij/doapi v0.0.0-20190504054126-0bbf12d6d7df/go.mod h1:QMZY7/J/KSQEhKWFeDesPjMj+wCHReeknARU3wqlyN4= +github.com/imkira/go-interpol v1.1.0/go.mod h1:z0h2/2T3XF8kyEPpRgJ3kmNv+C43p+I/CoI+jC3w2iA= +github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8= +github.com/iris-contrib/blackfriday v2.0.0+incompatible/go.mod h1:UzZ2bDEoaSGPbkg6SAB4att1aAwTmVIx/5gCVqeyUdI= +github.com/iris-contrib/go.uuid v2.0.0+incompatible/go.mod h1:iz2lgM/1UnEf1kP0L/+fafWORmlnuysV2EMP8MW+qe0= +github.com/iris-contrib/i18n v0.0.0-20171121225848-987a633949d0/go.mod h1:pMCz62A0xJL6I+umB2YTlFRwWXaDFA0jy+5HzGiJjqI= +github.com/iris-contrib/schema v0.0.1/go.mod h1:urYA3uvUNG1TIIjOSCzHr9/LmbQo8LrOcOqfqxa4hXw= +github.com/jackc/chunkreader v1.0.0 h1:4s39bBR8ByfqH+DKm8rQA3E1LHZWB9XWcrz8fqaZbe0= +github.com/jackc/chunkreader v1.0.0/go.mod h1:RT6O25fNZIuasFJRyZ4R/Y2BbhasbmZXF9QQ7T3kePo= +github.com/jackc/chunkreader/v2 v2.0.0/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk= +github.com/jackc/chunkreader/v2 v2.0.1 h1:i+RDz65UE+mmpjTfyz0MoVTnzeYxroil2G82ki7MGG8= +github.com/jackc/chunkreader/v2 v2.0.1/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk= +github.com/jackc/pgconn v0.0.0-20190420214824-7e0022ef6ba3/go.mod h1:jkELnwuX+w9qN5YIfX0fl88Ehu4XC3keFuOJJk9pcnA= +github.com/jackc/pgconn v0.0.0-20190824142844-760dd75542eb/go.mod h1:lLjNuW/+OfW9/pnVKPazfWOgNfH2aPem8YQ7ilXGvJE= +github.com/jackc/pgconn v0.0.0-20190831204454-2fabfa3c18b7/go.mod h1:ZJKsE/KZfsUgOEh9hBm+xYTstcNHg7UPMVJqRfQxq4s= +github.com/jackc/pgconn v1.4.0/go.mod h1:Y2O3ZDF0q4mMacyWV3AstPJpeHXWGEetiFttmq5lahk= +github.com/jackc/pgconn v1.5.0 h1:oFSOilzIZkyg787M1fEmyMfOUUvwj0daqYMfaWwNL4o= +github.com/jackc/pgconn v1.5.0/go.mod h1:QeD3lBfpTFe8WUnPZWN5KY/mB8FGMIYRdd8P8Jr0fAI= +github.com/jackc/pgconn v1.5.1-0.20200601181101-fa742c524853/go.mod h1:QeD3lBfpTFe8WUnPZWN5KY/mB8FGMIYRdd8P8Jr0fAI= +github.com/jackc/pgconn v1.6.4 h1:S7T6cx5o2OqmxdHaXLH1ZeD1SbI8jBznyYE9Ec0RCQ8= +github.com/jackc/pgconn v1.6.4/go.mod h1:w2pne1C2tZgP+TvjqLpOigGzNqjBgQW9dUw/4Chex78= +github.com/jackc/pgio v1.0.0 h1:g12B9UwVnzGhueNavwioyEEpAmqMe1E/BN9ES+8ovkE= +github.com/jackc/pgio v1.0.0/go.mod h1:oP+2QK2wFfUWgr+gxjoBH9KGBb31Eio69xUb0w5bYf8= +github.com/jackc/pgmock v0.0.0-20190831213851-13a1b77aafa2 h1:JVX6jT/XfzNqIjye4717ITLaNwV9mWbJx0dLCpcRzdA= +github.com/jackc/pgmock v0.0.0-20190831213851-13a1b77aafa2/go.mod h1:fGZlG77KXmcq05nJLRkk0+p82V8B8Dw8KN2/V9c/OAE= +github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM= +github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg= +github.com/jackc/pgproto3 v1.1.0 h1:FYYE4yRw+AgI8wXIinMlNjBbp/UitDJwfj5LqqewP1A= +github.com/jackc/pgproto3 v1.1.0/go.mod h1:eR5FA3leWg7p9aeAqi37XOTgTIbkABlvcPB3E5rlc78= +github.com/jackc/pgproto3/v2 v2.0.0-alpha1.0.20190420180111-c116219b62db/go.mod h1:bhq50y+xrl9n5mRYyCBFKkpRVTLYJVWeCc+mEAI3yXA= +github.com/jackc/pgproto3/v2 v2.0.0-alpha1.0.20190609003834-432c2951c711/go.mod h1:uH0AWtUmuShn0bcesswc4aBTWGvw0cAxIJp+6OB//Wg= +github.com/jackc/pgproto3/v2 v2.0.0-rc3/go.mod h1:ryONWYqW6dqSg1Lw6vXNMXoBJhpzvWKnT95C46ckYeM= +github.com/jackc/pgproto3/v2 v2.0.0-rc3.0.20190831210041-4c03ce451f29/go.mod h1:ryONWYqW6dqSg1Lw6vXNMXoBJhpzvWKnT95C46ckYeM= +github.com/jackc/pgproto3/v2 v2.0.1 h1:Rdjp4NFjwHnEslx2b66FfCI2S0LhO4itac3hXz6WX9M= +github.com/jackc/pgproto3/v2 v2.0.1/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA= +github.com/jackc/pgproto3/v2 v2.0.2 h1:q1Hsy66zh4vuNsajBUF2PNqfAMMfxU5mk594lPE9vjY= +github.com/jackc/pgproto3/v2 v2.0.2/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA= +github.com/jackc/pgservicefile v0.0.0-20200307190119-3430c5407db8 h1:Q3tB+ExeflWUW7AFcAhXqk40s9mnNYLk1nOkKNZ5GnU= +github.com/jackc/pgservicefile v0.0.0-20200307190119-3430c5407db8/go.mod h1:vsD4gTJCa9TptPL8sPkXrLZ+hDuNrZCnj29CQpr4X1E= +github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b h1:C8S2+VttkHFdOOCXJe+YGfa4vHYwlt4Zx+IVXQ97jYg= +github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b/go.mod h1:vsD4gTJCa9TptPL8sPkXrLZ+hDuNrZCnj29CQpr4X1E= +github.com/jackc/pgtype v0.0.0-20190421001408-4ed0de4755e0/go.mod h1:hdSHsc1V01CGwFsrv11mJRHWJ6aifDLfdV3aVjFF0zg= +github.com/jackc/pgtype v0.0.0-20190824184912-ab885b375b90/go.mod h1:KcahbBH1nCMSo2DXpzsoWOAfFkdEtEJpPbVLq8eE+mc= +github.com/jackc/pgtype v0.0.0-20190828014616-a8802b16cc59/go.mod h1:MWlu30kVJrUS8lot6TQqcg7mtthZ9T0EoIBFiJcmcyw= +github.com/jackc/pgtype v1.2.0/go.mod h1:5m2OfMh1wTK7x+Fk952IDmI4nw3nPrvtQdM0ZT4WpC0= +github.com/jackc/pgtype v1.3.1-0.20200510190516-8cd94a14c75a/go.mod h1:vaogEUkALtxZMCH411K+tKzNpwzCKU+AnPzBKZ+I+Po= +github.com/jackc/pgtype v1.3.1-0.20200606141011-f6355165a91c/go.mod h1:cvk9Bgu/VzJ9/lxTO5R5sf80p0DiucVtN7ZxvaC4GmQ= +github.com/jackc/pgtype v1.4.2 h1:t+6LWm5eWPLX1H5Se702JSBcirq6uWa4jiG4wV1rAWY= +github.com/jackc/pgtype v1.4.2/go.mod h1:JCULISAZBFGrHaOXIIFiyfzW5VY0GRitRr8NeJsrdig= +github.com/jackc/pgx/v4 v4.0.0-20190420224344-cc3461e65d96/go.mod h1:mdxmSJJuR08CZQyj1PVQBHy9XOp5p8/SHH6a0psbY9Y= +github.com/jackc/pgx/v4 v4.0.0-20190421002000-1b8f0016e912/go.mod h1:no/Y67Jkk/9WuGR0JG/JseM9irFbnEPbuWV2EELPNuM= +github.com/jackc/pgx/v4 v4.0.0-pre1.0.20190824185557-6972a5742186/go.mod h1:X+GQnOEnf1dqHGpw7JmHqHc1NxDoalibchSk9/RWuDc= +github.com/jackc/pgx/v4 v4.5.0/go.mod h1:EpAKPLdnTorwmPUUsqrPxy5fphV18j9q3wrfRXgo+kA= +github.com/jackc/pgx/v4 v4.6.1-0.20200510190926-94ba730bb1e9/go.mod h1:t3/cdRQl6fOLDxqtlyhe9UWgfIi9R8+8v8GKV5TRA/o= +github.com/jackc/pgx/v4 v4.6.1-0.20200606145419-4e5062306904/go.mod h1:ZDaNWkt9sW1JMiNn0kdYBaLelIhw7Pg4qd+Vk6tw7Hg= +github.com/jackc/pgx/v4 v4.8.1 h1:SUbCLP2pXvf/Sr/25KsuI4aTxiFYIvpfk4l6aTSdyCw= +github.com/jackc/pgx/v4 v4.8.1/go.mod h1:4HOLxrl8wToZJReD04/yB20GDwf4KBYETvlHciCnwW0= +github.com/jackc/puddle v0.0.0-20190413234325-e4ced69a3a2b/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk= +github.com/jackc/puddle v0.0.0-20190608224051-11cab39313c9/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk= +github.com/jackc/puddle v1.1.0/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk= +github.com/jackc/puddle v1.1.1/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk= +github.com/jinzhu/inflection v1.0.0 h1:K317FqzuhWc8YvSVlFMCCUb36O/S9MCKRDI7QkRKD/E= +github.com/jinzhu/inflection v1.0.0/go.mod h1:h+uFLlag+Qp1Va5pdKtLDYj+kHp5pxUVkryuEj+Srlc= +github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k= +github.com/jmespath/go-jmespath v0.3.0 h1:OS12ieG61fsCg5+qLJ+SsW9NicxNkg3b25OyT2yCeUc= +github.com/jmespath/go-jmespath v0.3.0/go.mod h1:9QtRXoHjLGCJ5IBSaohpXITPlowMeeYCZ7fLUTSywik= +github.com/json-iterator/go v1.1.5/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU= +github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU= +github.com/json-iterator/go v1.1.7/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4= +github.com/json-iterator/go v1.1.10 h1:Kz6Cvnvv2wGdaG/V8yMvfkmNiXq9Ya2KUv4rouJJr68= +github.com/json-iterator/go v1.1.10/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4= +github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU= +github.com/jstemmer/go-junit-report v0.9.1 h1:6QPYqodiu3GuPL+7mfx+NwDdp2eTkp9IfEUpgAwUN0o= +github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk= +github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo= +github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU= +github.com/juju/errors v0.0.0-20181118221551-089d3ea4e4d5/go.mod h1:W54LbzXuIE0boCoNJfwqpmkKJ1O4TCTZMetAt6jGk7Q= +github.com/juju/loggo v0.0.0-20180524022052-584905176618/go.mod h1:vgyd7OREkbtVEN/8IXZe5Ooef3LQePvuBm9UWj6ZL8U= +github.com/juju/ratelimit v1.0.1 h1:+7AIFJVQ0EQgq/K9+0Krm7m530Du7tIz0METWzN0RgY= +github.com/juju/ratelimit v1.0.1/go.mod h1:qapgC/Gy+xNh9UxzV13HGGl/6UXNN+ct+vwSgWNm/qk= +github.com/juju/testing v0.0.0-20180920084828-472a3e8b2073/go.mod h1:63prj8cnj0tU0S9OHjGJn+b1h0ZghCndfnbQolrYTwA= +github.com/julienschmidt/httprouter v1.2.0/go.mod h1:SYymIcj16QtmaHHD7aYtjjsJG7VTCxuUUipMqKk8s4w= +github.com/k0kubun/colorstring v0.0.0-20150214042306-9440f1994b88/go.mod h1:3w7q1U84EfirKl04SVQ/s7nPm1ZPhiXd34z40TNz36k= +github.com/kataras/golog v0.0.9/go.mod h1:12HJgwBIZFNGL0EJnMRhmvGA0PQGx8VFwrZtM4CqbAk= +github.com/kataras/iris/v12 v12.0.1/go.mod h1:udK4vLQKkdDqMGJJVd/msuMtN6hpYJhg/lSzuxjhO+U= +github.com/kataras/neffos v0.0.10/go.mod h1:ZYmJC07hQPW67eKuzlfY7SO3bC0mw83A3j6im82hfqw= +github.com/kataras/pio v0.0.0-20190103105442-ea782b38602d/go.mod h1:NV88laa9UiiDuX9AhMbDPkGYSPugBOV6yTZB1l2K9Z0= +github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs= +github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8= +github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck= +github.com/klauspost/compress v1.8.2/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A= +github.com/klauspost/compress v1.9.0/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A= +github.com/klauspost/cpuid v1.2.1/go.mod h1:Pj4uuM528wm8OyEC2QMXAi2YiTZ96dNQPGgoMS4s3ek= +github.com/kolo/xmlrpc v0.0.0-20200310150728-e0350524596b/go.mod h1:o03bZfuBwAXHetKXuInt4S7omeXUu62/A845kiycsSQ= +github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ= +github.com/konsorten/go-windows-terminal-sequences v1.0.2 h1:DB17ag19krx9CFsz4o3enTrPXyIXCl+2iCXH/aMAp9s= +github.com/konsorten/go-windows-terminal-sequences v1.0.2/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ= +github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFBFZlji/RkVcI2GknAs/DXo4wKdlNEc= +github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI= +github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= +github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= +github.com/kr/pty v1.1.8 h1:AkaSdXYQOWeaO3neb8EM634ahkXXe3jYbVh/F9lq+GI= +github.com/kr/pty v1.1.8/go.mod h1:O1sed60cT9XZ5uDucP5qwvh+TE3NnUj51EiZO/lmSfw= +github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE= +github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= +github.com/labbsr0x/bindman-dns-webhook v1.0.2/go.mod h1:p6b+VCXIR8NYKpDr8/dg1HKfQoRHCdcsROXKvmoehKA= +github.com/labbsr0x/goh v1.0.1/go.mod h1:8K2UhVoaWXcCU7Lxoa2omWnC8gyW8px7/lmO61c027w= +github.com/labstack/echo/v4 v4.1.11/go.mod h1:i541M3Fj6f76NZtHSj7TXnyM8n2gaodfvfxNnFqi74g= +github.com/labstack/echo/v4 v4.1.16 h1:8swiwjE5Jkai3RPfZoahp8kjVCRNq+y7Q0hPji2Kz0o= +github.com/labstack/echo/v4 v4.1.16/go.mod h1:awO+5TzAjvL8XpibdsfXxPgHr+orhtXZJZIQCVjogKI= +github.com/labstack/echo/v4 v4.1.17 h1:PQIBaRplyRy3OjwILGkPg89JRtH2x5bssi59G2EL3fo= +github.com/labstack/echo/v4 v4.1.17/go.mod h1:Tn2yRQL/UclUalpb5rPdXDevbkJ+lp/2svdyFBg6CHQ= +github.com/labstack/gommon v0.3.0 h1:JEeO0bvc78PKdyHxloTKiF8BD5iGrH8T6MSeGvSgob0= +github.com/labstack/gommon v0.3.0/go.mod h1:MULnywXg0yavhxWKc+lOruYdAhDwPK9wf0OL7NoOu+k= +github.com/lib/pq v1.0.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo= +github.com/lib/pq v1.1.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo= +github.com/lib/pq v1.2.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo= +github.com/lib/pq v1.3.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo= +github.com/lib/pq v1.8.0 h1:9xohqzkUwzR4Ga4ivdTcawVS89YSDVxXMa3xJX3cGzg= +github.com/lib/pq v1.8.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o= +github.com/linode/linodego v0.10.0/go.mod h1:cziNP7pbvE3mXIPneHj0oRY8L1WtGEIKlZ8LANE4eXA= +github.com/liquidweb/liquidweb-go v1.6.0/go.mod h1:UDcVnAMDkZxpw4Y7NOHkqoeiGacVLEIG/i5J9cyixzQ= +github.com/lithammer/shortuuid v3.0.0+incompatible h1:NcD0xWW/MZYXEHa6ITy6kaXN5nwm/V115vj2YXfhS0w= +github.com/lithammer/shortuuid v3.0.0+incompatible/go.mod h1:FR74pbAuElzOUuenUHTK2Tciko1/vKuIKS9dSkDrA4w= +github.com/magiconair/properties v1.8.0/go.mod h1:PppfXfuXeibc/6YijjN8zIbojt8czPbwD3XqdrwzmxQ= +github.com/mattn/go-colorable v0.1.1/go.mod h1:FuOcm+DKB9mbwrcAfNl7/TZVBZ6rcnceauSikq3lYCQ= +github.com/mattn/go-colorable v0.1.2/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE= +github.com/mattn/go-colorable v0.1.6 h1:6Su7aK7lXmJ/U79bYtBjLNaha4Fs1Rg9plHpcH+vvnE= +github.com/mattn/go-colorable v0.1.6/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc= +github.com/mattn/go-colorable v0.1.7 h1:bQGKb3vps/j0E9GfJQ03JyhRuxsvdAanXlT9BTw3mdw= +github.com/mattn/go-colorable v0.1.7/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc= +github.com/mattn/go-isatty v0.0.3/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4= +github.com/mattn/go-isatty v0.0.5/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s= +github.com/mattn/go-isatty v0.0.7/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s= +github.com/mattn/go-isatty v0.0.8/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s= +github.com/mattn/go-isatty v0.0.9/go.mod h1:YNRxwqDuOph6SZLI9vUUz6OYw3QyUt7WiY2yME+cCiQ= +github.com/mattn/go-isatty v0.0.12 h1:wuysRhFDzyxgEmMf5xjvJ2M9dZoWAXNNr5LSBS7uHXY= +github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU= +github.com/mattn/go-runewidth v0.0.2/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU= +github.com/mattn/go-runewidth v0.0.4/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU= +github.com/mattn/go-tty v0.0.0-20180219170247-931426f7535a/go.mod h1:XPvLUNfbS4fJH25nqRHfWLMa1ONC8Amw+mIA639KxkE= +github.com/mattn/goveralls v0.0.2/go.mod h1:8d1ZMHsd7fW6IRPKQh46F2WRpyib5/X4FOpevwGNQEw= +github.com/matttproud/golang_protobuf_extensions v1.0.1 h1:4hp9jkHxhMHkqkrB3Ix0jegS5sx/RkqARlsWZ6pIwiU= +github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0= +github.com/mediocregopher/mediocre-go-lib v0.0.0-20181029021733-cb65787f37ed/go.mod h1:dSsfyI2zABAdhcbvkXqgxOxrCsbYeHCPgrZkku60dSg= +github.com/mediocregopher/radix/v3 v3.3.0/go.mod h1:EmfVyvspXz1uZEyPBMyGK+kjWiKQGvsUt6O3Pj+LDCQ= +github.com/microcosm-cc/bluemonday v1.0.2/go.mod h1:iVP4YcDBq+n/5fb23BhYFvIMq/leAFZyRl6bYmGDlGc= +github.com/miekg/dns v1.1.27 h1:aEH/kqUzUxGJ/UHcEKdJY+ugH6WEzsEBBSPa8zuy1aM= +github.com/miekg/dns v1.1.27/go.mod h1:KNUDUusw/aVsxyTYZM1oqvCicbwhgbNgztCETuNZ7xM= +github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0= +github.com/mitchellh/go-vnc v0.0.0-20150629162542-723ed9867aed/go.mod h1:3rdaFaCv4AyBgu5ALFM0+tSuHrBh6v692nyQe3ikrq0= +github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y= +github.com/mitchellh/mapstructure v1.3.1/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo= +github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q= +github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg= +github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q= +github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0= +github.com/modern-go/reflect2 v1.0.1 h1:9f412s+6RmYXLWZSEzVVgPGK7C2PphHj5RJrvfx9AWI= +github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0= +github.com/moul/http2curl v1.0.0/go.mod h1:8UbvGypXm98wA/IqH45anm5Y2Z6ep6O31QGOAZ3H0fQ= +github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U= +github.com/namedotcom/go v0.0.0-20180403034216-08470befbe04/go.mod h1:5sN+Lt1CaY4wsPvgQH/jsuJi4XO2ssZbdsIizr4CVC8= +github.com/nats-io/nats.go v1.8.1/go.mod h1:BrFz9vVn0fU3AcH9Vn4Kd7W0NpJ651tD5omQ3M8LwxM= +github.com/nats-io/nkeys v0.0.2/go.mod h1:dab7URMsZm6Z/jp9Z5UGa87Uutgc2mVpXLC4B7TDb/4= +github.com/nats-io/nuid v1.0.1/go.mod h1:19wcPz3Ph3q0Jbyiqsd0kePYG7A95tJPxeL+1OSON2c= +github.com/nbio/st v0.0.0-20140626010706-e9e8d9816f32/go.mod h1:9wM+0iRr9ahx58uYLpLIr5fm8diHn0JbqRycJi6w0Ms= +github.com/nrdcg/auroradns v1.0.1/go.mod h1:y4pc0i9QXYlFCWrhWrUSIETnZgrf4KuwjDIWmmXo3JI= +github.com/nrdcg/dnspod-go v0.4.0/go.mod h1:vZSoFSFeQVm2gWLMkyX61LZ8HI3BaqtHZWgPTGKr6KQ= +github.com/nrdcg/goinwx v0.7.0/go.mod h1:4tKJOCi/1lTxuw9/yB2Ez0aojwtUCSkckjc22eALpqE= +github.com/nrdcg/namesilo v0.2.1/go.mod h1:lwMvfQTyYq+BbjJd30ylEG4GPSS6PII0Tia4rRpRiyw= +github.com/nxadm/tail v1.4.4 h1:DQuhQpB1tVlglWS2hLQ5OV6B5r8aGxSrPc5Qo6uTN78= +github.com/nxadm/tail v1.4.4/go.mod h1:kenIhsEOeOJmVchQTgglprH7qJGnHDVpk1VPCcaMI8A= +github.com/ogier/pflag v0.0.1 h1:RW6JSWSu/RkSatfcLtogGfFgpim5p7ARQ10ECk5O750= +github.com/ogier/pflag v0.0.1/go.mod h1:zkFki7tvTa0tafRvTBIZTvzYyAu6kQhPZFnshFFPE+g= +github.com/olekukonko/tablewriter v0.0.1/go.mod h1:vsDQFd/mU46D+Z4whnwzcISnGGzXWMclvtLoiIKAKIo= +github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= +github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= +github.com/onsi/ginkgo v1.8.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= +github.com/onsi/ginkgo v1.10.1/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= +github.com/onsi/ginkgo v1.10.3 h1:OoxbjfXVZyod1fmWYhI7SEyaD8B00ynP3T+D5GiyHOY= +github.com/onsi/ginkgo v1.10.3/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= +github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108oapk= +github.com/onsi/ginkgo v1.14.0 h1:2mOpI4JVVPBN+WQRa0WKH2eXR+Ey+uK4n7Zj0aYpIQA= +github.com/onsi/ginkgo v1.14.0/go.mod h1:iSB4RoI2tjJc9BBv4NKIKWKya62Rps+oPG/Lv9klQyY= +github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY= +github.com/onsi/gomega v1.5.0/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY= +github.com/onsi/gomega v1.7.0/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY= +github.com/onsi/gomega v1.7.1 h1:K0jcRCwNQM3vFGh1ppMtDh/+7ApJrjldlX8fA0jDTLQ= +github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY= +github.com/onsi/gomega v1.10.1 h1:o0+MgICZLuZ7xjH7Vx6zS/zcu93/BEp1VwkIW1mEXCE= +github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo= +github.com/openzipkin/zipkin-go v0.1.6/go.mod h1:QgAqvLzwWbR/WpD4A3cGpPtJrZXNIiJc5AZX7/PBEpw= +github.com/oracle/oci-go-sdk v7.0.0+incompatible/go.mod h1:VQb79nF8Z2cwLkLS35ukwStZIg5F66tcBccjip/j888= +github.com/ovh/go-ovh v0.0.0-20181109152953-ba5adb4cf014/go.mod h1:joRatxRJaZBsY3JAOEMcoOp05CnZzsx4scTxi95DHyQ= +github.com/pelletier/go-toml v1.2.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic= +github.com/pierrec/lz4 v2.0.5+incompatible/go.mod h1:pdkljMzZIN41W+lC3N2tnIh5sFi+IEE17M5jbnwPHcY= +github.com/pingcap/errors v0.11.4 h1:lFuQV/oaUMGcD2tqt+01ROSmJs75VG1ToEOkZIZ4nE4= +github.com/pingcap/errors v0.11.4/go.mod h1:Oi8TUi2kEtXXLMJk9l1cGmz20kV3TaQ0usTwv5KuLY8= +github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= +github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= +github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4= +github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= +github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= +github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/pquerna/otp v1.2.0/go.mod h1:dkJfzwRKNiegxyNb54X/3fLwhCynbMspSyWKnvi1AEg= +github.com/pressly/goose v2.6.0+incompatible h1:3f8zIQ8rfgP9tyI0Hmcs2YNAqUCL1c+diLe3iU8Qd/k= +github.com/pressly/goose v2.6.0+incompatible/go.mod h1:m+QHWCqxR3k8D9l7qfzuC/djtlfzxr34mozWDYEu1z8= +github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw= +github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829/go.mod h1:p2iRAGwDERtqlqzRXnrOVns+ignqQo//hLXqYxZYVNs= +github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo= +github.com/prometheus/client_golang v1.1.0/go.mod h1:I1FGZT9+L76gKKOs5djB6ezCbFQP1xR9D75/vuwEF3g= +github.com/prometheus/client_golang v1.2.1/go.mod h1:XMU6Z2MjaRKVu/dC1qupJI9SiNkDYzz3xecMgSW/F+U= +github.com/prometheus/client_golang v1.7.1 h1:NTGy1Ja9pByO+xAeH/qiWnLrKtr3hJPNjaVUwnjpdpA= +github.com/prometheus/client_golang v1.7.1/go.mod h1:PY5Wy2awLA44sXw4AOSfFBetzPP4j5+D6mVACh+pe2M= +github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo= +github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo= +github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= +github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= +github.com/prometheus/client_model v0.2.0 h1:uq5h0d+GuxiXLJLNABMgp2qUWDPiLvgCzz2dUR+/W/M= +github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= +github.com/prometheus/common v0.2.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4= +github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4= +github.com/prometheus/common v0.6.0/go.mod h1:eBmuwkDJBwy6iBfxCBob6t6dR6ENT/y+J+Zk0j9GMYc= +github.com/prometheus/common v0.7.0/go.mod h1:DjGbpBbp5NYNiECxcL/VnbXCCaQpKd3tt26CguLLsqA= +github.com/prometheus/common v0.10.0 h1:RyRA7RzGXQZiW+tGMr7sxa85G1z0yOpM1qq5c8lNawc= +github.com/prometheus/common v0.10.0/go.mod h1:Tlit/dnDKsSWFlCLTWaA1cyBgKHSMdTB80sz/V91rCo= +github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk= +github.com/prometheus/procfs v0.0.0-20190117184657-bf6a532e95b1/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk= +github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA= +github.com/prometheus/procfs v0.0.3/go.mod h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ= +github.com/prometheus/procfs v0.0.5/go.mod h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ= +github.com/prometheus/procfs v0.0.6/go.mod h1:7Qr8sr6344vo1JqZ6HhLceV9o3AJ1Ff+GxbHq6oeK9A= +github.com/prometheus/procfs v0.1.3 h1:F0+tqvhOksq22sc6iCHF5WGlWjdwj92p0udFh1VFBS8= +github.com/prometheus/procfs v0.1.3/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4OA4YeYWdaU= +github.com/prometheus/statsd_exporter v0.15.0 h1:UiwC1L5HkxEPeapXdm2Ye0u1vUJfTj7uwT5yydYpa1E= +github.com/prometheus/statsd_exporter v0.15.0/go.mod h1:Dv8HnkoLQkeEjkIE4/2ndAA7WL1zHKK7WMqFQqu72rw= +github.com/rainycape/memcache v0.0.0-20150622160815-1031fa0ce2f2/go.mod h1:7tZKcyumwBO6qip7RNQ5r77yrssm9bfCowcLEBcU5IA= +github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4= +github.com/rogpeppe/fastuuid v0.0.0-20150106093220-6724a57986af/go.mod h1:XWv6SoW27p1b0cqNHllgS5HIMJraePCO15w5zCzIWYg= +github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4= +github.com/rs/xid v1.2.1/go.mod h1:+uKXf+4Djp6Md1KODXJxgGQPKngRmWyn10oCKFzNHOQ= +github.com/rs/zerolog v1.13.0/go.mod h1:YbFCdg8HfsridGWAh22vktObvhZbQsZXe4/zB0OKkWU= +github.com/rs/zerolog v1.15.0/go.mod h1:xYTKnLHcpfU2225ny5qZjxnj9NvkumZYjJHlAThCjNc= +github.com/russross/blackfriday v1.5.2 h1:HyvC0ARfnZBqnXwABFeSZHpKvJHJJfPz81GNueLj0oo= +github.com/russross/blackfriday v1.5.2/go.mod h1:JO/DiYxRf+HjHt06OyowR9PTA263kcR/rfWxYHBV53g= +github.com/russross/blackfriday/v2 v2.0.1 h1:lPqVAte+HuHNfhJ/0LC98ESWRz8afy9tM/0RK8m9o+Q= +github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= +github.com/ryanuber/columnize v2.1.0+incompatible/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts= +github.com/sacloud/libsacloud v1.26.1/go.mod h1:79ZwATmHLIFZIMd7sxA3LwzVy/B77uj3LDoToVTxDoQ= +github.com/satori/go.uuid v1.2.0 h1:0uYX9dsZ2yD7q2RtLRtPSdGDWzjeM3TbMJP9utgA0ww= +github.com/satori/go.uuid v1.2.0/go.mod h1:dA0hQrYB0VpLJoorglMZABFdXlWrHn1NEOzdhQKdks0= +github.com/segmentio/encoding v0.1.10 h1:0b8dva47cSuNQR5ZcU3d0pfi9EnPpSK6q7y5ZGEW36Q= +github.com/segmentio/encoding v0.1.10/go.mod h1:RWhr02uzMB9gQC1x+MfYxedtmBibb9cZ6Vv9VxRSSbw= +github.com/sergi/go-diff v1.0.0/go.mod h1:0CfEIISq7TuYL3j771MWULgwwjU+GofnZX9QAmXWZgo= +github.com/shopspring/decimal v0.0.0-20180709203117-cd690d0c9e24/go.mod h1:M+9NzErvs504Cn4c5DxATwIqPbtswREoFCre64PpcG4= +github.com/shopspring/decimal v0.0.0-20200227202807-02e2044944cc/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o= +github.com/shopspring/decimal v1.2.0 h1:abSATXmQEYyShuxI4/vyW3tV1MrKAJzCZ/0zLUXYbsQ= +github.com/shopspring/decimal v1.2.0/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o= +github.com/shurcooL/sanitized_anchor_name v1.0.0 h1:PdmoCO6wvbs+7yrJyMORt4/BmY5IYyJwS/kOiWx8mHo= +github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc= +github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo= +github.com/sirupsen/logrus v1.4.1/go.mod h1:ni0Sbl8bgC9z8RoU9G6nDWqqs/fq4eDPysMBDgk/93Q= +github.com/sirupsen/logrus v1.4.2 h1:SPIRibHv4MatM3XXNO2BJeFLZwZ2LvZgfQ5+UNI2im4= +github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE= +github.com/skratchdot/open-golang v0.0.0-20160302144031-75fb7ed4208c/go.mod h1:sUM3LWHvSMaG192sy56D9F7CNvL7jUJVXoqM1QKLnog= +github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc= +github.com/smartystreets/assertions v1.1.1 h1:T/YLemO5Yp7KPzS+lVtu+WsHn8yoSwTfItdAd1r3cck= +github.com/smartystreets/assertions v1.1.1/go.mod h1:tcbTF8ujkAEcZ8TElKY+i30BzYlVhC/LOxJk7iOWnoo= +github.com/smartystreets/goconvey v0.0.0-20190330032615-68dc04aab96a/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA= +github.com/smartystreets/goconvey v1.6.4 h1:fv0U8FUIMPNf1L9lnHLvLhgicrIVChEkdzIKYqbNC9s= +github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA= +github.com/spf13/afero v1.1.2/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ= +github.com/spf13/cast v1.3.0/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE= +github.com/spf13/cobra v0.0.5/go.mod h1:3K3wKZymM7VvHMDS9+Akkh4K60UwM26emMESw8tLCHU= +github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo= +github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4= +github.com/spf13/viper v1.3.2/go.mod h1:ZiWeW+zYFKm7srdB9IoDzzZXaJaI5eL9QjNiN/DMA2s= +github.com/streadway/amqp v1.0.0/go.mod h1:AZpEONHx3DKn8O/DFsRAY58/XVQiIPMTMB1SddzLXVw= +github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/objx v0.2.0 h1:Hbg2NidpLE8veEBkEZTL3CvlkUIVzuU9jDplZO54c48= +github.com/stretchr/objx v0.2.0/go.mod h1:qt09Ya8vawLte6SNmTgCsAVtYtaKzEcn8ATUoHMkEqE= +github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs= +github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= +github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= +github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H4= +github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA= +github.com/stretchr/testify v1.6.1 h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0= +github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/timewasted/linode v0.0.0-20160829202747-37e84520dcf7/go.mod h1:imsgLplxEC/etjIhdr3dNzV3JeT27LbVu5pYWm0JCBY= +github.com/transip/gotransip/v6 v6.0.2/go.mod h1:pQZ36hWWRahCUXkFWlx9Hs711gLd8J4qdgLdRzmtY+g= +github.com/uber-go/atomic v1.3.2/go.mod h1:/Ct5t2lcmbJ4OSe/waGBoaVvVqtO0bmtfVNex1PFV8g= +github.com/uber/jaeger-client-go v2.25.0+incompatible h1:IxcNZ7WRY1Y3G4poYlx24szfsn/3LvK9QHCq9oQw8+U= +github.com/uber/jaeger-client-go v2.25.0+incompatible/go.mod h1:WVhlPFC8FDjOFMMWRy2pZqQJSXxYSwNYOkTr/Z6d3Kk= +github.com/ugorji/go v1.1.4/go.mod h1:uQMGLiO92mf5W77hV/PUCpI3pbzQx3CRekS0kk+RGrc= +github.com/ugorji/go v1.1.7/go.mod h1:kZn38zHttfInRq0xu/PH0az30d+z6vm202qpg1oXVMw= +github.com/ugorji/go/codec v0.0.0-20181204163529-d75b2dcb6bc8/go.mod h1:VFNgLljTbGfSG7qAOspJ7OScBnGdDN/yBr0sguwnwf0= +github.com/ugorji/go/codec v1.1.7/go.mod h1:Ax+UKWsSmolVDwsd+7N3ZtXu+yMGCf907BLYF3GoBXY= +github.com/urfave/cli v1.22.1 h1:+mkCCcOFKPnCmVYVcURKps1Xe+3zP90gSYGNfRkjoIY= +github.com/urfave/cli v1.22.1/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0= +github.com/urfave/cli/v2 v2.2.0 h1:JTTnM6wKzdA0Jqodd966MVj4vWbbquZykeX1sKbe2C4= +github.com/urfave/cli/v2 v2.2.0/go.mod h1:SE9GqnLQmjVa0iPEY0f1w3ygNIYcIJ0OKPMoW2caLfQ= +github.com/urfave/negroni v1.0.0/go.mod h1:Meg73S6kFm/4PpbYdq35yYWoCZ9mS/YSx+lKnmiohz4= +github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw= +github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc= +github.com/valyala/fasthttp v1.6.0/go.mod h1:FstJa9V+Pj9vQ7OJie2qMHdwemEDaDiSdBnvPM1Su9w= +github.com/valyala/fasttemplate v1.0.1/go.mod h1:UQGH1tvbgY+Nz5t2n7tXsz52dQxojPUpymEIMZ47gx8= +github.com/valyala/fasttemplate v1.1.0 h1:RZqt0yGBsps8NGvLSGW804QQqCUYYLsaOjTVHy1Ocw4= +github.com/valyala/fasttemplate v1.1.0/go.mod h1:UQGH1tvbgY+Nz5t2n7tXsz52dQxojPUpymEIMZ47gx8= +github.com/valyala/fasttemplate v1.2.1 h1:TVEnxayobAdVkhQfrfes2IzOB6o+z4roRkPF52WA1u4= +github.com/valyala/fasttemplate v1.2.1/go.mod h1:KHLXt3tVN2HBp8eijSv/kGJopbvo7S+qRAEEKiv+SiQ= +github.com/valyala/tcplisten v0.0.0-20161114210144-ceec8f93295a/go.mod h1:v3UYOV9WzVtRmSR+PDvWpU/qWl4Wa5LApYYX4ZtKbio= +github.com/vektra/mockery v1.1.2 h1:uc0Yn67rJpjt8U/mAZimdCKn9AeA97BOkjpmtBSlfP4= +github.com/vektra/mockery v1.1.2/go.mod h1:VcfZjKaFOPO+MpN4ZvwPjs4c48lkq1o3Ym8yHZJu0jU= +github.com/vmihailenco/bufpool v0.1.5 h1:mEO/biwhAgiY97yPMmAdH4PvaIu63C6uGBdfSdoMo/I= +github.com/vmihailenco/bufpool v0.1.5/go.mod h1:fL9i/PRTuS7AELqAHwSU1Zf1c70xhkhGe/cD5ud9pJk= +github.com/vmihailenco/msgpack/v4 v4.2.0/go.mod h1:Mu3B7ZwLd5nNOLVOKt9DecVl7IVg0xkDiEjk6CwMrww= +github.com/vmihailenco/msgpack/v4 v4.3.5/go.mod h1:DuaveEe48abshDmz5UBKyZ+yDugvaeFk5ayfrewUOaw= +github.com/vmihailenco/msgpack/v4 v4.3.7/go.mod h1:Ii+PksJlvFT5ZRcB/4YLAInMIp6a0WOCm0L3BU0aNG4= +github.com/vmihailenco/msgpack/v4 v4.3.12 h1:07s4sz9IReOgdikxLTKNbBdqDMLsjPKXwvCazn8G65U= +github.com/vmihailenco/msgpack/v4 v4.3.12/go.mod h1:gborTTJjAo/GWTqqRjrLCn9pgNN+NXzzngzBKDPIqw4= +github.com/vmihailenco/tagparser v0.1.0/go.mod h1:OeAg3pn3UbLjkWt+rN9oFYB6u/cQgqMEUPoW2WPyhdI= +github.com/vmihailenco/tagparser v0.1.1 h1:quXMXlA39OCbd2wAdTsGDlK9RkOk6Wuw+x37wVyIuWY= +github.com/vmihailenco/tagparser v0.1.1/go.mod h1:OeAg3pn3UbLjkWt+rN9oFYB6u/cQgqMEUPoW2WPyhdI= +github.com/vultr/govultr v0.4.2/go.mod h1:TUuUizMOFc7z+PNMssb6iGjKjQfpw5arIaOLfocVudQ= +github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU= +github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ= +github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQluxsYJ78Id3Y= +github.com/xordataexchange/crypt v0.0.3-0.20170626215501-b2862e3d0a77/go.mod h1:aYKd//L2LvnjZzWKhF00oedf4jCCReLcmhLdhm1A27Q= +github.com/yalp/jsonpath v0.0.0-20180802001716-5cc68e5049a0/go.mod h1:/LWChgwKmvncFJFHJ7Gvn9wZArjbV5/FppcK2fKk/tI= +github.com/yudai/gojsondiff v1.0.0/go.mod h1:AY32+k2cwILAkW1fbgxQ5mUmMiZFgLIV+FBNExI05xg= +github.com/yudai/golcs v0.0.0-20170316035057-ecda9a501e82/go.mod h1:lgjkn3NuSvDfVJdfcVVdX+jpBxNmX4rDAzaS45IcYoM= +github.com/yudai/pp v2.0.1+incompatible/go.mod h1:PuxR/8QJ7cyCkFp/aUDS+JY727OFEZkTdatxwunjIkc= +github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +github.com/zenazn/goji v0.9.0/go.mod h1:7S9M489iMyHBNxwZnk9/EHS098H4/F6TATF2mIxtB1Q= +go.opencensus.io v0.20.1/go.mod h1:6WKK9ahsWS3RSO+PY9ZHZUfv2irvY6gN279GOPZjmmk= +go.opencensus.io v0.20.2/go.mod h1:6WKK9ahsWS3RSO+PY9ZHZUfv2irvY6gN279GOPZjmmk= +go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU= +go.opencensus.io v0.22.0/go.mod h1:+kGneAE2xo2IficOXnaByMWTGM9T73dGwxeWcUqIpI8= +go.opencensus.io v0.22.2/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw= +go.opencensus.io v0.22.3 h1:8sGtKOrtQqkN1bp2AtX+misvLIlOmsEsNd+9NIcPEm8= +go.opencensus.io v0.22.3/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw= +go.opencensus.io v0.22.4 h1:LYy1Hy3MJdrCdMwwzxA/dRok4ejH+RwNGbuoD9fCjto= +go.opencensus.io v0.22.4/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw= +go.uber.org/atomic v1.3.2/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE= +go.uber.org/atomic v1.4.0/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE= +go.uber.org/atomic v1.6.0 h1:Ezj3JGmsOnG1MoRWQkPBsKLe9DwWD9QeXzTRzzldNVk= +go.uber.org/atomic v1.6.0/go.mod h1:sABNBOSYdrvTF6hTgEIbc7YasKWGhgEQZyfxyTvoXHQ= +go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0= +go.uber.org/multierr v1.5.0 h1:KCa4XfM8CWFCpxXRGok+Q0SS/0XBhMDbHHGABQLvD2A= +go.uber.org/multierr v1.5.0/go.mod h1:FeouvMocqHpRaaGuG9EjoKcStLC43Zu/fmqdUMPcKYU= +go.uber.org/ratelimit v0.0.0-20180316092928-c15da0234277/go.mod h1:2X8KaoNd1J0lZV+PxJk/5+DGbO/tpwLR1m++a7FnB/Y= +go.uber.org/tools v0.0.0-20190618225709-2cfd321de3ee h1:0mgffUl7nfd+FpvXMVz4IDEaUSmT1ysygQC7qYo7sG4= +go.uber.org/tools v0.0.0-20190618225709-2cfd321de3ee/go.mod h1:vJERXedbb3MVM5f9Ejo0C68/HhF8uaILCdgjnY+goOA= +go.uber.org/zap v1.9.1/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q= +go.uber.org/zap v1.10.0/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q= +go.uber.org/zap v1.15.0 h1:ZZCA22JRF2gQE5FoNmhmrf7jeJJ2uhqDUNRYKm8dvmM= +go.uber.org/zap v1.15.0/go.mod h1:Mb2vm2krFEG5DV0W9qcHBYFtp/Wku1cvYaqPsS/WYfc= +golang.org/x/crypto v0.0.0-20180621125126-a49355c7e3f8/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4= +golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4= +golang.org/x/crypto v0.0.0-20180910181607-0e37d006457b/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4= +golang.org/x/crypto v0.0.0-20181203042331-505ab145d0a9/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4= +golang.org/x/crypto v0.0.0-20190211182817-74369b46fc67/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4= +golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= +golang.org/x/crypto v0.0.0-20190411191339-88737f569e3a/go.mod h1:WFFai1msRO1wXaEeE5yQxYXgSfI8pQAWXbQop6sCtWE= +golang.org/x/crypto v0.0.0-20190418165655-df01cb2cc480/go.mod h1:WFFai1msRO1wXaEeE5yQxYXgSfI8pQAWXbQop6sCtWE= +golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20190701094942-4def268fd1a4/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20190911031432-227b76d455e7/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20190923035154-9ee001bba392/go.mod h1:/lpIB1dKB+9EgE3H3cr1v9wB50oz8l4C4h62xy7jSTY= +golang.org/x/crypto v0.0.0-20191002192127-34f69633bfdc/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20191029031824-8986dd9e96cf/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/crypto v0.0.0-20191128160524-b544559bb6d1/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/crypto v0.0.0-20200221231518-2aa609cf4a9d/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/crypto v0.0.0-20200302210943-78000ba7a073/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/crypto v0.0.0-20200323165209-0ec3e9974c59/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 h1:psW17arqaxU48Z5kZ0CQnkZWQJsqcURM6tKiBApRjXI= +golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/crypto v0.0.0-20200728195943-123391ffb6de h1:ikNHVSjEfnvz6sxdSPCaPt572qowuyMDMJLLm3Db3ig= +golang.org/x/crypto v0.0.0-20200728195943-123391ffb6de/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/crypto v0.0.0-20200820211705-5c72a883971a h1:vclmkQCjlDX5OydZ9wv8rBCcS0QyQY66Mpf/7BZbInM= +golang.org/x/crypto v0.0.0-20200820211705-5c72a883971a/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= +golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= +golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= +golang.org/x/exp v0.0.0-20190829153037-c13cbed26979/go.mod h1:86+5VVa7VpoJ4kLfm080zCjGlMRFzhUhsZKEZO7MGek= +golang.org/x/exp v0.0.0-20191030013958-a1ab85dbe136/go.mod h1:JXzH8nQsPlswgeRAPE3MuO9GYsAcnJvJ4vnMwN/5qkY= +golang.org/x/exp v0.0.0-20191129062945-2f5052295587/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4= +golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4= +golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4= +golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM= +golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU= +golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js= +golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0= +golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= +golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU= +golang.org/x/lint v0.0.0-20190301231843-5614ed5bae6f/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= +golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= +golang.org/x/lint v0.0.0-20190409202823-959b441ac422/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= +golang.org/x/lint v0.0.0-20190909230951-414d861bb4ac/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= +golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= +golang.org/x/lint v0.0.0-20191125180803-fdd1cda4f05f/go.mod h1:5qLYkcX4OjUUV8bRuDixDT3tpyyb+LUpUlRWLxfhWrs= +golang.org/x/lint v0.0.0-20200130185559-910be7a94367/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY= +golang.org/x/lint v0.0.0-20200302205851-738671d3881b h1:Wh+f8QHJXR411sJR8/vRBTZ7YapZaRvUcLFFJhusH0k= +golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY= +golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE= +golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCcRqshq8CkpyQDoeVncDDYHnLhea+o= +golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc= +golang.org/x/mod v0.1.0/go.mod h1:0QHyrYULN0/3qlju5TqG8bIK38QM8yzMo5ekMj3DlcY= +golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg= +golang.org/x/mod v0.1.1-0.20191107180719-034126e5016b/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg= +golang.org/x/mod v0.2.0 h1:KU7oHjnv3XNWfa5COkzUifxZmxp1TyI7ImMXqFxLwvQ= +golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/mod v0.3.0 h1:RM4zey1++hCTbCVQfnWeKs9/IEsaBLA8vTkd0WVtmH4= +golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/net v0.0.0-20180611182652-db08ff08e862/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20181220203305-927f97764cc3/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190125091013-d26f9f9a57f3/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190327091125-710a502c58a2/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190420063019-afa5a82059c6/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190501004415-9ce7a6920f09/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190503192946-f4e77d36d62c/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks= +golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190628185345-da137c7871d7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190724013045-ca1201d0de80/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190813141303-74dc4d7220e7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190827160401-ba9fcec4b297/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190923162816-aa69164e4478/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190930134127-c5a3c61f89f3/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200114155413-6afb5195e5aa/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200202094626-16171245cfb2/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200222033325-078779b8f2d8/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200222125558-5a598a2470a0/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200301022130-244492dfa37a/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e h1:3G+cUijn7XD+S4eJFddp53Pv7+slrESplyjG25HgL+k= +golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200501053045-e0ff5e5a1de5/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200506145744-7e3656a0809f/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200513185701-a91f0712d120/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7 h1:AeiKBIuRw3UomYXSbLy0Mc2dDLfdtbT/IVn4keq83P0= +golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200520182314-0ba52f642ac2 h1:eDrdRpKgkcCqKZQwyZRyeFZgfqt37SL7Kv3tok06cKE= +golang.org/x/net v0.0.0-20200520182314-0ba52f642ac2/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200625001655-4c5254603344 h1:vGXIOMxbNfDTk/aXCmfdLgkrSV+Z2tcbze+pEc3v5W4= +golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA= +golang.org/x/net v0.0.0-20200707034311-ab3426394381 h1:VXak5I6aEWmAXeQjA+QSZzlgNrpq9mjcfDemuexIKsU= +golang.org/x/net v0.0.0-20200707034311-ab3426394381/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA= +golang.org/x/net v0.0.0-20200822124328-c89045814202 h1:VvcQYSHwXgi7W+TpUR6A9g6Up98WAHf3f/ulnJ62IyA= +golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA= +golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= +golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= +golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= +golang.org/x/oauth2 v0.0.0-20191202225959-858c2ad4c8b6/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= +golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d h1:TzXSXBo42m9gQenoE3b9BGiEpg5IG2JkU5FkPIawgtw= +golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= +golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e h1:vcxGaoTs7kV8m5Np9uUNQin4BrLOthgV7252N8V+FwY= +golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20200317015054-43a5402ce75a h1:WXEvlFVvvGxCJLG6REjsT03iWnKLEWinaScsxF2Vm2o= +golang.org/x/sync v0.0.0-20200317015054-43a5402ce75a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208 h1:qwRHBd0NqMbJxfbotnDhm2ByMI1Shq4Y6oRJo21SGJA= +golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sys v0.0.0-20180622082034-63fc586f45fe/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20181107165924-66b7b1311ac8/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20181122145206-62eef0e2fa9b/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20181205085412-a5c9d58dba9a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190209173611-3b5209105503/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190403152447-81d4e9dc473e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190502145724-3ef323f4f1fd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190507160741-ecd444e8653b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190606165138-5da285871e9c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190624142023-c5567b49c5d0/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190626221950-04f50cda93cb/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190726091711-fc99dfbffb4e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190801041406-cbf593c0f2f3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190813064441-fde4db37ae7a/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190904154756-749cb33beabd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190922100055-0a153f010e69/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190924154521-2837fb4f24fe/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191001151750-bb3f8db39f24/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191002091554-b397fe3ad8ed/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191010194322-b09406accb47/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191113165036-4c7a9d0fe056/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191120155948-bd437916bb0e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191204072324-ce4227a45e2e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191228213918-04cbcbbfeed8/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200106162015-b016eb3dc98e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200113162924-86b910548bc1/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200122134326-e047566fdf82/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200202164722-d101bd2416d5/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200212091648-12a6c2dcc1e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200302150141-5c8b2ff67527/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200331124033-c3d80250170d h1:nc5K6ox/4lTFbMVSL9WRR81ixkcwXThoiF6yf+R9scA= +golang.org/x/sys v0.0.0-20200331124033-c3d80250170d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200501052902-10377860bb8e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200511232937-7e40ca221e25/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200515095857-1151b9dac4a9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200519105757-fe76b779f299 h1:DYfZAGf2WMFjMxbgTjaC+2HC7NkNAQs+6Q8b9WEB/F4= +golang.org/x/sys v0.0.0-20200519105757-fe76b779f299/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200523222454-059865788121 h1:rITEj+UZHYC927n8GT97eC3zrpzXdb/voyeOuVKS46o= +golang.org/x/sys v0.0.0-20200523222454-059865788121/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200615200032-f1bc736245b1 h1:ogLJMz+qpzav7lGMh10LMvAkM/fAoGlaiiHYiFYdm80= +golang.org/x/sys v0.0.0-20200615200032-f1bc736245b1/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200803210538-64077c9b5642 h1:B6caxRw+hozq68X2MY7jEpZh/cr4/aHLv9xU8Kkadrw= +golang.org/x/sys v0.0.0-20200803210538-64077c9b5642/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200826173525-f9321e4c35a6 h1:DvY3Zkh7KabQE/kfzMvYvKirSiguP9Q/veMtkYyf0o8= +golang.org/x/sys v0.0.0-20200826173525-f9321e4c35a6/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.2 h1:tW2bmiBqwgJj/UpqtC8EpXEZVYOwU0yG4iWbprSVAcs= +golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk= +golang.org/x/text v0.3.3 h1:cokOdA+Jmi5PJGXLlLllQSgYigAEfHXJAERHVMaCc2k= +golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= +golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= +golang.org/x/time v0.0.0-20190921001708-c4c64cad1fd0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= +golang.org/x/time v0.0.0-20191024005414-555d28b269f0 h1:/5xXl8Y5W96D+TtHSlonuFqGHIWVuyCkGJLwGh9JJFs= +golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= +golang.org/x/tools v0.0.0-20180828015842-6cd1fcedba52/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20181221001348-537d06c36207/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY= +golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190312151545-0bb0c0a6e846/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190312170243-e65039ee4138/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190327201419-c70d86f8b7cf/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190425150028-36563e24a262/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190425163242-31fd60d6bfdc/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190506145303-2d16b83fe98c/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190606124116-d0a3d012864b/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc= +golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc= +golang.org/x/tools v0.0.0-20190628153133-6cdbf07be9d0/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc= +golang.org/x/tools v0.0.0-20190816200558-6889da9d5479/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20190823170909-c4a336ef6a2f/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191012152004-8de300cfc20a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191029041327-9cc4af7d6b2c/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191029190741-b9c20aec41a5/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191113191852-77e3bb0ad9e7/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191115202509-3a792d9c32b2/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191125144606-a911d9008d1f/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191130070609-6e064ea0cf2d/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191216052735-49a3e744a425/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20191216173652-a0e659d51361/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20191227053925-7b8e75db28f4/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200117161641-43d50277825c/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200122220014-bf1340f18c4a/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200204074204-1cc6d1ef6c74/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200207183749-b753a1ba74fa/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200212150539-ea181f53ac56/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200224181240-023911ca70b2/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200227222343-706bc42d1f0d/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200304193943-95d2e580d8eb/go.mod h1:o4KQGtdN14AW+yjsvvwRTJJuXz8XRtIHtEnmAXLyFUw= +golang.org/x/tools v0.0.0-20200312045724-11d5b4c81c7d/go.mod h1:o4KQGtdN14AW+yjsvvwRTJJuXz8XRtIHtEnmAXLyFUw= +golang.org/x/tools v0.0.0-20200323144430-8dcfad9e016e/go.mod h1:Sl4aGygMT6LrqrWclx+PTx3U+LnKx/seiNR+3G19Ar8= +golang.org/x/tools v0.0.0-20200331025713-a30bf2db82d4/go.mod h1:Sl4aGygMT6LrqrWclx+PTx3U+LnKx/seiNR+3G19Ar8= +golang.org/x/tools v0.0.0-20200501065659-ab2804fb9c9d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20200512131952-2bc93b1c0c88/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20200515010526-7d3b6ebf133d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20200618134242-20370b0cb4b2/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20200729194436-6467de6f59a7/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA= +golang.org/x/tools v0.0.0-20200804011535-6c149bb5ef0d h1:szSOL78iTCl0LF1AMjhSWJj8tIM0KixlUUnBtYXsmd8= +golang.org/x/tools v0.0.0-20200804011535-6c149bb5ef0d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA= +golang.org/x/tools v0.0.0-20200819140908-cf83efe03cf8 h1:vRX0wGqBdtbS6vDv0mxYgNYw03j7YntEHBrEb/KJeeE= +golang.org/x/tools v0.0.0-20200819140908-cf83efe03cf8/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA= +golang.org/x/tools v0.0.0-20200828161849-5deb26317202 h1:DrWbY9UUFi/sl/3HkNVoBjDbGfIPZZfgoGsGxOL1EU8= +golang.org/x/tools v0.0.0-20200828161849-5deb26317202/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA= +golang.org/x/xerrors v0.0.0-20190410155217-1f06c39b4373/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20190513163551-3ee3066db522/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543 h1:E7g+9GITq07hpfrRu66IVDexMakfv52eLZ2CXBWiKr4= +golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +google.golang.org/api v0.3.1/go.mod h1:6wY9I6uQWHQ8EM57III9mq/AjF+i8G65rmVagqKMtkk= +google.golang.org/api v0.4.0/go.mod h1:8k5glujaEP+g9n7WNsDg8QP6cUVNI86fCNMcbazEtwE= +google.golang.org/api v0.7.0/go.mod h1:WtwebWUNSVBH/HAw79HIFXZNqEvBhG+Ra+ax0hx3E3M= +google.golang.org/api v0.8.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg= +google.golang.org/api v0.9.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg= +google.golang.org/api v0.13.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI= +google.golang.org/api v0.14.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI= +google.golang.org/api v0.15.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI= +google.golang.org/api v0.17.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.18.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.19.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.20.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.22.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.24.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE= +google.golang.org/api v0.28.0 h1:jMF5hhVfMkTZwHW1SDpKq5CkgWLXOb31Foaca9Zr3oM= +google.golang.org/api v0.28.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE= +google.golang.org/api v0.29.0 h1:BaiDisFir8O4IJxvAabCGGkQ6yCJegNQqSVoYUNAnbk= +google.golang.org/api v0.29.0/go.mod h1:Lcubydp8VUV7KeIHD9z2Bys/sm/vGKnG1UHuDBSrHWM= +google.golang.org/api v0.30.0 h1:yfrXXP61wVuLb0vBcG6qaOoIoqYEzOQS8jum51jkv2w= +google.golang.org/api v0.30.0/go.mod h1:QGmEvQ87FHZNiUVJkT14jQNYJ4ZJjdRF23ZXz5138Fc= +google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= +google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= +google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= +google.golang.org/appengine v1.6.1/go.mod h1:i06prIuMbXzDqacNJfV5OdTW448YApPu5ww/cMBSeb0= +google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc= +google.golang.org/appengine v1.6.6 h1:lMO5rYAqUxkmaj76jAkRUvt5JZgFymx/+Q5Mzfivuhc= +google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc= +google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc= +google.golang.org/genproto v0.0.0-20190307195333-5fe7a883aa19/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE= +google.golang.org/genproto v0.0.0-20190418145605-e7d98fc518a7/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE= +google.golang.org/genproto v0.0.0-20190425155659-357c62f0e4bb/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE= +google.golang.org/genproto v0.0.0-20190502173448-54afdca5d873/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE= +google.golang.org/genproto v0.0.0-20190801165951-fa694d86fc64/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc= +google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc= +google.golang.org/genproto v0.0.0-20190911173649-1774047e7e51/go.mod h1:IbNlFCBrqXvoKpeg0TB2l7cyZUmoaFKYIwrEpbDKLA8= +google.golang.org/genproto v0.0.0-20191108220845-16a3f7862a1a/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20191115194625-c23dd37a84c9/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20191216164720-4f79533eabd1/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20191230161307-f3c370f40bfb/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20200115191322-ca5a22157cba/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20200122232147-0452cf42e150/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20200204135345-fa8e72b47b90/go.mod h1:GmwEX6Z4W5gMy59cAlVYjN9JhxgbQH6Gn+gFDQe2lzA= +google.golang.org/genproto v0.0.0-20200212174721-66ed5ce911ce/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200228133532-8c2c7df3a383/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200305110556-506484158171/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200312145019-da6875a35672/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200331122359-1ee6d9798940 h1:MRHtG0U6SnaUb+s+LhNE1qt1FQ1wlhqr5E4usBKC0uA= +google.golang.org/genproto v0.0.0-20200331122359-1ee6d9798940/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200430143042-b979b6f78d84/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200511104702-f5ebc3bea380 h1:xriR1EgvKfkKxIoU2uUvrMVl+H26359loFFUleSMXFo= +google.golang.org/genproto v0.0.0-20200511104702-f5ebc3bea380/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200515170657-fc4c6c6a6587/go.mod h1:YsZOwe1myG/8QRHRsmBRE1LrgQY60beZKjly0O1fX9U= +google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013 h1:+kGHl1aib/qcwaRi1CbqBZ1rk19r85MNUf8HaBghugY= +google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo= +google.golang.org/genproto v0.0.0-20200618031413-b414f8b61790 h1:FGjyjrQGURdc98leD1P65IdQD9Zlr4McvRcqIlV6OSs= +google.golang.org/genproto v0.0.0-20200618031413-b414f8b61790/go.mod h1:jDfRM7FcilCzHH/e9qn6dsT145K34l5v+OpcnNgKAAA= +google.golang.org/genproto v0.0.0-20200729003335-053ba62fc06f/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20200804131852-c06518451d9c h1:Lq4llNryJoaVFRmvrIwC/ZHH7tNt4tUYIu8+se2aayY= +google.golang.org/genproto v0.0.0-20200804131852-c06518451d9c/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/grpc v1.17.0/go.mod h1:6QZJwpn2B+Zp71q/5VxRsJ6NXXVCE5NRUHRo+f3cWCs= +google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= +google.golang.org/grpc v1.19.1/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= +google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38= +google.golang.org/grpc v1.21.1/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM= +google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg= +google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY= +google.golang.org/grpc v1.26.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= +google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= +google.golang.org/grpc v1.27.1/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= +google.golang.org/grpc v1.28.0 h1:bO/TA4OxCOummhSf10siHuG7vJOiwh7SpRpFZDkOgl4= +google.golang.org/grpc v1.28.0/go.mod h1:rpkK4SK4GF4Ach/+MFLZUBavHOvF2JJB5uozKKal+60= +google.golang.org/grpc v1.29.1 h1:EC2SB8S04d2r73uptxphDSUG+kTKVgjRPF+N3xpxRB4= +google.golang.org/grpc v1.29.1/go.mod h1:itym6AZVZYACWQqET3MqgPpjcuV5QH3BxFS3IjizoKk= +google.golang.org/grpc v1.30.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak= +google.golang.org/grpc v1.31.0 h1:T7P4R73V3SSDPhH7WW7ATbfViLtmamH0DKrP3f9AuDI= +google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak= +google.golang.org/grpc v1.31.1 h1:SfXqXS5hkufcdZ/mHtYCh53P2b+92WQq/DZcKLgsFRs= +google.golang.org/grpc v1.31.1/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak= +google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8= +google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0= +google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM= +google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE= +google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo= +google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.23.0 h1:4MY060fB1DLGMB/7MBTLnwQUY6+F09GEiz6SsrNqyzM= +google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.24.0 h1:UhZDfRO8JRQru4/+LlLE0BRKGF8L+PICnvYZmx/fEGA= +google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGjtUeSXeh4= +google.golang.org/protobuf v1.25.0 h1:Ejskq+SyPohKW+1uil0JJMtmHCgJPJ/qWTxr8qp+R4c= +google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c= +gopkg.in/alecthomas/kingpin.v2 v2.2.6 h1:jMFz6MfLP0/4fUyZle81rXUoxOBFi19VUFKVDOQfozc= +gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw= +gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY= +gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo= +gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI= +gopkg.in/fsnotify.v1 v1.4.7 h1:xOHLXZwVvI9hhs+cLKq5+I5onOuwQLhQwiu63xxlHs4= +gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys= +gopkg.in/go-playground/assert.v1 v1.2.1/go.mod h1:9RXL0bg/zibRAgZUYszZSwO/z8Y/a8bDuhia5mkpMnE= +gopkg.in/go-playground/validator.v8 v8.18.2/go.mod h1:RX2a/7Ha8BgOhfk7j780h4/u/RRjR0eouCJSH80/M2Y= +gopkg.in/h2non/gock.v1 v1.0.15/go.mod h1:sX4zAkdYX1TRGJ2JY156cFspQn4yRWn6p9EMdODlynE= +gopkg.in/inconshreveable/log15.v2 v2.0.0-20180818164646-67afb5ed74ec/go.mod h1:aPpfJ7XW+gOuirDoZ8gHhLh3kZ1B08FtV2bbmy7Jv3s= +gopkg.in/ini.v1 v1.42.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k= +gopkg.in/ini.v1 v1.51.1/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k= +gopkg.in/mgo.v2 v2.0.0-20180705113604-9856a29383ce/go.mod h1:yeKp02qBN3iKW1OzL3MGk2IdtZzaj7SFntXj72NppTA= +gopkg.in/ns1/ns1-go.v2 v2.0.0-20190730140822-b51389932cbc/go.mod h1:VV+3haRsgDiVLxyifmMBrBIuCWFBPYKbRssXB9z67Hw= +gopkg.in/resty.v1 v1.9.1/go.mod h1:vo52Hzryw9PnPHcJfPsBiFW62XhNx5OczbV9y+IMpgc= +gopkg.in/resty.v1 v1.12.0/go.mod h1:mDo4pnntr5jdWRML875a/NmxYqAlA73dVijT2AXvQQo= +gopkg.in/square/go-jose.v2 v2.3.1 h1:SK5KegNXmKmqE342YYN2qPHEnUYeoMiXXl1poUlI+o4= +gopkg.in/square/go-jose.v2 v2.3.1/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI= +gopkg.in/square/go-jose.v2 v2.5.1 h1:7odma5RETjNHWJnR32wx8t+Io4djHE1PqxCFx3iiZ2w= +gopkg.in/square/go-jose.v2 v2.5.1/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI= +gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= +gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= +gopkg.in/yaml.v2 v2.0.0-20170812160011-eb3733d160e7/go.mod h1:JAlM8MvJe8wmxCU4Bli9HhUf9+ttbYbLASfIpnQbh74= +gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.2.5/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU= +gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c h1:dUUwHk2QECo/6vqA44rthZ8ie2QXMNeKRTHCNY2nXvo= +gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +honnef.co/go/tools v0.0.0-20180728063816-88497007e858/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg= +honnef.co/go/tools v0.0.1-2020.1.3 h1:sXmLre5bzIR6ypkjXCDI3jHPssRhc8KD/Ome589sc3U= +honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k= +honnef.co/go/tools v0.0.1-2020.1.4 h1:UoveltGrhghAA7ePc+e+QYDHXrBps2PqFZiHkGR/xK8= +honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k= +mellium.im/sasl v0.2.1 h1:nspKSRg7/SyO0cRGY71OkfHab8tf9kCts6a6oTDut0w= +mellium.im/sasl v0.2.1/go.mod h1:ROaEDLQNuf9vjKqE1SrAfnsobm2YKXT1gnN1uDp1PjQ= +rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= +rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= +rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= diff --git a/internal/tools/tools.go b/internal/tools/tools.go new file mode 100644 index 0000000..9708de5 --- /dev/null +++ b/internal/tools/tools.go @@ -0,0 +1,10 @@ +// +build tools + +package tools + +import ( + _ "github.com/cespare/reflex" + _ "github.com/smartystreets/goconvey" + _ "github.com/vektra/mockery/cmd/mockery" + _ "golang.org/x/tools/cmd/goimports" +) diff --git a/main.go b/main.go new file mode 100644 index 0000000..0f4190a --- /dev/null +++ b/main.go @@ -0,0 +1,23 @@ +package main + +import ( + "log" + "os" + + "github.com/Syncano/acme-proxy/cmd" +) + +func main() { + logger := log.New(os.Stderr, "", 0) + + // Run main cmd.App. + defer func() { + if r := recover(); r != nil { + logger.Panicf("Panic occurred! %q", r) + } + }() + + if err := cmd.App.Run(os.Args); err != nil { + logger.Panicf("Fatal error! %q", err) + } +} diff --git a/migrations/20200727162014_initial.sql b/migrations/20200727162014_initial.sql new file mode 100644 index 0000000..1995d59 --- /dev/null +++ b/migrations/20200727162014_initial.sql @@ -0,0 +1,51 @@ +-- +goose Up +CREATE TABLE acme_user ( + id SERIAL PRIMARY KEY, + email TEXT NOT NULL, + private_key BYTEA NOT NULL, + private_key_type INT NOT NULL, + registration JSONB NOT NULL, + + created_at TIMESTAMPTZ NOT NULL +); + + +CREATE TABLE certificate ( + id SERIAL PRIMARY KEY, + acme_user_id INT NOT NULL, + domain TEXT NOT NULL UNIQUE, + url TEXT NOT NULL, + stable_url TEXT NOT NULL, + private_key BYTEA NOT NULL, + private_key_type INT NOT NULL, + certificate BYTEA[] NOT NULL, + issuer_certificate BYTEA NOT NULL, + csr BYTEA NOT NULL, + + status INT NOT NULL, + failures INT NOT NULL, + + auto_refresh BOOLEAN NOT NULL, + refresh_before_days INT NOT NULL, + + created_at TIMESTAMPTZ NOT NULL, + updated_at TIMESTAMPTZ NOT NULL, + expires_at TIMESTAMPTZ NOT NULL, + + CONSTRAINT fk_acme_user_id + FOREIGN KEY(acme_user_id) + REFERENCES acme_user(id) +); + +CREATE INDEX certificate_domain ON certificate USING btree(domain); +CREATE INDEX certificate_expires_at ON certificate USING btree(expires_at) WHERE auto_refresh IS TRUE; +CREATE INDEX certificate_status ON certificate USING hash(status); + + +-- +goose Down +DROP INDEX certificate_domain; +DROP INDEX certificate_expires_at; +DROP INDEX certificate_status; + +DROP TABLE certificate; +DROP TABLE acme_user; diff --git a/pkg/acme/acme.go b/pkg/acme/acme.go new file mode 100644 index 0000000..579aa07 --- /dev/null +++ b/pkg/acme/acme.go @@ -0,0 +1,162 @@ +package acme + +import ( + "crypto/ecdsa" + "crypto/elliptic" + "crypto/rand" + "fmt" + + "github.com/Syncano/pkg-go/v2/log" + "github.com/Syncano/pkg-go/v2/rediscache" + "github.com/bsm/redislock" + "github.com/go-acme/lego/v3/certcrypto" + "github.com/go-acme/lego/v3/certificate" + "github.com/go-acme/lego/v3/lego" + "github.com/go-acme/lego/v3/registration" +) + +type Client struct { + user *User + config *lego.Config + client *lego.Client + + rc *rediscache.Cache + locker *redislock.Client + logger *log.Logger +} + +func NewClient(cadir string, rc *rediscache.Cache, locker *redislock.Client, logger *log.Logger) *Client { + config := lego.NewConfig(nil) + config.CADirURL = cadir + config.Certificate.KeyType = certcrypto.RSA2048 + + ac := &Client{ + config: config, + rc: rc, + locker: locker, + logger: logger, + } + + return ac +} + +func (a *Client) User() *User { + return a.user +} + +func (a *Client) Client() *lego.Client { + if a.client != nil { + return a.client + } + + var err error + + // A client facilitates communication with the CA server. + a.client, err = lego.NewClient(a.config) + if err != nil { + panic(err) + } + + err = a.client.Challenge.SetHTTP01Provider(NewHTTP01ProviderServer()) + if err != nil { + panic(err) + } + + return a.client +} + +func (a *Client) InitializeUser(user *User) (*User, error) { + if a.user != nil { + return nil, fmt.Errorf("user already initialized") + } + + if user == nil || user.Email == "" { + return nil, fmt.Errorf("user has to be non-nil and needs to have an email") + } + + // If User is already registered, save it. + if user.Key != nil && user.Registration != nil { + a.config.User = user + a.user = user + + return user, nil + } + + // Create a user. New accounts need an email and private key to start. + privateKey, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader) + if err != nil { + return nil, err + } + + user.Key = privateKey + + // New users will need to register. + a.config.User = user + + // A client facilitates communication with the CA server. + reg, err := a.Client().Registration.Register(registration.RegisterOptions{TermsOfServiceAgreed: true}) + if err != nil { + return nil, err + } + + user.Registration = reg + a.user = user + + return user, nil +} + +func (a *Client) Thumbprint() (string, error) { + if a.user == nil { + return "", fmt.Errorf("user has to be non-nil") + } + + return a.user.Thumbprint() +} + +type Certificate *certificate.Resource + +func (a *Client) Obtain(domains ...string) (Certificate, error) { + request := certificate.ObtainRequest{ + Domains: domains, + Bundle: true, + } + + if len(domains) == 0 { + return nil, fmt.Errorf("unable to obtain certificate for empty domains") + } + + cert, err := a.Client().Certificate.Obtain(request) + + if err != nil { + return nil, fmt.Errorf("unable to generate a certificate for domains %v: %w", domains, err) + } + + if cert == nil { + return nil, fmt.Errorf("domains %v do not generate a certificate", domains) + } + + if len(cert.Certificate) == 0 || len(cert.PrivateKey) == 0 { + return nil, fmt.Errorf("domains %v generate certificate with no value: %v", domains, cert) + } + + return cert, err +} + +func (a *Client) Refresh(certRes *certificate.Resource) (Certificate, error) { + if certRes == nil { + return nil, fmt.Errorf("unable to renew a nil certificate") + } + + cert, err := a.Client().Certificate.Renew(*certRes, true, false) + domain := certRes.Domain + + if err != nil { + return nil, fmt.Errorf("unable to renew a certificate for domain %s: %w", domain, err) + } + + if len(cert.Certificate) == 0 || len(cert.PrivateKey) == 0 { + return nil, fmt.Errorf("domain %s generate certificate with no value: %v", domain, cert) + } + + return cert, err +} diff --git a/pkg/acme/http_challenge.go b/pkg/acme/http_challenge.go new file mode 100644 index 0000000..bb0db11 --- /dev/null +++ b/pkg/acme/http_challenge.go @@ -0,0 +1,15 @@ +package acme + +type ProviderServer struct{} + +func NewHTTP01ProviderServer() *ProviderServer { + return &ProviderServer{} +} + +func (s *ProviderServer) Present(domain, token, keyAuth string) error { + return nil +} + +func (s *ProviderServer) CleanUp(domain, token, keyAuth string) error { + return nil +} diff --git a/pkg/acme/user.go b/pkg/acme/user.go new file mode 100644 index 0000000..9b450dc --- /dev/null +++ b/pkg/acme/user.go @@ -0,0 +1,58 @@ +package acme + +import ( + "crypto" + "crypto/ecdsa" + "crypto/rsa" + "encoding/base64" + "fmt" + + "github.com/go-acme/lego/v3/registration" + "gopkg.in/square/go-jose.v2" +) + +type User struct { + Email string + Registration *registration.Resource + Key crypto.PrivateKey + thumbprint string +} + +var ( + _ registration.User = (*User)(nil) +) + +func (u *User) GetEmail() string { + return u.Email +} +func (u *User) GetRegistration() *registration.Resource { + return u.Registration +} +func (u *User) GetPrivateKey() crypto.PrivateKey { + return u.Key +} + +func (u *User) Thumbprint() (string, error) { + if u.thumbprint != "" { + return u.thumbprint, nil + } + + var publicKey crypto.PublicKey + switch k := u.Key.(type) { + case *ecdsa.PrivateKey: + publicKey = k.Public() + case *rsa.PrivateKey: + publicKey = k.Public() + } + + jwk := &jose.JSONWebKey{Key: publicKey} + + thumbBytes, err := jwk.Thumbprint(crypto.SHA256) + if err != nil { + return "", fmt.Errorf("jwk thumbprint generation error: %w", err) + } + + u.thumbprint = base64.RawURLEncoding.EncodeToString(thumbBytes) + + return u.thumbprint, nil +} diff --git a/pkg/cert/certificate.go b/pkg/cert/certificate.go new file mode 100644 index 0000000..76dbc5b --- /dev/null +++ b/pkg/cert/certificate.go @@ -0,0 +1,143 @@ +package cert + +import ( + "crypto/tls" + "errors" + "strings" + + "github.com/Syncano/pkg-go/v2/rediscache" +) + +type Certificate struct { + Certificate [][]byte + PrivateKey []byte + KeyType KeyType +} + +const matchKey = "cert.Storage.Match" + +func NewCertificate(cert *tls.Certificate) (*Certificate, error) { + priv, typ, err := MarshalPrivateKey(cert.PrivateKey) + if err != nil { + return nil, err + } + + return &Certificate{ + Certificate: cert.Certificate, + PrivateKey: priv, + KeyType: typ, + }, nil +} + +func (c *Certificate) TLSCertificate() (*tls.Certificate, error) { + priv, err := ParsePrivateKeyByType(c.PrivateKey, c.KeyType) + + return &tls.Certificate{ + Certificate: c.Certificate, + PrivateKey: priv, + }, err +} + +func (cs *Storage) matchSingleDomain(domain string, resolve func(domain string) (*tls.Certificate, error)) (*Certificate, error) { + labels := strings.SplitN(domain, ".", 3) + labels[0] = "*" + wildcardDomain := strings.Join(labels, ".") + + for sans, crt := range cs.local { + for _, certDomain := range strings.Split(sans, ",") { + if MatchDomain(domain, certDomain) { + return NewCertificate(crt) + } + } + } + + crt, err := resolve(domain) + if err != nil { + return nil, err + } + + if crt != nil { + return NewCertificate(crt) + } + + // Try wildcard if domain has more than 2 parts. + if len(labels) > 2 { + for sans, crt := range cs.local { + for _, certDomain := range strings.Split(sans, ",") { + if MatchDomain(wildcardDomain, certDomain) { + return NewCertificate(crt) + } + } + } + + crt, err = resolve(wildcardDomain) + if err != nil { + return nil, err + } + + if crt != nil { + return NewCertificate(crt) + } + } + + return nil, nil +} + +func (cs *Storage) matchDomain(domain string, resolve func(domain string) (*tls.Certificate, error)) (*tls.Certificate, error) { + var crt Certificate + + labels := strings.SplitN(domain, ".", 2) + toplevelDomain := "." + strings.Join(labels[1:], ".") + + err := cs.rc.SimpleFuncCache(matchKey, domain, toplevelDomain, &crt, func() (interface{}, error) { + crt, err := cs.matchSingleDomain(domain, resolve) + if err != nil { + return nil, err + } + + if crt != nil { + return crt, nil + } + + if cs.certDefault != "" { + crt, err := cs.matchSingleDomain(cs.certDefault, resolve) + if err != nil { + return nil, err + } + + if crt != nil { + return crt, nil + } + } + + return nil, nil + }) + + if err != nil { + return nil, err + } + + return crt.TLSCertificate() +} + +func (cs *Storage) Match(domain string, resolve func(domain string) (*tls.Certificate, error)) (*tls.Certificate, error) { + crt, err := cs.matchDomain(domain, resolve) + + // If match failed, try default cert. + if errors.Is(err, rediscache.ErrNil) && cs.certDefault != "" && domain != cs.certDefault { + return cs.DefaultCert(resolve) + } + + return crt, err +} + +func (cs *Storage) InvalidateMatch(domain string) error { + labels := strings.SplitN(domain, ".", 2) + toplevelDomain := "." + strings.Join(labels[1:], ".") + + return cs.rc.FuncCacheInvalidate(matchKey, toplevelDomain) +} + +func (cs *Storage) DefaultCert(resolve func(domain string) (*tls.Certificate, error)) (*tls.Certificate, error) { + return cs.matchDomain(cs.certDefault, resolve) +} diff --git a/pkg/cert/keys.go b/pkg/cert/keys.go new file mode 100644 index 0000000..6356f49 --- /dev/null +++ b/pkg/cert/keys.go @@ -0,0 +1,71 @@ +package cert + +import ( + "crypto" + "crypto/ecdsa" + "crypto/rsa" + "crypto/x509" + "fmt" +) + +type KeyType int + +const ( + KeyTypeUnknown KeyType = iota + KeyTypeEC + KeyTypePKCS1 +) + +func ParsePrivateKeyByType(der []byte, typ KeyType) (crypto.PrivateKey, error) { + switch typ { + case KeyTypeEC: + return x509.ParseECPrivateKey(der) + case KeyTypePKCS1: + return x509.ParsePKCS1PrivateKey(der) + case KeyTypeUnknown: + } + + return nil, fmt.Errorf("unknown private key type") +} + +func ParsePrivateKey(der []byte) (crypto.PrivateKey, KeyType, error) { + if key, err := x509.ParsePKCS1PrivateKey(der); err == nil { + return key, KeyTypePKCS1, nil + } + + if key, err := x509.ParsePKCS8PrivateKey(der); err == nil { + switch key := key.(type) { + case *rsa.PrivateKey: + return key, KeyTypePKCS1, nil + case *ecdsa.PrivateKey: + return key, KeyTypeEC, nil + default: + return nil, KeyTypeUnknown, fmt.Errorf("found unknown private key type in PKCS#8 wrapping") + } + } + + if key, err := x509.ParseECPrivateKey(der); err == nil { + return key, KeyTypeEC, nil + } + + return nil, KeyTypeUnknown, fmt.Errorf("failed to parse private key") +} + +func MarshalPrivateKey(key crypto.PrivateKey) ([]byte, KeyType, error) { + var ( + data []byte + err error + typ KeyType + ) + + switch k := key.(type) { + case *ecdsa.PrivateKey: + data, err = x509.MarshalECPrivateKey(k) + typ = KeyTypeEC + case *rsa.PrivateKey: + data = x509.MarshalPKCS1PrivateKey(k) + typ = KeyTypePKCS1 + } + + return data, typ, err +} diff --git a/pkg/cert/match.go b/pkg/cert/match.go new file mode 100644 index 0000000..444bd74 --- /dev/null +++ b/pkg/cert/match.go @@ -0,0 +1,14 @@ +package cert + +// MatchDomain return true if a domain match the cert domain. +func MatchDomain(domain, certDomain string) bool { + if domain == certDomain { + return true + } + + for len(certDomain) > 0 && certDomain[len(certDomain)-1] == '.' { + certDomain = certDomain[:len(certDomain)-1] + } + + return domain == certDomain +} diff --git a/pkg/cert/parse.go b/pkg/cert/parse.go new file mode 100644 index 0000000..bb69727 --- /dev/null +++ b/pkg/cert/parse.go @@ -0,0 +1,199 @@ +package cert + +import ( + "bytes" + "crypto/tls" + "crypto/x509" + "encoding/pem" + "fmt" + "io/ioutil" + "os" + "path/filepath" + "sort" + "strings" +) + +var validPEMBeginning = []byte("-----BEGIN") + +func LoadCertficate(raw []byte) (*tls.Certificate, error) { + var ( + cert tls.Certificate + err error + ) + + for { + block, rest := pem.Decode(raw) + if block == nil { + break + } + + if block.Type == "CERTIFICATE" { + cert.Certificate = append(cert.Certificate, block.Bytes) + } else { + cert.PrivateKey, _, err = ParsePrivateKey(block.Bytes) + if err != nil { + return nil, fmt.Errorf("failure reading private key from: %w", err) + } + } + + raw = rest + } + + if len(cert.Certificate) == 0 { + return nil, fmt.Errorf("no certificate found") + } else if cert.PrivateKey == nil { + return nil, fmt.Errorf("no private key found") + } + + return &cert, nil +} + +func getCertFiles(dir string) ([][]byte, error) { + tree := make(map[string][]string) + + err := filepath.Walk(dir, + func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + + if info.IsDir() { + return nil + } + + dir := filepath.Dir(path) + + t := tree[dir] + if t == nil { + tree[dir] = []string{path} + } + + tree[dir] = append(t, path) + + return nil + }) + if err != nil { + return nil, err + } + + // Load and combine files + + ret := make([][]byte, 0, len(tree)) + + for _, files := range tree { + var cur []byte + + for _, file := range files { + raw, err := ioutil.ReadFile(file) + if err != nil { + return nil, err + } + + if filepath.Ext(file) == ".pem" { + ret = append(ret, raw) + continue + } + + if !bytes.HasPrefix(raw, validPEMBeginning) { + continue + } + + if len(cur) != 0 { + cur = append(cur, '\n') + } + + cur = append(cur, raw...) + } + + ret = append(ret, cur) + } + + return ret, nil +} + +func LoadCertificateFromPEM(pemBytes []byte) (*tls.Certificate, string, error) { + tlsCert, err := LoadCertficate(pemBytes) + if err != nil { + return nil, "", err + } + + // Parse cert to key by SAN + cert, err := x509.ParseCertificate(tlsCert.Certificate[0]) + if err != nil { + return nil, "", err + } + + var SANs []string + if cert.Subject.CommonName != "" { + SANs = append(SANs, strings.ToLower(cert.Subject.CommonName)) + } + + if cert.DNSNames != nil { + sort.Strings(cert.DNSNames) + + for _, dnsName := range cert.DNSNames { + if dnsName != cert.Subject.CommonName { + SANs = append(SANs, strings.ToLower(dnsName)) + } + } + } + + if cert.IPAddresses != nil { + for _, ip := range cert.IPAddresses { + if ip.String() != cert.Subject.CommonName { + SANs = append(SANs, strings.ToLower(ip.String())) + } + } + } + + certKey := strings.Join(SANs, ",") + + return tlsCert, certKey, nil +} + +func LoadCertificatesFromPath(dir string) (map[string]*tls.Certificate, error) { + pems, err := getCertFiles(dir) + if err != nil { + return nil, fmt.Errorf("failed to scan certificate dir \"%s\": %w", dir, err) + } + + ret := make(map[string]*tls.Certificate) + + for _, pem := range pems { + tlsCert, certKey, err := LoadCertificateFromPEM(pem) + if err != nil { + return nil, err + } + + ret[certKey] = tlsCert + } + + return ret, nil +} + +func DecodePEMToBytes(bundle []byte) []byte { + block, _ := pem.Decode(bundle) + if block != nil { + return block.Bytes + } + + return nil +} + +func DecodePEMToBytesArray(bundle []byte) [][]byte { + var ( + ret [][]byte + block *pem.Block + ) + + for { + block, bundle = pem.Decode(bundle) + if block == nil { + break + } + + ret = append(ret, block.Bytes) + } + + return ret +} diff --git a/pkg/cert/storage.go b/pkg/cert/storage.go new file mode 100644 index 0000000..faea810 --- /dev/null +++ b/pkg/cert/storage.go @@ -0,0 +1,35 @@ +package cert + +import ( + "crypto/tls" + + "github.com/Syncano/pkg-go/v2/rediscache" +) + +type Storage struct { + certDefault string + + local map[string]*tls.Certificate + rc *rediscache.Cache +} + +func NewStorage(certDefault string, rc *rediscache.Cache) *Storage { + return &Storage{ + certDefault: certDefault, + local: make(map[string]*tls.Certificate), + rc: rc, + } +} + +func (cs *Storage) LoadDir(dir string) error { + certs, err := LoadCertificatesFromPath(dir) + if err != nil { + return err + } + + for k, v := range certs { + cs.local[k] = v + } + + return nil +} diff --git a/routes.yaml b/routes.yaml new file mode 100644 index 0000000..e9a9341 --- /dev/null +++ b/routes.yaml @@ -0,0 +1,4 @@ +- path: "/*" + headers: {} + targets: + - https://postman-echo.com