oci_csv_network_seclist.sh

#!/bin/sh
#************************************************************************
#
#   oci_csv_network_seclist.sh
#
#   Copyright 2018  Rodrigo Jorge <http://www.dbarj.com.br/>
#
#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.
#
#************************************************************************
# Available at: https://github.com/dbarj/oci-scripts
# Created on: Jul/2018 by Rodrigo Jorge
# Version 1.02
#************************************************************************

# Define paths for oci-cli and jq or put them on $PATH. Don't use relative PATHs in the variables below.
v_oci="oci"
v_jq="jq"

echoError ()
{
   (>&2 echo "$1")
}

exitError ()
{
   echoError "$1"
   exit 1
}

if ! $(which ${v_oci} >&- 2>&-)
then
  echoError "Could not find oci-cli binary. Please adapt the path in the script if not in \$PATH."
  echoError "Dowload page: https://github.com/oracle/oci-cli"
  exit 1
fi

if ! $(which ${v_jq} >&- 2>&-)
then
  echoError "Could not find jq binary. Please adapt the path in the script if not in \$PATH."
  echoError "Download page: https://github.com/stedolan/jq/releases"
  exit 1
fi

v_cmp_string="--compartment-id ${v_compartment_ocid}"
v_vcn_string="--vcn-id ${v_vcn_ocid}"

if [ -z "$v_compartment_ocid" ]
then
  echoError "OCID of compartment not specified. Please export v_compartment_ocid variable with correct value."
  ${v_oci} iam compartment list --all | ${v_jq} -r '.data[] | [.name,.id] | @csv'
  exit 1
else
  v_listvcn=$(${v_oci} network vcn list --all ${v_cmp_string})
  ret=$?
  if [ $ret -ne 0 ]
  then
    echoError "OCID of compartment not specified correctly. Please export v_compartment_ocid variable with correct value."
    ${v_oci} iam compartment list --all | ${v_jq} -r '.data[] | [.name,.id] | @csv'
    exit 1
  else
    if [ -z "$v_listvcn" ]
    then
      echoError "There is no VCN in this Compartment."
      exit 1
    fi
  fi
fi

if [ -z "$v_vcn_ocid" ]
then
  echoError "OCID of VCN not specified. Please export v_vcn_ocid variable with correct value."
  echoError $(${v_oci} network vcn list --all ${v_cmp_string} | ${v_jq} -r '.data[] | [."display-name",.id] | @csv')
  exit 1
else
  v_listvcn=$(${v_oci} network vcn get ${v_vcn_string})
  ret=$?
  if [ $ret -ne 0 ]
  then
    echoError "OCID of VCN not specified correctly. Please export v_vcn_ocid variable with correct value."
    echoError $(${v_oci} network vcn list --all ${v_cmp_string} | ${v_jq} -r '.data[] | [."display-name",.id] | @csv')
    exit 1
  fi
fi

function listSecListsSub ()
{
  [ "$#" -ne 2 ] && return
  local v_arg1="$1"
  local v_arg2="$2"
  local v_out1=$(
${v_oci} network security-list list ${v_vcn_string} ${v_cmp_string} --all | ${v_jq} '.data[] |
"'${v_arg1}'" as $type |
."display-name" as $display |
."lifecycle-state" as $lifecycle | 
."'${v_arg1}'-security-rules"[]? |
."is-stateless" as $stateless |
."protocol" as $protocol | 
"'${v_arg2}'" as $contype |
."'${v_arg2}'" as $'${v_arg2}' |
."tcp-options"."destination-port-range"."min" as $tdmin |
."tcp-options"."destination-port-range"."max" as $tdmax |
."tcp-options"."source-port-range"."min" as $tsmin |
."tcp-options"."source-port-range"."max" as $tsmax |
."udp-options"."destination-port-range"."min" as $udmin |
."udp-options"."destination-port-range"."max" as $udmax |
."udp-options"."source-port-range"."min" as $usmin |
."udp-options"."source-port-range"."max" as $usmax |
{
"display-name": $display,
"lifecycle-state": $lifecycle,
"is-stateless": $stateless,
"type" : $type,
"protocol": $protocol,
"contype": $contype,
"'${v_arg2}'": $'${v_arg2}',
"tcp-destination-port-min": $tdmin,
"tcp-destination-port-max": $tdmax,
"tcp-source-port-min": $tsmin,
"tcp-source-port-max": $tsmax,
"udp-destination-port-min": $udmin,
"udp-destination-port-max": $udmax,
"udp-source-port-min": $usmin,
"udp-source-port-max": $usmax
}' | sed 's/}/},/; 1 s/{/[{/; $s/},/}]/' | ${v_jq} -r '.[] |
[
."display-name",
."lifecycle-state",
."is-stateless",
."type",
."protocol",
."contype",
."'${v_arg2}'",
."tcp-destination-port-min",
."tcp-destination-port-max",
."tcp-source-port-min",
."tcp-source-port-max",
."udp-destination-port-min",
."udp-destination-port-max",
."udp-source-port-min",
."udp-source-port-max"] | @csv'
)
  [ -n "${v_out1}" ] && echo "${v_out1}"
}
###
v_header="display-name,lifecycle-state,is-stateless,type,protocol,contype,IP,tcp-dest-port-min,tcp-dest-port-max,tcp-source-port-min,tcp-source-port-max,udp-dest-port-min,udp-dest-port-max,udp-source-port-min,udp-source-port-max"
v_out1=$(listSecListsSub "ingress" "source")
v_out2=$(listSecListsSub "egress"  "destination")
[ -n "$v_out1" -o -n "$v_out2" ] && echo "$v_header"
[ -n "$v_out1" ] && echo "$v_out1"
[ -n "$v_out2" ] && echo "$v_out2"
exit 0
###