cis-4.5.1-enabled-serial-ports.sh

#!/bin/bash

source functions.inc

declare SEPARATOR="---------------------------------------------------------------------------------";
declare PROJECT_IDS="";
declare DEBUG="False";
declare CSV="False";
declare ICH="False";
declare HELP=$(cat << EOL
	$0 [-p, --project PROJECT] [-c, --csv] [-d, --debug] [-h, --help]	
EOL
);

for arg in "$@"; do
  shift
  case "$arg" in
    "--help") 			set -- "$@" "-h" ;;
    "--debug") 			set -- "$@" "-d" ;;
    "--csv") 			set -- "$@" "-c" ;;
    "--project")   		set -- "$@" "-p" ;;
    *)        			set -- "$@" "$arg"
  esac
done

while getopts "hdcip:" option
do 
    case "${option}"
        in
        p)
        	PROJECT_IDS=${OPTARG};;
        d)
        	DEBUG="True";;
        c)
        	CSV="True";;
        h)
        	echo $HELP; 
        	exit 0;;
    esac;
done;


if [[ $PROJECT_IDS == "" ]]; then
    declare PROJECT_IDS=$(get_projects);
fi;

if [[ $DEBUG == "True" ]]; then
	echo "Projects: $PROJECT_IDS";
	echo "";
fi;

if [[ $CSV == "True" ]]; then
	echo "\"PROJECT_ID\", \"PROJECT_NAME\", \"PROJECT_OWNER\", \"PROJECT_APPLICATION\", \"INSTANCE_NAME\", \"ENABLED_SERIAL_PORTS\", \"ENABLED_SERIAL_PORT_LOGGING\", \"ENABLED_SERIAL_PORTS_STATUS_MESSAGE\", \"ENABLED_SERIAL_PORT_LOGGING_STATUS_MESSAGE\"";
fi;

for PROJECT_ID in $PROJECT_IDS; do

	set_project $PROJECT_ID;

	if ! api_enabled compute.googleapis.com; then
		if [[ $CSV != "True" ]]; then
			echo "Compute Engine API is not enabled on Project $PROJECT_ID";
			continue;
		fi;
	fi;

	declare INSTANCES=$(gcloud compute instances list --quiet --format="json");

	if [[ $DEBUG == "True" ]]; then
		echo "Instances (JSON): $INSTANCES";
		echo "";
	fi;

	if [[ $INSTANCES != "[]" ]]; then

      		#Get project details
      		get_project_details $PROJECT_ID

		echo $INSTANCES | jq -rc '.[]' | while IFS='' read -r INSTANCE;do
		
			if [[ $DEBUG == "True" ]]; then
				echo "Instance (JSON): $INSTANCES";
				echo "";
			fi;

			INSTANCE_NAME=$(echo $INSTANCE | jq -rc '.name');
			ENABLED_SERIAL_PORTS=$(echo $INSTANCE | jq -rc '.metadata.items[] | select(.key=="serial-port-enable")' | jq -rc '.value' | tr '[:upper:]' '[:lower:]' );
			ENABLED_SERIAL_PORT_LOGGING=$(echo $INSTANCE | jq -rc '.metadata.items[] | select(.key=="serial-port-logging-enable")' | jq -rc '.value' | tr '[:upper:]' '[:lower:]' );
			ENABLED_SERIAL_PORTS_STATUS_MESSAGE="Serial port disabled";
			ENABLED_SERIAL_PORT_LOGGING_STATUS_MESSAGE="Serial port logging enabled";

			if [[ $DEBUG == "True" ]]; then
				echo "Instance Metadata (JSON): $(echo $INSTANCE | jq -rc '.metadata.items[]')";
				echo "";
			fi;
			
			if [[ $ENABLED_SERIAL_PORTS == "" ]]; then
				ENABLED_SERIAL_PORTS="false";
			fi;
			
			if [[ $ENABLED_SERIAL_PORT_LOGGING == "" ]]; then
				ENABLED_SERIAL_PORT_LOGGING="false";
			fi;			
			
			if [[ $ENABLED_SERIAL_PORTS == "true" ]]; then
				ENABLED_SERIAL_PORTS_STATUS_MESSAGE="VIOLATION: Serial port enabled";
			fi;
			
			if [[ $ENABLED_SERIAL_PORT_LOGGING != "true" ]]; then
				ENABLED_SERIAL_PORT_LOGGING_STATUS_MESSAGE="VIOLATION: Serial port logging disabled";
			fi;

			# Print the results gathered above
			if [[ $CSV != "True" ]]; then
				echo "Project ID: $PROJECT_ID";
				echo "Project Name: $PROJECT_NAME";
				echo "Project Application: $PROJECT_APPLICATION";
				echo "Project Owner: $PROJECT_OWNER";
				echo "Instance Name: $INSTANCE_NAME";
				echo "Serial Port Setting: $ENABLED_SERIAL_PORTS";
				echo "Serial Port Status: $ENABLED_SERIAL_PORTS_STATUS_MESSAGE";
				echo "Serial Port Logging Setting: $ENABLED_SERIAL_PORT_LOGGING";
				echo "Serial Port Logging Status: $ENABLED_SERIAL_PORT_LOGGING_STATUS_MESSAGE";
				echo "";
			else
				echo "\"$PROJECT_ID\", \"$PROJECT_NAME\", \"$PROJECT_OWNER\", \"$PROJECT_APPLICATION\", \"$INSTANCE_NAME\", \"$ENABLED_SERIAL_PORTS\", \"$ENABLED_SERIAL_PORT_LOGGING\", \"$ENABLED_SERIAL_PORTS_STATUS_MESSAGE\", \"$ENABLED_SERIAL_PORT_LOGGING_STATUS_MESSAGE\"";
			fi;		

		done;
		echo "";
	else
		if [[ $CSV != "True" ]]; then
			echo "No instances found for project $PROJECT_ID";
			echo "";
		fi;
	fi;
	sleep 0.5;
done;