Jeff MitchellandJohan Brandhorst-Satzkorn
fff5f9506f
This allows arbitrary programs to have an easy mechanism to make connections through Boundary using Go. Internal cluster tests and test helpers have been migrated to use this package, as well as the `connect` command. --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
80 lines
2.3 KiB
Go
80 lines
2.3 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package connect
|
|
|
|
import (
|
|
"fmt"
|
|
"net/url"
|
|
"strings"
|
|
|
|
"github.com/hashicorp/boundary/internal/cmd/base"
|
|
"github.com/posener/complete"
|
|
)
|
|
|
|
const (
|
|
kubeSynopsis = "Authorize a session against a target and invoke a Kubernetes client to connect"
|
|
)
|
|
|
|
func kubeOptions(c *Command, set *base.FlagSets) {
|
|
f := set.NewFlagSet("Kubernetes Options")
|
|
|
|
f.StringVar(&base.StringVar{
|
|
Name: "style",
|
|
Target: &c.flagKubeStyle,
|
|
EnvVar: fmt.Sprintf("BOUNDARY_CONNECT_%s_STYLE", strings.ToUpper(c.Func)),
|
|
Completion: complete.PredictSet("kubectl"),
|
|
Default: "kubectl",
|
|
Usage: `Specifies how the CLI will attempt to invoke a Kubernetes client. This will also set a suitable default for -exec if a value was not specified. Currently-understood values are "kubectl".`,
|
|
})
|
|
|
|
f.StringVar(&base.StringVar{
|
|
Name: "host",
|
|
Target: &c.flagKubeHost,
|
|
EnvVar: fmt.Sprintf("BOUNDARY_CONNECT_%s_HOST", strings.ToUpper(c.Func)),
|
|
Completion: complete.PredictNothing,
|
|
Usage: `Specifies the host value to use, overriding the endpoint address from the session information. The specified hostname will be passed through to the client (if supported) for use in the TLS SNI value.`,
|
|
})
|
|
|
|
f.StringVar(&base.StringVar{
|
|
Name: "scheme",
|
|
Target: &c.flagKubeScheme,
|
|
Default: "https",
|
|
EnvVar: fmt.Sprintf("BOUNDARY_CONNECT_%s_SCHEME", strings.ToUpper(c.Func)),
|
|
Completion: complete.PredictNothing,
|
|
Usage: `Specifies the scheme to use.`,
|
|
})
|
|
}
|
|
|
|
type kubeFlags struct {
|
|
flagKubeStyle string
|
|
flagKubeHost string
|
|
flagKubeScheme string
|
|
}
|
|
|
|
func (f *kubeFlags) defaultExec() string {
|
|
return strings.ToLower(f.flagKubeStyle)
|
|
}
|
|
|
|
func (f *kubeFlags) buildArgs(c *Command, port, ip, addr string) ([]string, error) {
|
|
var args []string
|
|
host := f.flagKubeHost
|
|
if host == "" && c.sessInfo.Endpoint != "" {
|
|
hostUrl := c.sessInfo.Endpoint
|
|
u, err := url.Parse(hostUrl)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error parsing endpoint URL: %w", err)
|
|
}
|
|
host = u.Hostname()
|
|
}
|
|
switch f.flagKubeStyle {
|
|
case "kubectl":
|
|
if host != "" && f.flagKubeScheme == "https" {
|
|
host = strings.TrimSuffix(host, "/")
|
|
args = append(args, "--tls-server-name", host)
|
|
}
|
|
args = append(args, "--server", fmt.Sprintf("%s://%s", f.flagKubeScheme, addr))
|
|
}
|
|
return args, nil
|
|
}
|