429247f407
* [COMPLIANCE] Update Copyright and License Headers * chore: make gen to generate files with copyright headers * chore: update missed copyright headers --------- Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Justin Nguyen <justin.nguyen@hashicorp.com>
80 lines
2.3 KiB
Go
80 lines
2.3 KiB
Go
// Copyright IBM Corp. 2020, 2025
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package connect
|
|
|
|
import (
|
|
"fmt"
|
|
"net/url"
|
|
"strings"
|
|
|
|
"github.com/hashicorp/boundary/internal/cmd/base"
|
|
"github.com/posener/complete"
|
|
)
|
|
|
|
const (
|
|
kubeSynopsis = "Authorize a session against a target and invoke a Kubernetes client to connect"
|
|
)
|
|
|
|
func kubeOptions(c *Command, set *base.FlagSets) {
|
|
f := set.NewFlagSet("Kubernetes Options")
|
|
|
|
f.StringVar(&base.StringVar{
|
|
Name: "style",
|
|
Target: &c.flagKubeStyle,
|
|
EnvVar: fmt.Sprintf("BOUNDARY_CONNECT_%s_STYLE", strings.ToUpper(c.Func)),
|
|
Completion: complete.PredictSet("kubectl"),
|
|
Default: "kubectl",
|
|
Usage: `Specifies how the CLI will attempt to invoke a Kubernetes client. This will also set a suitable default for -exec if a value was not specified. Currently-understood values are "kubectl".`,
|
|
})
|
|
|
|
f.StringVar(&base.StringVar{
|
|
Name: "host",
|
|
Target: &c.flagKubeHost,
|
|
EnvVar: fmt.Sprintf("BOUNDARY_CONNECT_%s_HOST", strings.ToUpper(c.Func)),
|
|
Completion: complete.PredictNothing,
|
|
Usage: `Specifies the host value to use, overriding the endpoint address from the session information. The specified hostname will be passed through to the client (if supported) for use in the TLS SNI value.`,
|
|
})
|
|
|
|
f.StringVar(&base.StringVar{
|
|
Name: "scheme",
|
|
Target: &c.flagKubeScheme,
|
|
Default: "https",
|
|
EnvVar: fmt.Sprintf("BOUNDARY_CONNECT_%s_SCHEME", strings.ToUpper(c.Func)),
|
|
Completion: complete.PredictNothing,
|
|
Usage: `Specifies the scheme to use.`,
|
|
})
|
|
}
|
|
|
|
type kubeFlags struct {
|
|
flagKubeStyle string
|
|
flagKubeHost string
|
|
flagKubeScheme string
|
|
}
|
|
|
|
func (f *kubeFlags) defaultExec() string {
|
|
return strings.ToLower(f.flagKubeStyle)
|
|
}
|
|
|
|
func (f *kubeFlags) buildArgs(c *Command, port, ip, addr string) ([]string, error) {
|
|
var args []string
|
|
host := f.flagKubeHost
|
|
if host == "" && c.sessInfo.Endpoint != "" {
|
|
hostUrl := c.sessInfo.Endpoint
|
|
u, err := url.Parse(hostUrl)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error parsing endpoint URL: %w", err)
|
|
}
|
|
host = u.Hostname()
|
|
}
|
|
switch f.flagKubeStyle {
|
|
case "kubectl":
|
|
if host != "" && f.flagKubeScheme == "https" {
|
|
host = strings.TrimSuffix(host, "/")
|
|
args = append(args, "--tls-server-name", host)
|
|
}
|
|
args = append(args, "--server", fmt.Sprintf("%s://%s", f.flagKubeScheme, addr))
|
|
}
|
|
return args, nil
|
|
}
|