package cmd import ( "errors" "fmt" "github.com/spf13/cobra" "github.com/up9inc/mizu/cli/mizu" "github.com/up9inc/mizu/cli/uiUtils" "github.com/up9inc/mizu/shared/units" "os" "regexp" "strings" ) type MizuTapOptions struct { GuiPort uint16 Namespace string AllNamespaces bool Analysis bool AnalysisDestination string KubeConfigPath string MizuImage string PlainTextFilterRegexes []string TapOutgoing bool HideHealthChecks bool MaxEntriesDBSizeBytes int64 SleepIntervalSec uint16 DisableRedaction bool } var mizuTapOptions = &MizuTapOptions{} var direction string var humanMaxEntriesDBSize string var regex *regexp.Regexp const maxEntriesDBSizeFlagName = "max-entries-db-size" const analysisMessageToConfirm = `NOTE: running mizu with --analysis flag will upload recorded traffic to UP9 cloud for further analysis and enriched presentation options. ` var tapCmd = &cobra.Command{ Use: "tap [POD REGEX]", Short: "Record ingoing traffic of a kubernetes pod", Long: `Record the ingoing traffic of a kubernetes pod. Supported protocols are HTTP and gRPC.`, RunE: func(cmd *cobra.Command, args []string) error { go mizu.ReportRun("tap", mizuTapOptions) RunMizuTap(regex, mizuTapOptions) return nil }, PreRunE: func(cmd *cobra.Command, args []string) error { if len(args) == 0 { return errors.New("POD REGEX argument is required") } else if len(args) > 1 { return errors.New("unexpected number of arguments") } var compileErr error regex, compileErr = regexp.Compile(args[0]) if compileErr != nil { return errors.New(fmt.Sprintf("%s is not a valid regex %s", args[0], compileErr)) } var parseHumanDataSizeErr error mizuTapOptions.MaxEntriesDBSizeBytes, parseHumanDataSizeErr = units.HumanReadableToBytes(humanMaxEntriesDBSize) if parseHumanDataSizeErr != nil { return errors.New(fmt.Sprintf("Could not parse --max-entries-db-size value %s", humanMaxEntriesDBSize)) } fmt.Printf("Mizu will store up to %s of traffic, old traffic will be cleared once the limit is reached.\n", units.BytesToHumanReadable(mizuTapOptions.MaxEntriesDBSizeBytes)) directionLowerCase := strings.ToLower(direction) if directionLowerCase == "any" { mizuTapOptions.TapOutgoing = true } else if directionLowerCase == "in" { mizuTapOptions.TapOutgoing = false } else { return errors.New(fmt.Sprintf("%s is not a valid value for flag --direction. Acceptable values are in/any.", direction)) } if mizuTapOptions.Analysis { fmt.Printf(analysisMessageToConfirm) if !uiUtils.AskForConfirmation("Would you like to proceed [y/n]: ") { fmt.Println("You can always run mizu without analysis, aborting") os.Exit(0) } } return nil }, } func init() { rootCmd.AddCommand(tapCmd) tapCmd.Flags().Uint16VarP(&mizuTapOptions.GuiPort, "gui-port", "p", 8899, "Provide a custom port for the web interface webserver") tapCmd.Flags().StringVarP(&mizuTapOptions.Namespace, "namespace", "n", "", "Namespace selector") tapCmd.Flags().BoolVar(&mizuTapOptions.Analysis, "analysis", false, "Uploads traffic to UP9 for further analysis (Beta)") tapCmd.Flags().StringVar(&mizuTapOptions.AnalysisDestination, "dest", "up9.app", "Destination environment") tapCmd.Flags().Uint16VarP(&mizuTapOptions.SleepIntervalSec, "upload-interval", "", 10, "Interval in seconds for uploading data to UP9") tapCmd.Flags().BoolVarP(&mizuTapOptions.AllNamespaces, "all-namespaces", "A", false, "Tap all namespaces") tapCmd.Flags().StringVarP(&mizuTapOptions.KubeConfigPath, "kube-config", "k", "", "Path to kube-config file") tapCmd.Flags().StringVarP(&mizuTapOptions.MizuImage, "mizu-image", "", fmt.Sprintf("gcr.io/up9-docker-hub/mizu/%s:%s", mizu.Branch, mizu.SemVer), "Custom image for mizu collector") tapCmd.Flags().StringArrayVarP(&mizuTapOptions.PlainTextFilterRegexes, "regex-masking", "r", nil, "List of regex expressions that are used to filter matching values from text/plain http bodies") tapCmd.Flags().StringVarP(&direction, "direction", "", "in", "Record traffic that goes in this direction (relative to the tapped pod): in/any") tapCmd.Flags().BoolVar(&mizuTapOptions.HideHealthChecks, "hide-healthchecks", false, "hides requests with kube-probe or prometheus user-agent headers") tapCmd.Flags().StringVarP(&humanMaxEntriesDBSize, maxEntriesDBSizeFlagName, "", "200MB", "override the default max entries db size of 200mb") tapCmd.Flags().BoolVar(&mizuTapOptions.DisableRedaction, "no-redact", false, "Disables redaction of potentially sensitive request/response headers and body values") }