kubeshark/cmd/console.go

package cmd

import (
	"context"
	"fmt"
	"net/http"
	"net/url"
	"os"
	"os/signal"
	"strings"
	"time"

	"github.com/creasty/defaults"
	"github.com/gorilla/websocket"
	"github.com/rs/zerolog/log"
	"github.com/spf13/cobra"

	"github.com/kubeshark/kubeshark/config"
	"github.com/kubeshark/kubeshark/config/configStructs"
	"github.com/kubeshark/kubeshark/kubernetes"
	"github.com/kubeshark/kubeshark/utils"
)

var consoleCmd = &cobra.Command{
	Use:   "console",
	Short: "Stream the scripting console logs into shell (temporarily non-functional — under refactoring after hub API changes)",
	Long: `Stream the scripting console logs into shell.

NOTE: This command is currently non-functional and under refactoring. The hub
moved scripting-console log streaming off the /scripts/logs WebSocket onto a
Connect-RPC streaming service, and this client has not yet been updated to use
it, so no logs will stream until the migration lands.`,
	RunE: func(cmd *cobra.Command, args []string) error {
		log.Warn().Msg(fmt.Sprintf(utils.Yellow, "The 'console' command is temporarily non-functional and under refactoring: the hub moved scripting-console log streaming off the /scripts/logs WebSocket onto a Connect-RPC service, and this client has not yet been updated. No logs will stream, so the command exits without doing anything."))
		return nil
	},
}

func init() {
	rootCmd.AddCommand(consoleCmd)

	defaultTapConfig := configStructs.TapConfig{}
	if err := defaults.Set(&defaultTapConfig); err != nil {
		log.Debug().Err(err).Send()
	}

	consoleCmd.Flags().Uint16(configStructs.ProxyFrontPortLabel, defaultTapConfig.Proxy.Front.Port, "Provide a custom port for the Kubeshark")
	consoleCmd.Flags().String(configStructs.ProxyHostLabel, defaultTapConfig.Proxy.Host, "Provide a custom host for the Kubeshark")
	consoleCmd.Flags().StringP(configStructs.ReleaseNamespaceLabel, "s", defaultTapConfig.Release.Namespace, "Release namespace of Kubeshark")
}

//nolint:unused // retained for the in-progress console refactoring; re-wired once the Connect-RPC client lands
func runConsoleWithoutProxy() {
	log.Info().Msg("Starting scripting console ...")
	time.Sleep(5 * time.Second)

	// Best-effort: mint a scoped ServiceAccount token to authenticate to a
	// gated Hub as kubeshark-cli; fall back to License-Key when not possible.
	saToken := ""
	if provider, err := getKubernetesProviderForCli(true, true); err == nil {
		ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
		if tok, terr := provider.MintHubToken(ctx, config.Config.Tap.Release.Namespace); terr == nil {
			saToken = tok
		}
		cancel()
	}

	hubUrl := kubernetes.GetHubUrl()
	for {

		// Attempt to connect to the Hub every second
		response, err := http.Get(fmt.Sprintf("%s/echo", hubUrl))
		if err != nil || response.StatusCode != 200 {
			log.Info().Msg(fmt.Sprintf(utils.Yellow, "Couldn't connect to Hub."))
			time.Sleep(5 * time.Second)
			continue
		}

		interrupt := make(chan os.Signal, 1)
		signal.Notify(interrupt, os.Interrupt)

		log.Info().Str("host", config.Config.Tap.Proxy.Host).Str("url", hubUrl).Msg("Connecting to:")
		u := url.URL{
			Scheme: "ws",
			Host:   fmt.Sprintf("%s:%d", config.Config.Tap.Proxy.Host, config.Config.Tap.Proxy.Front.Port),
			Path:   "/api/scripts/logs",
		}
		headers := http.Header{}
		headers.Set(utils.X_KUBESHARK_CAPTURE_HEADER_KEY, utils.X_KUBESHARK_CAPTURE_HEADER_IGNORE_VALUE)
		if saToken != "" {
			headers.Set(utils.CLI_AUTH_HEADER, saToken)
		} else {
			headers.Set(utils.LICENSE_KEY_HEADER, config.Config.License)
		}

		c, _, err := websocket.DefaultDialer.Dial(u.String(), headers)
		if err != nil {
			log.Error().Err(err).Msg("Websocket dial error, retrying in 5 seconds...")
			time.Sleep(5 * time.Second) // Delay before retrying
			continue
		}
		defer c.Close()

		done := make(chan struct{})

		go func() {
			defer close(done)
			for {
				_, message, err := c.ReadMessage()
				if err != nil {
					log.Error().Err(err).Msg("Error reading websocket message, reconnecting...")
					break // Break to reconnect
				}

				msg := string(message)
				if strings.Contains(msg, ":ERROR]") {
					msg = fmt.Sprintf(utils.Red, msg)
					fmt.Fprintln(os.Stderr, msg)
				} else {
					fmt.Fprintln(os.Stdout, msg)
				}
			}
		}()

		ticker := time.NewTicker(time.Second)
		defer ticker.Stop()

		select {
		case <-done:
			log.Warn().Msg(fmt.Sprintf(utils.Yellow, "Connection closed, reconnecting..."))
			time.Sleep(5 * time.Second) // Delay before reconnecting
			continue                    // Reconnect after error
		case <-interrupt:
			err := c.WriteMessage(websocket.CloseMessage, websocket.FormatCloseMessage(websocket.CloseNormalClosure, ""))
			if err != nil {
				log.Error().Err(err).Send()
				continue
			}

			select {
			case <-done:
			case <-time.After(time.Second):
			}
			return
		}
	}
}

//nolint:unused // retained for the in-progress console refactoring; re-wired once the Connect-RPC client lands
func runConsole() {
	log.Warn().Msg(fmt.Sprintf(utils.Yellow, "The 'console' command is temporarily non-functional and under refactoring: the hub moved scripting-console log streaming off the /scripts/logs WebSocket onto a Connect-RPC service, and this client has not yet been updated. No logs will stream."))

	go runConsoleWithoutProxy()

	// Create interrupt channel and setup signal handling once
	interrupt := make(chan os.Signal, 1)
	signal.Notify(interrupt, os.Interrupt)
	done := make(chan struct{})

	ticker := time.NewTicker(5 * time.Second)
	defer ticker.Stop()

	for {
		select {
		case <-interrupt:
			// Handle interrupt and exit gracefully
			log.Warn().Msg(fmt.Sprintf(utils.Yellow, "Received interrupt, exiting..."))
			select {
			case <-done:
			case <-time.After(time.Second):
			}
			return

		case <-ticker.C:
			// Attempt to connect to the Hub every second
			hubUrl := kubernetes.GetHubUrl()
			response, err := http.Get(fmt.Sprintf("%s/echo", hubUrl))
			if err != nil || response.StatusCode != 200 {
				log.Info().Msg(fmt.Sprintf(utils.Yellow, "Couldn't connect to Hub. Establishing proxy..."))
				runProxy(false, true)
			}
		}
	}
}