mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-07-07 07:30:12 +00:00
783aa03b6a
* Add cmd to copy pcaps from worker * Update commands to merge pcaps * Remove test img * Remove usage of http endpoint in copy * Unify commands * Add copy flag * Address review comments * Update k8s config path processing * Remove debug prints * setting the pcapSrcDit to the name of the command * Update values.yaml * Remove the start,stop and copy flags * Clean up the the code a bit Changed the logic so it's either copy or start/stop. Works well for a first version. * Improved the logic * Changed pcapdump enable flag to boolean * Added helm value documentation * minor default configuration changes * Fix default val for enabled * Final changes Cleaned up the helm worker template Improve the logic a bit * Code cleanup Changed instances of `enable` to `enabled` for purpose of consistency Removed unused helm environment variables * Enable merging all node files to a single file. Before the outcome had been a merged file per node. Now the outcome is a single merged file for all nodes. * Committed for testing purpose * Reduced the initial disk foot print to 10MB per node --------- Co-authored-by: bogdan.balan1 <bogdanvalentin.balan@1nce.com> Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
102 lines
3.2 KiB
Go
102 lines
3.2 KiB
Go
package kubernetes
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
|
|
"github.com/kubeshark/kubeshark/config"
|
|
"github.com/kubeshark/kubeshark/misc"
|
|
"github.com/rs/zerolog/log"
|
|
v1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
)
|
|
|
|
const (
|
|
SUFFIX_SECRET = "secret"
|
|
SUFFIX_CONFIG_MAP = "config-map"
|
|
SECRET_LICENSE = "LICENSE"
|
|
CONFIG_POD_REGEX = "POD_REGEX"
|
|
CONFIG_NAMESPACES = "NAMESPACES"
|
|
CONFIG_EXCLUDED_NAMESPACES = "EXCLUDED_NAMESPACES"
|
|
CONFIG_SCRIPTING_ENV = "SCRIPTING_ENV"
|
|
CONFIG_INGRESS_ENABLED = "INGRESS_ENABLED"
|
|
CONFIG_INGRESS_HOST = "INGRESS_HOST"
|
|
CONFIG_PROXY_FRONT_PORT = "PROXY_FRONT_PORT"
|
|
CONFIG_AUTH_ENABLED = "AUTH_ENABLED"
|
|
CONFIG_AUTH_TYPE = "AUTH_TYPE"
|
|
CONFIG_AUTH_SAML_IDP_METADATA_URL = "AUTH_SAML_IDP_METADATA_URL"
|
|
CONFIG_SCRIPTING_SCRIPTS = "SCRIPTING_SCRIPTS"
|
|
CONFIG_PCAP_DUMP_ENABLE = "PCAP_DUMP_ENABLE"
|
|
CONFIG_TIME_INTERVAL = "TIME_INTERVAL"
|
|
CONFIG_MAX_TIME = "MAX_TIME"
|
|
CONFIG_MAX_SIZE = "MAX_SIZE"
|
|
)
|
|
|
|
func SetSecret(provider *Provider, key string, value string) (updated bool, err error) {
|
|
var secret *v1.Secret
|
|
secret, err = provider.clientSet.CoreV1().Secrets(config.Config.Tap.Release.Namespace).Get(context.TODO(), SELF_RESOURCES_PREFIX+SUFFIX_SECRET, metav1.GetOptions{})
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
if secret.StringData[key] != value {
|
|
updated = true
|
|
}
|
|
secret.Data[key] = []byte(value)
|
|
|
|
_, err = provider.clientSet.CoreV1().Secrets(config.Config.Tap.Release.Namespace).Update(context.TODO(), secret, metav1.UpdateOptions{})
|
|
if err == nil {
|
|
if updated {
|
|
log.Info().Str("secret", key).Str("value", value).Msg("Updated:")
|
|
}
|
|
} else {
|
|
log.Error().Str("secret", key).Err(err).Send()
|
|
}
|
|
return
|
|
}
|
|
|
|
func GetConfig(provider *Provider, key string) (value string, err error) {
|
|
var configMap *v1.ConfigMap
|
|
configMap, err = provider.clientSet.CoreV1().ConfigMaps(config.Config.Tap.Release.Namespace).Get(context.TODO(), SELF_RESOURCES_PREFIX+SUFFIX_CONFIG_MAP, metav1.GetOptions{})
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
value = configMap.Data[key]
|
|
return
|
|
}
|
|
|
|
func SetConfig(provider *Provider, key string, value string) (updated bool, err error) {
|
|
var configMap *v1.ConfigMap
|
|
configMap, err = provider.clientSet.CoreV1().ConfigMaps(config.Config.Tap.Release.Namespace).Get(context.TODO(), SELF_RESOURCES_PREFIX+SUFFIX_CONFIG_MAP, metav1.GetOptions{})
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
if configMap.Data[key] != value {
|
|
updated = true
|
|
}
|
|
configMap.Data[key] = value
|
|
|
|
_, err = provider.clientSet.CoreV1().ConfigMaps(config.Config.Tap.Release.Namespace).Update(context.TODO(), configMap, metav1.UpdateOptions{})
|
|
if err == nil {
|
|
if updated {
|
|
log.Info().Str("config", key).Str("value", value).Msg("Updated:")
|
|
}
|
|
} else {
|
|
log.Error().Str("config", key).Err(err).Send()
|
|
}
|
|
return
|
|
}
|
|
|
|
func ConfigGetScripts(provider *Provider) (scripts map[int64]misc.ConfigMapScript, err error) {
|
|
var data string
|
|
data, err = GetConfig(provider, CONFIG_SCRIPTING_SCRIPTS)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
err = json.Unmarshal([]byte(data), &scripts)
|
|
return
|
|
}
|