mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-05-13 12:47:12 +00:00
**Changes** - Refactored the way controllers work to be an interface - Added configurable controllers to include in scans - Added daemonsets, jobs and cronjobs in scans - Added `ReplicationController` type controllers to the supported list - Adjusted logic for failed YAML parsing to bubble up errors - Added better logic for calculating summaries on cluster wide results - Relocated responsibilities for counting types into validators vs spreading it around more packages - Fixed bug where cronjob parsing was using wrong KIND - Added fixtures for mocking new controller types - Added example yamls to test scanning files - Added functions to NamespacedResult(s) to reduce code complexity deep set iterations - Refactored how results get added to namespacedresults so adding more later is easier - Minor signature changes for interface implementing structs for controllers
258 lines
7.9 KiB
Go
258 lines
7.9 KiB
Go
// Copyright 2019 FairwindsOps Inc
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package dashboard
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"html/template"
|
|
"net/http"
|
|
"strings"
|
|
|
|
packr "github.com/gobuffalo/packr/v2"
|
|
"github.com/gorilla/mux"
|
|
conf "github.com/fairwindsops/polaris/pkg/config"
|
|
"github.com/fairwindsops/polaris/pkg/kube"
|
|
"github.com/fairwindsops/polaris/pkg/validator"
|
|
"github.com/sirupsen/logrus"
|
|
"gitlab.com/golang-commonmark/markdown"
|
|
)
|
|
|
|
const (
|
|
// MainTemplateName is the main template
|
|
MainTemplateName = "main.gohtml"
|
|
// HeadTemplateName contains styles and meta info
|
|
HeadTemplateName = "head.gohtml"
|
|
// NavbarTemplateName contains the navbar
|
|
NavbarTemplateName = "navbar.gohtml"
|
|
// PreambleTemplateName contains an empty preamble that can be overridden
|
|
PreambleTemplateName = "preamble.gohtml"
|
|
// DashboardTemplateName contains the content of the dashboard
|
|
DashboardTemplateName = "dashboard.gohtml"
|
|
// FooterTemplateName contains the footer
|
|
FooterTemplateName = "footer.gohtml"
|
|
// CheckDetailsTemplateName is a page for rendering details about a given check
|
|
CheckDetailsTemplateName = "check-details.gohtml"
|
|
)
|
|
|
|
var (
|
|
templateBox = (*packr.Box)(nil)
|
|
assetBox = (*packr.Box)(nil)
|
|
markdownBox = (*packr.Box)(nil)
|
|
)
|
|
|
|
// GetAssetBox returns a binary-friendly set of assets packaged from disk
|
|
func GetAssetBox() *packr.Box {
|
|
if assetBox == (*packr.Box)(nil) {
|
|
assetBox = packr.New("Assets", "assets")
|
|
}
|
|
return assetBox
|
|
}
|
|
|
|
// GetTemplateBox returns a binary-friendly set of templates for rendering the dash
|
|
func GetTemplateBox() *packr.Box {
|
|
if templateBox == (*packr.Box)(nil) {
|
|
templateBox = packr.New("Templates", "templates")
|
|
}
|
|
return templateBox
|
|
}
|
|
|
|
// GetMarkdownBox returns a binary-friendly set of markdown files with error details
|
|
func GetMarkdownBox() *packr.Box {
|
|
if markdownBox == (*packr.Box)(nil) {
|
|
markdownBox = packr.New("Markdown", "../../docs/check-documentation")
|
|
}
|
|
return markdownBox
|
|
}
|
|
|
|
// templateData is passed to the dashboard HTML template
|
|
type templateData struct {
|
|
BasePath string
|
|
AuditData validator.AuditData
|
|
JSON template.JS
|
|
}
|
|
|
|
// GetBaseTemplate puts together the dashboard template. Individual pieces can be overridden before rendering.
|
|
func GetBaseTemplate(name string) (*template.Template, error) {
|
|
tmpl := template.New(name).Funcs(template.FuncMap{
|
|
"getWarningWidth": getWarningWidth,
|
|
"getSuccessWidth": getSuccessWidth,
|
|
"getWeatherIcon": getWeatherIcon,
|
|
"getWeatherText": getWeatherText,
|
|
"getGrade": getGrade,
|
|
"getIcon": getIcon,
|
|
"getCategoryLink": getCategoryLink,
|
|
"getCategoryInfo": getCategoryInfo,
|
|
"getAllControllerResults": getAllControllerResults,
|
|
})
|
|
|
|
templateFileNames := []string{
|
|
DashboardTemplateName,
|
|
HeadTemplateName,
|
|
NavbarTemplateName,
|
|
PreambleTemplateName,
|
|
FooterTemplateName,
|
|
MainTemplateName,
|
|
}
|
|
return parseTemplateFiles(tmpl, templateFileNames)
|
|
}
|
|
|
|
func parseTemplateFiles(tmpl *template.Template, templateFileNames []string) (*template.Template, error) {
|
|
templateBox := GetTemplateBox()
|
|
for _, fname := range templateFileNames {
|
|
templateFile, err := templateBox.Find(fname)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
tmpl, err = tmpl.Parse(string(templateFile))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
return tmpl, nil
|
|
}
|
|
|
|
func writeTemplate(tmpl *template.Template, data *templateData, w http.ResponseWriter) {
|
|
buf := &bytes.Buffer{}
|
|
err := tmpl.Execute(buf, data)
|
|
if err != nil {
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
buf.WriteTo(w)
|
|
}
|
|
|
|
// GetRouter returns a mux router serving all routes necessary for the dashboard
|
|
func GetRouter(c conf.Configuration, auditPath string, port int, basePath string) *mux.Router {
|
|
router := mux.NewRouter()
|
|
router.HandleFunc("/health", func(w http.ResponseWriter, r *http.Request) {
|
|
w.Write([]byte("OK"))
|
|
})
|
|
router.HandleFunc("/favicon.ico", func(w http.ResponseWriter, r *http.Request) {
|
|
favicon, err := GetAssetBox().Find("favicon-32x32.png")
|
|
if err != nil {
|
|
logrus.Errorf("Error getting favicon: %v", err)
|
|
http.Error(w, "Error getting favicon", http.StatusInternalServerError)
|
|
return
|
|
}
|
|
w.Write(favicon)
|
|
})
|
|
router.HandleFunc("/results.json", func(w http.ResponseWriter, r *http.Request) {
|
|
k, err := kube.CreateResourceProvider(auditPath)
|
|
if err != nil {
|
|
logrus.Errorf("Error fetching Kubernetes resources %v", err)
|
|
http.Error(w, "Error fetching Kubernetes resources", http.StatusInternalServerError)
|
|
return
|
|
}
|
|
JSONHandler(w, r, c, k)
|
|
})
|
|
router.HandleFunc("/details/{category}", func(w http.ResponseWriter, r *http.Request) {
|
|
vars := mux.Vars(r)
|
|
category := vars["category"]
|
|
category = strings.Replace(category, ".md", "", -1)
|
|
DetailsHandler(w, r, category, basePath)
|
|
})
|
|
fileServer := http.FileServer(GetAssetBox())
|
|
router.PathPrefix("/static/").Handler(http.StripPrefix("/static/", fileServer))
|
|
router.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
|
|
if r.URL.Path != "/" {
|
|
http.NotFound(w, r)
|
|
return
|
|
}
|
|
k, err := kube.CreateResourceProvider(auditPath)
|
|
if err != nil {
|
|
logrus.Errorf("Error fetching Kubernetes resources %v", err)
|
|
http.Error(w, "Error fetching Kubernetes resources", http.StatusInternalServerError)
|
|
return
|
|
}
|
|
auditData, err := validator.RunAudit(c, k)
|
|
if err != nil {
|
|
logrus.Errorf("Error getting audit data: %v", err)
|
|
http.Error(w, "Error running audit", 500)
|
|
return
|
|
}
|
|
MainHandler(w, r, auditData, basePath)
|
|
})
|
|
return router
|
|
}
|
|
|
|
// MainHandler gets template data and renders the dashboard with it.
|
|
func MainHandler(w http.ResponseWriter, r *http.Request, auditData validator.AuditData, basePath string) {
|
|
jsonData, err := json.Marshal(auditData)
|
|
|
|
if err != nil {
|
|
http.Error(w, "Error serializing audit data", 500)
|
|
return
|
|
}
|
|
|
|
data := templateData{
|
|
BasePath: basePath,
|
|
AuditData: auditData,
|
|
JSON: template.JS(jsonData),
|
|
}
|
|
tmpl, err := GetBaseTemplate("main")
|
|
if err != nil {
|
|
logrus.Printf("Error getting template data %v", err)
|
|
http.Error(w, "Error getting template data", 500)
|
|
return
|
|
}
|
|
writeTemplate(tmpl, &data, w)
|
|
}
|
|
|
|
// JSONHandler gets template data and renders json with it.
|
|
func JSONHandler(w http.ResponseWriter, r *http.Request, c conf.Configuration, kubeResources *kube.ResourceProvider) {
|
|
auditData, err := validator.RunAudit(c, kubeResources)
|
|
if err != nil {
|
|
http.Error(w, "Error Fetching Deployments", http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
w.Header().Set("Content-Type", "application/json")
|
|
w.WriteHeader(http.StatusOK)
|
|
json.NewEncoder(w).Encode(auditData)
|
|
}
|
|
|
|
// DetailsHandler returns details for a given error type
|
|
func DetailsHandler(w http.ResponseWriter, r *http.Request, category string, basePath string) {
|
|
box := GetMarkdownBox()
|
|
contents, err := box.Find(category + ".md")
|
|
if err != nil {
|
|
http.Error(w, "Error details not found for category "+category, http.StatusNotFound)
|
|
return
|
|
}
|
|
md := markdown.New(markdown.XHTMLOutput(true))
|
|
detailsHTML := "{{ define \"details\" }}" + md.RenderToString(contents) + "{{ end }}"
|
|
|
|
templateFileNames := []string{
|
|
HeadTemplateName,
|
|
NavbarTemplateName,
|
|
CheckDetailsTemplateName,
|
|
FooterTemplateName,
|
|
}
|
|
tmpl := template.New("check-details")
|
|
tmpl, err = parseTemplateFiles(tmpl, templateFileNames)
|
|
if err != nil {
|
|
logrus.Printf("Error getting template data %v", err)
|
|
http.Error(w, "Error getting template data", 500)
|
|
return
|
|
}
|
|
tmpl.Parse(detailsHTML)
|
|
data := templateData{
|
|
BasePath: basePath,
|
|
}
|
|
writeTemplate(tmpl, &data, w)
|
|
}
|