mirror of
https://github.com/replicatedhq/troubleshoot.git
synced 2026-02-14 18:29:53 +00:00
eacff7112f
* add a TLS parameter for cacert * pass a ca cert into http request * test preflight * make schemas * log extra information from http request * pass a proxy into the collector spec * hitting a segfault; breakpoint * accept a dir, file, or a string-literal as CA * move tls params into get, put, post methods * test for cert untrusted response * make generate * make schemas * more test cases * make schemas * dont include system certs * make generate && make schemas * resolve gosec G402 warning * remove old check for system certs * ignore errcheck "return value not checked" linter errors
75 lines
2.8 KiB
YAML
75 lines
2.8 KiB
YAML
apiVersion: troubleshoot.sh/v1beta2
|
|
kind: HostPreflight
|
|
metadata:
|
|
name: mitm-proxy
|
|
spec:
|
|
collectors:
|
|
- http:
|
|
collectorName: &https https
|
|
get:
|
|
url: &url https://replicated.app
|
|
tls:
|
|
cacert: &ca |-
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIDajCCAlKgAwIBAgIUFlUns1qeD6ss4cdXz52287KtPQswDQYJKoZIhvcNAQEL
|
|
BQAwTjELMAkGA1UEBhMCVVMxDjAMBgNVBAgMBVN0YXRlMQ0wCwYDVQQHDARDaXR5
|
|
MRMwEQYDVQQKDApSZXBsaWNhdGVkMQswCQYDVQQLDAJJVDAeFw0yNDA5MjcxNTU5
|
|
MDJaFw0yNDEwMDQxNTU5MDJaME4xCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVTdGF0
|
|
ZTENMAsGA1UEBwwEQ2l0eTETMBEGA1UECgwKUmVwbGljYXRlZDELMAkGA1UECwwC
|
|
SVQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLe7PlgdPiApQzZzkY
|
|
0dN/NDBib72Y5TAEhNguPVDY1Rj4PLiKjUXvHbVsRLpP8DrKJAeK/kJqeR4xr1O5
|
|
dQenCoTZTHX24TLFx0D1SKfdUtpxzKta8jd+O5TwaY/tLsi9YcJ6mz8n7+giJH1r
|
|
ZH5Isa9JkZ3fb2+VoX054I/C88MfsvdZahL7/RHLvolRiLeV7X86Zx2EJ3hUFWoZ
|
|
kYeIggbt2BeikeDlHQDBmxzpIaP1IMl3LHOjZhj7TiNuSYtDiE8OQIV34c9IZ1yi
|
|
lcUjrwKQCfzaE9lZK5UbS3KRD1XFSrSP4tWVsUmesYeFD+nc5/wku/J+PXDM1QAu
|
|
B8q9AgMBAAGjQDA+MA8GA1UdEQQIMAaHBAoKHskwDAYDVR0TBAUwAwEB/zAdBgNV
|
|
HQ4EFgQUuwXZYrzbdQVGCS5O0sdlCJo761cwDQYJKoZIhvcNAQELBQADggEBAH3G
|
|
9C6sJ+uR9ZAOnFyCQEdBVaw02NMOY0ajc8gMrmgl9btx1rLnS8r+zLf9Jev0YxiG
|
|
Pq6HbkceQNa6Rl6l6JH4O0sV0KUXe5r7kPPYv9pMsy+JZYH9H1ppUr0a13s4vrgA
|
|
4YbFE3TispC6WXFng4w85ODc9nmXGDvjPX6mzZxcsxooDX5+PPAo+WueKutOZMvT
|
|
yvB2hUgb4hy6CT6OvJJFb9Lh1Hl5aE/9FKgF3u/Tq2U3SSzMHMZiWzUVfAO0J1Ev
|
|
jcr8Mb5t3iQwH3t2eT07K2fouPa70vbOfj1kSiexUoUllHgoOXUeOpGv4Aykly7m
|
|
C/XdeJyP1tnZ3j2ozPo=
|
|
-----END CERTIFICATE-----
|
|
- http:
|
|
collectorName: &https-proxy https-proxy
|
|
get:
|
|
url: *url
|
|
tls:
|
|
cacert: *ca
|
|
proxy: &proxy https://10.10.30.201:3130
|
|
- http:
|
|
collectorName: &https-proxy-nocert https-proxy-nocert
|
|
get:
|
|
url: *url
|
|
proxy: *proxy
|
|
|
|
analyzers:
|
|
- http:
|
|
checkName: *https-proxy
|
|
collectorName: *https-proxy
|
|
outcomes:
|
|
- pass:
|
|
when: &200 "statusCode == 200"
|
|
message: &passed checking https://replicated.app passed
|
|
- fail:
|
|
message: &failed checking https://replicated.app failed
|
|
- http:
|
|
checkName: *https-proxy-nocert
|
|
collectorName: *https-proxy-nocert
|
|
outcomes:
|
|
- pass:
|
|
when: *200
|
|
message: *passed
|
|
- fail:
|
|
message: *failed
|
|
- http:
|
|
checkName: *https
|
|
collectorName: *https
|
|
outcomes:
|
|
- pass:
|
|
when: *200
|
|
message: *passed
|
|
- fail:
|
|
message: *failed
|