85 lines
2.1 KiB
Go
85 lines
2.1 KiB
Go
|
package kubeapi
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"crypto/tls"
|
|||
|
|
"crypto/x509"
|
|||
|
|
// "encoding/base64"
|
|||
|
|
// "fmt"
|
|||
|
|
"net"
|
|||
|
|
"net/http"
|
|||
|
|
"net/http/httputil"
|
|||
|
|
"time"
|
|||
|
|
|
|||
|
|
"github.com/gin-gonic/gin"
|
|||
|
|
"github.com/ycyxuehan/zelda/apiserver/proxy/api"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
type kubeAPI struct {
|
|||
|
|
domain string
|
|||
|
|
path string
|
|||
|
|
certs []string
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func NewKubeAPI(domain, path string) api.Proxy {
|
|||
|
|
return &kubeAPI{
|
|||
|
|
path: path,
|
|||
|
|
domain: domain,
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (k *kubeAPI) Proxy() gin.HandlerFunc {
|
|||
|
|
return func(c *gin.Context) {
|
|||
|
|
cert := ""
|
|||
|
|
director := func(req *http.Request) {
|
|||
|
|
req.URL.Scheme = api.HTTPS
|
|||
|
|
req.URL.Host = k.domain
|
|||
|
|
req.Header.Set("Content-Type", c.GetHeader("Content-Type"))
|
|||
|
|
req.Header.Set("Content-Length", c.GetHeader("Content-Length"))
|
|||
|
|
// if c.Request.Method == http.MethodPost || c.Request.Method == http.MethodPatch || c.Request.Method == http.MethodPut {
|
|||
|
|
req.Header.Set("Content-Type", "application/json")
|
|||
|
|
// }
|
|||
|
|
req.Host = k.domain
|
|||
|
|
//watch模式需要提升协议为websocket
|
|||
|
|
watch := c.Query("watch")
|
|||
|
|
follow := c.Query("follow")
|
|||
|
|
if watch == "true" || follow == "true" {
|
|||
|
|
// fmt.Println("watch mode，允许升级为websocket")
|
|||
|
|
req.Header.Set("Upgrade", "websocket")
|
|||
|
|
}
|
|||
|
|
//从header获取cert
|
|||
|
|
cert = req.Header.Get("cert")
|
|||
|
|
req.Header.Del("cert") //删除cert
|
|||
|
|
}
|
|||
|
|
proxy := &httputil.ReverseProxy{Director: director}
|
|||
|
|
certs := x509.NewCertPool()
|
|||
|
|
transport := &http.Transport{
|
|||
|
|
Proxy: http.ProxyFromEnvironment,
|
|||
|
|
DialContext: (&net.Dialer{
|
|||
|
|
Timeout: 30 * time.Second,
|
|||
|
|
KeepAlive: 30 * time.Second,
|
|||
|
|
DualStack: true,
|
|||
|
|
}).DialContext,
|
|||
|
|
ForceAttemptHTTP2: true,
|
|||
|
|
MaxIdleConns: 100,
|
|||
|
|
IdleConnTimeout: 90 * time.Second,
|
|||
|
|
TLSHandshakeTimeout: 10 * time.Second,
|
|||
|
|
ExpectContinueTimeout: 1 * time.Second,
|
|||
|
|
TLSClientConfig: &tls.Config{}, //InsecureSkipVerify: true
|
|||
|
|
}
|
|||
|
|
//如果有证书，加入
|
|||
|
|
if ok := certs.AppendCertsFromPEM([]byte(cert)); ok {
|
|||
|
|
transport.TLSClientConfig.RootCAs = certs
|
|||
|
|
}
|
|||
|
|
proxy.Transport = transport
|
|||
|
|
proxy.ServeHTTP(c.Writer, c.Request)
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (k *kubeAPI) WithCerts(certs ...string) {
|
|||
|
|
k.certs = append(k.certs, certs...)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (k *kubeAPI) Path() string {
|
|||
|
|
return k.path
|
|||
|
|
}
|