99 lines
3.1 KiB
Go
99 lines
3.1 KiB
Go
package apiserver
|
||
|
||
import (
|
||
"context"
|
||
"fmt"
|
||
"os"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
zeldaiov1alpha1 "github.com/ycyxuehan/zelda/api/v1alpha1"
|
||
authapi "github.com/ycyxuehan/zelda/apiserver/auth/api"
|
||
proxyapi "github.com/ycyxuehan/zelda/apiserver/proxy/api"
|
||
corev1 "k8s.io/api/core/v1"
|
||
kubeclient "sigs.k8s.io/controller-runtime/pkg/client"
|
||
)
|
||
|
||
type APIServer struct {
|
||
client kubeclient.Client
|
||
authManager authapi.AuthManager
|
||
proxies []proxyapi.Proxy
|
||
namesapce string
|
||
zserviceHandler *ZServiceHandler
|
||
}
|
||
|
||
func NewAPIServer(client kubeclient.Client, authManager authapi.AuthManager) *APIServer {
|
||
server := &APIServer{
|
||
client: client,
|
||
authManager: authManager,
|
||
zserviceHandler: NewZServiceHandler(client),
|
||
}
|
||
server.setNamespace()
|
||
return server
|
||
}
|
||
|
||
func (a *APIServer) setNamespace() error {
|
||
data, err := os.ReadFile("/var/run/secrets/kubernetes.io/serviceaccount/namespace")
|
||
a.namesapce = string(data)
|
||
return err
|
||
}
|
||
|
||
func (a *APIServer) UseProxies(proxies ...proxyapi.Proxy) {
|
||
a.proxies = append(a.proxies, proxies...)
|
||
}
|
||
|
||
//设置路由
|
||
func (a *APIServer) SetRoute(engine *gin.Engine) {
|
||
//添加认证接口
|
||
authGroup := engine.Group("/auth")
|
||
a.authManager.InitAuthRoute(a.IdentifyFunc(), authGroup)
|
||
//添加代理接口
|
||
for _, proxy := range a.proxies {
|
||
proxyGroup := engine.Group(proxy.Path())
|
||
proxyGroup.Use(a.authManager.MiddleWare())
|
||
proxyGroup.GET("/", proxy.Proxy())
|
||
proxyGroup.PUT("/", proxy.Proxy())
|
||
proxyGroup.POST("/", proxy.Proxy())
|
||
proxyGroup.PATCH("/", proxy.Proxy())
|
||
proxyGroup.DELETE("/", proxy.Proxy())
|
||
proxyGroup.OPTIONS("/", proxy.Proxy())
|
||
}
|
||
//添加服务接口
|
||
apiGroup := engine.Group("/api/v1alpha1")
|
||
apiGroup.Use(a.authManager.MiddleWare())
|
||
|
||
//zservice
|
||
zserviceGroup := apiGroup.Group("/zservice")
|
||
zserviceGroup.GET("/:name/restart", a.zserviceHandler.HandleRestart)
|
||
zserviceGroup.GET("/:name/start", a.zserviceHandler.HandleStart)
|
||
zserviceGroup.GET("/:name/stop", a.zserviceHandler.HandleStop)
|
||
zserviceGroup.POST("/:name/scale", a.zserviceHandler.HandleScale)
|
||
zserviceGroup.POST("/:name/version", a.zserviceHandler.HandleChangeVersion)
|
||
|
||
}
|
||
|
||
func (a *APIServer) IdentifyFunc() authapi.IdentifyFunc {
|
||
return func(ar *authapi.AuthentitionRequest) (authapi.IdentifyResult, error) {
|
||
zuser := zeldaiov1alpha1.ZUser{}
|
||
err := a.client.Get(context.Background(), kubeclient.ObjectKey{Namespace: a.namesapce, Name: ar.Username}, &zuser)
|
||
if err != nil {
|
||
return authapi.IdentifyResult{}, err
|
||
}
|
||
if ar.Password != zuser.Spec.Password {
|
||
return authapi.IdentifyResult{}, fmt.Errorf("password is invalid")
|
||
}
|
||
//密码验证通过，获取kubernetes token
|
||
secret := corev1.Secret{}
|
||
err = a.client.Get(context.Background(), kubeclient.ObjectKey{Namespace: a.namesapce, Name: zuser.Status.Token}, &secret)
|
||
if err != nil {
|
||
return authapi.IdentifyResult{}, err
|
||
}
|
||
//这里处理证书和token
|
||
return authapi.IdentifyResult{KubernetesToken: secret.StringData["token"], Cert: secret.StringData["ca.crt"]}, nil
|
||
}
|
||
}
|
||
|
||
func (a *APIServer)Run(addr string)error{
|
||
engine := gin.Default()
|
||
a.SetRoute(engine)
|
||
return engine.Run(addr)
|
||
} |