kubeshark/cli/config/configStructs/tapConfig.go

package configStructs

import (
	"errors"
	"fmt"
	"io/fs"
	"io/ioutil"
	"os"
	"regexp"

	"github.com/up9inc/mizu/cli/uiUtils"
	"github.com/up9inc/mizu/shared"

	"github.com/up9inc/mizu/logger"
	"github.com/up9inc/mizu/shared/units"
)

const (
	GuiPortTapName                = "gui-port"
	NamespacesTapName             = "namespaces"
	AnalysisTapName               = "analysis"
	AllNamespacesTapName          = "all-namespaces"
	PlainTextFilterRegexesTapName = "regex-masking"
	DisableRedactionTapName       = "no-redact"
	HumanMaxEntriesDBSizeTapName  = "max-entries-db-size"
	InsertionFilterName           = "insertion-filter"
	DryRunTapName                 = "dry-run"
	WorkspaceTapName              = "workspace"
	EnforcePolicyFile             = "traffic-validation-file"
	ContractFile                  = "contract"
	ServiceMeshName               = "service-mesh"
	TlsName                       = "tls"
	ProfilerName                  = "profiler"
)

type TapConfig struct {
	UploadIntervalSec      int              `yaml:"upload-interval" default:"10"`
	PodRegexStr            string           `yaml:"regex" default:".*"`
	GuiPort                uint16           `yaml:"gui-port" default:"8899"`
	ProxyHost              string           `yaml:"proxy-host" default:"127.0.0.1"`
	Namespaces             []string         `yaml:"namespaces"`
	Analysis               bool             `yaml:"analysis" default:"false"`
	AllNamespaces          bool             `yaml:"all-namespaces" default:"false"`
	PlainTextFilterRegexes []string         `yaml:"regex-masking"`
	IgnoredUserAgents      []string         `yaml:"ignored-user-agents"`
	DisableRedaction       bool             `yaml:"no-redact" default:"false"`
	HumanMaxEntriesDBSize  string           `yaml:"max-entries-db-size" default:"200MB"`
	InsertionFilter        string           `yaml:"insertion-filter" default:""`
	DryRun                 bool             `yaml:"dry-run" default:"false"`
	Workspace              string           `yaml:"workspace"`
	EnforcePolicyFile      string           `yaml:"traffic-validation-file"`
	ContractFile           string           `yaml:"contract"`
	AskUploadConfirmation  bool             `yaml:"ask-upload-confirmation" default:"true"`
	ApiServerResources     shared.Resources `yaml:"api-server-resources"`
	TapperResources        shared.Resources `yaml:"tapper-resources"`
	ServiceMesh            bool             `yaml:"service-mesh" default:"false"`
	Tls                    bool             `yaml:"tls" default:"false"`
	Profiler               bool             `yaml:"profiler" default:"false"`
}

func (config *TapConfig) PodRegex() *regexp.Regexp {
	podRegex, _ := regexp.Compile(config.PodRegexStr)
	return podRegex
}

func (config *TapConfig) MaxEntriesDBSizeBytes() int64 {
	maxEntriesDBSizeBytes, _ := units.HumanReadableToBytes(config.HumanMaxEntriesDBSize)
	return maxEntriesDBSizeBytes
}

func (config *TapConfig) GetInsertionFilter() string {
	insertionFilter := config.InsertionFilter
	if fs.ValidPath(insertionFilter) {
		if _, err := os.Stat(insertionFilter); err == nil {
			b, err := ioutil.ReadFile(insertionFilter)
			if err != nil {
				logger.Log.Warningf(uiUtils.Warning, fmt.Sprintf("Couldn't read the file on path: %s, err: %v", insertionFilter, err))
			} else {
				insertionFilter = string(b)
			}
		}
	}
	return insertionFilter
}

func (config *TapConfig) Validate() error {
	_, compileErr := regexp.Compile(config.PodRegexStr)
	if compileErr != nil {
		return fmt.Errorf("%s is not a valid regex %s", config.PodRegexStr, compileErr)
	}

	_, parseHumanDataSizeErr := units.HumanReadableToBytes(config.HumanMaxEntriesDBSize)
	if parseHumanDataSizeErr != nil {
		return fmt.Errorf("Could not parse --%s value %s", HumanMaxEntriesDBSizeTapName, config.HumanMaxEntriesDBSize)
	}

	if config.Workspace != "" {
		workspaceRegex, _ := regexp.Compile("[A-Za-z0-9][-A-Za-z0-9_.]*[A-Za-z0-9]+$")
		if len(config.Workspace) > 63 || !workspaceRegex.MatchString(config.Workspace) {
			return errors.New("invalid workspace name")
		}
	}

	if config.Analysis && config.Workspace != "" {
		return fmt.Errorf("Can't run with both --%s and --%s flags", AnalysisTapName, WorkspaceTapName)
	}

	return nil
}