mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-03-18 18:42:44 +00:00
108 lines
4.5 KiB
Go
108 lines
4.5 KiB
Go
package cmd
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"github.com/spf13/cobra"
|
|
"github.com/up9inc/mizu/cli/mizu"
|
|
"github.com/up9inc/mizu/cli/uiUtils"
|
|
"github.com/up9inc/mizu/shared/units"
|
|
"os"
|
|
"regexp"
|
|
"strings"
|
|
)
|
|
|
|
type MizuTapOptions struct {
|
|
GuiPort uint16
|
|
Namespace string
|
|
AllNamespaces bool
|
|
Analysis bool
|
|
AnalysisDestination string
|
|
KubeConfigPath string
|
|
MizuImage string
|
|
PlainTextFilterRegexes []string
|
|
TapOutgoing bool
|
|
HideHealthChecks bool
|
|
MaxEntriesDBSizeBytes int64
|
|
SleepIntervalSec uint16
|
|
DisableRedaction bool
|
|
}
|
|
|
|
var mizuTapOptions = &MizuTapOptions{}
|
|
var direction string
|
|
var humanMaxEntriesDBSize string
|
|
var regex *regexp.Regexp
|
|
const maxEntriesDBSizeFlagName = "max-entries-db-size"
|
|
|
|
|
|
const analysisMessageToConfirm = `NOTE: running mizu with --analysis flag will upload recorded traffic
|
|
to UP9 cloud for further analysis and enriched presentation options.
|
|
`
|
|
|
|
var tapCmd = &cobra.Command{
|
|
Use: "tap [POD REGEX]",
|
|
Short: "Record ingoing traffic of a kubernetes pod",
|
|
Long: `Record the ingoing traffic of a kubernetes pod.
|
|
Supported protocols are HTTP and gRPC.`,
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
RunMizuTap(regex, mizuTapOptions)
|
|
return nil
|
|
},
|
|
PreRunE: func(cmd *cobra.Command, args []string) error {
|
|
if len(args) == 0 {
|
|
return errors.New("POD REGEX argument is required")
|
|
} else if len(args) > 1 {
|
|
return errors.New("unexpected number of arguments")
|
|
}
|
|
|
|
var compileErr error
|
|
regex, compileErr = regexp.Compile(args[0])
|
|
if compileErr != nil {
|
|
return errors.New(fmt.Sprintf("%s is not a valid regex %s", args[0], compileErr))
|
|
}
|
|
|
|
var parseHumanDataSizeErr error
|
|
mizuTapOptions.MaxEntriesDBSizeBytes, parseHumanDataSizeErr = units.HumanReadableToBytes(humanMaxEntriesDBSize)
|
|
if parseHumanDataSizeErr != nil {
|
|
return errors.New(fmt.Sprintf("Could not parse --max-entries-db-size value %s", humanMaxEntriesDBSize))
|
|
}
|
|
fmt.Printf("Mizu will store up to %s of traffic, old traffic will be cleared once the limit is reached.\n", units.BytesToHumanReadable(mizuTapOptions.MaxEntriesDBSizeBytes))
|
|
|
|
directionLowerCase := strings.ToLower(direction)
|
|
if directionLowerCase == "any" {
|
|
mizuTapOptions.TapOutgoing = true
|
|
} else if directionLowerCase == "in" {
|
|
mizuTapOptions.TapOutgoing = false
|
|
} else {
|
|
return errors.New(fmt.Sprintf("%s is not a valid value for flag --direction. Acceptable values are in/any.", direction))
|
|
}
|
|
|
|
if mizuTapOptions.Analysis {
|
|
fmt.Printf(analysisMessageToConfirm)
|
|
if !uiUtils.AskForConfirmation("Would you like to proceed [y/n]: ") {
|
|
fmt.Println("You can always run mizu without analysis, aborting")
|
|
os.Exit(0)
|
|
}
|
|
}
|
|
return nil
|
|
},
|
|
}
|
|
|
|
func init() {
|
|
rootCmd.AddCommand(tapCmd)
|
|
|
|
tapCmd.Flags().Uint16VarP(&mizuTapOptions.GuiPort, "gui-port", "p", 8899, "Provide a custom port for the web interface webserver")
|
|
tapCmd.Flags().StringVarP(&mizuTapOptions.Namespace, "namespace", "n", "", "Namespace selector")
|
|
tapCmd.Flags().BoolVar(&mizuTapOptions.Analysis, "analysis", false, "Uploads traffic to UP9 for further analysis (Beta)")
|
|
tapCmd.Flags().StringVar(&mizuTapOptions.AnalysisDestination, "dest", "up9.app", "Destination environment")
|
|
tapCmd.Flags().Uint16VarP(&mizuTapOptions.SleepIntervalSec, "upload-interval", "", 10, "Interval in seconds for uploading data to UP9")
|
|
tapCmd.Flags().BoolVarP(&mizuTapOptions.AllNamespaces, "all-namespaces", "A", false, "Tap all namespaces")
|
|
tapCmd.Flags().StringVarP(&mizuTapOptions.KubeConfigPath, "kube-config", "k", "", "Path to kube-config file")
|
|
tapCmd.Flags().StringVarP(&mizuTapOptions.MizuImage, "mizu-image", "", fmt.Sprintf("gcr.io/up9-docker-hub/mizu/%s:%s", mizu.Branch, mizu.SemVer), "Custom image for mizu collector")
|
|
tapCmd.Flags().StringArrayVarP(&mizuTapOptions.PlainTextFilterRegexes, "regex-masking", "r", nil, "List of regex expressions that are used to filter matching values from text/plain http bodies")
|
|
tapCmd.Flags().StringVarP(&direction, "direction", "", "in", "Record traffic that goes in this direction (relative to the tapped pod): in/any")
|
|
tapCmd.Flags().BoolVar(&mizuTapOptions.HideHealthChecks, "hide-healthchecks", false, "hides requests with kube-probe or prometheus user-agent headers")
|
|
tapCmd.Flags().StringVarP(&humanMaxEntriesDBSize, maxEntriesDBSizeFlagName, "", "200MB", "override the default max entries db size of 200mb")
|
|
tapCmd.Flags().BoolVar(&mizuTapOptions.DisableRedaction, "no-redact", false, "Disables redaction of potentially sensitive request/response headers and body values")
|
|
}
|