cmd/tsrecorder: adds sending api level logging to tsrecorder (#16960)
Updates #17141 Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>main
Tom Meadows
6 months ago
committed by
GitHub
parent
f25e47cdeb
commit
cd2a3425cb
@ -1 +1 @@ |
||||
sha256-jsmQ0S1Uh1cU/kr0onYLJY9VYcFx297QZjQALM3wX10= |
||||
sha256-rV3C2Vi48FCifGt58OdEO4+Av0HRIs8sUJVvp/gEBLw= |
||||
|
||||
@ -0,0 +1,548 @@ |
||||
// Copyright (c) Tailscale Inc & AUTHORS
|
||||
// SPDX-License-Identifier: BSD-3-Clause
|
||||
|
||||
//go:build !plan9
|
||||
|
||||
package apiproxy |
||||
|
||||
import ( |
||||
"bytes" |
||||
"encoding/json" |
||||
"errors" |
||||
"io" |
||||
"net/http" |
||||
"net/http/httptest" |
||||
"net/netip" |
||||
"net/url" |
||||
"reflect" |
||||
"testing" |
||||
|
||||
"go.uber.org/zap" |
||||
"tailscale.com/client/tailscale/apitype" |
||||
"tailscale.com/net/netx" |
||||
"tailscale.com/sessionrecording" |
||||
"tailscale.com/tailcfg" |
||||
"tailscale.com/tsnet" |
||||
) |
||||
|
||||
type fakeSender struct { |
||||
sent map[netip.AddrPort][]byte |
||||
err error |
||||
calls int |
||||
} |
||||
|
||||
func (s *fakeSender) Send(ap netip.AddrPort, event io.Reader, dial netx.DialFunc) error { |
||||
s.calls++ |
||||
if s.err != nil { |
||||
return s.err |
||||
} |
||||
if s.sent == nil { |
||||
s.sent = make(map[netip.AddrPort][]byte) |
||||
} |
||||
data, _ := io.ReadAll(event) |
||||
s.sent[ap] = data |
||||
return nil |
||||
} |
||||
|
||||
func (s *fakeSender) Reset() { |
||||
s.sent = nil |
||||
s.err = nil |
||||
s.calls = 0 |
||||
} |
||||
|
||||
func TestRecordRequestAsEvent(t *testing.T) { |
||||
zl, err := zap.NewDevelopment() |
||||
if err != nil { |
||||
t.Fatal(err) |
||||
} |
||||
|
||||
sender := &fakeSender{} |
||||
ap := &APIServerProxy{ |
||||
log: zl.Sugar(), |
||||
ts: &tsnet.Server{}, |
||||
sendEventFunc: sender.Send, |
||||
} |
||||
|
||||
defaultWho := &apitype.WhoIsResponse{ |
||||
Node: &tailcfg.Node{ |
||||
StableID: "stable-id", |
||||
Name: "node.ts.net.", |
||||
}, |
||||
UserProfile: &tailcfg.UserProfile{ |
||||
ID: 1, |
||||
LoginName: "user@example.com", |
||||
}, |
||||
CapMap: tailcfg.PeerCapMap{ |
||||
tailcfg.PeerCapabilityKubernetes: []tailcfg.RawMessage{ |
||||
tailcfg.RawMessage(`{"recorderAddrs":["127.0.0.1:1234"]}`), |
||||
tailcfg.RawMessage(`{"enforceRecorder": true}`), |
||||
}, |
||||
}, |
||||
} |
||||
|
||||
defaultSource := sessionrecording.Source{ |
||||
Node: "node.ts.net", |
||||
NodeID: "stable-id", |
||||
NodeUser: "user@example.com", |
||||
NodeUserID: 1, |
||||
} |
||||
|
||||
tests := []struct { |
||||
name string |
||||
req func() *http.Request |
||||
who *apitype.WhoIsResponse |
||||
setupSender func() |
||||
wantErr bool |
||||
wantEvent *sessionrecording.Event |
||||
wantNumCalls int |
||||
}{ |
||||
{ |
||||
name: "request-with-dot-in-name", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/namespaces/default/pods/foo.bar", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/namespaces/default/pods/foo.bar", |
||||
Body: nil, |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/namespaces/default/pods/foo.bar", |
||||
Verb: "get", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Namespace: "default", |
||||
Resource: "pods", |
||||
Name: "foo.bar", |
||||
Parts: []string{"pods", "foo.bar"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "request-with-dash-in-name", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/namespaces/default/pods/foo-bar", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/namespaces/default/pods/foo-bar", |
||||
Body: nil, |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/namespaces/default/pods/foo-bar", |
||||
Verb: "get", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Namespace: "default", |
||||
Resource: "pods", |
||||
Name: "foo-bar", |
||||
Parts: []string{"pods", "foo-bar"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "request-with-query-parameter", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/pods?watch=true", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/pods?watch=true", |
||||
Body: nil, |
||||
QueryParameters: url.Values{"watch": []string{"true"}}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/pods", |
||||
Verb: "watch", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Resource: "pods", |
||||
Parts: []string{"pods"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "request-with-label-selector", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/pods?labelSelector=app%3Dfoo", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/pods?labelSelector=app%3Dfoo", |
||||
Body: nil, |
||||
QueryParameters: url.Values{"labelSelector": []string{"app=foo"}}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/pods", |
||||
Verb: "list", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Resource: "pods", |
||||
Parts: []string{"pods"}, |
||||
LabelSelector: "app=foo", |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "request-with-field-selector", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/pods?fieldSelector=status.phase%3DRunning", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/pods?fieldSelector=status.phase%3DRunning", |
||||
Body: nil, |
||||
QueryParameters: url.Values{"fieldSelector": []string{"status.phase=Running"}}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/pods", |
||||
Verb: "list", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Resource: "pods", |
||||
Parts: []string{"pods"}, |
||||
FieldSelector: "status.phase=Running", |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "request-for-non-existent-resource", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/foo", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/foo", |
||||
Body: nil, |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/foo", |
||||
Verb: "list", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Resource: "foo", |
||||
Parts: []string{"foo"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "basic-request", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/pods", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/pods", |
||||
Body: nil, |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/pods", |
||||
Verb: "list", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Resource: "pods", |
||||
Parts: []string{"pods"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "multiple-recorders", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/pods", nil) |
||||
}, |
||||
who: &apitype.WhoIsResponse{ |
||||
Node: defaultWho.Node, |
||||
UserProfile: defaultWho.UserProfile, |
||||
CapMap: tailcfg.PeerCapMap{ |
||||
tailcfg.PeerCapabilityKubernetes: []tailcfg.RawMessage{ |
||||
tailcfg.RawMessage(`{"recorderAddrs":["127.0.0.1:1234", "127.0.0.1:5678"]}`), |
||||
}, |
||||
}, |
||||
}, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
}, |
||||
{ |
||||
name: "request-with-body", |
||||
req: func() *http.Request { |
||||
req := httptest.NewRequest("POST", "/api/v1/pods", bytes.NewBufferString(`{"foo":"bar"}`)) |
||||
req.Header.Set("Content-Type", "application/json") |
||||
return req |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "POST", |
||||
Path: "/api/v1/pods", |
||||
Body: json.RawMessage(`{"foo":"bar"}`), |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/pods", |
||||
Verb: "create", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Resource: "pods", |
||||
Parts: []string{"pods"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "tagged-node", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/pods", nil) |
||||
}, |
||||
who: &apitype.WhoIsResponse{ |
||||
Node: &tailcfg.Node{ |
||||
StableID: "stable-id", |
||||
Name: "node.ts.net.", |
||||
Tags: []string{"tag:foo"}, |
||||
}, |
||||
UserProfile: &tailcfg.UserProfile{}, |
||||
CapMap: defaultWho.CapMap, |
||||
}, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/pods", |
||||
Body: nil, |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/pods", |
||||
Verb: "list", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Resource: "pods", |
||||
Parts: []string{"pods"}, |
||||
}, |
||||
Source: sessionrecording.Source{ |
||||
Node: "node.ts.net", |
||||
NodeID: "stable-id", |
||||
NodeTags: []string{"tag:foo"}, |
||||
}, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "no-recorders", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/pods", nil) |
||||
}, |
||||
who: &apitype.WhoIsResponse{ |
||||
Node: defaultWho.Node, |
||||
UserProfile: defaultWho.UserProfile, |
||||
CapMap: tailcfg.PeerCapMap{}, |
||||
}, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 0, |
||||
}, |
||||
{ |
||||
name: "error-sending", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/pods", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { |
||||
sender.Reset() |
||||
sender.err = errors.New("send error") |
||||
}, |
||||
wantErr: true, |
||||
wantNumCalls: 1, |
||||
}, |
||||
{ |
||||
name: "request-for-crd", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/apis/custom.example.com/v1/myresources", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/apis/custom.example.com/v1/myresources", |
||||
Body: nil, |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/apis/custom.example.com/v1/myresources", |
||||
Verb: "list", |
||||
APIPrefix: "apis", |
||||
APIGroup: "custom.example.com", |
||||
APIVersion: "v1", |
||||
Resource: "myresources", |
||||
Parts: []string{"myresources"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "request-with-proxy-verb", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/namespaces/default/pods/foo/proxy", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/namespaces/default/pods/foo/proxy", |
||||
Body: nil, |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/namespaces/default/pods/foo/proxy", |
||||
Verb: "get", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Namespace: "default", |
||||
Resource: "pods", |
||||
Subresource: "proxy", |
||||
Name: "foo", |
||||
Parts: []string{"pods", "foo", "proxy"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
{ |
||||
name: "request-with-complex-path", |
||||
req: func() *http.Request { |
||||
return httptest.NewRequest("GET", "/api/v1/namespaces/default/services/foo:8080/proxy-subpath/more/segments", nil) |
||||
}, |
||||
who: defaultWho, |
||||
setupSender: func() { sender.Reset() }, |
||||
wantNumCalls: 1, |
||||
wantEvent: &sessionrecording.Event{ |
||||
Type: sessionrecording.KubernetesAPIEventType, |
||||
Request: sessionrecording.Request{ |
||||
Method: "GET", |
||||
Path: "/api/v1/namespaces/default/services/foo:8080/proxy-subpath/more/segments", |
||||
Body: nil, |
||||
QueryParameters: url.Values{}, |
||||
}, |
||||
Kubernetes: sessionrecording.KubernetesRequestInfo{ |
||||
IsResourceRequest: true, |
||||
Path: "/api/v1/namespaces/default/services/foo:8080/proxy-subpath/more/segments", |
||||
Verb: "get", |
||||
APIPrefix: "api", |
||||
APIVersion: "v1", |
||||
Namespace: "default", |
||||
Resource: "services", |
||||
Subresource: "proxy-subpath", |
||||
Name: "foo:8080", |
||||
Parts: []string{"services", "foo:8080", "proxy-subpath", "more", "segments"}, |
||||
}, |
||||
Source: defaultSource, |
||||
}, |
||||
}, |
||||
} |
||||
|
||||
for _, tt := range tests { |
||||
t.Run(tt.name, func(t *testing.T) { |
||||
tt.setupSender() |
||||
|
||||
req := tt.req() |
||||
err := ap.recordRequestAsEvent(req, tt.who) |
||||
|
||||
if (err != nil) != tt.wantErr { |
||||
t.Fatalf("recordRequestAsEvent() error = %v, wantErr %v", err, tt.wantErr) |
||||
} |
||||
|
||||
if sender.calls != tt.wantNumCalls { |
||||
t.Fatalf("expected %d calls to sender, got %d", tt.wantNumCalls, sender.calls) |
||||
} |
||||
|
||||
if tt.wantEvent != nil { |
||||
for _, sentData := range sender.sent { |
||||
var got sessionrecording.Event |
||||
if err := json.Unmarshal(sentData, &got); err != nil { |
||||
t.Fatalf("failed to unmarshal sent event: %v", err) |
||||
} |
||||
|
||||
got.Timestamp = 0 |
||||
tt.wantEvent.Timestamp = got.Timestamp |
||||
|
||||
got.UserAgent = "" |
||||
tt.wantEvent.UserAgent = "" |
||||
|
||||
if !bytes.Equal(got.Request.Body, tt.wantEvent.Request.Body) { |
||||
t.Errorf("sent event body does not match wanted event body.\nGot: %s\nWant: %s", string(got.Request.Body), string(tt.wantEvent.Request.Body)) |
||||
} |
||||
got.Request.Body = nil |
||||
tt.wantEvent.Request.Body = nil |
||||
|
||||
if !reflect.DeepEqual(&got, tt.wantEvent) { |
||||
t.Errorf("sent event does not match wanted event.\nGot: %#v\nWant: %#v", &got, tt.wantEvent) |
||||
} |
||||
} |
||||
} |
||||
}) |
||||
} |
||||
} |
||||
@ -0,0 +1,104 @@ |
||||
// Copyright (c) Tailscale Inc & AUTHORS
|
||||
// SPDX-License-Identifier: BSD-3-Clause
|
||||
|
||||
package sessionrecording |
||||
|
||||
import ( |
||||
"net/url" |
||||
|
||||
"tailscale.com/tailcfg" |
||||
) |
||||
|
||||
const ( |
||||
KubernetesAPIEventType = "kubernetes-api-request" |
||||
) |
||||
|
||||
// Event represents the top-level structure of a tsrecorder event.
|
||||
type Event struct { |
||||
// Type specifies the kind of event being recorded (e.g., "kubernetes-api-request").
|
||||
Type string `json:"type"` |
||||
|
||||
// ID is a reference of the path that this event is stored at in tsrecorder
|
||||
ID string `json:"id"` |
||||
|
||||
// Timestamp is the time when the event was recorded represented as a unix timestamp.
|
||||
Timestamp int64 `json:"timestamp"` |
||||
|
||||
// UserAgent is the UerAgent specified in the request, which helps identify
|
||||
// the client software that initiated the request.
|
||||
UserAgent string `json:"userAgent"` |
||||
|
||||
// Request holds details of the HTTP request.
|
||||
Request Request `json:"request"` |
||||
|
||||
// Kubernetes contains Kubernetes-specific information about the request (if
|
||||
// the type is `kubernetes-api-request`)
|
||||
Kubernetes KubernetesRequestInfo `json:"kubernetes"` |
||||
|
||||
// Source provides details about the client that initiated the request.
|
||||
Source Source `json:"source"` |
||||
} |
||||
|
||||
// copied from https://github.com/kubernetes/kubernetes/blob/11ade2f7dd264c2f52a4a1342458abbbaa3cb2b1/staging/src/k8s.io/apiserver/pkg/endpoints/request/requestinfo.go#L44
|
||||
// KubernetesRequestInfo contains Kubernetes specific information in the request (if the type is `kubernetes-api-request`)
|
||||
type KubernetesRequestInfo struct { |
||||
// IsResourceRequest indicates whether or not the request is for an API resource or subresource
|
||||
IsResourceRequest bool |
||||
// Path is the URL path of the request
|
||||
Path string |
||||
// Verb is the kube verb associated with the request for API requests, not the http verb. This includes things like list and watch.
|
||||
// for non-resource requests, this is the lowercase http verb
|
||||
Verb string |
||||
|
||||
APIPrefix string |
||||
APIGroup string |
||||
APIVersion string |
||||
|
||||
Namespace string |
||||
// Resource is the name of the resource being requested. This is not the kind. For example: pods
|
||||
Resource string |
||||
// Subresource is the name of the subresource being requested. This is a different resource, scoped to the parent resource, but it may have a different kind.
|
||||
// For instance, /pods has the resource "pods" and the kind "Pod", while /pods/foo/status has the resource "pods", the sub resource "status", and the kind "Pod"
|
||||
// (because status operates on pods). The binding resource for a pod though may be /pods/foo/binding, which has resource "pods", subresource "binding", and kind "Binding".
|
||||
Subresource string |
||||
// Name is empty for some verbs, but if the request directly indicates a name (not in body content) then this field is filled in.
|
||||
Name string |
||||
// Parts are the path parts for the request, always starting with /{resource}/{name}
|
||||
Parts []string |
||||
|
||||
// FieldSelector contains the unparsed field selector from a request. It is only present if the apiserver
|
||||
// honors field selectors for the verb this request is associated with.
|
||||
FieldSelector string |
||||
// LabelSelector contains the unparsed field selector from a request. It is only present if the apiserver
|
||||
// honors field selectors for the verb this request is associated with.
|
||||
LabelSelector string |
||||
} |
||||
|
||||
type Source struct { |
||||
// Node is the FQDN of the node originating the connection.
|
||||
// It is also the MagicDNS name for the node.
|
||||
// It does not have a trailing dot.
|
||||
// e.g. "host.tail-scale.ts.net"
|
||||
Node string `json:"node"` |
||||
|
||||
// NodeID is the node ID of the node originating the connection.
|
||||
NodeID tailcfg.StableNodeID `json:"nodeID"` |
||||
|
||||
// Tailscale-specific fields:
|
||||
// NodeTags is the list of tags on the node originating the connection (if any).
|
||||
NodeTags []string `json:"nodeTags,omitempty"` |
||||
|
||||
// NodeUserID is the user ID of the node originating the connection (if not tagged).
|
||||
NodeUserID tailcfg.UserID `json:"nodeUserID,omitempty"` // if not tagged
|
||||
|
||||
// NodeUser is the LoginName of the node originating the connection (if not tagged).
|
||||
NodeUser string `json:"nodeUser,omitempty"` |
||||
} |
||||
|
||||
// Request holds information about a request.
|
||||
type Request struct { |
||||
Method string `json:"method"` |
||||
Path string `json:"path"` |
||||
Body []byte `json:"body"` |
||||
QueryParameters url.Values `json:"queryParameters"` |
||||
} |
||||
Loading…
Reference in new issue