/
kubetoken_client.go
115 lines (94 loc) · 3.1 KB
/
kubetoken_client.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
// Copyright 2023 The Okteto Authors
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package okteto
import (
"encoding/json"
"errors"
"fmt"
"io"
"net/http"
"net/url"
oktetoLog "github.com/okteto/okteto/pkg/log"
"github.com/okteto/okteto/pkg/types"
)
const (
// kubetokenPathTemplate (baseURL, namespace)
kubetokenPathTemplate = "%s/auth/kubetoken/%s"
)
var (
errRequest = errors.New("failed request")
errStatus = errors.New("status error")
errUnauthorized = errors.New("unauthorized")
errKubetokenNotAvailable = errors.New("kubetoken service not found")
)
type kubeTokenClient struct {
httpClient *http.Client
}
func newKubeTokenClient(httpClient *http.Client) *kubeTokenClient {
return &kubeTokenClient{
httpClient: httpClient,
}
}
func getKubetokenURL(baseURL, namespace string) (*url.URL, error) {
return url.Parse(fmt.Sprintf(kubetokenPathTemplate, baseURL, namespace))
}
func (c *kubeTokenClient) GetKubeToken(baseURL, namespace string) (types.KubeTokenResponse, error) {
endpoint, err := getKubetokenURL(baseURL, namespace)
if err != nil {
return types.KubeTokenResponse{}, err
}
resp, err := c.httpClient.Get(endpoint.String())
if err != nil {
return types.KubeTokenResponse{}, fmt.Errorf("GetKubeToken %w: %w", errRequest, err)
}
defer func() {
if err := resp.Body.Close(); err != nil {
oktetoLog.Info("could not close the body: %s", err)
}
}()
if resp.StatusCode == http.StatusUnauthorized {
return types.KubeTokenResponse{}, fmt.Errorf("GetKubeToken %w", errUnauthorized)
}
if resp.StatusCode != http.StatusOK {
return types.KubeTokenResponse{}, fmt.Errorf("GetKubeToken %w: %s", errStatus, resp.Status)
}
body, err := io.ReadAll(resp.Body)
if err != nil {
return types.KubeTokenResponse{}, fmt.Errorf("failed to read kubetoken response: %w", err)
}
var kubeTokenResponse types.KubeTokenResponse
err = json.Unmarshal(body, &kubeTokenResponse)
if err != nil {
return types.KubeTokenResponse{}, fmt.Errorf("failed to unmarshal kubetoken response: %w", err)
}
return kubeTokenResponse, nil
}
func (c *kubeTokenClient) CheckService(baseURL, namespace string) error {
endpoint, err := getKubetokenURL(baseURL, namespace)
if err != nil {
return err
}
resp, err := c.httpClient.Head(endpoint.String())
if err != nil {
return fmt.Errorf("CheckService %w: %w", errRequest, err)
}
defer func() {
if err := resp.Body.Close(); err != nil {
oktetoLog.Info("could not close the body: %s", err)
}
}()
if resp.StatusCode != http.StatusOK {
return fmt.Errorf("CheckService %w: %s", errKubetokenNotAvailable, baseURL)
}
return nil
}