1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
|
/*
Copyright (C) 2021 The Falco Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
//
// k8s.h
//
// extracts needed data from the k8s REST API interface
//
#ifndef MINIMAL_BUILD
#pragma once
#include "json/json.h"
#include "k8s_component.h"
#include "k8s_state.h"
#include "k8s_event_data.h"
#include "k8s_net.h"
#include "sinsp_auth.h"
#include <sstream>
#include <utility>
class k8s_dispatcher;
class k8s
{
public:
#if defined(HAS_CAPTURE) && !defined(_WIN32)
typedef sinsp_ssl::ptr_t ssl_ptr_t;
typedef sinsp_bearer_token::ptr_t bt_ptr_t;
#endif // HAS_CAPTURE
typedef k8s_component::ext_list_ptr_t ext_list_ptr_t;
typedef user_event_filter_t::ptr_t filter_ptr_t;
k8s(const std::string& uri = "http://localhost:80",
bool is_captured = false,
#if defined(HAS_CAPTURE) && !defined(_WIN32)
ssl_ptr_t ssl = 0,
bt_ptr_t bt = 0,
bool block = false,
#endif // HAS_CAPTURE
filter_ptr_t event_filter = nullptr,
ext_list_ptr_t extensions = nullptr,
bool events_only = false
#ifdef HAS_CAPTURE
,const std::string& node_selector = ""
#endif // HAS_CAPTURE
);
~k8s();
std::size_t count(k8s_component::type component) const;
void check_components();
const k8s_state_t& get_state();
void clear_events();
void set_machine_id(const std::string& machine_id);
std::string get_machine_id() const;
void watch();
void stop_watching();
bool is_alive() const;
#if defined(HAS_CAPTURE) && !defined(_WIN32)
typedef k8s_state_t::event_list_t event_list_t;
const event_list_t& get_capture_events() const { return m_state.get_capture_events(); }
std::string dequeue_capture_event() { return m_state.dequeue_capture_event(); }
#endif // HAS_CAPTURE
// version:
// - 1 to support k8s events captured in old format (before refactoring)
// - 2 to support k8s events captured in new format (after refactoring)
void simulate_watch_event(const std::string& json, int version = 2);
private:
void stop_watch();
void cleanup();
k8s_state_t m_state;
filter_ptr_t m_event_filter;
typedef std::map<k8s_component::type, std::unique_ptr<k8s_dispatcher>> dispatch_map_t;
typedef std::map<k8s_component::type, std::shared_ptr<k8s_handler>> handler_map_t;
// dispatch map is deprecated and serves only for backward compatibility with captures with old versions
dispatch_map_t m_dispatch_map;
handler_map_t m_handler_map;
#if defined(HAS_CAPTURE) && !defined(_WIN32)
k8s_net* m_net = nullptr;
#endif
// a utility member containing pairs of enumerated values and component names
static k8s_component::type_map m_components;
friend class k8s_test;
};
inline bool k8s::is_alive() const
{
#if defined(HAS_CAPTURE) && !defined(_WIN32)
ASSERT(m_net);
return m_net->is_healthy();
#endif
return true;
}
inline void k8s::clear_events()
{
m_state.clear_events();
}
inline std::string k8s::get_machine_id() const
{
#if defined(HAS_CAPTURE) && !defined(_WIN32)
if(m_net)
{
return m_net->get_machine_id();
}
#endif // HAS_CAPTURE
return "";
}
inline void k8s::set_machine_id(const std::string& machine_id)
{
#if defined(HAS_CAPTURE) && !defined(_WIN32)
if(m_net)
{
m_net->set_machine_id(machine_id);
}
else
{
g_logger.log("K8s machine ID (MAC) setting attempted on null net object; "
"scope may not be available for events.",
sinsp_logger::SEV_WARNING);
}
#endif // HAS_CAPTURE
}
#endif // MINIMAL_BUILD
|
