extern/zrok
1
1
Fork 0
mirror of https://github.com/openziti/zrok.git synced 2025-02-22 21:21:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

better logging to allow correlation with underlying ziti and operational management (#90)

Browse Source
This commit is contained in:
Michael Quigley 2022-11-08 15:25:27 -05:00
parent c7dc3d5d71
commit bfdb3a1bd3
No known key found for this signature in database
GPG Key ID: 9B60314A9DD20A62
2 changed files with 28 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
controller/tunnel.go
View File

@ -28,8 +28,6 @@ func newTunnelHandler() *tunnelHandler {
} }
func (self *tunnelHandler) Handle(params tunnel.TunnelParams, principal *rest_model_zrok.Principal) middleware.Responder { func (self *tunnelHandler) Handle(params tunnel.TunnelParams, principal *rest_model_zrok.Principal) middleware.Responder {
logrus.Infof("tunneling for '%v' (%v)", principal.Email, principal.Token)
tx, err := str.Begin() tx, err := str.Begin()
if err != nil { if err != nil {
logrus.Errorf("error starting transaction: %v", err) logrus.Errorf("error starting transaction: %v", err)
@ -37,20 +35,20 @@ func (self *tunnelHandler) Handle(params tunnel.TunnelParams, principal *rest_mo
} }
defer func() { _ = tx.Rollback() }() defer func() { _ = tx.Rollback() }()
envId := params.Body.ZID envZId := params.Body.ZID
envIdDb := 0 envId := 0
if envs, err := str.FindEnvironmentsForAccount(int(principal.ID), tx); err == nil { if envs, err := str.FindEnvironmentsForAccount(int(principal.ID), tx); err == nil {
found := false found := false
for _, env := range envs { for _, env := range envs {
if env.ZId == envId { if env.ZId == envZId {
logrus.Infof("found identity '%v' for user '%v'", envId, principal.Email) logrus.Debugf("found identity '%v' for user '%v'", envZId, principal.Email)
envIdDb = env.Id envId = env.Id
found = true found = true
break break
} }
} }
if !found { if !found {
logrus.Errorf("environment '%v' not found for user '%v'", envId, principal.Email) logrus.Errorf("environment '%v' not found for user '%v'", envZId, principal.Email)
return tunnel.NewTunnelUnauthorized().WithPayload("bad environment identity") return tunnel.NewTunnelUnauthorized().WithPayload("bad environment identity")
} }
} else { } else {
@ -68,33 +66,33 @@ func (self *tunnelHandler) Handle(params tunnel.TunnelParams, principal *rest_mo
logrus.Error(err) logrus.Error(err)
return tunnel.NewTunnelInternalServerError() return tunnel.NewTunnelInternalServerError()
} }
cfgId, err := self.createConfig(svcName, params, edge) cfgId, err := self.createConfig(envZId, svcName, params, edge)
if err != nil { if err != nil {
logrus.Error(err) logrus.Error(err)
return tunnel.NewTunnelInternalServerError() return tunnel.NewTunnelInternalServerError()
} }
svcZId, err := self.createService(svcName, cfgId, edge) svcZId, err := self.createService(envZId, svcName, cfgId, edge)
if err != nil { if err != nil {
logrus.Error(err) logrus.Error(err)
return tunnel.NewTunnelInternalServerError() return tunnel.NewTunnelInternalServerError()
} }
if err := self.createServicePolicyBind(svcName, svcZId, envId, edge); err != nil { if err := self.createServicePolicyBind(envZId, svcName, svcZId, envZId, edge); err != nil {
logrus.Error(err) logrus.Error(err)
return tunnel.NewTunnelInternalServerError() return tunnel.NewTunnelInternalServerError()
} }
if err := self.createServicePolicyDial(svcName, svcZId, edge); err != nil { if err := self.createServicePolicyDial(envZId, svcName, svcZId, edge); err != nil {
logrus.Error(err) logrus.Error(err)
return tunnel.NewTunnelInternalServerError() return tunnel.NewTunnelInternalServerError()
} }
if err := self.createServiceEdgeRouterPolicy(svcName, svcZId, edge); err != nil { if err := self.createServiceEdgeRouterPolicy(envZId, svcName, svcZId, edge); err != nil {
logrus.Error(err) logrus.Error(err)
return tunnel.NewTunnelInternalServerError() return tunnel.NewTunnelInternalServerError()
} }
logrus.Infof("allocated service '%v'", svcName) logrus.Debugf("allocated service '%v'", svcName)
frontendUrl := self.proxyUrl(svcName) frontendUrl := self.proxyUrl(svcName)
sid, err := str.CreateService(envIdDb, &store.Service{ sid, err := str.CreateService(envId, &store.Service{
ZId: svcZId, ZId: svcZId,
Name: svcName, Name: svcName,
Frontend: frontendUrl, Frontend: frontendUrl,
@ -109,7 +107,7 @@ func (self *tunnelHandler) Handle(params tunnel.TunnelParams, principal *rest_mo
logrus.Errorf("error committing service record: %v", err) logrus.Errorf("error committing service record: %v", err)
return tunnel.NewTunnelInternalServerError() return tunnel.NewTunnelInternalServerError()
} }
logrus.Infof("recorded service '%v' with id '%v' for '%v'", svcZId, sid, principal.Email) logrus.Infof("recorded service '%v' with id '%v' for '%v'", svcName, sid, principal.Email)
return tunnel.NewTunnelCreated().WithPayload(&rest_model_zrok.TunnelResponse{ return tunnel.NewTunnelCreated().WithPayload(&rest_model_zrok.TunnelResponse{
ProxyEndpoint: frontendUrl, ProxyEndpoint: frontendUrl,
@ -117,7 +115,7 @@ func (self *tunnelHandler) Handle(params tunnel.TunnelParams, principal *rest_mo
}) })
} }
func (self *tunnelHandler) createConfig(svcName string, params tunnel.TunnelParams, edge *rest_management_api_client.ZitiEdgeManagement) (cfgID string, err error) { func (self *tunnelHandler) createConfig(envZId, svcName string, params tunnel.TunnelParams, edge *rest_management_api_client.ZitiEdgeManagement) (cfgID string, err error) {
authScheme, err := model.ParseAuthScheme(params.Body.AuthScheme) authScheme, err := model.ParseAuthScheme(params.Body.AuthScheme)
if err != nil { if err != nil {
return "", err return "", err
@ -146,11 +144,11 @@ func (self *tunnelHandler) createConfig(svcName string, params tunnel.TunnelPara
if err != nil { if err != nil {
return "", err return "", err
} }
logrus.Infof("created config '%v'", cfgResp.Payload.Data.ID) logrus.Infof("created config '%v' for environment '%v'", cfgResp.Payload.Data.ID, envZId)
return cfgResp.Payload.Data.ID, nil return cfgResp.Payload.Data.ID, nil
} }
func (self *tunnelHandler) createService(svcName, cfgId string, edge *rest_management_api_client.ZitiEdgeManagement) (serviceId string, err error) { func (self *tunnelHandler) createService(envZId, svcName, cfgId string, edge *rest_management_api_client.ZitiEdgeManagement) (serviceId string, err error) {
configs := []string{cfgId} configs := []string{cfgId}
encryptionRequired := true encryptionRequired := true
svc := &rest_model.ServiceCreate{ svc := &rest_model.ServiceCreate{
@ -168,16 +166,16 @@ func (self *tunnelHandler) createService(svcName, cfgId string, edge *rest_manag
if err != nil { if err != nil {
return "", err return "", err
} }
logrus.Infof("created service '%v'", resp.Payload.Data.ID) logrus.Infof("created zrok service named '%v' (with ziti id '%v') for environment '%v'", svcName, resp.Payload.Data.ID, envZId)
return resp.Payload.Data.ID, nil return resp.Payload.Data.ID, nil
} }
func (self *tunnelHandler) createServicePolicyBind(svcName, svcId, envId string, edge *rest_management_api_client.ZitiEdgeManagement) error { func (self *tunnelHandler) createServicePolicyBind(envZId, svcName, svcZId, envId string, edge *rest_management_api_client.ZitiEdgeManagement) error {
semantic := rest_model.SemanticAllOf semantic := rest_model.SemanticAllOf
identityRoles := []string{fmt.Sprintf("@%v", envId)} identityRoles := []string{fmt.Sprintf("@%v", envId)}
name := fmt.Sprintf("%v-backend", svcName) name := fmt.Sprintf("%v-backend", svcName)
postureCheckRoles := []string{} postureCheckRoles := []string{}
serviceRoles := []string{fmt.Sprintf("@%v", svcId)} serviceRoles := []string{fmt.Sprintf("@%v", svcZId)}
dialBind := rest_model.DialBindBind dialBind := rest_model.DialBindBind
svcp := &rest_model.ServicePolicyCreate{ svcp := &rest_model.ServicePolicyCreate{
IdentityRoles: identityRoles, IdentityRoles: identityRoles,
@ -197,11 +195,11 @@ func (self *tunnelHandler) createServicePolicyBind(svcName, svcId, envId string,
if err != nil { if err != nil {
return err return err
} }
logrus.Infof("created service policy '%v'", resp.Payload.Data.ID) logrus.Infof("created bind service policy '%v' for service '%v' for environment '%v'", resp.Payload.Data.ID, svcZId, envZId)
return nil return nil
} }
func (self *tunnelHandler) createServicePolicyDial(svcName, svcId string, edge *rest_management_api_client.ZitiEdgeManagement) error { func (self *tunnelHandler) createServicePolicyDial(envZId, svcName, svcZId string, edge *rest_management_api_client.ZitiEdgeManagement) error {
var identityRoles []string var identityRoles []string
for _, proxyIdentity := range cfg.Proxy.Identities { for _, proxyIdentity := range cfg.Proxy.Identities {
identityRoles = append(identityRoles, "@"+proxyIdentity) identityRoles = append(identityRoles, "@"+proxyIdentity)
@ -210,7 +208,7 @@ func (self *tunnelHandler) createServicePolicyDial(svcName, svcId string, edge *
name := fmt.Sprintf("%v-dial", svcName) name := fmt.Sprintf("%v-dial", svcName)
postureCheckRoles := []string{} postureCheckRoles := []string{}
semantic := rest_model.SemanticAllOf semantic := rest_model.SemanticAllOf
serviceRoles := []string{fmt.Sprintf("@%v", svcId)} serviceRoles := []string{fmt.Sprintf("@%v", svcZId)}
dialBind := rest_model.DialBindDial dialBind := rest_model.DialBindDial
svcp := &rest_model.ServicePolicyCreate{ svcp := &rest_model.ServicePolicyCreate{
IdentityRoles: identityRoles, IdentityRoles: identityRoles,
@ -230,14 +228,14 @@ func (self *tunnelHandler) createServicePolicyDial(svcName, svcId string, edge *
if err != nil { if err != nil {
return err return err
} }
logrus.Infof("created service policy '%v'", resp.Payload.Data.ID) logrus.Infof("created dial service policy '%v' for service '%v' for environment '%v'", resp.Payload.Data.ID, svcZId, envZId)
return nil return nil
} }
func (self *tunnelHandler) createServiceEdgeRouterPolicy(svcName, svcId string, edge *rest_management_api_client.ZitiEdgeManagement) error { func (self *tunnelHandler) createServiceEdgeRouterPolicy(envZId, svcName, svcZId string, edge *rest_management_api_client.ZitiEdgeManagement) error {
edgeRouterRoles := []string{"#all"} edgeRouterRoles := []string{"#all"}
semantic := rest_model.SemanticAllOf semantic := rest_model.SemanticAllOf
serviceRoles := []string{fmt.Sprintf("@%v", svcId)} serviceRoles := []string{fmt.Sprintf("@%v", svcZId)}
serp := &rest_model.ServiceEdgeRouterPolicyCreate{ serp := &rest_model.ServiceEdgeRouterPolicyCreate{
EdgeRouterRoles: edgeRouterRoles, EdgeRouterRoles: edgeRouterRoles,
Name: &svcName, Name: &svcName,
@ -254,7 +252,7 @@ func (self *tunnelHandler) createServiceEdgeRouterPolicy(svcName, svcId string,
if err != nil { if err != nil {
return err return err
} }
logrus.Infof("created service edge router policy '%v'", resp.Payload.Data.ID) logrus.Infof("created service edge router policy '%v' for service '%v' for environment '%v'", resp.Payload.Data.ID, svcZId, envZId)
return nil return nil
} }

4
controller/untunnel.go
View File

@ -22,8 +22,6 @@ func newUntunnelHandler() *untunnelHandler {
} }
func (self *untunnelHandler) Handle(params tunnel.UntunnelParams, principal *rest_model_zrok.Principal) middleware.Responder { func (self *untunnelHandler) Handle(params tunnel.UntunnelParams, principal *rest_model_zrok.Principal) middleware.Responder {
logrus.Infof("untunneling for '%v' (%v)", principal.Email, principal.Token)
tx, err := str.Begin() tx, err := str.Begin()
if err != nil { if err != nil {
logrus.Errorf("error starting transaction: %v", err) logrus.Errorf("error starting transaction: %v", err)
@ -99,7 +97,7 @@ func (self *untunnelHandler) Handle(params tunnel.UntunnelParams, principal *res
return tunnel.NewUntunnelInternalServerError() return tunnel.NewUntunnelInternalServerError()
} }
logrus.Infof("deallocated service '%v'", svcName) logrus.Debugf("deallocated service '%v'", svcName)
if err := str.DeleteService(ssvc.Id, tx); err != nil { if err := str.DeleteService(ssvc.Id, tx); err != nil {
logrus.Errorf("error deactivating service '%v': %v", svcZId, err) logrus.Errorf("error deactivating service '%v': %v", svcZId, err)