129 lines
3.2 KiB
Lua
129 lines
3.2 KiB
Lua
local json = require("cjson")
|
|
|
|
-- this is the Lua representation of Configuration struct in internal/ingress/types.go
|
|
local configuration_data = ngx.shared.configuration_data
|
|
local certificate_data = ngx.shared.certificate_data
|
|
|
|
local _M = {
|
|
nameservers = {}
|
|
}
|
|
|
|
function _M.get_backends_data()
|
|
return configuration_data:get("backends")
|
|
end
|
|
|
|
local function fetch_request_body()
|
|
ngx.req.read_body()
|
|
local body = ngx.req.get_body_data()
|
|
|
|
if not body then
|
|
-- request body might've been written to tmp file if body > client_body_buffer_size
|
|
local file_name = ngx.req.get_body_file()
|
|
local file = io.open(file_name, "rb")
|
|
|
|
if not file then
|
|
return nil
|
|
end
|
|
|
|
body = file:read("*all")
|
|
file:close()
|
|
end
|
|
|
|
return body
|
|
end
|
|
|
|
function _M.get_pem_cert_key(hostname)
|
|
return certificate_data:get(hostname)
|
|
end
|
|
|
|
local function handle_servers()
|
|
if ngx.var.request_method ~= "POST" then
|
|
ngx.status = ngx.HTTP_BAD_REQUEST
|
|
ngx.print("Only POST requests are allowed!")
|
|
return
|
|
end
|
|
|
|
local raw_servers = fetch_request_body()
|
|
|
|
local ok, servers = pcall(json.decode, raw_servers)
|
|
if not ok then
|
|
ngx.log(ngx.ERR, "could not parse servers: " .. tostring(servers))
|
|
ngx.status = ngx.HTTP_BAD_REQUEST
|
|
return
|
|
end
|
|
|
|
local err_buf = {}
|
|
for _, server in ipairs(servers) do
|
|
if server.hostname and server.sslCert.pemCertKey then
|
|
local success, err = certificate_data:safe_set(server.hostname, server.sslCert.pemCertKey)
|
|
if not success then
|
|
if err == "no memory" then
|
|
ngx.status = ngx.HTTP_INTERNAL_SERVER_ERROR
|
|
ngx.log(ngx.ERR, "no memory in certificate_data dictionary")
|
|
return
|
|
end
|
|
|
|
local err_msg = string.format("error setting certificate for %s: %s\n",
|
|
server.hostname, tostring(err))
|
|
table.insert(err_buf, err_msg)
|
|
end
|
|
else
|
|
ngx.log(ngx.WARN, "hostname or pemCertKey are not present")
|
|
end
|
|
end
|
|
|
|
if #err_buf > 0 then
|
|
ngx.log(ngx.ERR, table.concat(err_buf))
|
|
ngx.status = ngx.HTTP_INTERNAL_SERVER_ERROR
|
|
return
|
|
end
|
|
|
|
ngx.status = ngx.HTTP_CREATED
|
|
end
|
|
|
|
function _M.call()
|
|
if ngx.var.request_method ~= "POST" and ngx.var.request_method ~= "GET" then
|
|
ngx.status = ngx.HTTP_BAD_REQUEST
|
|
ngx.print("Only POST and GET requests are allowed!")
|
|
return
|
|
end
|
|
|
|
if ngx.var.request_uri == "/configuration/servers" then
|
|
handle_servers()
|
|
return
|
|
end
|
|
|
|
if ngx.var.request_uri ~= "/configuration/backends" then
|
|
ngx.status = ngx.HTTP_NOT_FOUND
|
|
ngx.print("Not found!")
|
|
return
|
|
end
|
|
|
|
if ngx.var.request_method == "GET" then
|
|
ngx.status = ngx.HTTP_OK
|
|
ngx.print(_M.get_backends_data())
|
|
return
|
|
end
|
|
|
|
local backends = fetch_request_body()
|
|
if not backends then
|
|
ngx.log(ngx.ERR, "dynamic-configuration: unable to read valid request body")
|
|
ngx.status = ngx.HTTP_BAD_REQUEST
|
|
return
|
|
end
|
|
|
|
local success, err = configuration_data:set("backends", backends)
|
|
if not success then
|
|
ngx.log(ngx.ERR, "dynamic-configuration: error updating configuration: " .. tostring(err))
|
|
ngx.status = ngx.HTTP_BAD_REQUEST
|
|
return
|
|
end
|
|
|
|
ngx.status = ngx.HTTP_CREATED
|
|
end
|
|
|
|
if _TEST then
|
|
_M.handle_servers = handle_servers
|
|
end
|
|
|
|
return _M
|