mirror of
https://github.com/outbackdingo/matchbox.git
synced 2026-01-27 18:19:36 +00:00
5575590393
* Simplify common http request handling chains * Separate github.com/dghubble/ctxh source so we can move it to a separate CoreOS package or vendor upstream * Remove unused requireGET
105 lines
3.8 KiB
Go
105 lines
3.8 KiB
Go
package http
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"github.com/Sirupsen/logrus"
|
|
|
|
"github.com/coreos/coreos-baremetal/bootcfg/server"
|
|
"github.com/coreos/coreos-baremetal/bootcfg/sign"
|
|
)
|
|
|
|
// Config configures a Server.
|
|
type Config struct {
|
|
Core server.Server
|
|
Logger *logrus.Logger
|
|
// Path to static assets
|
|
AssetsPath string
|
|
// config signers (.sig and .asc)
|
|
Signer sign.Signer
|
|
ArmoredSigner sign.Signer
|
|
}
|
|
|
|
// Server serves boot and provisioning configs to machines via HTTP.
|
|
type Server struct {
|
|
core server.Server
|
|
logger *logrus.Logger
|
|
assetsPath string
|
|
signer sign.Signer
|
|
armoredSigner sign.Signer
|
|
}
|
|
|
|
// NewServer returns a new Server.
|
|
func NewServer(config *Config) *Server {
|
|
return &Server{
|
|
core: config.Core,
|
|
logger: config.Logger,
|
|
assetsPath: config.AssetsPath,
|
|
signer: config.Signer,
|
|
armoredSigner: config.ArmoredSigner,
|
|
}
|
|
}
|
|
|
|
// HTTPHandler returns a HTTP handler for the server.
|
|
func (s *Server) HTTPHandler() http.Handler {
|
|
mux := http.NewServeMux()
|
|
|
|
chain := func(next ContextHandler) http.Handler {
|
|
return s.logRequest(NewHandler(next))
|
|
}
|
|
// bootcfg version
|
|
mux.Handle("/", s.logRequest(homeHandler()))
|
|
// Boot via GRUB
|
|
mux.Handle("/grub", chain(s.selectProfile(s.core, s.grubHandler())))
|
|
// Boot via iPXE
|
|
mux.Handle("/boot.ipxe", chain(ipxeInspect()))
|
|
mux.Handle("/boot.ipxe.0", chain(ipxeInspect()))
|
|
mux.Handle("/ipxe", chain(s.selectProfile(s.core, s.ipxeHandler())))
|
|
// Boot via Pixiecore
|
|
mux.Handle("/pixiecore/v1/boot/", chain(s.pixiecoreHandler(s.core)))
|
|
// Ignition Config
|
|
mux.Handle("/ignition", chain(s.selectGroup(s.core, s.ignitionHandler(s.core))))
|
|
// Cloud-Config
|
|
mux.Handle("/cloud", chain(s.selectGroup(s.core, s.cloudHandler(s.core))))
|
|
// Generic template
|
|
mux.Handle("/generic", chain(s.selectGroup(s.core, s.genericHandler(s.core))))
|
|
// Metadata
|
|
mux.Handle("/metadata", chain(s.selectGroup(s.core, s.metadataHandler())))
|
|
|
|
// Signatures
|
|
if s.signer != nil {
|
|
signerChain := func(next ContextHandler) http.Handler {
|
|
return s.logRequest(sign.SignatureHandler(s.signer, NewHandler(next)))
|
|
}
|
|
mux.Handle("/grub.sig", signerChain(s.selectProfile(s.core, s.grubHandler())))
|
|
mux.Handle("/boot.ipxe.sig", signerChain(ipxeInspect()))
|
|
mux.Handle("/boot.ipxe.0.sig", signerChain(ipxeInspect()))
|
|
mux.Handle("/ipxe.sig", signerChain(s.selectProfile(s.core, s.ipxeHandler())))
|
|
mux.Handle("/pixiecore/v1/boot.sig/", signerChain(s.pixiecoreHandler(s.core)))
|
|
mux.Handle("/ignition.sig", signerChain(s.selectGroup(s.core, s.ignitionHandler(s.core))))
|
|
mux.Handle("/cloud.sig", signerChain(s.selectGroup(s.core, s.cloudHandler(s.core))))
|
|
mux.Handle("/generic.sig", signerChain(s.selectGroup(s.core, s.genericHandler(s.core))))
|
|
mux.Handle("/metadata.sig", signerChain(s.selectGroup(s.core, s.metadataHandler())))
|
|
}
|
|
if s.armoredSigner != nil {
|
|
signerChain := func(next ContextHandler) http.Handler {
|
|
return s.logRequest(sign.SignatureHandler(s.armoredSigner, NewHandler(next)))
|
|
}
|
|
mux.Handle("/grub.asc", signerChain(s.selectProfile(s.core, s.grubHandler())))
|
|
mux.Handle("/boot.ipxe.asc", signerChain(ipxeInspect()))
|
|
mux.Handle("/boot.ipxe.0.asc", signerChain(ipxeInspect()))
|
|
mux.Handle("/ipxe.asc", signerChain(s.selectProfile(s.core, s.ipxeHandler())))
|
|
mux.Handle("/pixiecore/v1/boot.asc/", signerChain(s.pixiecoreHandler(s.core)))
|
|
mux.Handle("/ignition.asc", signerChain(s.selectGroup(s.core, s.ignitionHandler(s.core))))
|
|
mux.Handle("/cloud.asc", signerChain(s.selectGroup(s.core, s.cloudHandler(s.core))))
|
|
mux.Handle("/generic.asc", signerChain(s.selectGroup(s.core, s.genericHandler(s.core))))
|
|
mux.Handle("/metadata.asc", signerChain(s.selectGroup(s.core, s.metadataHandler())))
|
|
}
|
|
|
|
// kernel, initrd, and TLS assets
|
|
if s.assetsPath != "" {
|
|
mux.Handle("/assets/", s.logRequest(http.StripPrefix("/assets/", http.FileServer(http.Dir(s.assetsPath)))))
|
|
}
|
|
return mux
|
|
}
|