mirror of
https://github.com/pomerium/pomerium.git
synced 2025-04-29 10:26:29 +02:00
de603f87de
* Add new configurable bootstrap writers (#2405) This PR adds the ability to configure different backends to use for storing modifications to the zero bootstrap config. The two currently implemented backends allow writing changes to a file or to a Kubernetes secret. Backend selection is determined by the scheme in a URI passed to the flag '--config-writeback-uri'. In a Kubernetes environment, where the bootstrap config is mounted into the pod from a secret, this option allows Pomerium to write changes back to the secret, as writes to the mounted secret file on disk are not persisted. * Use env vars for bootstrap config filepath/writeback uri * linter pass and code cleanup * Add new config writer options mechanism This moves the encryption cipher parameter out of the WriteConfig() method in the ConfigWriter interface and into a new ConfigWriterOptions struct. Options (e.g. cipher) can be applied to an existing ConfigWriter to allow customizing implementation-specific behavior. * Code cleanup/lint fixes * Move vendored k8s code into separate package, and add license header and package comment
61 lines
1.6 KiB
Go
61 lines
1.6 KiB
Go
// Package main contains pomerium
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"flag"
|
|
"fmt"
|
|
|
|
"github.com/rs/zerolog"
|
|
|
|
"github.com/pomerium/pomerium/config"
|
|
"github.com/pomerium/pomerium/internal/log"
|
|
"github.com/pomerium/pomerium/internal/version"
|
|
_ "github.com/pomerium/pomerium/internal/zero/bootstrap/writers/filesystem"
|
|
_ "github.com/pomerium/pomerium/internal/zero/bootstrap/writers/k8s"
|
|
zero_cmd "github.com/pomerium/pomerium/internal/zero/cmd"
|
|
"github.com/pomerium/pomerium/pkg/cmd/pomerium"
|
|
"github.com/pomerium/pomerium/pkg/envoy/files"
|
|
)
|
|
|
|
var (
|
|
versionFlag = flag.Bool("version", false, "prints the version")
|
|
configFile = flag.String("config", "", "Specify configuration file location")
|
|
)
|
|
|
|
func main() {
|
|
flag.Parse()
|
|
if *versionFlag {
|
|
fmt.Println("pomerium:", version.FullVersion())
|
|
fmt.Println("envoy:", files.FullVersion())
|
|
return
|
|
}
|
|
|
|
ctx := context.Background()
|
|
log.SetLevel(zerolog.InfoLevel)
|
|
runFn := run
|
|
if zero_cmd.IsManagedMode(*configFile) {
|
|
runFn = func(ctx context.Context) error { return zero_cmd.Run(ctx, *configFile) }
|
|
}
|
|
|
|
if err := runFn(ctx); err != nil && !errors.Is(err, context.Canceled) {
|
|
log.Fatal().Err(err).Msg("cmd/pomerium")
|
|
}
|
|
log.Info(ctx).Msg("cmd/pomerium: exiting")
|
|
}
|
|
|
|
func run(ctx context.Context) error {
|
|
ctx = log.WithContext(ctx, func(c zerolog.Context) zerolog.Context {
|
|
return c.Str("config_file_source", *configFile).Bool("bootstrap", true)
|
|
})
|
|
|
|
var src config.Source
|
|
|
|
src, err := config.NewFileOrEnvironmentSource(*configFile, files.FullVersion())
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return pomerium.Run(ctx, src)
|
|
}
|