open-consul/command/intention/check/check.go

93 lines
1.8 KiB
Go

package check
import (
"flag"
"fmt"
"io"
"github.com/hashicorp/consul/api"
"github.com/hashicorp/consul/command/flags"
"github.com/mitchellh/cli"
)
func New(ui cli.Ui) *cmd {
c := &cmd{UI: ui}
c.init()
return c
}
type cmd struct {
UI cli.Ui
flags *flag.FlagSet
http *flags.HTTPFlags
help string
// testStdin is the input for testing.
testStdin io.Reader
}
func (c *cmd) init() {
c.flags = flag.NewFlagSet("", flag.ContinueOnError)
c.http = &flags.HTTPFlags{}
flags.Merge(c.flags, c.http.ClientFlags())
flags.Merge(c.flags, c.http.ServerFlags())
c.help = flags.Usage(help, c.flags)
}
func (c *cmd) Run(args []string) int {
if err := c.flags.Parse(args); err != nil {
return 2
}
args = c.flags.Args()
if len(args) != 2 {
c.UI.Error(fmt.Sprintf("Error: command requires exactly two arguments: src and dst"))
return 2
}
// Create and test the HTTP client
client, err := c.http.APIClient()
if err != nil {
c.UI.Error(fmt.Sprintf("Error connecting to Consul agent: %s", err))
return 2
}
// Check the intention
allowed, _, err := client.Connect().IntentionCheck(&api.IntentionCheck{
Source: args[0],
Destination: args[1],
SourceType: api.IntentionSourceConsul,
}, nil)
if err != nil {
c.UI.Error(fmt.Sprintf("Error checking the connection: %s", err))
return 2
}
if allowed {
c.UI.Output("Allowed")
return 0
}
c.UI.Output("Denied")
return 1
}
func (c *cmd) Synopsis() string {
return synopsis
}
func (c *cmd) Help() string {
return c.help
}
const synopsis = "Check whether a connection between two services is allowed."
const help = `
Usage: consul intention check [options] SRC DST
Check whether a connection between SRC and DST would be allowed by
Connect given the current Consul configuration.
$ consul intention check web db
`