8b05efcf88
This PR implements Nomad built-in support for running Consul Connect terminating gateways. Such a gateway can be used by services running inside the service mesh to access "legacy" services running outside the service mesh while still making use of Consul's service identity based networking and ACL policies. https://www.consul.io/docs/connect/gateways/terminating-gateway These gateways are declared as part of a task group level service definition within the connect stanza. service { connect { gateway { proxy { // envoy proxy configuration } terminating { // terminating-gateway configuration entry } } } } Currently Envoy is the only supported gateway implementation in Consul. The gateay task can be customized by configuring the connect.sidecar_task block. When the gateway.terminating field is set, Nomad will write/update the Configuration Entry into Consul on job submission. Because CEs are global in scope and there may be more than one Nomad cluster communicating with Consul, there is an assumption that any terminating gateway defined in Nomad for a particular service will be the same among Nomad clusters. Gateways require Consul 1.8.0+, checked by a node constraint. Closes #9445
34 lines
953 B
Go
34 lines
953 B
Go
package structs
|
|
|
|
// ConsulConfigEntries represents Consul ConfigEntry definitions from a job.
|
|
type ConsulConfigEntries struct {
|
|
Ingress map[string]*ConsulIngressConfigEntry
|
|
Terminating map[string]*ConsulTerminatingConfigEntry
|
|
// Mesh later
|
|
}
|
|
|
|
// ConfigEntries accumulates the Consul Configuration Entries defined in task groups
|
|
// of j.
|
|
func (j *Job) ConfigEntries() *ConsulConfigEntries {
|
|
entries := &ConsulConfigEntries{
|
|
Ingress: make(map[string]*ConsulIngressConfigEntry),
|
|
Terminating: make(map[string]*ConsulTerminatingConfigEntry),
|
|
// Mesh later
|
|
}
|
|
|
|
for _, tg := range j.TaskGroups {
|
|
for _, service := range tg.Services {
|
|
if service.Connect.IsGateway() {
|
|
gateway := service.Connect.Gateway
|
|
if ig := gateway.Ingress; ig != nil {
|
|
entries.Ingress[service.Name] = ig
|
|
} else if tg := gateway.Terminating; tg != nil {
|
|
entries.Terminating[service.Name] = tg
|
|
} // mesh later
|
|
}
|
|
}
|
|
}
|
|
|
|
return entries
|
|
}
|