Skip to content
This repository was archived by the owner on Jan 10, 2023. It is now read-only.

tls_support #24

Open
wants to merge 8 commits into
base: master
Choose a base branch
from
Open

tls_support #24

Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
e5a65b6
tls_support
Liron42 Nov 29, 2018
04cd496
delete idea folder
Liron42 Dec 3, 2018
2b0db0b
refactor to keep original flags
Liron42 Dec 4, 2018
da074dd
deleted binaries
Liron42 Dec 4, 2018
cd5e5f0
no idea files
Liron42 Dec 4, 2018
cc2c07c
no idea files
Liron42 Dec 4, 2018
dedb404
go fmt, tls disabled by default, added an if to the connection itself
Liron42 Dec 4, 2018
972149f
no idea files
Liron42 Dec 4, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
83 changes: 72 additions & 11 deletions main.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,17 +12,19 @@
package main

import (
"crypto/tls"
"flag"
"fmt"
"log"
"net/http"
"os"
"time"

as "github.com/aerospike/aerospike-client-go"
"github.com/aerospike/aerospike-client-go/pkg/bcrypt"
"github.com/prometheus/client_golang/prometheus"
"github.com/prometheus/client_golang/prometheus/promhttp"
"log"
"net"
"net/http"
"os"
"strconv"
"time"
)

const (
Expand All @@ -39,8 +41,13 @@ var (
showVersion = flag.Bool("version", false, "show version")
addr = flag.String("listen", ":9145", "listen address for prometheus")
nodeAddr = flag.String("node", "127.0.0.1:3000", "aerospike node")
tlsName = flag.String("tlsName", "", "tlsName")
tlsKey = flag.String("tlsKey", "", "certificate - key")
tlsCert = flag.String("tlsCert", "", "certificate - cert")
enableTLS = flag.Bool("enableTLS", false, "enable or disable tls")
username = flag.String("username", "", "username. Leave empty for no authentication. ENV variable AS_USERNAME, if set, will override this.")
password = flag.String("password", "", "password. ENV variable AS_PASSWORD, if set, will override this.")
//authMode = flag.String("A", "internal", "Authentication mode: internal | external")

landingPage = `<html>
<head><title>Aerospike exporter</title></head>
Expand All @@ -58,6 +65,30 @@ var (
)
)

func configureClientPolicy(clientPolicy *as.ClientPolicy, username string, password string, certificate string, key string) {

if username != "" {
clientPolicy.User = username
clientPolicy.Password = password
}
/*
if *authMode == "external" {
clientPolicy.AuthMode = as.AuthModeExternal

}
*/
cert, err := tls.LoadX509KeyPair(certificate, key)
if err != nil {
log.Fatal("cert error")
}

config := tls.Config{
Certificates: []tls.Certificate{cert}, InsecureSkipVerify: true}

clientPolicy.TlsConfig = &config

}

func main() {
flag.Parse()
if len(flag.Args()) != 0 {
Expand All @@ -78,8 +109,22 @@ func main() {
fmt.Printf("asprom %s\n", version)
os.Exit(0)
}
var port string
_, port, _ = net.SplitHostPort(*nodeAddr)
var col *asCollector
clientPolicy := as.NewClientPolicy()

if *enableTLS == true {
if *tlsName == "" || *tlsCert == "" || *tlsKey == "" {
log.Fatal("You are missing either tlsName, certificate or key for secure connection")
}
configureClientPolicy(clientPolicy, *username, *password, *tlsCert, *tlsKey)
col = newAsCollector(*nodeAddr, *clientPolicy, port, clientPolicy.User, clientPolicy.Password)

col := newAsCollector(*nodeAddr, *username, *password)
} else {
//port = 3000 //set default port
col = newAsCollector(*nodeAddr, *clientPolicy, port, *username, *password)
}

req := prometheus.NewRegistry()
req.MustRegister(col)
Expand All @@ -99,13 +144,15 @@ type collector interface {

type asCollector struct {
nodeAddr string
port string
username string
password string
clientPolicy *as.ClientPolicy
totalScrapes prometheus.Counter
collectors []collector
}

func newAsCollector(nodeAddr, username, password string) *asCollector {
func newAsCollector(nodeAddr string, clientPolicy as.ClientPolicy, port string, username string, password string) *asCollector {
totalScrapes := prometheus.NewCounter(prometheus.CounterOpts{
Namespace: namespace,
Subsystem: systemNode,
Expand All @@ -115,9 +162,11 @@ func newAsCollector(nodeAddr, username, password string) *asCollector {

return &asCollector{
nodeAddr: nodeAddr,
port: port,
username: username,
password: password,
totalScrapes: totalScrapes,
clientPolicy: &clientPolicy,
collectors: []collector{
newStatsCollector(),
newNSCollector(),
Expand Down Expand Up @@ -154,18 +203,30 @@ func (asc *asCollector) Collect(ch chan<- prometheus.Metric) {
}

func (asc *asCollector) collect() ([]prometheus.Metric, error) {
conn, err := as.NewConnection(asc.nodeAddr, 3*time.Second)
//clientPolicy = as.NewClientPolicy()
portAsInt, _ := strconv.Atoi(asc.port)
host := as.NewHost(asc.nodeAddr, portAsInt)
host.TLSName = *tlsName
var conn *as.Connection
var err error

if *enableTLS == true {
conn, err = as.NewSecureConnection(asc.clientPolicy, host) //, 3*time.Second)
} else {
conn, err = as.NewConnection(asc.nodeAddr, 3*time.Second)
}

if err != nil {
return nil, err
}
defer conn.Close()

if asc.username != "" {
hp, err := hashPassword(asc.password)
if asc.clientPolicy.User != "" {
hp, err := hashPassword(asc.clientPolicy.Password)
if err != nil {
return nil, fmt.Errorf("hashPassword: %s", err)
}
if err := conn.Authenticate(asc.username, hp); err != nil {
if err := conn.Authenticate(asc.clientPolicy.User, hp); err != nil {
return nil, fmt.Errorf("auth error: %s", err)
}
}
Expand Down