// TestNew verifies that the New function returns a GenericAPIServer // using the configuration properly. func TestNew(t *testing.T) { s, etcdserver, config, assert := newMaster(t) defer etcdserver.Terminate(t) // Verify many of the variables match their config counterparts assert.Equal(s.enableLogsSupport, config.EnableLogsSupport) assert.Equal(s.enableUISupport, config.EnableUISupport) assert.Equal(s.enableSwaggerSupport, config.EnableSwaggerSupport) assert.Equal(s.enableSwaggerUI, config.EnableSwaggerUI) assert.Equal(s.enableProfiling, config.EnableProfiling) assert.Equal(s.APIPrefix, config.APIPrefix) assert.Equal(s.APIGroupPrefix, config.APIGroupPrefix) assert.Equal(s.corsAllowedOriginList, config.CorsAllowedOriginList) assert.Equal(s.authenticator, config.Authenticator) assert.Equal(s.authorizer, config.Authorizer) assert.Equal(s.AdmissionControl, config.AdmissionControl) assert.Equal(s.RequestContextMapper, config.RequestContextMapper) assert.Equal(s.cacheTimeout, config.CacheTimeout) assert.Equal(s.ExternalAddress, config.ExternalHost) assert.Equal(s.ClusterIP, config.PublicAddress) assert.Equal(s.PublicReadWritePort, config.ReadWritePort) assert.Equal(s.ServiceReadWriteIP, config.ServiceReadWriteIP) // These functions should point to the same memory location serverDialer, _ := utilnet.Dialer(s.ProxyTransport) serverDialerFunc := fmt.Sprintf("%p", serverDialer) configDialerFunc := fmt.Sprintf("%p", config.ProxyDialer) assert.Equal(serverDialerFunc, configDialerFunc) assert.Equal(s.ProxyTransport.(*http.Transport).TLSClientConfig, config.ProxyTLSClientConfig) }
// TestNew verifies that the New function returns a Master // using the configuration properly. func TestNew(t *testing.T) { master, etcdserver, config, assert := newMaster(t) defer etcdserver.Terminate(t) // Verify many of the variables match their config counterparts assert.Equal(master.enableCoreControllers, config.EnableCoreControllers) assert.Equal(master.tunneler, config.Tunneler) assert.Equal(master.APIPrefix, config.APIPrefix) assert.Equal(master.APIGroupPrefix, config.APIGroupPrefix) assert.Equal(master.RequestContextMapper, config.RequestContextMapper) assert.Equal(master.MasterCount, config.MasterCount) assert.Equal(master.ClusterIP, config.PublicAddress) assert.Equal(master.PublicReadWritePort, config.ReadWritePort) assert.Equal(master.ServiceReadWriteIP, config.ServiceReadWriteIP) // These functions should point to the same memory location masterDialer, _ := utilnet.Dialer(master.ProxyTransport) masterDialerFunc := fmt.Sprintf("%p", masterDialer) configDialerFunc := fmt.Sprintf("%p", config.ProxyDialer) assert.Equal(masterDialerFunc, configDialerFunc) assert.Equal(master.ProxyTransport.(*http.Transport).TLSClientConfig, config.ProxyTLSClientConfig) }
func DialURL(url *url.URL, transport http.RoundTripper) (net.Conn, error) { dialAddr := netutil.CanonicalAddr(url) dialer, _ := utilnet.Dialer(transport) switch url.Scheme { case "http": if dialer != nil { return dialer("tcp", dialAddr) } return net.Dial("tcp", dialAddr) case "https": // Get the tls config from the transport if we recognize it var tlsConfig *tls.Config var tlsConn *tls.Conn var err error tlsConfig, _ = utilnet.TLSClientConfig(transport) if dialer != nil { // We have a dialer; use it to open the connection, then // create a tls client using the connection. netConn, err := dialer("tcp", dialAddr) if err != nil { return nil, err } if tlsConfig == nil { // tls.Client requires non-nil config glog.Warningf("using custom dialer with no TLSClientConfig. Defaulting to InsecureSkipVerify") // tls.Handshake() requires ServerName or InsecureSkipVerify tlsConfig = &tls.Config{ InsecureSkipVerify: true, } } else if len(tlsConfig.ServerName) == 0 && !tlsConfig.InsecureSkipVerify { // tls.Handshake() requires ServerName or InsecureSkipVerify // infer the ServerName from the hostname we're connecting to. inferredHost := dialAddr if host, _, err := net.SplitHostPort(dialAddr); err == nil { inferredHost = host } // Make a copy to avoid polluting the provided config tlsConfigCopy := *tlsConfig tlsConfigCopy.ServerName = inferredHost tlsConfig = &tlsConfigCopy } tlsConn = tls.Client(netConn, tlsConfig) if err := tlsConn.Handshake(); err != nil { netConn.Close() return nil, err } } else { // Dial tlsConn, err = tls.Dial("tcp", dialAddr, tlsConfig) if err != nil { return nil, err } } // Return if we were configured to skip validation if tlsConfig != nil && tlsConfig.InsecureSkipVerify { return tlsConn, nil } // Verify host, _, _ := net.SplitHostPort(dialAddr) if err := tlsConn.VerifyHostname(host); err != nil { tlsConn.Close() return nil, err } return tlsConn, nil default: return nil, fmt.Errorf("Unknown scheme: %s", url.Scheme) } }