mirror of https://github.com/harness/drone.git
91 lines
2.7 KiB
Go
91 lines
2.7 KiB
Go
// Copyright 2023 Harness, Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package infraprovider
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net/http"
|
|
"path/filepath"
|
|
|
|
"github.com/harness/gitness/infraprovider/enum"
|
|
|
|
"github.com/docker/docker/client"
|
|
"github.com/docker/go-connections/tlsconfig"
|
|
)
|
|
|
|
type DockerClientFactory struct {
|
|
config *DockerConfig
|
|
}
|
|
|
|
func NewDockerClientFactory(config *DockerConfig) *DockerClientFactory {
|
|
return &DockerClientFactory{config: config}
|
|
}
|
|
|
|
// NewDockerClient returns a new docker client created using the docker config and infra.
|
|
func (d *DockerClientFactory) NewDockerClient(
|
|
_ context.Context,
|
|
infra *Infrastructure,
|
|
) (*client.Client, error) {
|
|
if infra.ProviderType != enum.InfraProviderTypeDocker {
|
|
return nil, fmt.Errorf("infra provider type %s not supported", infra.ProviderType)
|
|
}
|
|
dockerClient, err := d.getClient(infra.Parameters)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error creating docker client using infra %+v: %w", infra, err)
|
|
}
|
|
return dockerClient, nil
|
|
}
|
|
|
|
func (d *DockerClientFactory) getClient(_ []Parameter) (*client.Client, error) {
|
|
var opts []client.Opt
|
|
|
|
opts = append(opts, client.WithHost(d.config.DockerHost))
|
|
|
|
opts = append(opts, client.WithVersion(d.config.DockerAPIVersion))
|
|
|
|
if d.config.DockerCertPath != "" {
|
|
httpsClient, err := d.getHTTPSClient()
|
|
if err != nil {
|
|
return nil, fmt.Errorf("unable to create https client for docker client: %w", err)
|
|
}
|
|
opts = append(opts, client.WithHTTPClient(httpsClient))
|
|
}
|
|
|
|
dockerClient, err := client.NewClientWithOpts(opts...)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("unable to create docker client: %w", err)
|
|
}
|
|
|
|
return dockerClient, nil
|
|
}
|
|
|
|
func (d *DockerClientFactory) getHTTPSClient() (*http.Client, error) {
|
|
options := tlsconfig.Options{
|
|
CAFile: filepath.Join(d.config.DockerCertPath, "ca.pem"),
|
|
CertFile: filepath.Join(d.config.DockerCertPath, "cert.pem"),
|
|
KeyFile: filepath.Join(d.config.DockerCertPath, "key.pem"),
|
|
InsecureSkipVerify: d.config.DockerTLSVerify == "",
|
|
}
|
|
tlsc, err := tlsconfig.Client(options)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &http.Client{
|
|
Transport: &http.Transport{TLSClientConfig: tlsc},
|
|
CheckRedirect: client.CheckRedirect,
|
|
}, nil
|
|
}
|