Merge branch 'master' of https://github.com/ChurchDesk/docker-flow-proxy

Author: mhaamann

Dockerfile

@@ -1,16 +1,23 @@
-FROM golang:1.9.6 AS build
+FROM golang:1.11.0-alpine AS build
 ADD . /src
 WORKDIR /src
-RUN go get -d -v -t
-RUN go test --cover ./... --run UnitTest
-RUN go build -v -o docker-flow-proxy
+RUN set -x \
+    && apk add --update --no-cache --no-progress git g++ \
+    && go get -d -v \
+    && go test --cover ./... --run UnitTest \
+    && go build -v -o docker-flow-proxy
 
 
-FROM haproxy:1.8.8-alpine
-MAINTAINER 	Viktor Farcic <viktor@farcic.com>
+FROM haproxy:1.8.13-alpine
+LABEL org.opencontainers.image.title="Docker Flow Proxy" \
+    org.opencontainers.image.description="Automated HAProxy Reverse Proxy for Docker" \
+    org.opencontainers.image.url="https://proxy.dockerflow.com" \
+    org.opencontainers.image.licenses="MIT" \
+    org.opencontainers.image.authors="Viktor Farcic <viktor@farcic.com>" \
+    org.opencontainers.image.source="https://github.com/docker-flow/docker-flow-proxy"
 
-RUN mkdir /lib64 && ln -s /lib/libc.musl-x86_64.so.1 /lib64/ld-linux-x86-64.so.2
-RUN mkdir -p /cfg/tmpl /templates /certs /logs
+RUN apk --update --no-cache --no-progress add tini \
+    && mkdir -p /cfg/tmpl /templates /certs /logs
 
 ENV CERTS="" \
     CAPTURE_REQUEST_HEADER="" \
@@ -39,21 +46,20 @@ ENV CERTS="" \
     TIMEOUT_HTTP_REQUEST="5" TIMEOUT_HTTP_KEEP_ALIVE="15" TIMEOUT_CLIENT="20" TIMEOUT_CONNECT="5" TIMEOUT_QUEUE="30" TIMEOUT_SERVER="20" TIMEOUT_TUNNEL="3600" \
     USERS="" \
     SKIP_ADDRESS_VALIDATION="true" \
-    SSL_BIND_OPTIONS="no-sslv3" SSL_BIND_CIPHERS="ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS"
+    SSL_BIND_OPTIONS="no-sslv3" \
+    SSL_BIND_CIPHERS="ECDH+AESGCM:ECDH+CHACHA20:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS"
 
-EXPOSE 80
-EXPOSE 443
-EXPOSE 8080
+EXPOSE 80 \
+    443 \
+    8080
 
-RUN apk --no-cache add tini
 ENTRYPOINT ["/sbin/tini", "-g", "--"]
 CMD ["docker-flow-proxy", "server"]
 HEALTHCHECK --interval=5s --start-period=3s --timeout=10s CMD check.sh
 
 COPY scripts/check.sh /usr/local/bin/check.sh
-RUN chmod +x /usr/local/bin/check.sh
 COPY errorfiles /errorfiles
 COPY haproxy.cfg /cfg/haproxy.cfg
 COPY haproxy.tmpl /cfg/tmpl/haproxy.tmpl
 COPY --from=build /src/docker-flow-proxy /usr/local/bin/docker-flow-proxy
-RUN chmod +x /usr/local/bin/docker-flow-proxy
+RUN chmod +x /usr/local/bin/docker-flow-proxy /usr/local/bin/check.sh

Dockerfile.packetbeat

@@ -7,7 +7,7 @@ RUN apk add --update \
     bash \
     ca-certificates \
   && update-ca-certificates
-RUN wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://raw.githubusercontent.com/sgerrand/alpine-pkg-glibc/master/sgerrand.rsa.pub
+RUN wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub
 RUN wget https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.25-r0/glibc-2.25-r0.apk
 RUN apk add glibc-2.25-r0.apk
 

Dockerfile.test

@@ -1,8 +1,8 @@
-FROM dockerflow/docker-flow-proxy-test-base
+FROM thomasjpfan/docker-flow-proxy-test-base
 
 COPY . /src
 WORKDIR /src
 RUN chmod +x /src/run-tests.sh
-RUN go get -d -v -t
+RUN go get -d -v
 
 CMD ["sh", "-c", "/src/run-tests.sh"]

Dockerfile.test-base

@@ -1,10 +1,3 @@
-FROM golang:1.8
+FROM golang:1.11.0-alpine3.8
 
-MAINTAINER 	Viktor Farcic <viktor@farcic.com>
-
-RUN apt-get update && \
-    apt-get install -y apt-transport-https ca-certificates curl software-properties-common expect && \
-    curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add - && \
-    add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable" && \
-    apt-get update && \
-    apt-get -y install docker-ce
+RUN apk add --no-cache --update git docker gcc libc-dev

Jenkinsfile

@@ -15,7 +15,7 @@ pipeline {
           def dateFormat = new SimpleDateFormat("yy.MM.dd")
           currentBuild.displayName = dateFormat.format(new Date()) + "-" + env.BUILD_NUMBER
         }
-        dfBuild2("docker-flow-proxy")
+        dfBuild2("docker-flow-proxy", "thomasjpfan/gox-build:0.1.1-1.11.0-alpine3.8")
         sh "docker image build -t dockerflow/docker-flow-proxy:latest-packet-beat -f Dockerfile.packetbeat ."
         sh "docker image tag dockerflow/docker-flow-proxy:latest-packet-beat dockerflow/docker-flow-proxy:${currentBuild.displayName}-packet-beat"
       }
@@ -53,7 +53,7 @@ pipeline {
         label "prod"
       }
       steps {
-        dfDeploy2("docker-flow-proxy", "proxy_proxy", "proxy_docs")
+        sh "helm upgrade -i docker-flow-proxy helm/docker-flow-proxy --namespace df --set image.tag=${currentBuild.displayName}"
       }
     }
   }

README.md

@@ -1,5 +1,7 @@
 # Docker Flow Proxy
 
+**This project needs adoption. I (@vfarcic) moved to Kubernetes and cannot dedicate time to this project anymore. Similarly, involvement from other contributors dropped as well. Please consider contributing yourself if you think this project is useful.**
+
 [![GitHub release](https://img.shields.io/github/release/docker-flow/docker-flow-proxy.svg)]()
 [![license](https://img.shields.io/github/license/docker-flow/docker-flow-proxy.svg)]()
 [![Docker Pulls](https://img.shields.io/docker/pulls/vfarcic/docker-flow-proxy.svg)]()

actions/fetch.go

@@ -6,7 +6,7 @@ import (
 	"net/http"
 	"strings"
 
-	"../proxy"
+	"github.com/docker-flow/docker-flow-proxy/proxy"
 )
 
 // Fetchable defines interface that fetches information from other sources

actions/fetch_test.go

@@ -1,15 +1,16 @@
 package actions
 
 import (
-	"../proxy"
 	"encoding/json"
 	"fmt"
-	"github.com/stretchr/testify/suite"
 	"net/http"
 	"net/http/httptest"
 	"os"
 	"strings"
 	"testing"
+
+	"github.com/docker-flow/docker-flow-proxy/proxy"
+	"github.com/stretchr/testify/suite"
 )
 
 type FetchTestSuite struct {
@@ -25,12 +26,12 @@ type FetchTestSuite struct {
 func (s *FetchTestSuite) SetupTest() {
 	sd := proxy.ServiceDest{
 		ServicePath: []string{"path/to/my/service/api", "path/to/my/other/service/api"},
+		PathType:    "path_beg",
 	}
 	s.InstanceName = "proxy-test-instance"
 	s.ServiceDest = []proxy.ServiceDest{sd}
 	s.ConfigsPath = "path/to/configs/dir"
 	s.TemplatesPath = "test_configs/tmpl"
-	s.PathType = "path_beg"
 	s.fetch = fetch{
 		BaseReconfigure: BaseReconfigure{
 			TemplatesPath: s.TemplatesPath,

actions/reconfigure.go

@@ -8,7 +8,7 @@ import (
 	"strconv"
 	"strings"
 
-	"../proxy"
+	"github.com/docker-flow/docker-flow-proxy/proxy"
 )
 
 const serviceTemplateFeFilename = "service-formatted-fe.ctmpl"
@@ -59,6 +59,17 @@ func (m *Reconfigure) Execute(reloadAfter bool) error {
 			return err
 		}
 	}
+	// Not global and replicas == 0, the service is not active
+	if !m.Service.IsGlobal && m.Service.Replicas == 0 {
+		action := NewRemove(
+			m.Service.ServiceName,
+			m.Service.AclName,
+			m.ConfigsPath,
+			m.TemplatesPath,
+			m.InstanceName,
+		)
+		return action.Execute([]string{})
+	}
 	if err := m.createConfigsAddService(); err != nil {
 		return err
 	}

actions/reconfigure_test.go

@@ -5,7 +5,7 @@ import (
 	"os"
 	"testing"
 
-	"../proxy"
+	"github.com/docker-flow/docker-flow-proxy/proxy"
 	"github.com/stretchr/testify/mock"
 	"github.com/stretchr/testify/suite"
 )
@@ -24,12 +24,12 @@ func (s *ReconfigureTestSuite) SetupTest() {
 	sd := proxy.ServiceDest{
 		ServicePath: []string{"path/to/my/service/api", "path/to/my/other/service/api"},
 		Index:       0,
+		PathType:    "path_beg",
 	}
 	s.InstanceName = "proxy-test-instance"
 	s.ServiceDest = []proxy.ServiceDest{sd}
 	s.ConfigsPath = "path/to/configs/dir"
 	s.TemplatesPath = "test_configs/tmpl"
-	s.PathType = "path_beg"
 	s.reconfigure = Reconfigure{
 		BaseReconfigure: BaseReconfigure{
 			TemplatesPath: s.TemplatesPath,
@@ -40,7 +40,7 @@ func (s *ReconfigureTestSuite) SetupTest() {
 			ServiceName: s.ServiceName,
 			AclName:     s.ServiceName,
 			ServiceDest: []proxy.ServiceDest{sd},
-			PathType:    s.PathType,
+			Replicas:    1,
 		},
 	}
 	os.Setenv("SKIP_ADDRESS_VALIDATION", "true")
@@ -122,6 +122,7 @@ func (s ReconfigureTestSuite) Test_GetTemplates_UsesServerTemplate_WhenDiscovery
 	s.reconfigure.Service.ServiceDest[0].Port = "1234"
 	s.reconfigure.Service.DiscoveryType = "DNS"
 	s.reconfigure.Service.Replicas = 0
+	s.reconfigure.Service.IsGlobal = true
 	expected := `
 backend myService-be1234_0
     mode http
@@ -428,6 +429,7 @@ backend https-myService-be4321_0
 	s.reconfigure.ServiceDest[0].Port = "1234"
 	s.reconfigure.ServiceDest[0].HttpsPort = 4321
 	s.reconfigure.Replicas = 0
+	s.reconfigure.IsGlobal = true
 	s.reconfigure.DiscoveryType = "DNS"
 	actualFront, actualBack, _ := s.reconfigure.GetTemplates()
 
@@ -739,7 +741,8 @@ func (s ReconfigureTestSuite) Test_Execute_WritesServerSession() {
 	s.reconfigure.AclName = "my-service"
 	s.reconfigure.ServiceDest[0].Port = "1111"
 	s.reconfigure.ServiceDest[0].HttpsPort = 2222
-	s.reconfigure.Tasks = []string{"1.2.3.4", "4.3.2.1"}
+	// The expectedData will place these ips in order
+	s.reconfigure.Tasks = []string{"4.3.2.1", "1.2.3.4"}
 	s.reconfigure.SessionType = "sticky-server"
 	var actualData string
 	expectedData := `
@@ -1033,6 +1036,19 @@ func (s ReconfigureTestSuite) Test_Execute_RemovesService_WhenProxyFails() {
 	mockObj.AssertCalled(s.T(), "RemoveService", s.ServiceName)
 }
 
+func (s ReconfigureTestSuite) Test_Execute_RemovesService_WhenReplicasIs0() {
+	s.reconfigure.Service.Replicas = 0
+
+	mockObj := getProxyMock("")
+	proxyOrig := proxy.Instance
+	defer func() { proxy.Instance = proxyOrig }()
+	proxy.Instance = mockObj
+
+	s.reconfigure.Execute(true)
+
+	mockObj.AssertCalled(s.T(), "RemoveService", s.ServiceName)
+}
+
 func (s ReconfigureTestSuite) Test_Execute_ReloadsAgain_WhenProxyFails() {
 	mockObj := getProxyMock("Reload")
 	mockObj.On("Reload").Return(fmt.Errorf("This is an error"))
@@ -1052,11 +1068,12 @@ func (s ReconfigureTestSuite) Test_Execute_AddsService() {
 	proxy.Instance = mockObj
 	sd := proxy.ServiceDest{
 		ServicePath: []string{"path/to/my/service/api", "path/to/my/other/service/api"},
+		PathType:    "path_beg",
 	}
 	expected := proxy.Service{
 		ServiceName: "s.ServiceName",
 		ServiceDest: []proxy.ServiceDest{sd},
-		PathType:    s.PathType,
+		Replicas:    1,
 	}
 	r := NewReconfigure(
 		BaseReconfigure{
@@ -1135,12 +1152,13 @@ func (s *ReconfigureTestSuite) Test_Execute_WhenFilterProxyInstanceIsTrue_SamePr
 	proxy.Instance = mockObj
 	sd := proxy.ServiceDest{
 		ServicePath: []string{"path/to/my/service/api", "path/to/my/other/service/api"},
+		PathType:    "path_beg",
 	}
 	expected := proxy.Service{
 		ServiceName:       s.ServiceName,
 		ServiceDest:       []proxy.ServiceDest{sd},
-		PathType:          s.PathType,
 		ProxyInstanceName: s.InstanceName,
+		Replicas:          1,
 	}
 	r := NewReconfigure(
 		BaseReconfigure{
@@ -1167,11 +1185,11 @@ func (s *ReconfigureTestSuite) Test_Execute_WhenFilterProxyInstanceIsTrue_Differ
 	proxy.Instance = mockObj
 	sd := proxy.ServiceDest{
 		ServicePath: []string{"path/to/my/service/api", "path/to/my/other/service/api"},
+		PathType:    "path_beg",
 	}
 	expected := proxy.Service{
 		ServiceName:       s.ServiceName,
 		ServiceDest:       []proxy.ServiceDest{sd},
-		PathType:          s.PathType,
 		ProxyInstanceName: "another-docker-flow",
 	}
 	r := NewReconfigure(