const (SPDYProtocolProtocol    = "SPDY"WSProtocolProtocol    = "WebSocket"ExecSessionTypeSessionType = "exec"AttachSessionTypeSessionType = "attach")

var (// CounterSessionRecordingsAttempted counts the number of session recording attempts.CounterSessionRecordingsAttempted =clientmetric.NewCounter("k8s_auth_proxy_session_recordings_attempted"))

typeHijacker¶

type Hijacker struct {http.ResponseWriter// contains filtered or unexported fields}

Hijacker implementsnet/http.Hijacker interface.It must be configured with an http request for a 'kubectl exec/attach' session thatneeds to be recorded. It knows how to hijack the connection and configure forthe session contents to be sent to a tsrecorder instance.

func NewHijacker(optsHijackerOpts) *Hijacker

func (h *Hijacker) Hijack() (net.Conn, *bufio.ReadWriter,error)

typeHijackerOpts¶

type HijackerOpts struct {TS          *tsnet.ServerReq         *http.RequestWhttp.ResponseWriterWho         *apitype.WhoIsResponseAddrs       []netip.AddrPortLog         *zap.SugaredLoggerPodstringNamespacestringFailOpenboolProtoProtocolSessionTypeSessionType}

typeProtocol¶

type Protocolstring

Protocol is the streaming protocol of the hijacked session. Supportedprotocols are SPDY and WebSocket.

typeRecorderDialFn¶

type RecorderDialFn func(context.Context, []netip.AddrPort,netx.DialFunc) (io.WriteCloser, []*tailcfg.SSHRecordingAttempt, <-chanerror,error)

RecorderDialFn dials the specified netip.AddrPorts that should be tsrecorderaddresses. It tries to connect to recorder endpoints one by one, till oneconnection succeeds. In case of success, returns a list with a singlesuccessful recording attempt and an error channel. If the connection errorsafter having been established, an error is sent down the channel.

typeSessionType¶added inv1.86.0

type SessionTypestring

SessionType is the type of session initiated with `kubectl`(`exec` or `attach`)