add support for proxy URLs

Author: ewilken

Sources/SwiftkubeClient/Client/KubernetesClient.swift

@@ -181,12 +181,35 @@ public actor KubernetesClient {
 			tlsConfiguration.privateKey = NIOSSLPrivateKeySource.privateKey(clientKey)
 		}
 
+		let proxy: HTTPClient.Configuration.Proxy? = {
+			guard let proxyURL = config.proxyURL else { return nil }
+
+			if proxyURL.scheme == "socks5", let host = proxyURL.host {
+				return .socksServer(host: host, port: proxyURL.port ?? 1080)
+			}
+
+			if proxyURL.scheme == "http", let host = proxyURL.host {
+				if let username = proxyURL.user, let password = proxyURL.password {
+					return .server(
+						host: host,
+						port: proxyURL.port ?? 80,
+						authorization: HTTPClient.Authorization.basic(username: username, password: password)
+					)
+				}
+
+				return .server(host: host, port: proxyURL.port ?? 80)
+			}
+
+			return nil
+		}()
+
 		self.httpClient = HTTPClient(
 			eventLoopGroupProvider: provider,
 			configuration: HTTPClient.Configuration(
 				tlsConfiguration: tlsConfiguration,
 				redirectConfiguration: config.redirectConfiguration,
 				timeout: config.timeout,
+				proxy: proxy,
 				decompression: config.gzip ? .enabled(limit: .none) : .disabled
 			)
 		)

Sources/SwiftkubeClient/Config/KubernetesClientConfig.swift

@@ -39,6 +39,8 @@ public struct KubernetesClientConfig: Sendable {
 	public let timeout: HTTPClient.Configuration.Timeout
 	/// The default redirect configuration for the underlying `HTTPCLient`.
 	public let redirectConfiguration: HTTPClient.Configuration.RedirectConfiguration
+	/// URL to the proxy to be used for all requests made by this client.
+	public let proxyURL: URL?
 	/// Whether to request and decode gzipped responses from the API server.
 	public let gzip: Bool
 
@@ -50,6 +52,7 @@ public struct KubernetesClientConfig: Sendable {
 		insecureSkipTLSVerify: Bool,
 		timeout: HTTPClient.Configuration.Timeout,
 		redirectConfiguration: HTTPClient.Configuration.RedirectConfiguration,
+		proxyURL: URL? = nil,
 		gzip: Bool = false
 	) {
 		self.masterURL = masterURL
@@ -59,6 +62,7 @@ public struct KubernetesClientConfig: Sendable {
 		self.insecureSkipTLSVerify = insecureSkipTLSVerify
 		self.timeout = timeout
 		self.redirectConfiguration = redirectConfiguration
+		self.proxyURL = proxyURL
 		self.gzip = gzip
 	}
 }
@@ -209,7 +213,8 @@ internal struct StringConfigLoader: KubernetesClientConfigLoader {
 			trustRoots: cluster.trustRoots(logger: logger),
 			insecureSkipTLSVerify: cluster.insecureSkipTLSVerify ?? true,
 			timeout: timeout,
-			redirectConfiguration: redirectConfiguration
+			redirectConfiguration: redirectConfiguration,
+			proxyURL: cluster.proxyURL.flatMap { URL(string: $0) }
 		)
 	}
 }
@@ -266,7 +271,8 @@ internal struct URLConfigLoader: KubernetesClientConfigLoader {
 			trustRoots: cluster.trustRoots(logger: logger),
 			insecureSkipTLSVerify: cluster.insecureSkipTLSVerify ?? true,
 			timeout: timeout,
-			redirectConfiguration: redirectConfiguration
+			redirectConfiguration: redirectConfiguration,
+			proxyURL: cluster.proxyURL.flatMap { URL(string: $0) }
 		)
 	}
 }
@@ -336,7 +342,8 @@ internal struct ServiceAccountConfigLoader: KubernetesClientConfigLoader {
 			trustRoots: trustRoots,
 			insecureSkipTLSVerify: trustRoots == nil,
 			timeout: timeout,
-			redirectConfiguration: redirectConfiguration
+			redirectConfiguration: redirectConfiguration,
+			proxyURL: nil
 		)
 	}
 

Tests/SwiftkubeClientTests/RequestBuilderTests.swift

@@ -34,7 +34,8 @@ final class RequestBuilderTests: XCTestCase {
 			trustRoots: nil,
 			insecureSkipTLSVerify: false,
 			timeout: .init(connect: .seconds(1), read: .seconds(5)),
-			redirectConfiguration: .disallow
+			redirectConfiguration: .disallow,
+			proxyURL: nil
 		)
 
 		gvr = GroupVersionResource(of: core.v1.Pod.self)!