128 lines
3.9 KiB
Go
128 lines
3.9 KiB
Go
/*
|
|
Copyright 2020 The Flux CD contributors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package controllers
|
|
|
|
import (
|
|
"context"
|
|
"crypto/sha256"
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/go-logr/logr"
|
|
corev1 "k8s.io/api/core/v1"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
"k8s.io/apimachinery/pkg/types"
|
|
ctrl "sigs.k8s.io/controller-runtime"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
|
|
"github.com/fluxcd/notification-controller/api/v1alpha1"
|
|
)
|
|
|
|
// ReceiverReconciler reconciles a Receiver object
|
|
type ReceiverReconciler struct {
|
|
client.Client
|
|
Log logr.Logger
|
|
Scheme *runtime.Scheme
|
|
}
|
|
|
|
// +kubebuilder:rbac:groups=notification.fluxcd.io,resources=receivers,verbs=get;list;watch;create;update;patch;delete
|
|
// +kubebuilder:rbac:groups=notification.fluxcd.io,resources=receivers/status,verbs=get;update;patch
|
|
// +kubebuilder:rbac:groups=source.fluxcd.io,resources=gitrepositories,verbs=get;list;watch;update;patch
|
|
// +kubebuilder:rbac:groups=source.fluxcd.io,resources=gitrepositories/status,verbs=get
|
|
// +kubebuilder:rbac:groups=source.fluxcd.io,resources=helmrepositories,verbs=get;list;watch;update;patch
|
|
// +kubebuilder:rbac:groups=source.fluxcd.io,resources=helmrepositories/status,verbs=get
|
|
// +kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch
|
|
|
|
func (r *ReceiverReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error) {
|
|
ctx := context.Background()
|
|
|
|
var receiver v1alpha1.Receiver
|
|
if err := r.Get(ctx, req.NamespacedName, &receiver); err != nil {
|
|
return ctrl.Result{}, client.IgnoreNotFound(err)
|
|
}
|
|
|
|
log := r.Log.WithValues(strings.ToLower(receiver.Kind), req.NamespacedName)
|
|
|
|
init := true
|
|
for _, condition := range receiver.Status.Conditions {
|
|
if condition.Type == v1alpha1.ReadyCondition && condition.Status == corev1.ConditionTrue {
|
|
init = false
|
|
break
|
|
}
|
|
}
|
|
if !init {
|
|
return ctrl.Result{}, nil
|
|
}
|
|
|
|
token, err := r.token(ctx, receiver)
|
|
if err != nil {
|
|
receiver = v1alpha1.ReceiverNotReady(receiver, v1alpha1.TokenNotFoundReason, err.Error())
|
|
if err := r.Status().Update(ctx, &receiver); err != nil {
|
|
log.Error(err, "unable to update Receiver status")
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
}
|
|
|
|
receiverURL := fmt.Sprintf("/hook/%s", sha256sum(token+receiver.Name+receiver.Namespace))
|
|
receiver = v1alpha1.ReceiverReady(receiver,
|
|
v1alpha1.InitializedReason,
|
|
"Receiver initialised with URL: "+receiverURL,
|
|
receiverURL)
|
|
if err := r.Status().Update(ctx, &receiver); err != nil {
|
|
log.Error(err, "unable to update Receiver status")
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
log.Info("Receiver initialised")
|
|
|
|
return ctrl.Result{}, nil
|
|
}
|
|
|
|
func (r *ReceiverReconciler) SetupWithManager(mgr ctrl.Manager) error {
|
|
return ctrl.NewControllerManagedBy(mgr).
|
|
For(&v1alpha1.Receiver{}).
|
|
Complete(r)
|
|
}
|
|
|
|
// token extract the token value from the secret object
|
|
func (r *ReceiverReconciler) token(ctx context.Context, receiver v1alpha1.Receiver) (string, error) {
|
|
token := ""
|
|
secretName := types.NamespacedName{
|
|
Namespace: receiver.GetNamespace(),
|
|
Name: receiver.Spec.SecretRef.Name,
|
|
}
|
|
|
|
var secret corev1.Secret
|
|
err := r.Client.Get(ctx, secretName, &secret)
|
|
if err != nil {
|
|
return "", fmt.Errorf("unable to read token from secret '%s' error: %w", secretName, err)
|
|
}
|
|
|
|
if val, ok := secret.Data["token"]; ok {
|
|
token = string(val)
|
|
} else {
|
|
return "", fmt.Errorf("invalid '%s' secret data: required fields 'token'", secretName)
|
|
}
|
|
|
|
return token, nil
|
|
}
|
|
|
|
func sha256sum(val string) string {
|
|
digest := sha256.Sum256([]byte(val))
|
|
return fmt.Sprintf("%x", digest)
|
|
}
|