110 lines
3.8 KiB
Go
110 lines
3.8 KiB
Go
package work
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"net/http"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
"k8s.io/klog/v2"
|
|
"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
|
|
|
|
workv1alpha1 "github.com/karmada-io/karmada/pkg/apis/work/v1alpha1"
|
|
"github.com/karmada-io/karmada/pkg/util"
|
|
)
|
|
|
|
// MutatingAdmission mutates API request if necessary.
|
|
type MutatingAdmission struct {
|
|
decoder *admission.Decoder
|
|
}
|
|
|
|
// Check if our MutatingAdmission implements necessary interface
|
|
var _ admission.Handler = &MutatingAdmission{}
|
|
var _ admission.DecoderInjector = &MutatingAdmission{}
|
|
|
|
// Handle yields a response to an AdmissionRequest.
|
|
func (a *MutatingAdmission) Handle(ctx context.Context, req admission.Request) admission.Response {
|
|
work := &workv1alpha1.Work{}
|
|
|
|
err := a.decoder.Decode(req, work)
|
|
if err != nil {
|
|
return admission.Errored(http.StatusBadRequest, err)
|
|
}
|
|
klog.V(2).Infof("Mutating work(%s) for request: %s", work.Name, req.Operation)
|
|
|
|
var manifests []workv1alpha1.Manifest
|
|
|
|
for _, manifest := range work.Spec.Workload.Manifests {
|
|
workloadObj := &unstructured.Unstructured{}
|
|
err := json.Unmarshal(manifest.Raw, workloadObj)
|
|
if err != nil {
|
|
klog.Errorf("Failed to unmarshal work(%s) manifest to Unstructured", work.Name)
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
}
|
|
|
|
removeIrrelevantField(workloadObj)
|
|
|
|
workloadJSON, err := workloadObj.MarshalJSON()
|
|
if err != nil {
|
|
klog.Errorf("Failed to marshal workload of work(%s)", work.Name)
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
}
|
|
manifests = append(manifests, workv1alpha1.Manifest{RawExtension: runtime.RawExtension{Raw: workloadJSON}})
|
|
}
|
|
|
|
work.Spec.Workload.Manifests = manifests
|
|
marshaledBytes, err := json.Marshal(work)
|
|
if err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
}
|
|
|
|
return admission.PatchResponseFromRaw(req.Object.Raw, marshaledBytes)
|
|
}
|
|
|
|
// InjectDecoder implements admission.DecoderInjector interface.
|
|
// A decoder will be automatically injected.
|
|
func (a *MutatingAdmission) InjectDecoder(d *admission.Decoder) error {
|
|
a.decoder = d
|
|
return nil
|
|
}
|
|
|
|
// removeIrrelevantField used to remove fields that generated by kube-apiserver and no need(or can't) propagate to
|
|
// member clusters.
|
|
func removeIrrelevantField(workload *unstructured.Unstructured) {
|
|
// populated by the kubernetes.
|
|
unstructured.RemoveNestedField(workload.Object, "metadata", "creationTimestamp")
|
|
|
|
// populated by the kubernetes.
|
|
// The kubernetes will set this fields in case of graceful deletion. This field is read-only and can't propagate to
|
|
// member clusters.
|
|
unstructured.RemoveNestedField(workload.Object, "metadata", "deletionTimestamp")
|
|
|
|
// populated by the kubernetes.
|
|
unstructured.RemoveNestedField(workload.Object, "metadata", "generation")
|
|
|
|
// This is mostly for internal housekeeping, and users typically shouldn't need to set or understand this field.
|
|
// Remove this field to keep 'Work' clean and tidy.
|
|
unstructured.RemoveNestedField(workload.Object, "metadata", "managedFields")
|
|
|
|
// populated by the kubernetes.
|
|
unstructured.RemoveNestedField(workload.Object, "metadata", "resourceVersion")
|
|
|
|
// populated by the kubernetes and has been deprecated by kubernetes.
|
|
unstructured.RemoveNestedField(workload.Object, "metadata", "selfLink")
|
|
|
|
// populated by the kubernetes.
|
|
unstructured.RemoveNestedField(workload.Object, "metadata", "uid")
|
|
|
|
unstructured.RemoveNestedField(workload.Object, "status")
|
|
|
|
if workload.GetKind() == util.ServiceKind {
|
|
// In the case spec.clusterIP is set to `None`, means user want a headless service, then it shouldn't be removed.
|
|
clusterIP, exist, _ := unstructured.NestedString(workload.Object, "spec", "clusterIP")
|
|
if exist && clusterIP != corev1.ClusterIPNone {
|
|
unstructured.RemoveNestedField(workload.Object, "spec", "clusterIP")
|
|
}
|
|
}
|
|
}
|