231 lines
10 KiB
Go
231 lines
10 KiB
Go
/*
|
|
Copyright 2020 The Karmada Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package binding
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"time"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
|
|
apierrors "k8s.io/apimachinery/pkg/api/errors"
|
|
"k8s.io/apimachinery/pkg/api/meta"
|
|
"k8s.io/apimachinery/pkg/types"
|
|
"k8s.io/client-go/dynamic"
|
|
"k8s.io/client-go/tools/record"
|
|
"k8s.io/klog/v2"
|
|
controllerruntime "sigs.k8s.io/controller-runtime"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
"sigs.k8s.io/controller-runtime/pkg/controller"
|
|
"sigs.k8s.io/controller-runtime/pkg/controller/controllerutil"
|
|
"sigs.k8s.io/controller-runtime/pkg/handler"
|
|
"sigs.k8s.io/controller-runtime/pkg/predicate"
|
|
"sigs.k8s.io/controller-runtime/pkg/reconcile"
|
|
|
|
policyv1alpha1 "github.com/karmada-io/karmada/pkg/apis/policy/v1alpha1"
|
|
workv1alpha2 "github.com/karmada-io/karmada/pkg/apis/work/v1alpha2"
|
|
"github.com/karmada-io/karmada/pkg/events"
|
|
"github.com/karmada-io/karmada/pkg/metrics"
|
|
"github.com/karmada-io/karmada/pkg/resourceinterpreter"
|
|
"github.com/karmada-io/karmada/pkg/sharedcli/ratelimiterflag"
|
|
"github.com/karmada-io/karmada/pkg/util"
|
|
"github.com/karmada-io/karmada/pkg/util/fedinformer/genericmanager"
|
|
"github.com/karmada-io/karmada/pkg/util/helper"
|
|
"github.com/karmada-io/karmada/pkg/util/overridemanager"
|
|
)
|
|
|
|
// ControllerName is the controller name that will be used when reporting events and metrics.
|
|
const ControllerName = "binding-controller"
|
|
|
|
// ResourceBindingController is to sync ResourceBinding.
|
|
type ResourceBindingController struct {
|
|
client.Client // used to operate ClusterResourceBinding resources.
|
|
DynamicClient dynamic.Interface // used to fetch arbitrary resources from api server.
|
|
InformerManager genericmanager.SingleClusterInformerManager // used to fetch arbitrary resources from cache.
|
|
EventRecorder record.EventRecorder
|
|
RESTMapper meta.RESTMapper
|
|
OverrideManager overridemanager.OverrideManager
|
|
ResourceInterpreter resourceinterpreter.ResourceInterpreter
|
|
RateLimiterOptions ratelimiterflag.Options
|
|
}
|
|
|
|
// Reconcile performs a full reconciliation for the object referred to by the Request.
|
|
// The Controller will requeue the Request to be processed again if an error is non-nil or
|
|
// Result.Requeue is true, otherwise upon completion it will remove the work from the queue.
|
|
func (c *ResourceBindingController) Reconcile(ctx context.Context, req controllerruntime.Request) (controllerruntime.Result, error) {
|
|
klog.V(4).Infof("Reconciling ResourceBinding %s.", req.NamespacedName.String())
|
|
|
|
binding := &workv1alpha2.ResourceBinding{}
|
|
if err := c.Client.Get(ctx, req.NamespacedName, binding); err != nil {
|
|
// The resource no longer exist, in which case we stop processing.
|
|
if apierrors.IsNotFound(err) {
|
|
return controllerruntime.Result{}, nil
|
|
}
|
|
|
|
return controllerruntime.Result{}, err
|
|
}
|
|
|
|
if !binding.DeletionTimestamp.IsZero() {
|
|
klog.V(4).Infof("Begin to delete works owned by binding(%s).", req.NamespacedName.String())
|
|
if err := helper.DeleteWorks(ctx, c.Client, req.Namespace, req.Name, binding.Labels[workv1alpha2.ResourceBindingPermanentIDLabel]); err != nil {
|
|
klog.Errorf("Failed to delete works related to %s/%s: %v", binding.GetNamespace(), binding.GetName(), err)
|
|
return controllerruntime.Result{}, err
|
|
}
|
|
return c.removeFinalizer(ctx, binding)
|
|
}
|
|
|
|
return c.syncBinding(ctx, binding)
|
|
}
|
|
|
|
// removeFinalizer removes finalizer from the given ResourceBinding
|
|
func (c *ResourceBindingController) removeFinalizer(ctx context.Context, rb *workv1alpha2.ResourceBinding) (controllerruntime.Result, error) {
|
|
if !controllerutil.ContainsFinalizer(rb, util.BindingControllerFinalizer) {
|
|
return controllerruntime.Result{}, nil
|
|
}
|
|
|
|
controllerutil.RemoveFinalizer(rb, util.BindingControllerFinalizer)
|
|
err := c.Client.Update(ctx, rb)
|
|
if err != nil {
|
|
return controllerruntime.Result{}, err
|
|
}
|
|
return controllerruntime.Result{}, nil
|
|
}
|
|
|
|
// syncBinding will sync resourceBinding to Works.
|
|
func (c *ResourceBindingController) syncBinding(ctx context.Context, binding *workv1alpha2.ResourceBinding) (controllerruntime.Result, error) {
|
|
if err := c.removeOrphanWorks(ctx, binding); err != nil {
|
|
return controllerruntime.Result{}, err
|
|
}
|
|
|
|
workload, err := helper.FetchResourceTemplate(ctx, c.DynamicClient, c.InformerManager, c.RESTMapper, binding.Spec.Resource)
|
|
if err != nil {
|
|
if apierrors.IsNotFound(err) {
|
|
// It might happen when the resource template has been removed but the garbage collector hasn't removed
|
|
// the ResourceBinding which dependent on resource template.
|
|
// So, just return without retry(requeue) would save unnecessary loop.
|
|
return controllerruntime.Result{}, nil
|
|
}
|
|
klog.Errorf("Failed to fetch workload for resourceBinding(%s/%s). Error: %v.",
|
|
binding.GetNamespace(), binding.GetName(), err)
|
|
return controllerruntime.Result{}, err
|
|
}
|
|
start := time.Now()
|
|
err = ensureWork(ctx, c.Client, c.ResourceInterpreter, workload, c.OverrideManager, binding, apiextensionsv1.NamespaceScoped)
|
|
metrics.ObserveSyncWorkLatency(err, start)
|
|
if err != nil {
|
|
klog.Errorf("Failed to transform resourceBinding(%s/%s) to works. Error: %v.",
|
|
binding.GetNamespace(), binding.GetName(), err)
|
|
c.EventRecorder.Event(binding, corev1.EventTypeWarning, events.EventReasonSyncWorkFailed, err.Error())
|
|
c.EventRecorder.Event(workload, corev1.EventTypeWarning, events.EventReasonSyncWorkFailed, err.Error())
|
|
return controllerruntime.Result{}, err
|
|
}
|
|
|
|
msg := fmt.Sprintf("Sync work of resourceBinding(%s/%s) successful.", binding.Namespace, binding.Name)
|
|
klog.V(4).Infof(msg)
|
|
c.EventRecorder.Event(binding, corev1.EventTypeNormal, events.EventReasonSyncWorkSucceed, msg)
|
|
c.EventRecorder.Event(workload, corev1.EventTypeNormal, events.EventReasonSyncWorkSucceed, msg)
|
|
return controllerruntime.Result{}, nil
|
|
}
|
|
|
|
func (c *ResourceBindingController) removeOrphanWorks(ctx context.Context, binding *workv1alpha2.ResourceBinding) error {
|
|
works, err := helper.FindOrphanWorks(ctx, c.Client, binding.Namespace, binding.Name,
|
|
binding.Labels[workv1alpha2.ResourceBindingPermanentIDLabel], helper.ObtainBindingSpecExistingClusters(binding.Spec))
|
|
if err != nil {
|
|
klog.Errorf("Failed to find orphan works by resourceBinding(%s/%s). Error: %v.",
|
|
binding.GetNamespace(), binding.GetName(), err)
|
|
c.EventRecorder.Event(binding, corev1.EventTypeWarning, events.EventReasonCleanupWorkFailed, err.Error())
|
|
return err
|
|
}
|
|
|
|
err = helper.RemoveOrphanWorks(ctx, c.Client, works)
|
|
if err != nil {
|
|
klog.Errorf("Failed to remove orphan works by resourceBinding(%s/%s). Error: %v.",
|
|
binding.GetNamespace(), binding.GetName(), err)
|
|
c.EventRecorder.Event(binding, corev1.EventTypeWarning, events.EventReasonCleanupWorkFailed, err.Error())
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// SetupWithManager creates a controller and register to controller manager.
|
|
func (c *ResourceBindingController) SetupWithManager(mgr controllerruntime.Manager) error {
|
|
return controllerruntime.NewControllerManagedBy(mgr).
|
|
Named(ControllerName).
|
|
For(&workv1alpha2.ResourceBinding{}).
|
|
WithEventFilter(predicate.GenerationChangedPredicate{}).
|
|
Watches(&policyv1alpha1.OverridePolicy{}, handler.EnqueueRequestsFromMapFunc(c.newOverridePolicyFunc())).
|
|
Watches(&policyv1alpha1.ClusterOverridePolicy{}, handler.EnqueueRequestsFromMapFunc(c.newOverridePolicyFunc())).
|
|
WithOptions(controller.Options{RateLimiter: ratelimiterflag.DefaultControllerRateLimiter(c.RateLimiterOptions)}).
|
|
Complete(c)
|
|
}
|
|
|
|
func (c *ResourceBindingController) newOverridePolicyFunc() handler.MapFunc {
|
|
return func(ctx context.Context, a client.Object) []reconcile.Request {
|
|
var overrideRS []policyv1alpha1.ResourceSelector
|
|
var namespace string
|
|
switch t := a.(type) {
|
|
case *policyv1alpha1.ClusterOverridePolicy:
|
|
overrideRS = t.Spec.ResourceSelectors
|
|
case *policyv1alpha1.OverridePolicy:
|
|
overrideRS = t.Spec.ResourceSelectors
|
|
namespace = t.Namespace
|
|
default:
|
|
return nil
|
|
}
|
|
|
|
bindingList := &workv1alpha2.ResourceBindingList{}
|
|
if err := c.Client.List(ctx, bindingList); err != nil {
|
|
klog.Errorf("Failed to list resourceBindings, error: %v", err)
|
|
return nil
|
|
}
|
|
|
|
var requests []reconcile.Request
|
|
for _, binding := range bindingList.Items {
|
|
// Skip resourceBinding with different namespace of current overridePolicy.
|
|
if len(namespace) != 0 && namespace != binding.Namespace {
|
|
continue
|
|
}
|
|
|
|
// Nil resourceSelectors means matching all resources.
|
|
if len(overrideRS) == 0 {
|
|
klog.V(2).Infof("Enqueue ResourceBinding(%s/%s) as override policy(%s/%s) changes.", binding.Namespace, binding.Name, a.GetNamespace(), a.GetName())
|
|
requests = append(requests, reconcile.Request{NamespacedName: types.NamespacedName{Namespace: binding.Namespace, Name: binding.Name}})
|
|
continue
|
|
}
|
|
|
|
workload, err := helper.FetchResourceTemplate(ctx, c.DynamicClient, c.InformerManager, c.RESTMapper, binding.Spec.Resource)
|
|
if err != nil {
|
|
// If we cannot fetch resource template from binding, this may be due to the fact that the resource template has been deleted.
|
|
// Just skip it so that it will not affect other bindings.
|
|
klog.Errorf("Failed to fetch workload for resourceBinding(%s/%s). Error: %v.", binding.Namespace, binding.Name, err)
|
|
continue
|
|
}
|
|
|
|
for _, rs := range overrideRS {
|
|
if util.ResourceMatches(workload, rs) {
|
|
klog.V(2).Infof("Enqueue ResourceBinding(%s/%s) as override policy(%s/%s) changes.", binding.Namespace, binding.Name, a.GetNamespace(), a.GetName())
|
|
requests = append(requests, reconcile.Request{NamespacedName: types.NamespacedName{Namespace: binding.Namespace, Name: binding.Name}})
|
|
break
|
|
}
|
|
}
|
|
}
|
|
return requests
|
|
}
|
|
}
|