107 lines
3.8 KiB
Go
107 lines
3.8 KiB
Go
/*
|
|
Copyright 2017 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package configuration
|
|
|
|
import (
|
|
"fmt"
|
|
"sort"
|
|
"sync/atomic"
|
|
|
|
"k8s.io/api/admissionregistration/v1beta1"
|
|
"k8s.io/apimachinery/pkg/labels"
|
|
utilruntime "k8s.io/apimachinery/pkg/util/runtime"
|
|
"k8s.io/apiserver/pkg/admission/plugin/webhook"
|
|
"k8s.io/apiserver/pkg/admission/plugin/webhook/generic"
|
|
"k8s.io/client-go/informers"
|
|
admissionregistrationlisters "k8s.io/client-go/listers/admissionregistration/v1beta1"
|
|
"k8s.io/client-go/tools/cache"
|
|
)
|
|
|
|
// mutatingWebhookConfigurationManager collects the mutating webhook objects so that they can be called.
|
|
type mutatingWebhookConfigurationManager struct {
|
|
configuration *atomic.Value
|
|
lister admissionregistrationlisters.MutatingWebhookConfigurationLister
|
|
hasSynced func() bool
|
|
}
|
|
|
|
var _ generic.Source = &mutatingWebhookConfigurationManager{}
|
|
|
|
func NewMutatingWebhookConfigurationManager(f informers.SharedInformerFactory) generic.Source {
|
|
informer := f.Admissionregistration().V1beta1().MutatingWebhookConfigurations()
|
|
manager := &mutatingWebhookConfigurationManager{
|
|
configuration: &atomic.Value{},
|
|
lister: informer.Lister(),
|
|
hasSynced: informer.Informer().HasSynced,
|
|
}
|
|
|
|
// Start with an empty list
|
|
manager.configuration.Store([]webhook.WebhookAccessor{})
|
|
|
|
// On any change, rebuild the config
|
|
informer.Informer().AddEventHandler(cache.ResourceEventHandlerFuncs{
|
|
AddFunc: func(_ interface{}) { manager.updateConfiguration() },
|
|
UpdateFunc: func(_, _ interface{}) { manager.updateConfiguration() },
|
|
DeleteFunc: func(_ interface{}) { manager.updateConfiguration() },
|
|
})
|
|
|
|
return manager
|
|
}
|
|
|
|
// Webhooks returns the merged MutatingWebhookConfiguration.
|
|
func (m *mutatingWebhookConfigurationManager) Webhooks() []webhook.WebhookAccessor {
|
|
return m.configuration.Load().([]webhook.WebhookAccessor)
|
|
}
|
|
|
|
func (m *mutatingWebhookConfigurationManager) HasSynced() bool {
|
|
return m.hasSynced()
|
|
}
|
|
|
|
func (m *mutatingWebhookConfigurationManager) updateConfiguration() {
|
|
configurations, err := m.lister.List(labels.Everything())
|
|
if err != nil {
|
|
utilruntime.HandleError(fmt.Errorf("error updating configuration: %v", err))
|
|
return
|
|
}
|
|
m.configuration.Store(mergeMutatingWebhookConfigurations(configurations))
|
|
}
|
|
|
|
func mergeMutatingWebhookConfigurations(configurations []*v1beta1.MutatingWebhookConfiguration) []webhook.WebhookAccessor {
|
|
// The internal order of webhooks for each configuration is provided by the user
|
|
// but configurations themselves can be in any order. As we are going to run these
|
|
// webhooks in serial, they are sorted here to have a deterministic order.
|
|
sort.SliceStable(configurations, MutatingWebhookConfigurationSorter(configurations).ByName)
|
|
accessors := []webhook.WebhookAccessor{}
|
|
for _, c := range configurations {
|
|
// webhook names are not validated for uniqueness, so we check for duplicates and
|
|
// add a int suffix to distinguish between them
|
|
names := map[string]int{}
|
|
for i := range c.Webhooks {
|
|
n := c.Webhooks[i].Name
|
|
uid := fmt.Sprintf("%s/%s/%d", c.Name, n, names[n])
|
|
names[n]++
|
|
accessors = append(accessors, webhook.NewMutatingWebhookAccessor(uid, &c.Webhooks[i]))
|
|
}
|
|
}
|
|
return accessors
|
|
}
|
|
|
|
type MutatingWebhookConfigurationSorter []*v1beta1.MutatingWebhookConfiguration
|
|
|
|
func (a MutatingWebhookConfigurationSorter) ByName(i, j int) bool {
|
|
return a[i].Name < a[j].Name
|
|
}
|