mirror of https://github.com/kubernetes/kops.git
143 lines
3.9 KiB
Go
143 lines
3.9 KiB
Go
/*
|
|
Copyright 2016 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package nodeup
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"fmt"
|
|
"runtime"
|
|
"text/template"
|
|
|
|
"github.com/golang/glog"
|
|
"k8s.io/apimachinery/pkg/util/sets"
|
|
api "k8s.io/kops/pkg/apis/kops"
|
|
"k8s.io/kops/pkg/apis/nodeup"
|
|
"k8s.io/kops/pkg/flagbuilder"
|
|
"k8s.io/kops/upup/pkg/fi"
|
|
"k8s.io/kops/upup/pkg/fi/secrets"
|
|
"k8s.io/kops/util/pkg/vfs"
|
|
)
|
|
|
|
const TagMaster = "_kubernetes_master"
|
|
|
|
// templateFunctions is a simple helper-class for the functions accessible to templates
|
|
type templateFunctions struct {
|
|
nodeupConfig *nodeup.Config
|
|
|
|
// cluster is populated with the current cluster
|
|
cluster *api.Cluster
|
|
// instanceGroup is populated with this node's instance group
|
|
instanceGroup *api.InstanceGroup
|
|
|
|
// keyStore is populated with a KeyStore, if KeyStore is set
|
|
keyStore fi.CAStore
|
|
// secretStore is populated with a SecretStore, if SecretStore is set
|
|
secretStore fi.SecretStore
|
|
|
|
tags sets.String
|
|
}
|
|
|
|
// newTemplateFunctions is the constructor for templateFunctions
|
|
func newTemplateFunctions(nodeupConfig *nodeup.Config, cluster *api.Cluster, instanceGroup *api.InstanceGroup, tags sets.String) (*templateFunctions, error) {
|
|
t := &templateFunctions{
|
|
nodeupConfig: nodeupConfig,
|
|
cluster: cluster,
|
|
instanceGroup: instanceGroup,
|
|
tags: tags,
|
|
}
|
|
|
|
if cluster.Spec.SecretStore != "" {
|
|
glog.Infof("Building SecretStore at %q", cluster.Spec.SecretStore)
|
|
p, err := vfs.Context.BuildVfsPath(cluster.Spec.SecretStore)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error building secret store path: %v", err)
|
|
}
|
|
|
|
t.secretStore = secrets.NewVFSSecretStore(cluster, p)
|
|
} else {
|
|
return nil, fmt.Errorf("SecretStore not set")
|
|
}
|
|
|
|
if cluster.Spec.KeyStore != "" {
|
|
glog.Infof("Building KeyStore at %q", cluster.Spec.KeyStore)
|
|
p, err := vfs.Context.BuildVfsPath(cluster.Spec.KeyStore)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error building key store path: %v", err)
|
|
}
|
|
|
|
t.keyStore = fi.NewVFSCAStore(cluster, p)
|
|
} else {
|
|
return nil, fmt.Errorf("KeyStore not set")
|
|
}
|
|
|
|
return t, nil
|
|
}
|
|
|
|
func (t *templateFunctions) populate(dest template.FuncMap) {
|
|
dest["Arch"] = func() string {
|
|
return runtime.GOARCH
|
|
}
|
|
|
|
dest["GetToken"] = t.GetToken
|
|
|
|
dest["BuildFlags"] = flagbuilder.BuildFlags
|
|
dest["Base64Encode"] = func(s string) string {
|
|
return base64.StdEncoding.EncodeToString([]byte(s))
|
|
}
|
|
|
|
// TODO: We may want to move these to a nodeset / masterset specific thing
|
|
dest["KubeDNS"] = func() *api.KubeDNSConfig {
|
|
return t.cluster.Spec.KubeDNS
|
|
}
|
|
dest["KubeScheduler"] = func() *api.KubeSchedulerConfig {
|
|
return t.cluster.Spec.KubeScheduler
|
|
}
|
|
dest["KubeAPIServer"] = func() *api.KubeAPIServerConfig {
|
|
return t.cluster.Spec.KubeAPIServer
|
|
}
|
|
dest["KubeControllerManager"] = func() *api.KubeControllerManagerConfig {
|
|
return t.cluster.Spec.KubeControllerManager
|
|
}
|
|
|
|
dest["ClusterName"] = func() string {
|
|
return t.cluster.ObjectMeta.Name
|
|
}
|
|
}
|
|
|
|
// GetToken returns the specified token
|
|
func (t *templateFunctions) GetToken(key string) (string, error) {
|
|
token, err := t.secretStore.FindSecret(key)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
if token == nil {
|
|
return "", fmt.Errorf("token not found: %q", key)
|
|
}
|
|
return string(token.Data), nil
|
|
}
|
|
|
|
// IsMaster returns true if we are tagged as a master
|
|
func (t *templateFunctions) isMaster() bool {
|
|
return t.hasTag(TagMaster)
|
|
}
|
|
|
|
// Tag returns true if we are tagged with the specified tag
|
|
func (t *templateFunctions) hasTag(tag string) bool {
|
|
_, found := t.tags[tag]
|
|
return found
|
|
}
|