package injector import ( "fmt" pb "github.com/linkerd/linkerd2/controller/gen/config" "github.com/linkerd/linkerd2/controller/k8s" "github.com/linkerd/linkerd2/pkg/config" "github.com/linkerd/linkerd2/pkg/inject" pkgK8s "github.com/linkerd/linkerd2/pkg/k8s" "github.com/linkerd/linkerd2/pkg/version" log "github.com/sirupsen/logrus" admissionv1beta1 "k8s.io/api/admission/v1beta1" v1 "k8s.io/api/core/v1" ) // Inject returns an AdmissionResponse containing the patch, if any, to apply // to the pod (proxy sidecar and eventually the init container to set it up) func Inject(api *k8s.API, request *admissionv1beta1.AdmissionRequest, ) (*admissionv1beta1.AdmissionResponse, error) { log.Debugf("request object bytes: %s", request.Object.Raw) globalConfig, err := config.Global(pkgK8s.MountPathGlobalConfig) if err != nil { return nil, err } proxyConfig, err := config.Proxy(pkgK8s.MountPathProxyConfig) if err != nil { return nil, err } namespace, err := api.NS().Lister().Get(request.Namespace) if err != nil { return nil, err } nsAnnotations := namespace.GetAnnotations() configs := &pb.All{Global: globalConfig, Proxy: proxyConfig} resourceConfig := inject.NewResourceConfig(configs, inject.OriginWebhook). WithOwnerRetriever(ownerRetriever(api, request.Namespace)). WithNsAnnotations(nsAnnotations). WithKind(request.Kind.Kind) report, err := resourceConfig.ParseMetaAndYAML(request.Object.Raw) if err != nil { return nil, err } log.Infof("received %s", report.ResName()) admissionResponse := &admissionv1beta1.AdmissionResponse{ UID: request.UID, Allowed: true, } if !report.Injectable() { log.Infof("skipped %s", report.ResName()) return admissionResponse, nil } resourceConfig.AppendPodAnnotations(map[string]string{ pkgK8s.CreatedByAnnotation: fmt.Sprintf("linkerd/proxy-injector %s", version.Version), }) p, err := resourceConfig.GetPatch(request.Object.Raw, true) if err != nil { return nil, err } if p.IsEmpty() { return admissionResponse, nil } patchJSON, err := p.Marshal() if err != nil { return nil, err } log.Infof("patch generated for: %s", report.ResName()) log.Debugf("patch: %s", patchJSON) patchType := admissionv1beta1.PatchTypeJSONPatch admissionResponse.Patch = patchJSON admissionResponse.PatchType = &patchType return admissionResponse, nil } func ownerRetriever(api *k8s.API, ns string) inject.OwnerRetrieverFunc { return func(p *v1.Pod) (string, string) { p.SetNamespace(ns) return api.GetOwnerKindAndName(p) } }