mirror of https://github.com/linkerd/linkerd2.git
89 lines
2.4 KiB
Go
89 lines
2.4 KiB
Go
package injector
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
pb "github.com/linkerd/linkerd2/controller/gen/config"
|
|
"github.com/linkerd/linkerd2/controller/k8s"
|
|
"github.com/linkerd/linkerd2/pkg/config"
|
|
"github.com/linkerd/linkerd2/pkg/inject"
|
|
pkgK8s "github.com/linkerd/linkerd2/pkg/k8s"
|
|
"github.com/linkerd/linkerd2/pkg/version"
|
|
log "github.com/sirupsen/logrus"
|
|
admissionv1beta1 "k8s.io/api/admission/v1beta1"
|
|
v1 "k8s.io/api/core/v1"
|
|
)
|
|
|
|
// Inject returns an AdmissionResponse containing the patch, if any, to apply
|
|
// to the pod (proxy sidecar and eventually the init container to set it up)
|
|
func Inject(api *k8s.API,
|
|
request *admissionv1beta1.AdmissionRequest,
|
|
) (*admissionv1beta1.AdmissionResponse, error) {
|
|
log.Debugf("request object bytes: %s", request.Object.Raw)
|
|
|
|
globalConfig, err := config.Global(pkgK8s.MountPathGlobalConfig)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
proxyConfig, err := config.Proxy(pkgK8s.MountPathProxyConfig)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
namespace, err := api.NS().Lister().Get(request.Namespace)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
nsAnnotations := namespace.GetAnnotations()
|
|
|
|
configs := &pb.All{Global: globalConfig, Proxy: proxyConfig}
|
|
resourceConfig := inject.NewResourceConfig(configs, inject.OriginWebhook).
|
|
WithOwnerRetriever(ownerRetriever(api, request.Namespace)).
|
|
WithNsAnnotations(nsAnnotations).
|
|
WithKind(request.Kind.Kind)
|
|
report, err := resourceConfig.ParseMetaAndYAML(request.Object.Raw)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
log.Infof("received %s", report.ResName())
|
|
|
|
admissionResponse := &admissionv1beta1.AdmissionResponse{
|
|
UID: request.UID,
|
|
Allowed: true,
|
|
}
|
|
|
|
if !report.Injectable() {
|
|
log.Infof("skipped %s", report.ResName())
|
|
return admissionResponse, nil
|
|
}
|
|
|
|
resourceConfig.AppendPodAnnotations(map[string]string{
|
|
pkgK8s.CreatedByAnnotation: fmt.Sprintf("linkerd/proxy-injector %s", version.Version),
|
|
})
|
|
patchJSON, err := resourceConfig.GetPatch(true)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if len(patchJSON) == 0 {
|
|
return admissionResponse, nil
|
|
}
|
|
|
|
log.Infof("patch generated for: %s", report.ResName())
|
|
log.Debugf("patch: %s", patchJSON)
|
|
|
|
patchType := admissionv1beta1.PatchTypeJSONPatch
|
|
admissionResponse.Patch = patchJSON
|
|
admissionResponse.PatchType = &patchType
|
|
|
|
return admissionResponse, nil
|
|
}
|
|
|
|
func ownerRetriever(api *k8s.API, ns string) inject.OwnerRetrieverFunc {
|
|
return func(p *v1.Pod) (string, string) {
|
|
p.SetNamespace(ns)
|
|
return api.GetOwnerKindAndName(p, true)
|
|
}
|
|
}
|