mirror of https://github.com/openkruise/kruise.git
133 lines
3.9 KiB
Go
133 lines
3.9 KiB
Go
/*
|
|
Copyright 2019 The Kruise Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package mutating
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"net/http"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
|
|
|
|
"github.com/openkruise/kruise/pkg/features"
|
|
utilfeature "github.com/openkruise/kruise/pkg/util/feature"
|
|
)
|
|
|
|
// PodCreateHandler handles Pod
|
|
type PodCreateHandler struct {
|
|
// To use the client, you need to do the following:
|
|
// - uncomment it
|
|
// - import sigs.k8s.io/controller-runtime/pkg/client
|
|
// - uncomment the InjectClient method at the bottom of this file.
|
|
Client client.Client
|
|
|
|
// Decoder decodes objects
|
|
Decoder admission.Decoder
|
|
}
|
|
|
|
var _ admission.Handler = &PodCreateHandler{}
|
|
|
|
// Handle handles admission requests.
|
|
func (h *PodCreateHandler) Handle(ctx context.Context, req admission.Request) admission.Response {
|
|
obj := &corev1.Pod{}
|
|
|
|
err := h.Decoder.Decode(req, obj)
|
|
if err != nil {
|
|
return admission.Errored(http.StatusBadRequest, err)
|
|
}
|
|
// when pod.namespace is empty, using req.namespace
|
|
if obj.Namespace == "" {
|
|
obj.Namespace = req.Namespace
|
|
}
|
|
oriObj := obj.DeepCopy()
|
|
var changed bool
|
|
|
|
if skip := injectPodReadinessGate(req, obj); !skip {
|
|
changed = true
|
|
}
|
|
|
|
if utilfeature.DefaultFeatureGate.Enabled(features.WorkloadSpread) {
|
|
if skip, err := h.workloadSpreadMutatingPod(ctx, req, obj); err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
} else if !skip {
|
|
changed = true
|
|
}
|
|
}
|
|
|
|
if skip, err := h.sidecarsetMutatingPod(ctx, req, obj); err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
} else if !skip {
|
|
changed = true
|
|
}
|
|
|
|
// "the order matters and sidecarsetMutatingPod must precede containerLaunchPriorityInitialization"
|
|
if skip, err := h.containerLaunchPriorityInitialization(ctx, req, obj); err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
} else if !skip {
|
|
changed = true
|
|
}
|
|
|
|
// patch related-pub annotation in pod
|
|
if utilfeature.DefaultFeatureGate.Enabled(features.PodUnavailableBudgetUpdateGate) ||
|
|
utilfeature.DefaultFeatureGate.Enabled(features.PodUnavailableBudgetDeleteGate) {
|
|
if skip, err := h.pubMutatingPod(ctx, req, obj); err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
} else if !skip {
|
|
changed = true
|
|
}
|
|
}
|
|
|
|
// persistent pod state
|
|
if skip, err := h.persistentPodStateMutatingPod(ctx, req, obj); err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
} else if !skip {
|
|
changed = true
|
|
}
|
|
|
|
// EnhancedLivenessProbe enabled
|
|
if utilfeature.DefaultFeatureGate.Enabled(features.EnhancedLivenessProbeGate) {
|
|
if skip, err := h.enhancedLivenessProbeWhenPodCreate(ctx, req, obj); err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
} else if !skip {
|
|
changed = true
|
|
}
|
|
}
|
|
|
|
if utilfeature.DefaultFeatureGate.Enabled(features.EnablePodProbeMarkerOnServerless) {
|
|
if skip, err := h.podProbeMarkerMutatingPod(ctx, req, obj); err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
} else if !skip {
|
|
changed = true
|
|
}
|
|
}
|
|
|
|
if !changed {
|
|
return admission.Allowed("")
|
|
}
|
|
marshaled, err := json.Marshal(obj)
|
|
if err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
}
|
|
original, err := json.Marshal(oriObj)
|
|
if err != nil {
|
|
return admission.Errored(http.StatusInternalServerError, err)
|
|
}
|
|
return admission.PatchResponseFromRaw(original, marshaled)
|
|
}
|