4974e062d0
Auth is not automatically enabled because this requires some bootstrapping to work. I'll leave this for some future work. In the meantime people can use the current code similar to how they used the node-cli code to inject their own auth.
432 lines
11 KiB
Go
432 lines
11 KiB
Go
package nodeutil
|
|
|
|
import (
|
|
"context"
|
|
"crypto/tls"
|
|
"fmt"
|
|
"net"
|
|
"net/http"
|
|
"os"
|
|
"path"
|
|
"runtime"
|
|
"time"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/virtual-kubelet/virtual-kubelet/log"
|
|
"github.com/virtual-kubelet/virtual-kubelet/node"
|
|
v1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/client-go/informers"
|
|
"k8s.io/client-go/kubernetes"
|
|
"k8s.io/client-go/kubernetes/scheme"
|
|
corev1client "k8s.io/client-go/kubernetes/typed/core/v1"
|
|
corev1listers "k8s.io/client-go/listers/core/v1"
|
|
"k8s.io/client-go/tools/record"
|
|
)
|
|
|
|
// Node helps manage the startup/shutdown procedure for other controllers.
|
|
// It is intended as a convenience to reduce boiler plate code for starting up controllers.
|
|
//
|
|
// Must be created with constructor `NewNode`.
|
|
type Node struct {
|
|
nc *node.NodeController
|
|
pc *node.PodController
|
|
|
|
readyCb func(context.Context) error
|
|
|
|
ready chan struct{}
|
|
done chan struct{}
|
|
err error
|
|
|
|
podInformerFactory informers.SharedInformerFactory
|
|
scmInformerFactory informers.SharedInformerFactory
|
|
client kubernetes.Interface
|
|
|
|
listenAddr string
|
|
h http.Handler
|
|
tlsConfig *tls.Config
|
|
|
|
workers int
|
|
|
|
eb record.EventBroadcaster
|
|
}
|
|
|
|
// NodeController returns the configured node controller.
|
|
func (n *Node) NodeController() *node.NodeController {
|
|
return n.nc
|
|
}
|
|
|
|
// PodController returns the configured pod controller.
|
|
func (n *Node) PodController() *node.PodController {
|
|
return n.pc
|
|
}
|
|
|
|
func (n *Node) runHTTP(ctx context.Context) (func(), error) {
|
|
if n.tlsConfig == nil {
|
|
log.G(ctx).Warn("TLS config not provided, not starting up http service")
|
|
return func() {}, nil
|
|
}
|
|
if n.h == nil {
|
|
log.G(ctx).Debug("No http handler, not starting up http service")
|
|
return func() {}, nil
|
|
}
|
|
|
|
l, err := tls.Listen("tcp", n.listenAddr, n.tlsConfig)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "error starting http listener")
|
|
}
|
|
|
|
log.G(ctx).Debug("Started TLS listener")
|
|
|
|
srv := &http.Server{Handler: n.h, TLSConfig: n.tlsConfig}
|
|
go srv.Serve(l) //nolint:errcheck
|
|
log.G(ctx).Debug("HTTP server running")
|
|
|
|
return func() {
|
|
srv.Close()
|
|
l.Close()
|
|
}, nil
|
|
}
|
|
|
|
// Run starts all the underlying controllers
|
|
func (n *Node) Run(ctx context.Context) (retErr error) {
|
|
ctx, cancel := context.WithCancel(ctx)
|
|
defer func() {
|
|
cancel()
|
|
|
|
n.err = retErr
|
|
close(n.done)
|
|
}()
|
|
|
|
if n.eb != nil {
|
|
n.eb.StartLogging(log.G(ctx).Infof)
|
|
n.eb.StartRecordingToSink(&corev1client.EventSinkImpl{Interface: n.client.CoreV1().Events(v1.NamespaceAll)})
|
|
defer n.eb.Shutdown()
|
|
log.G(ctx).Debug("Started event broadcaster")
|
|
}
|
|
|
|
cancelHTTP, err := n.runHTTP(ctx)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer cancelHTTP()
|
|
|
|
go n.podInformerFactory.Start(ctx.Done())
|
|
go n.scmInformerFactory.Start(ctx.Done())
|
|
go n.pc.Run(ctx, n.workers) //nolint:errcheck
|
|
|
|
defer func() {
|
|
cancel()
|
|
<-n.pc.Done()
|
|
}()
|
|
|
|
select {
|
|
case <-ctx.Done():
|
|
return n.err
|
|
case <-n.pc.Ready():
|
|
case <-n.pc.Done():
|
|
return n.pc.Err()
|
|
}
|
|
|
|
log.G(ctx).Debug("pod controller ready")
|
|
|
|
go n.nc.Run(ctx) //nolint:errcheck
|
|
|
|
defer func() {
|
|
cancel()
|
|
<-n.nc.Done()
|
|
}()
|
|
|
|
select {
|
|
case <-ctx.Done():
|
|
n.err = ctx.Err()
|
|
return n.err
|
|
case <-n.nc.Ready():
|
|
case <-n.nc.Done():
|
|
return n.nc.Err()
|
|
}
|
|
|
|
log.G(ctx).Debug("node controller ready")
|
|
|
|
if n.readyCb != nil {
|
|
if err := n.readyCb(ctx); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
close(n.ready)
|
|
|
|
select {
|
|
case <-n.nc.Done():
|
|
cancel()
|
|
return n.nc.Err()
|
|
case <-n.pc.Done():
|
|
cancel()
|
|
return n.pc.Err()
|
|
}
|
|
}
|
|
|
|
// WaitReady waits for the specified timeout for the controller to be ready.
|
|
//
|
|
// The timeout is for convenience so the caller doesn't have to juggle an extra context.
|
|
func (n *Node) WaitReady(ctx context.Context, timeout time.Duration) error {
|
|
if timeout > 0 {
|
|
var cancel func()
|
|
ctx, cancel = context.WithTimeout(ctx, timeout)
|
|
defer cancel()
|
|
}
|
|
|
|
select {
|
|
case <-n.ready:
|
|
return nil
|
|
case <-n.done:
|
|
return fmt.Errorf("controller exited before ready: %w", n.err)
|
|
case <-ctx.Done():
|
|
return ctx.Err()
|
|
}
|
|
}
|
|
|
|
// Ready returns a channel that will be closed after the controller is ready.
|
|
func (n *Node) Ready() <-chan struct{} {
|
|
return n.ready
|
|
}
|
|
|
|
// Done returns a channel that will be closed when the controller has exited.
|
|
func (n *Node) Done() <-chan struct{} {
|
|
return n.done
|
|
}
|
|
|
|
// Err returns any error that occurred with the controller.
|
|
//
|
|
// This always return nil before `<-Done()`.
|
|
func (n *Node) Err() error {
|
|
select {
|
|
case <-n.Done():
|
|
return n.err
|
|
default:
|
|
return nil
|
|
}
|
|
}
|
|
|
|
// NodeOpt is used as functional options when configuring a new node in NewNodeFromClient
|
|
type NodeOpt func(c *NodeConfig) error
|
|
|
|
// NodeConfig is used to hold configuration items for a Node.
|
|
// It gets used in conjection with NodeOpt in NewNodeFromClient
|
|
type NodeConfig struct {
|
|
// Set the client to use, otherwise a client will be created from ClientsetFromEnv
|
|
Client kubernetes.Interface
|
|
|
|
// Set the node spec to register with Kubernetes
|
|
NodeSpec v1.Node
|
|
// Set the path to read a kubeconfig from for creating a client.
|
|
// This is ignored when a client is provided to NewNodeFromClient
|
|
KubeconfigPath string
|
|
// Set the period for a full resync for generated client-go informers
|
|
InformerResyncPeriod time.Duration
|
|
|
|
// Set the address to listen on for the http API
|
|
HTTPListenAddr string
|
|
// Set a custom API handler to use.
|
|
// You can use this to setup, for example, authentication middleware.
|
|
// If one is not provided a default one will be created.
|
|
//
|
|
// Note: If you provide your own handler, you'll need to handle all auth, routes, etc.
|
|
Handler http.Handler
|
|
// Set the timeout for idle http streams
|
|
StreamIdleTimeout time.Duration
|
|
// Set the timeout for creating http streams
|
|
StreamCreationTimeout time.Duration
|
|
// Enable http debugging routes
|
|
DebugHTTP bool
|
|
// Set the tls config to use for the http server
|
|
TLSConfig *tls.Config
|
|
|
|
// Specify the event recorder to use
|
|
// If this is not provided, a default one will be used.
|
|
EventRecorder record.EventRecorder
|
|
|
|
// Set the number of workers to reconcile pods
|
|
// The default value is derived from the number of cores available.
|
|
NumWorkers int
|
|
|
|
routeAttacher func(Provider, NodeConfig, corev1listers.PodLister)
|
|
}
|
|
|
|
// WithNodeConfig returns a NodeOpt which replaces the NodeConfig with the passed in value.
|
|
func WithNodeConfig(c NodeConfig) NodeOpt {
|
|
return func(orig *NodeConfig) error {
|
|
*orig = c
|
|
return nil
|
|
}
|
|
}
|
|
|
|
// WithClient return a NodeOpt that sets the client that will be used to create/manage the node.
|
|
func WithClient(c kubernetes.Interface) NodeOpt {
|
|
return func(cfg *NodeConfig) error {
|
|
cfg.Client = c
|
|
return nil
|
|
}
|
|
}
|
|
|
|
// NewNodeFromClient creates a new node using the provided client and name.
|
|
// This is intended for high-level/low boiler-plate usage.
|
|
// Use the constructors in the `node` package for lower level configuration.
|
|
//
|
|
// Some basic values are set for node status, you'll almost certainly want to modify it.
|
|
//
|
|
// If client is nil, this will construct a client using ClientsetFromEnv
|
|
//
|
|
// It is up to the caller to configure auth on the HTTP handler.
|
|
func NewNodeFromClient(name string, newProvider NewProviderFunc, opts ...NodeOpt) (*Node, error) {
|
|
cfg := NodeConfig{
|
|
NumWorkers: runtime.NumCPU(),
|
|
InformerResyncPeriod: time.Minute,
|
|
KubeconfigPath: os.Getenv("KUBECONFIG"),
|
|
HTTPListenAddr: ":10250",
|
|
NodeSpec: v1.Node{
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Name: name,
|
|
Labels: map[string]string{
|
|
"type": "virtual-kubelet",
|
|
"kubernetes.io/role": "agent",
|
|
"kubernetes.io/hostname": name,
|
|
},
|
|
},
|
|
Status: v1.NodeStatus{
|
|
Phase: v1.NodePending,
|
|
Conditions: []v1.NodeCondition{
|
|
{Type: v1.NodeReady},
|
|
{Type: v1.NodeDiskPressure},
|
|
{Type: v1.NodeMemoryPressure},
|
|
{Type: v1.NodePIDPressure},
|
|
{Type: v1.NodeNetworkUnavailable},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
for _, o := range opts {
|
|
if err := o(&cfg); err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
if _, _, err := net.SplitHostPort(cfg.HTTPListenAddr); err != nil {
|
|
return nil, errors.Wrap(err, "error parsing http listen address")
|
|
}
|
|
|
|
client := cfg.Client
|
|
if client == nil {
|
|
var err error
|
|
client, err = ClientsetFromEnv(cfg.KubeconfigPath)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "error creating clientset from env")
|
|
}
|
|
}
|
|
|
|
podInformerFactory := informers.NewSharedInformerFactoryWithOptions(
|
|
client,
|
|
cfg.InformerResyncPeriod,
|
|
PodInformerFilter(name),
|
|
)
|
|
|
|
scmInformerFactory := informers.NewSharedInformerFactoryWithOptions(
|
|
client,
|
|
cfg.InformerResyncPeriod,
|
|
)
|
|
|
|
podInformer := podInformerFactory.Core().V1().Pods()
|
|
secretInformer := scmInformerFactory.Core().V1().Secrets()
|
|
configMapInformer := scmInformerFactory.Core().V1().ConfigMaps()
|
|
serviceInformer := scmInformerFactory.Core().V1().Services()
|
|
|
|
p, np, err := newProvider(ProviderConfig{
|
|
Pods: podInformer.Lister(),
|
|
ConfigMaps: configMapInformer.Lister(),
|
|
Secrets: secretInformer.Lister(),
|
|
Services: serviceInformer.Lister(),
|
|
Node: &cfg.NodeSpec,
|
|
})
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "error creating provider")
|
|
}
|
|
|
|
if cfg.routeAttacher != nil {
|
|
cfg.routeAttacher(p, cfg, podInformer.Lister())
|
|
}
|
|
|
|
var readyCb func(context.Context) error
|
|
if np == nil {
|
|
nnp := node.NewNaiveNodeProvider()
|
|
np = nnp
|
|
|
|
readyCb = func(ctx context.Context) error {
|
|
setNodeReady(&cfg.NodeSpec)
|
|
err := nnp.UpdateStatus(ctx, &cfg.NodeSpec)
|
|
return errors.Wrap(err, "error marking node as ready")
|
|
}
|
|
}
|
|
|
|
nc, err := node.NewNodeController(
|
|
np,
|
|
&cfg.NodeSpec,
|
|
client.CoreV1().Nodes(),
|
|
node.WithNodeEnableLeaseV1(NodeLeaseV1Client(client), node.DefaultLeaseDuration),
|
|
)
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "error creating node controller")
|
|
}
|
|
|
|
var eb record.EventBroadcaster
|
|
if cfg.EventRecorder == nil {
|
|
eb = record.NewBroadcaster()
|
|
cfg.EventRecorder = eb.NewRecorder(scheme.Scheme, v1.EventSource{Component: path.Join(name, "pod-controller")})
|
|
}
|
|
|
|
pc, err := node.NewPodController(node.PodControllerConfig{
|
|
PodClient: client.CoreV1(),
|
|
EventRecorder: cfg.EventRecorder,
|
|
Provider: p,
|
|
PodInformer: podInformer,
|
|
SecretInformer: secretInformer,
|
|
ConfigMapInformer: configMapInformer,
|
|
ServiceInformer: serviceInformer,
|
|
})
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "error creating pod controller")
|
|
}
|
|
|
|
return &Node{
|
|
nc: nc,
|
|
pc: pc,
|
|
readyCb: readyCb,
|
|
ready: make(chan struct{}),
|
|
done: make(chan struct{}),
|
|
eb: eb,
|
|
podInformerFactory: podInformerFactory,
|
|
scmInformerFactory: scmInformerFactory,
|
|
client: client,
|
|
tlsConfig: cfg.TLSConfig,
|
|
h: cfg.Handler,
|
|
listenAddr: cfg.HTTPListenAddr,
|
|
workers: cfg.NumWorkers,
|
|
}, nil
|
|
}
|
|
|
|
func setNodeReady(n *v1.Node) {
|
|
n.Status.Phase = v1.NodeRunning
|
|
for i, c := range n.Status.Conditions {
|
|
if c.Type != "Ready" {
|
|
continue
|
|
}
|
|
|
|
c.Message = "Kubelet is ready"
|
|
c.Reason = "KubeletReady"
|
|
c.Status = v1.ConditionTrue
|
|
c.LastHeartbeatTime = metav1.Now()
|
|
c.LastTransitionTime = metav1.Now()
|
|
n.Status.Conditions[i] = c
|
|
return
|
|
}
|
|
}
|