e72a73af61
This uses a rest.Config to bootstrap TLS for the http server, webhook auth, and the client. This can be expanded later to do other kinds of TLS bootstrapping. For now this seems to get the job done in terms of what VK expects for permissions on the cluster. Signed-off-by: Brian Goff <cpuguy83@gmail.com>
67 lines
2.1 KiB
Go
67 lines
2.1 KiB
Go
package nodeutil
|
|
|
|
import (
|
|
"os"
|
|
|
|
"github.com/pkg/errors"
|
|
corev1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/fields"
|
|
kubeinformers "k8s.io/client-go/informers"
|
|
"k8s.io/client-go/kubernetes"
|
|
coordclientset "k8s.io/client-go/kubernetes/typed/coordination/v1"
|
|
"k8s.io/client-go/rest"
|
|
"k8s.io/client-go/tools/clientcmd"
|
|
)
|
|
|
|
// ClientsetFromEnv returns a kuberentes client set from:
|
|
// 1. the passed in kubeconfig path
|
|
// 2. If the kubeconfig path is empty or non-existent, then the in-cluster config is used.
|
|
func ClientsetFromEnv(kubeConfigPath string) (*kubernetes.Clientset, error) {
|
|
var (
|
|
config *rest.Config
|
|
err error
|
|
)
|
|
|
|
if kubeConfigPath != "" {
|
|
config, err = RestConfigFromEnv(kubeConfigPath)
|
|
} else {
|
|
config, err = rest.InClusterConfig()
|
|
}
|
|
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "error getting rest client config")
|
|
}
|
|
|
|
return kubernetes.NewForConfig(config)
|
|
}
|
|
|
|
// RestConfigFromEnv is like ClientsetFromEnv except it returns a rest config instead of a full client.
|
|
func RestConfigFromEnv(kubeConfigPath string) (*rest.Config, error) {
|
|
_, err := os.Stat(kubeConfigPath)
|
|
if os.IsNotExist(err) {
|
|
return rest.InClusterConfig()
|
|
}
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return clientcmd.NewNonInteractiveDeferredLoadingClientConfig(
|
|
&clientcmd.ClientConfigLoadingRules{ExplicitPath: kubeConfigPath},
|
|
&clientcmd.ConfigOverrides{},
|
|
).ClientConfig()
|
|
}
|
|
|
|
// PodInformerFilter is a filter that you should use when creating a pod informer for use with the pod controller.
|
|
func PodInformerFilter(node string) kubeinformers.SharedInformerOption {
|
|
return kubeinformers.WithTweakListOptions(func(options *metav1.ListOptions) {
|
|
options.FieldSelector = fields.OneTermEqualSelector("spec.nodeName", node).String()
|
|
})
|
|
}
|
|
|
|
// NodeLeaseV1Client creates a V1 Lease client for use with node leases from the passed in client.
|
|
//
|
|
// Use this with node.WithNodeEnableLeaseV1Beta1 when creating a node controller.
|
|
func NodeLeaseV1Client(client kubernetes.Interface) coordclientset.LeaseInterface {
|
|
return client.CoordinationV1().Leases(corev1.NamespaceNodeLease)
|
|
}
|