/
config.go
77 lines (64 loc) · 2.24 KB
/
config.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
/*
Copyright 2017 by the contributors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package config
import (
"fmt"
"path/filepath"
"github.com/sirupsen/logrus"
)
// ListenURL listen url
func (c *Config) ListenURL() string {
return fmt.Sprintf("https://%s/authenticate", c.ListenAddr())
}
// ListenAddr listen addr
func (c *Config) ListenAddr() string {
return fmt.Sprintf("%s:%d", c.Hostname, c.HostPort)
}
// GenerateFiles create related files
func (c *Config) GenerateFiles() error {
// load or generate a certificate+private key
_, err := c.GetOrCreateCertificate()
if err != nil {
return fmt.Errorf("could not load/generate a certificate")
}
err = c.CreateKubeconfig()
if err != nil {
return fmt.Errorf("could not generate a webhook kubeconfig")
}
return nil
}
// CreateKubeconfig create a kubeconfig file
func (c *Config) CreateKubeconfig() error {
cert, err := c.LoadExistingCertificate()
if err != nil {
return fmt.Errorf("failed to load an existing certificate: %v", err)
}
// write a kubeconfig suitable for the API server to call us
logrus.WithField("kubeconfigPath", c.GenerateKubeconfigPath).Info("writing webhook kubeconfig file")
err = kubeconfigParams{
ServerURL: c.ListenURL(),
CertificateAuthorityBase64: certToPEMBase64(cert.Certificate[0]),
}.writeTo(c.GenerateKubeconfigPath)
if err != nil {
logrus.WithField("kubeconfigPath", c.GenerateKubeconfigPath).WithError(err).Fatal("could not write kubeconfig")
}
return nil
}
// CertPath returns the path to the pem file containing the certificate
func (c *Config) CertPath() string {
return filepath.Join(c.StateDir, "cert.pem")
}
// KeyPath returns the path to the pem file containing the private key
func (c *Config) KeyPath() string {
return filepath.Join(c.StateDir, "key.pem")
}