feat: add KongUpstreamPolicy controller

Kong · Oct 25, 2023 · 2f1c410 · 2f1c410
1 parent 4efc818
commit 2f1c410
Show file tree

Hide file tree

Showing 13 changed files with 563 additions and 290 deletions.
diff --git a/config/crd/kustomization.yaml b/config/crd/kustomization.yaml
@@ -10,6 +10,7 @@ resources:
 - bases/configuration.konghq.com_kongingresses.yaml
 - bases/configuration.konghq.com_kongplugins.yaml
 - bases/configuration.konghq.com_ingressclassparameterses.yaml
+- bases/configuration.konghq.com_kongupstreampolicies.yaml
 #+kubebuilder:scaffold:crdkustomizeresource
 
 patchesStrategicMerge:

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -89,6 +89,22 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+    - configuration.konghq.com
+  resources:
+    - kongupstreampolicies
+  verbs:
+    - get
+    - list
+    - watch
+- apiGroups:
+    - configuration.konghq.com
+  resources:
+    - kongupstreampolicies/status
+  verbs:
+    - get
+    - patch
+    - update
 - apiGroups:
   - configuration.konghq.com
   resources:

diff --git a/docs/cli-arguments.md b/docs/cli-arguments.md
@@ -21,6 +21,7 @@
 | `--enable-controller-ingress-class-networkingv1` | `bool` | Enable the networking.k8s.io/v1 IngressClass controller. | `true` |
 | `--enable-controller-ingress-class-parameters` | `bool` | Enable the IngressClassParameters controller. | `true` |
 | `--enable-controller-ingress-networkingv1` | `bool` | Enable the networking.k8s.io/v1 Ingress controller. | `true` |
+| `--enable-controller-kong-upstream-policy` | `bool` | Enable the KongUpstreamPolicy controller. | `true` |
 | `--enable-controller-kongclusterplugin` | `bool` | Enable the KongClusterPlugin controller. | `true` |
 | `--enable-controller-kongconsumer` | `bool` | Enable the KongConsumer controller. . | `true` |
 | `--enable-controller-kongingress` | `bool` | Enable the KongIngress controller. | `true` |

diff --git a/hack/generators/controllers/networking/main.go b/hack/generators/controllers/networking/main.go
@@ -104,6 +104,18 @@ var inputControllersNeeded = &typesNeeded{
 		AcceptsIngressClassNameSpec:       false,
 		RBACVerbs:                         []string{"get", "list", "watch"},
 	},
+	typeNeeded{
+		Group:                  "configuration.konghq.com",
+		Version:                "v1beta1",
+		Kind:                   "KongUpstreamPolicy",
+		PackageImportAlias:     "kongv1beta1",
+		PackageAlias:           "KongV1beta1",
+		Package:                kongv1,
+		Plural:                 "kongupstreampolicies",
+		CacheType:              "KongUpstreamPolicy",
+		NeedsStatusPermissions: true,
+		RBACVerbs:              []string{"get", "list", "watch"},
+	},
 	typeNeeded{
 		Group:                             "configuration.konghq.com",
 		Version:                           "v1",

diff --git a/internal/controllers/configuration/zz_generated_controllers.go b/internal/controllers/configuration/zz_generated_controllers.go
diff --git a/internal/manager/config.go b/internal/manager/config.go
@@ -105,6 +105,7 @@ type Config struct {
 	KongPluginEnabled             bool
 	KongConsumerEnabled           bool
 	ServiceEnabled                bool
+	KongUpstreamPolicyEnabled     bool
 
 	// Admission Webhook server config
 	AdmissionServer admission.ServerConfig
@@ -228,6 +229,7 @@ func (c *Config) FlagSet() *pflag.FlagSet {
 	flagSet.BoolVar(&c.KongPluginEnabled, "enable-controller-kongplugin", true, "Enable the KongPlugin controller.")
 	flagSet.BoolVar(&c.KongConsumerEnabled, "enable-controller-kongconsumer", true, "Enable the KongConsumer controller. ")
 	flagSet.BoolVar(&c.ServiceEnabled, "enable-controller-service", true, "Enable the Service controller.")
+	flagSet.BoolVar(&c.KongUpstreamPolicyEnabled, "enable-controller-kong-upstream-policy", true, "Enable the KongUpstreamPolicy controller.")
 
 	// Admission Webhook server config
 	flagSet.StringVar(&c.AdmissionServer.ListenAddr, "admission-webhook-listen", "off",

diff --git a/internal/manager/controllerdef.go b/internal/manager/controllerdef.go
@@ -251,6 +251,16 @@ func setupControllers(
 				// StatusQueue:       kubernetesStatusQueue,
 			},
 		},
+		{
+			Enabled: c.KongUpstreamPolicyEnabled,
+			Controller: &configuration.KongV1beta1KongUpstreamPolicyReconciler{
+				Client:           mgr.GetClient(),
+				Log:              ctrl.LoggerFrom(ctx).WithName("controllers").WithName("KongUpstreamPolicy"),
+				Scheme:           mgr.GetScheme(),
+				DataplaneClient:  dataplaneClient,
+				CacheSyncTimeout: c.CacheSyncTimeout,
+			},
+		},
 		// ---------------------------------------------------------------------------
 		// Gateway API Controllers - Beta APIs
 		// ---------------------------------------------------------------------------