forked from openshift/origin
-
Notifications
You must be signed in to change notification settings - Fork 1
/
webhook.go
143 lines (130 loc) · 4.71 KB
/
webhook.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
package buildconfig
import (
"fmt"
"net/http"
"strings"
"k8s.io/apimachinery/pkg/api/errors"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/runtime"
"k8s.io/apimachinery/pkg/runtime/schema"
utilruntime "k8s.io/apimachinery/pkg/util/runtime"
apirequest "k8s.io/apiserver/pkg/endpoints/request"
kapi "k8s.io/kubernetes/pkg/api"
buildapi "github.com/openshift/origin/pkg/build/apis/build"
"github.com/openshift/origin/pkg/build/client"
"github.com/openshift/origin/pkg/build/webhook"
"github.com/openshift/origin/pkg/util/rest"
)
// NewWebHookREST returns the webhook handler wrapped in a rest.WebHook object.
func NewWebHookREST(registry Registry, instantiator client.BuildConfigInstantiator, groupVersion schema.GroupVersion, plugins map[string]webhook.Plugin) *rest.WebHook {
hook := &WebHook{
groupVersion: groupVersion,
registry: registry,
instantiator: instantiator,
plugins: plugins,
}
return rest.NewWebHook(hook, false)
}
type WebHook struct {
groupVersion schema.GroupVersion
registry Registry
instantiator client.BuildConfigInstantiator
plugins map[string]webhook.Plugin
}
// ServeHTTP implements rest.HookHandler
func (w *WebHook) ServeHTTP(writer http.ResponseWriter, req *http.Request, ctx apirequest.Context, name, subpath string) error {
parts := strings.Split(subpath, "/")
if len(parts) != 2 {
return errors.NewBadRequest(fmt.Sprintf("unexpected hook subpath %s", subpath))
}
secret, hookType := parts[0], parts[1]
plugin, ok := w.plugins[hookType]
if !ok {
return errors.NewNotFound(buildapi.LegacyResource("buildconfighook"), hookType)
}
config, err := w.registry.GetBuildConfig(ctx, name, &metav1.GetOptions{})
if err != nil {
// clients should not be able to find information about build configs in
// the system unless the config exists and the secret matches
return errors.NewUnauthorized(fmt.Sprintf("the webhook %q for %q did not accept your secret", hookType, name))
}
revision, envvars, dockerStrategyOptions, proceed, err := plugin.Extract(config, secret, "", req)
if !proceed {
switch err {
case webhook.ErrSecretMismatch, webhook.ErrHookNotEnabled:
return errors.NewUnauthorized(fmt.Sprintf("the webhook %q for %q did not accept your secret", hookType, name))
case webhook.MethodNotSupported:
return errors.NewMethodNotSupported(buildapi.Resource("buildconfighook"), req.Method)
}
if _, ok := err.(*errors.StatusError); !ok && err != nil {
return errors.NewInternalError(fmt.Errorf("hook failed: %v", err))
}
return err
}
warning := err
buildTriggerCauses := generateBuildTriggerInfo(revision, hookType, secret)
request := &buildapi.BuildRequest{
TriggeredBy: buildTriggerCauses,
ObjectMeta: metav1.ObjectMeta{Name: name},
Revision: revision,
Env: envvars,
DockerStrategyOptions: dockerStrategyOptions,
}
newBuild, err := w.instantiator.Instantiate(config.Namespace, request)
if err != nil {
return errors.NewInternalError(fmt.Errorf("could not generate a build: %v", err))
}
// Send back the build name so that the client can alert the user.
if newBuildEncoded, err := runtime.Encode(kapi.Codecs.LegacyCodec(w.groupVersion), newBuild); err != nil {
utilruntime.HandleError(err)
} else {
writer.Write(newBuildEncoded)
}
return warning
}
func generateBuildTriggerInfo(revision *buildapi.SourceRevision, hookType, secret string) (buildTriggerCauses []buildapi.BuildTriggerCause) {
hiddenSecret := fmt.Sprintf("%s***", secret[:(len(secret)/2)])
switch {
case hookType == "generic":
buildTriggerCauses = append(buildTriggerCauses,
buildapi.BuildTriggerCause{
Message: buildapi.BuildTriggerCauseGenericMsg,
GenericWebHook: &buildapi.GenericWebHookCause{
Revision: revision,
Secret: hiddenSecret,
},
})
case hookType == "github":
buildTriggerCauses = append(buildTriggerCauses,
buildapi.BuildTriggerCause{
Message: buildapi.BuildTriggerCauseGithubMsg,
GitHubWebHook: &buildapi.GitHubWebHookCause{
Revision: revision,
Secret: hiddenSecret,
},
})
case hookType == "gitlab":
buildTriggerCauses = append(buildTriggerCauses,
buildapi.BuildTriggerCause{
Message: buildapi.BuildTriggerCauseGitLabMsg,
GitLabWebHook: &buildapi.GitLabWebHookCause{
CommonWebHookCause: buildapi.CommonWebHookCause{
Revision: revision,
Secret: hiddenSecret,
},
},
})
case hookType == "bitbucket":
buildTriggerCauses = append(buildTriggerCauses,
buildapi.BuildTriggerCause{
Message: buildapi.BuildTriggerCauseBitbucketMsg,
BitbucketWebHook: &buildapi.BitbucketWebHookCause{
CommonWebHookCause: buildapi.CommonWebHookCause{
Revision: revision,
Secret: hiddenSecret,
},
},
})
}
return buildTriggerCauses
}