/
reconciler.go
428 lines (372 loc) · 14.8 KB
/
reconciler.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
// Copyright 2019 SAP SE or an SAP affiliate company. All rights reserved. This file is licensed under the Apache Software License, v. 2 except as noted otherwise in the LICENSE file
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package shoot
import (
"context"
"fmt"
"strings"
corev1 "k8s.io/api/core/v1"
apierrors "k8s.io/apimachinery/pkg/api/errors"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/labels"
"k8s.io/apimachinery/pkg/util/validation/field"
"k8s.io/client-go/tools/record"
"sigs.k8s.io/controller-runtime/pkg/client"
logf "sigs.k8s.io/controller-runtime/pkg/log"
"sigs.k8s.io/controller-runtime/pkg/reconcile"
gardencorev1beta1 "github.com/gardener/gardener/pkg/apis/core/v1beta1"
v1beta1helper "github.com/gardener/gardener/pkg/apis/core/v1beta1/helper"
"github.com/gardener/gardener/pkg/controllerutils"
"github.com/gardener/gardener/pkg/scheduler/apis/config"
kubernetesutils "github.com/gardener/gardener/pkg/utils/kubernetes"
cidrvalidation "github.com/gardener/gardener/pkg/utils/validation/cidr"
)
// Reconciler schedules shoots to seeds.
type Reconciler struct {
Client client.Client
Config *config.ShootSchedulerConfiguration
Recorder record.EventRecorder
}
// Reconcile schedules shoots to seeds.
func (r *Reconciler) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error) {
log := logf.FromContext(ctx)
ctx, cancel := controllerutils.GetMainReconciliationContext(ctx, controllerutils.DefaultReconciliationTimeout)
defer cancel()
shoot := &gardencorev1beta1.Shoot{}
if err := r.Client.Get(ctx, request.NamespacedName, shoot); err != nil {
if apierrors.IsNotFound(err) {
log.V(1).Info("Object is gone, stop reconciling")
return reconcile.Result{}, nil
}
return reconcile.Result{}, fmt.Errorf("error retrieving object from store: %w", err)
}
if shoot.Spec.SeedName != nil {
log.Info("Shoot already scheduled onto seed, nothing left to do", "seed", *shoot.Spec.SeedName)
return reconcile.Result{}, nil
}
if shoot.DeletionTimestamp != nil {
log.Info("Ignoring shoot because it has been marked for deletion")
return reconcile.Result{}, nil
}
// If no Seed is referenced, we try to determine an adequate one.
seed, err := determineSeed(ctx, r.Client, shoot, r.Config.Strategy)
if err != nil {
r.reportFailedScheduling(shoot, err)
return reconcile.Result{}, err
}
shoot.Spec.SeedName = &seed.Name
if err = r.Client.SubResource("binding").Update(ctx, shoot); err != nil {
log.Error(err, "Failed to bind shoot to seed")
r.reportFailedScheduling(shoot, err)
return reconcile.Result{}, err
}
log.Info(
"Shoot successfully scheduled to seed",
"cloudprofile", shoot.Spec.CloudProfileName,
"region", shoot.Spec.Region,
"seed", seed.Name,
"strategy", r.Config.Strategy,
)
r.reportEvent(shoot, corev1.EventTypeNormal, gardencorev1beta1.ShootEventSchedulingSuccessful, "Scheduled to seed '%s'", seed.Name)
return reconcile.Result{}, nil
}
func (r *Reconciler) reportFailedScheduling(shoot *gardencorev1beta1.Shoot, err error) {
r.reportEvent(shoot, corev1.EventTypeWarning, gardencorev1beta1.ShootEventSchedulingFailed, "Failed to schedule shoot '%s': %+v", shoot.Name, err)
}
func (r *Reconciler) reportEvent(shoot *gardencorev1beta1.Shoot, eventType string, eventReason, messageFmt string, args ...interface{}) {
r.Recorder.Eventf(shoot, eventType, eventReason, messageFmt, args...)
}
// determineSeed returns an appropriate Seed cluster (or nil).
func determineSeed(
ctx context.Context,
reader client.Reader,
shoot *gardencorev1beta1.Shoot,
strategy config.CandidateDeterminationStrategy,
) (
*gardencorev1beta1.Seed,
error,
) {
seedList := &gardencorev1beta1.SeedList{}
if err := reader.List(ctx, seedList); err != nil {
return nil, err
}
shootList := &gardencorev1beta1.ShootList{}
if err := reader.List(ctx, shootList); err != nil {
return nil, err
}
cloudProfile := &gardencorev1beta1.CloudProfile{}
if err := reader.Get(ctx, kubernetesutils.Key(shoot.Spec.CloudProfileName), cloudProfile); err != nil {
return nil, err
}
filteredSeeds, err := filterUsableSeeds(seedList.Items)
if err != nil {
return nil, err
}
filteredSeeds, err = filterSeedsMatchingLabelSelector(filteredSeeds, cloudProfile.Spec.SeedSelector, "CloudProfile")
if err != nil {
return nil, err
}
filteredSeeds, err = filterSeedsMatchingLabelSelector(filteredSeeds, shoot.Spec.SeedSelector, "Shoot")
if err != nil {
return nil, err
}
filteredSeeds, err = filterSeedsMatchingProviders(cloudProfile, shoot, filteredSeeds)
if err != nil {
return nil, err
}
filteredSeeds, err = filterSeedsForZonalShootControlPlanes(filteredSeeds, shoot)
if err != nil {
return nil, err
}
filteredSeeds, err = filterCandidates(shoot, shootList.Items, filteredSeeds)
if err != nil {
return nil, err
}
filteredSeeds, err = applyStrategy(shoot, filteredSeeds, strategy)
if err != nil {
return nil, err
}
return getSeedWithLeastShootsDeployed(filteredSeeds, shootList.Items)
}
func isUsableSeed(seed *gardencorev1beta1.Seed) bool {
return seed.DeletionTimestamp == nil && seed.Spec.Settings.Scheduling.Visible && verifySeedReadiness(seed)
}
func filterUsableSeeds(seedList []gardencorev1beta1.Seed) ([]gardencorev1beta1.Seed, error) {
var matchingSeeds []gardencorev1beta1.Seed
for _, seed := range seedList {
if isUsableSeed(&seed) {
matchingSeeds = append(matchingSeeds, seed)
}
}
if len(matchingSeeds) == 0 {
return nil, fmt.Errorf("none of the %d seeds is valid for scheduling (not deleting, visible and ready)", len(seedList))
}
return matchingSeeds, nil
}
func filterSeedsMatchingLabelSelector(seedList []gardencorev1beta1.Seed, seedSelector *gardencorev1beta1.SeedSelector, kind string) ([]gardencorev1beta1.Seed, error) {
if seedSelector == nil {
return seedList, nil
}
selector, err := metav1.LabelSelectorAsSelector(&seedSelector.LabelSelector)
if err != nil {
return nil, fmt.Errorf("label selector conversion failed: %v for seedSelector: %w", seedSelector.LabelSelector, err)
}
var matchingSeeds []gardencorev1beta1.Seed
for _, seed := range seedList {
if selector.Matches(labels.Set(seed.Labels)) {
matchingSeeds = append(matchingSeeds, seed)
}
}
if len(matchingSeeds) == 0 {
return nil, fmt.Errorf("none out of the %d seeds has the matching labels required by seed selector of '%s' (selector: '%s')", len(seedList), kind, selector.String())
}
return matchingSeeds, nil
}
func filterSeedsMatchingProviders(cloudProfile *gardencorev1beta1.CloudProfile, shoot *gardencorev1beta1.Shoot, seedList []gardencorev1beta1.Seed) ([]gardencorev1beta1.Seed, error) {
var possibleProviders []string
if cloudProfile.Spec.SeedSelector != nil {
possibleProviders = cloudProfile.Spec.SeedSelector.ProviderTypes
}
var matchingSeeds []gardencorev1beta1.Seed
for _, seed := range seedList {
if matchProvider(seed.Spec.Provider.Type, shoot.Spec.Provider.Type, possibleProviders) {
matchingSeeds = append(matchingSeeds, seed)
}
}
if len(matchingSeeds) == 0 {
return nil, fmt.Errorf("none out of the %d seeds has a matching provider for %q", len(seedList), shoot.Spec.Provider.Type)
}
return matchingSeeds, nil
}
// filterSeedsForZonalShootControlPlanes filters seeds with at least three zones in case the shoot's failure tolerance
// type is 'zone'.
func filterSeedsForZonalShootControlPlanes(seedList []gardencorev1beta1.Seed, shoot *gardencorev1beta1.Shoot) ([]gardencorev1beta1.Seed, error) {
if v1beta1helper.IsMultiZonalShootControlPlane(shoot) {
var seedsWithAtLeastThreeZones []gardencorev1beta1.Seed
for _, seed := range seedList {
if len(seed.Spec.Provider.Zones) >= 3 {
seedsWithAtLeastThreeZones = append(seedsWithAtLeastThreeZones, seed)
}
}
if len(seedsWithAtLeastThreeZones) == 0 {
return nil, fmt.Errorf("none of the %d seeds has at least 3 zones for hosting a shoot control plane with failure tolerance type 'zone'", len(seedList))
}
return seedsWithAtLeastThreeZones, nil
}
return seedList, nil
}
func applyStrategy(shoot *gardencorev1beta1.Shoot, seedList []gardencorev1beta1.Seed, strategy config.CandidateDeterminationStrategy) ([]gardencorev1beta1.Seed, error) {
var candidates []gardencorev1beta1.Seed
switch {
case shoot.Spec.Purpose != nil && *shoot.Spec.Purpose == gardencorev1beta1.ShootPurposeTesting:
candidates = determineCandidatesOfSameProvider(seedList, shoot)
case strategy == config.SameRegion:
candidates = determineCandidatesWithSameRegionStrategy(seedList, shoot)
case strategy == config.MinimalDistance:
candidates = determineCandidatesWithMinimalDistanceStrategy(seedList, shoot)
default:
return nil, fmt.Errorf("failed to determine seed candidates. shoot purpose: '%s', strategy: '%s', valid strategies are: %v", *shoot.Spec.Purpose, strategy, config.Strategies)
}
if candidates == nil {
return nil, fmt.Errorf("no matching seed candidate found for Configuration (Cloud Profile '%s', Region '%s', SeedDeterminationStrategy '%s')", shoot.Spec.CloudProfileName, shoot.Spec.Region, strategy)
}
return candidates, nil
}
func filterCandidates(shoot *gardencorev1beta1.Shoot, shootList []gardencorev1beta1.Shoot, seedList []gardencorev1beta1.Seed) ([]gardencorev1beta1.Seed, error) {
var (
candidates []gardencorev1beta1.Seed
candidateErrors = make(map[string]error)
seedUsage = v1beta1helper.CalculateSeedUsage(shootList)
)
for _, seed := range seedList {
if disjointed, err := networksAreDisjointed(&seed, shoot); !disjointed {
candidateErrors[seed.Name] = err
continue
}
if !v1beta1helper.TaintsAreTolerated(seed.Spec.Taints, shoot.Spec.Tolerations) {
candidateErrors[seed.Name] = fmt.Errorf("shoot does not tolerate the seed's taints")
continue
}
if allocatableShoots, ok := seed.Status.Allocatable[gardencorev1beta1.ResourceShoots]; ok && int64(seedUsage[seed.Name]) >= allocatableShoots.Value() {
candidateErrors[seed.Name] = fmt.Errorf("seed does not have available capacity for shoots")
continue
}
candidates = append(candidates, seed)
}
if candidates == nil {
return nil, fmt.Errorf("0/%d seed cluster candidate(s) are eligible for scheduling: %v", len(seedList), errorMapToString(candidateErrors))
}
return candidates, nil
}
// getSeedWithLeastShootsDeployed finds the best candidate (i.e. the one managing the smallest number of shoots right now).
func getSeedWithLeastShootsDeployed(seedList []gardencorev1beta1.Seed, shootList []gardencorev1beta1.Shoot) (*gardencorev1beta1.Seed, error) {
var (
bestCandidate gardencorev1beta1.Seed
min *int
seedUsage = v1beta1helper.CalculateSeedUsage(shootList)
)
for _, seed := range seedList {
if numberOfManagedShoots := seedUsage[seed.Name]; min == nil || numberOfManagedShoots < *min {
bestCandidate = seed
min = &numberOfManagedShoots
}
}
return &bestCandidate, nil
}
func matchProvider(seedProviderType, shootProviderType string, enabledProviderTypes []string) bool {
if len(enabledProviderTypes) == 0 {
return seedProviderType == shootProviderType
}
for _, p := range enabledProviderTypes {
if p == "*" || p == seedProviderType {
return true
}
}
return false
}
func determineCandidatesOfSameProvider(seedList []gardencorev1beta1.Seed, shoot *gardencorev1beta1.Shoot) []gardencorev1beta1.Seed {
var candidates []gardencorev1beta1.Seed
// Determine all candidate seed clusters matching the shoot's provider and region.
for _, seed := range seedList {
if seed.Spec.Provider.Type == shoot.Spec.Provider.Type {
candidates = append(candidates, seed)
}
}
return candidates
}
// determineCandidatesWithSameRegionStrategy get all seed clusters matching the shoot's provider and region.
func determineCandidatesWithSameRegionStrategy(seedList []gardencorev1beta1.Seed, shoot *gardencorev1beta1.Shoot) []gardencorev1beta1.Seed {
var candidates []gardencorev1beta1.Seed
for _, seed := range seedList {
if seed.Spec.Provider.Type == shoot.Spec.Provider.Type && seed.Spec.Provider.Region == shoot.Spec.Region {
candidates = append(candidates, seed)
}
}
return candidates
}
func determineCandidatesWithMinimalDistanceStrategy(seeds []gardencorev1beta1.Seed, shoot *gardencorev1beta1.Shoot) []gardencorev1beta1.Seed {
var (
minDistance = 1000
shootRegion = shoot.Spec.Region
shootProvider = shoot.Spec.Provider.Type
candidates []gardencorev1beta1.Seed
)
for _, seed := range seeds {
seedRegion := seed.Spec.Provider.Region
dist := distance(seedRegion, shootRegion)
if shootProvider != seed.Spec.Provider.Type {
dist = dist + 2
}
// append
if dist == minDistance {
candidates = append(candidates, seed)
continue
}
// replace
if dist < minDistance {
minDistance = dist
candidates = []gardencorev1beta1.Seed{seed}
}
}
return candidates
}
func networksAreDisjointed(seed *gardencorev1beta1.Seed, shoot *gardencorev1beta1.Shoot) (bool, error) {
var (
shootPodsNetwork = shoot.Spec.Networking.Pods
shootServicesNetwork = shoot.Spec.Networking.Services
errorMessages []string
)
if seed.Spec.Networks.ShootDefaults != nil {
if shootPodsNetwork == nil {
shootPodsNetwork = seed.Spec.Networks.ShootDefaults.Pods
}
if shootServicesNetwork == nil {
shootServicesNetwork = seed.Spec.Networks.ShootDefaults.Services
}
}
for _, e := range cidrvalidation.ValidateNetworkDisjointedness(
field.NewPath(""),
shoot.Spec.Networking.Nodes,
shootPodsNetwork,
shootServicesNetwork,
seed.Spec.Networks.Nodes,
seed.Spec.Networks.Pods,
seed.Spec.Networks.Services,
) {
errorMessages = append(errorMessages, e.ErrorBody())
}
return len(errorMessages) == 0, fmt.Errorf("invalid networks: %s", errorMessages)
}
func errorMapToString(errs map[string]error) string {
res := "{"
for k, v := range errs {
res += fmt.Sprintf("%s => %s, ", k, v.Error())
}
res = strings.TrimSuffix(res, ", ") + "}"
return res
}
func verifySeedReadiness(seed *gardencorev1beta1.Seed) bool {
if cond := v1beta1helper.GetCondition(seed.Status.Conditions, gardencorev1beta1.SeedBootstrapped); cond == nil || cond.Status != gardencorev1beta1.ConditionTrue {
return false
}
if cond := v1beta1helper.GetCondition(seed.Status.Conditions, gardencorev1beta1.SeedGardenletReady); cond == nil || cond.Status != gardencorev1beta1.ConditionTrue {
return false
}
if seed.Spec.Backup != nil {
if cond := v1beta1helper.GetCondition(seed.Status.Conditions, gardencorev1beta1.SeedBackupBucketsReady); cond == nil || cond.Status != gardencorev1beta1.ConditionTrue {
return false
}
}
return true
}