/
setup.go
228 lines (195 loc) · 7.75 KB
/
setup.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
package controller
import (
"context"
"errors"
"fmt"
"net/http"
watcherevent "github.com/kyma-project/runtime-watcher/listener/pkg/event"
"github.com/kyma-project/runtime-watcher/listener/pkg/types"
apicorev1 "k8s.io/api/core/v1"
"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
"k8s.io/client-go/util/workqueue"
ctrl "sigs.k8s.io/controller-runtime"
"sigs.k8s.io/controller-runtime/pkg/builder"
"sigs.k8s.io/controller-runtime/pkg/client"
ctrlruntime "sigs.k8s.io/controller-runtime/pkg/controller"
"sigs.k8s.io/controller-runtime/pkg/event"
"sigs.k8s.io/controller-runtime/pkg/handler"
"sigs.k8s.io/controller-runtime/pkg/predicate"
"sigs.k8s.io/controller-runtime/pkg/source"
"github.com/kyma-project/lifecycle-manager/api/shared"
"github.com/kyma-project/lifecycle-manager/api/v1beta2"
"github.com/kyma-project/lifecycle-manager/internal/istio"
"github.com/kyma-project/lifecycle-manager/pkg/security"
"github.com/kyma-project/lifecycle-manager/pkg/watch"
)
type SetupUpSetting struct {
ListenerAddr string
EnableDomainNameVerification bool
IstioNamespace string
}
const (
WatcherControllerName = "watcher"
PurgeControllerName = "purge"
KymaControllerName = "kyma"
ManifestControllerName = "manifest"
MandatoryModuleInstallationControllerName = "mandatory-module-installation"
MandatoryModuleDeletionControllerName = "mandatory-module-deletion"
)
var (
errConvertingWatched = errors.New("error converting watched to object key")
errParsingWatched = errors.New("error getting watched object from unstructured event")
errConvertingWatcherEvent = errors.New("error converting watched object to unstructured event")
)
// SetupWithManager sets up the Kyma controller with the Manager.
func (r *KymaReconciler) SetupWithManager(mgr ctrl.Manager,
options ctrlruntime.Options, settings SetupUpSetting,
) error {
predicates := predicate.Or(predicate.GenerationChangedPredicate{}, predicate.LabelChangedPredicate{})
controllerBuilder := ctrl.NewControllerManagedBy(mgr).For(&v1beta2.Kyma{}).
Named(KymaControllerName).
WithOptions(options).
WithEventFilter(predicates).
Watches(
&v1beta2.ModuleTemplate{},
handler.EnqueueRequestsFromMapFunc(watch.NewTemplateChangeHandler(r).Watch()),
builder.WithPredicates(predicates),
).
// here we define a watch on secrets for the lifecycle-manager so that the cache is picking up changes
Watches(&apicorev1.Secret{}, handler.Funcs{})
controllerBuilder = controllerBuilder.Watches(&v1beta2.Manifest{},
&watch.RestrictedEnqueueRequestForOwner{Log: ctrl.Log, OwnerType: &v1beta2.Kyma{}, IsController: true})
var runnableListener *watcherevent.SKREventListener
var eventChannel *source.Channel
var verifyFunc watcherevent.Verify
if settings.EnableDomainNameVerification {
// Verifier used to verify incoming listener requests
verifyFunc = security.NewRequestVerifier(mgr.GetClient()).Verify
} else {
verifyFunc = func(r *http.Request, watcherEvtObject *types.WatchEvent) error {
return nil
}
}
// register listener component incl. domain name verification
runnableListener, eventChannel = watcherevent.RegisterListenerComponent(
settings.ListenerAddr,
shared.OperatorName,
verifyFunc,
)
// watch event channel
r.watchEventChannel(controllerBuilder, eventChannel)
// start listener as a manager runnable
if err := mgr.Add(runnableListener); err != nil {
return fmt.Errorf("KymaReconciler %w", err)
}
if err := controllerBuilder.Complete(r); err != nil {
return fmt.Errorf("error occurred while building controller: %w", err)
}
return nil
}
func (r *KymaReconciler) watchEventChannel(controllerBuilder *builder.Builder, eventChannel *source.Channel) {
controllerBuilder.WatchesRawSource(eventChannel, &handler.Funcs{
GenericFunc: func(ctx context.Context, event event.GenericEvent, queue workqueue.RateLimitingInterface) {
logger := ctrl.Log.WithName("listener")
unstructWatcherEvt, conversionOk := event.Object.(*unstructured.Unstructured)
if !conversionOk {
logger.Error(errConvertingWatcherEvent, fmt.Sprintf("event: %v", event.Object))
return
}
// get owner object from unstructured event, owner = KymaCR object reference in KCP
unstructuredOwner, ok := unstructWatcherEvt.Object["owner"]
if !ok {
logger.Error(errParsingWatched, fmt.Sprintf("unstructured event: %v", unstructWatcherEvt))
return
}
ownerObjectKey, conversionOk := unstructuredOwner.(client.ObjectKey)
if !conversionOk {
logger.Error(errConvertingWatched, fmt.Sprintf("unstructured Owner object: %v", unstructuredOwner))
return
}
logger.Info(
fmt.Sprintf("event received from SKR, adding %s to queue",
ownerObjectKey),
)
queue.Add(ctrl.Request{
NamespacedName: ownerObjectKey,
})
},
})
}
// SetupWithManager sets up the Watcher controller with the Manager.
func (r *WatcherReconciler) SetupWithManager(mgr ctrl.Manager, options ctrlruntime.Options,
) error {
if r.RestConfig == nil {
return errRestConfigIsNotSet
}
var err error
r.IstioClient, err = istio.NewIstioClient(r.RestConfig, r.EventRecorder,
ctrl.Log.WithName("istioClient"))
if err != nil {
return fmt.Errorf("unable to set istio client for watcher controller: %w", err)
}
r.VirtualServiceFactory, err = istio.NewVirtualServiceService(r.Scheme)
if err != nil {
return fmt.Errorf("unable to set VirtualService service for watcher controller: %w", err)
}
ctrlManager := ctrl.NewControllerManagedBy(mgr).
For(&v1beta2.Watcher{}).
Named(WatcherControllerName).
WithOptions(options).
WithEventFilter(predicate.Or(predicate.GenerationChangedPredicate{}, predicate.LabelChangedPredicate{}))
err = ctrlManager.Complete(r)
if err != nil {
return fmt.Errorf("failed to setup manager for watcher controller: %w", err)
}
return nil
}
// SetupWithManager sets up the Purge controller with the Manager.
func (r *PurgeReconciler) SetupWithManager(mgr ctrl.Manager,
options ctrlruntime.Options,
) error {
controllerBuilder := ctrl.NewControllerManagedBy(mgr).
For(&v1beta2.Kyma{}).
Named(PurgeControllerName).
WithOptions(options).
WithEventFilter(predicate.Or(predicate.GenerationChangedPredicate{}, predicate.LabelChangedPredicate{}))
if err := controllerBuilder.Complete(r); err != nil {
return fmt.Errorf("error occurred while building controller: %w", err)
}
return nil
}
// SetupWithManager sets up the MandatoryModuleReconciler with the Manager.
func (r *MandatoryModuleReconciler) SetupWithManager(mgr ctrl.Manager,
options ctrlruntime.Options,
) error {
predicates := predicate.Or(predicate.GenerationChangedPredicate{}, predicate.LabelChangedPredicate{})
controllerBuilder := ctrl.NewControllerManagedBy(mgr).
For(&v1beta2.Kyma{}).
Named(MandatoryModuleInstallationControllerName).
WithOptions(options).
WithEventFilter(predicates).
Watches(
&v1beta2.ModuleTemplate{},
handler.EnqueueRequestsFromMapFunc(watch.NewMandatoryTemplateChangeHandler(r).Watch()),
builder.WithPredicates(predicates),
).
Watches(&apicorev1.Secret{}, handler.Funcs{})
if err := controllerBuilder.Complete(r); err != nil {
return fmt.Errorf("error occurred while building controller: %w", err)
}
return nil
}
// SetupWithManager sets up the MandatoryModuleDeletionReconciler with the Manager.
func (r *MandatoryModuleDeletionReconciler) SetupWithManager(mgr ctrl.Manager,
options ctrlruntime.Options,
) error {
controllerBuilder := ctrl.NewControllerManagedBy(mgr).
For(&v1beta2.ModuleTemplate{}).
Named(MandatoryModuleDeletionControllerName).
WithOptions(options).
WithEventFilter(predicate.GenerationChangedPredicate{})
if err := controllerBuilder.Complete(r); err != nil {
return fmt.Errorf("error occurred while building controller: %w", err)
}
return nil
}