-
Notifications
You must be signed in to change notification settings - Fork 71
/
secret_controller.go
135 lines (116 loc) · 3.17 KB
/
secret_controller.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
package main
import (
"fmt"
"time"
corev1 "k8s.io/api/core/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/util/wait"
corev1informer "k8s.io/client-go/informers/core/v1"
"k8s.io/client-go/informers/internalinterfaces"
"k8s.io/client-go/kubernetes"
"k8s.io/client-go/tools/cache"
"k8s.io/client-go/util/workqueue"
"github.com/skupperproject/skupper/pkg/event"
)
type SecretHandler interface {
Handle(name string, secret *corev1.Secret) error
}
type SecretController struct {
name string
handler SecretHandler
informer cache.SharedIndexInformer
queue workqueue.RateLimitingInterface
}
func (c *SecretController) enqueue(obj interface{}) {
key, err := cache.MetaNamespaceKeyFunc(obj)
if err == nil {
c.queue.Add(key)
} else {
event.Recordf(c.name, "Error retrieving key: %s", err)
}
}
func (c *SecretController) OnAdd(obj interface{}) {
c.enqueue(obj)
}
func (c *SecretController) OnUpdate(a, b interface{}) {
aa := a.(*corev1.Secret)
bb := b.(*corev1.Secret)
if aa.ResourceVersion != bb.ResourceVersion {
c.enqueue(b)
}
}
func (c *SecretController) OnDelete(obj interface{}) {
c.enqueue(obj)
}
func (c *SecretController) start(stopCh <-chan struct{}) error {
go c.informer.Run(stopCh)
if ok := cache.WaitForCacheSync(stopCh, c.informer.HasSynced); !ok {
return fmt.Errorf("Failed to wait for caches to sync")
}
go wait.Until(c.run, time.Second, stopCh)
return nil
}
func (c *SecretController) stop() {
c.queue.ShutDown()
}
func (c *SecretController) run() {
for c.process() {
}
}
func (c *SecretController) process() bool {
obj, shutdown := c.queue.Get()
if shutdown {
return false
}
defer c.queue.Done(obj)
retry := false
if key, ok := obj.(string); ok {
entity, exists, err := c.informer.GetStore().GetByKey(key)
if err != nil {
event.Recordf(c.name, "Error retrieving secret %q: %s", key, err)
}
if exists {
if secret, ok := entity.(*corev1.Secret); ok {
err := c.handler.Handle(key, secret)
if err != nil {
retry = true
event.Recordf(c.name, "Error handling %q: %s", key, err)
}
} else {
event.Recordf(c.name, "Expected secret, got %#v", entity)
}
} else {
err := c.handler.Handle(key, nil)
if err != nil {
retry = true
event.Recordf(c.name, "Error handling %q: %s", key, err)
}
}
} else {
event.Recordf(c.name, "Expected key to be string, was %#v", key)
}
c.queue.Forget(obj)
if retry && c.queue.NumRequeues(obj) < 5 {
c.queue.AddRateLimited(obj)
}
return true
}
func NewSecretController(name string, selector string, client kubernetes.Interface, namespace string, handler SecretHandler) *SecretController {
informer := corev1informer.NewFilteredSecretInformer(
client,
namespace,
time.Second*30,
cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc},
internalinterfaces.TweakListOptionsFunc(func(options *metav1.ListOptions) {
options.LabelSelector = selector
}))
queue := workqueue.NewNamedRateLimitingQueue(workqueue.DefaultControllerRateLimiter(), name)
controller := &SecretController{
name: name,
handler: handler,
informer: informer,
queue: queue,
}
informer.AddEventHandler(controller)
return controller
}