/
create_bootstrappolicy_file.go
132 lines (109 loc) · 3.56 KB
/
create_bootstrappolicy_file.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
package admin
import (
"bytes"
"errors"
"io/ioutil"
"os"
"path"
"github.com/spf13/cobra"
corev1 "k8s.io/api/core/v1"
rbacv1 "k8s.io/api/rbac/v1"
"k8s.io/apimachinery/pkg/runtime"
"k8s.io/apimachinery/pkg/util/sets"
"k8s.io/cli-runtime/pkg/genericclioptions"
"k8s.io/cli-runtime/pkg/genericclioptions/printers"
kcmdutil "k8s.io/kubernetes/pkg/kubectl/cmd/util"
"k8s.io/kubernetes/pkg/kubectl/scheme"
"github.com/openshift/origin/pkg/cmd/server/bootstrappolicy"
)
const (
DefaultPolicyFile = "openshift.local.config/master/policy.json"
CreateBootstrapPolicyFileCommand = "create-bootstrap-policy-file"
)
type CreateBootstrapPolicyFileOptions struct {
File string
genericclioptions.IOStreams
}
func NewCreateBootstrapPolicyFileOptions(streams genericclioptions.IOStreams) *CreateBootstrapPolicyFileOptions {
return &CreateBootstrapPolicyFileOptions{
File: DefaultPolicyFile,
IOStreams: streams,
}
}
func NewCommandCreateBootstrapPolicyFile(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command {
o := NewCreateBootstrapPolicyFileOptions(streams)
cmd := &cobra.Command{
Use: commandName,
Short: "Create the default bootstrap policy",
Run: func(cmd *cobra.Command, args []string) {
kcmdutil.CheckErr(o.Validate(args))
kcmdutil.CheckErr(o.Run())
},
}
cmd.Flags().StringVar(&o.File, "filename", o.File, "The policy template file that will be written with roles and bindings.")
// autocompletion hints
cmd.MarkFlagFilename("filename")
return cmd
}
func (o CreateBootstrapPolicyFileOptions) Validate(args []string) error {
if len(args) != 0 {
return errors.New("no arguments are supported")
}
if len(o.File) == 0 {
return errors.New("filename must be provided")
}
return nil
}
func (o CreateBootstrapPolicyFileOptions) Run() error {
if err := os.MkdirAll(path.Dir(o.File), os.FileMode(0755)); err != nil {
return err
}
policyList := &corev1.List{}
policyList.SetGroupVersionKind(corev1.SchemeGroupVersion.WithKind("List"))
policy := bootstrappolicy.Policy()
rbacEncoder := scheme.Codecs.LegacyCodec(rbacv1.SchemeGroupVersion)
for i := range policy.ClusterRoles {
versionedObject, err := runtime.Encode(rbacEncoder, &policy.ClusterRoles[i])
if err != nil {
return err
}
policyList.Items = append(policyList.Items, runtime.RawExtension{Raw: versionedObject})
}
for i := range policy.ClusterRoleBindings {
versionedObject, err := runtime.Encode(rbacEncoder, &policy.ClusterRoleBindings[i])
if err != nil {
return err
}
policyList.Items = append(policyList.Items, runtime.RawExtension{Raw: versionedObject})
}
// iterate in a defined order
for _, namespace := range sets.StringKeySet(policy.Roles).List() {
roles := policy.Roles[namespace]
for i := range roles {
versionedObject, err := runtime.Encode(rbacEncoder, &roles[i])
if err != nil {
return err
}
policyList.Items = append(policyList.Items, runtime.RawExtension{Raw: versionedObject})
}
}
// iterate in a defined order
for _, namespace := range sets.StringKeySet(policy.RoleBindings).List() {
roleBindings := policy.RoleBindings[namespace]
for i := range roleBindings {
versionedObject, err := runtime.Encode(rbacEncoder, &roleBindings[i])
if err != nil {
return err
}
policyList.Items = append(policyList.Items, runtime.RawExtension{Raw: versionedObject})
}
}
buffer := &bytes.Buffer{}
if err := (&printers.JSONPrinter{}).PrintObj(policyList, buffer); err != nil {
return err
}
if err := ioutil.WriteFile(o.File, buffer.Bytes(), 0644); err != nil {
return err
}
return nil
}