118 lines
3 KiB
Go
118 lines
3 KiB
Go
/*
|
|
Copyright 2015 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package controller
|
|
|
|
import (
|
|
"k8s.io/apimachinery/pkg/util/intstr"
|
|
"os"
|
|
"os/exec"
|
|
"syscall"
|
|
|
|
"fmt"
|
|
|
|
"k8s.io/klog"
|
|
|
|
api "k8s.io/api/core/v1"
|
|
"k8s.io/kubernetes/pkg/util/sysctl"
|
|
|
|
"k8s.io/ingress-nginx/internal/ingress"
|
|
)
|
|
|
|
// newUpstream creates an upstream without servers.
|
|
func newUpstream(name string) *ingress.Backend {
|
|
return &ingress.Backend{
|
|
Name: name,
|
|
Endpoints: []ingress.Endpoint{},
|
|
Service: &api.Service{},
|
|
SessionAffinity: ingress.SessionAffinityConfig{
|
|
CookieSessionAffinity: ingress.CookieSessionAffinity{
|
|
Locations: make(map[string][]string),
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
// upstreamName returns a formatted upstream name based on namespace, service, and port
|
|
func upstreamName(namespace string, service string, port intstr.IntOrString) string {
|
|
return fmt.Sprintf("%v-%v-%v", namespace, service, port.String())
|
|
}
|
|
|
|
// sysctlSomaxconn returns the maximum number of connections that can be queued
|
|
// for acceptance (value of net.core.somaxconn)
|
|
// http://nginx.org/en/docs/http/ngx_http_core_module.html#listen
|
|
func sysctlSomaxconn() int {
|
|
maxConns, err := sysctl.New().GetSysctl("net/core/somaxconn")
|
|
if err != nil || maxConns < 512 {
|
|
klog.V(3).Infof("net.core.somaxconn=%v (using system default)", maxConns)
|
|
return 511
|
|
}
|
|
|
|
return maxConns
|
|
}
|
|
|
|
// sysctlFSFileMax returns the maximum number of open file descriptors (value
|
|
// of fs.file-max) or 0 in case of error.
|
|
func sysctlFSFileMax() int {
|
|
var rLimit syscall.Rlimit
|
|
err := syscall.Getrlimit(syscall.RLIMIT_NOFILE, &rLimit)
|
|
if err != nil {
|
|
klog.Errorf("Error reading system maximum number of open file descriptors (RLIMIT_NOFILE): %v", err)
|
|
return 0
|
|
}
|
|
klog.V(2).Infof("rlimit.max=%v", rLimit.Max)
|
|
return int(rLimit.Max)
|
|
}
|
|
|
|
const (
|
|
defBinary = "/usr/sbin/nginx"
|
|
cfgPath = "/etc/nginx/nginx.conf"
|
|
)
|
|
|
|
var valgrind = []string{
|
|
"valgrind",
|
|
"--tool=memcheck",
|
|
"--leak-check=full",
|
|
"--show-leak-kinds=all",
|
|
"--leak-check=yes",
|
|
}
|
|
|
|
func nginxExecCommand(args ...string) *exec.Cmd {
|
|
ngx := os.Getenv("NGINX_BINARY")
|
|
if ngx == "" {
|
|
ngx = defBinary
|
|
}
|
|
|
|
cmdArgs := []string{"--deep"}
|
|
|
|
if os.Getenv("RUN_WITH_VALGRIND") == "true" {
|
|
cmdArgs = append(cmdArgs, valgrind...)
|
|
}
|
|
|
|
cmdArgs = append(cmdArgs, ngx, "-c", cfgPath)
|
|
cmdArgs = append(cmdArgs, args...)
|
|
|
|
return exec.Command("authbind", cmdArgs...)
|
|
}
|
|
|
|
func nginxTestCommand(cfg string) *exec.Cmd {
|
|
ngx := os.Getenv("NGINX_BINARY")
|
|
if ngx == "" {
|
|
ngx = defBinary
|
|
}
|
|
|
|
return exec.Command("authbind", "--deep", ngx, "-c", cfg, "-t")
|
|
}
|