
* Drop v1beta1 from ingress nginx (#7156) * Drop v1beta1 from ingress nginx Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix intorstr logic in controller Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * fixing admission Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * more intorstr fixing * correct template rendering Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix e2e tests for v1 api Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix gofmt errors * This is finally working...almost there... Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Re-add removed validation of AdmissionReview * Prepare for v1.0.0-alpha.1 release Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Update changelog and matrix table for v1.0.0-alpha.1 (#7274) Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * add docs for syslog feature (#7219) * Fix link to e2e-tests.md in developer-guide (#7201) * Use ENV expansion for namespace in args (#7146) Update the DaemonSet namespace references to use the `POD_NAMESPACE` environment variable in the same way that the Deployment does. * chart: using Helm builtin capabilities check (#7190) Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> * Update proper default value for HTTP2MaxConcurrentStreams in Docs (#6944) It should be 128 as documented in https://github.com/kubernetes/ingress-nginx/blob/master/internal/ingress/controller/config/config.go#L780 * Fix MaxWorkerOpenFiles calculation on high cores nodes (#7107) * Fix MaxWorkerOpenFiles calculation on high cores nodes * Add e2e test for rlimit_nofile * Fix doc for max-worker-open-files * ingress/tcp: add additional error logging on failed (#7208) * Add file containing stable release (#7313) * Handle named (non-numeric) ports correctly (#7311) Signed-off-by: Carlos Panato <ctadeu@gmail.com> * Updated v1beta1 to v1 as its deprecated (#7308) * remove mercurial from build (#7031) * Retry to download maxmind DB if it fails (#7242) * Retry to download maxmind DB if it fails. Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Add retries count arg, move retry logic into DownloadGeoLite2DB function Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Reorder parameters in DownloadGeoLite2DB Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Remove hardcoded value Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Release v1.0.0-alpha.1 * Add changelog for v1.0.0-alpha.2 * controller: ignore non-service backends (#7332) * controller: ignore non-service backends Signed-off-by: Carlos Panato <ctadeu@gmail.com> * update per feedback Signed-off-by: Carlos Panato <ctadeu@gmail.com> * fix: allow scope/tcp/udp configmap namespace to altered (#7161) * Lower webhook timeout for digital ocean (#7319) * Lower webhook timeout for digital ocean * Set Digital Ocean value controller.admissionWebhooks.timeoutSeconds to 29 * update OWNERS and aliases files (#7365) (#7366) Signed-off-by: Carlos Panato <ctadeu@gmail.com> * Downgrade Lua modules for s390x (#7355) Downgrade Lua modules to last known working version. * Fix IngressClass logic for newer releases (#7341) * Fix IngressClass logic for newer releases Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Change e2e tests for the new IngressClass presence * Fix chart and admission tests Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix helm chart test Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix reviews * Remove ingressclass code from admission * update tag to v1.0.0-beta.1 * update readme and changelog for v1.0.0-beta.1 * Release v1.0.0-beta.1 - helm and manifests (#7422) * Change the order of annotation just to trigger a new helm release (#7425) * [cherry-pick] Add dev-v1 branch into helm releaser (#7428) * Add dev-v1 branch into helm releaser (#7424) * chore: add link for artifacthub.io/prerelease annotations Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com> * k8s job ci pipeline for dev-v1 br v1.22.0 (#7453) * k8s job ci pipeline for dev-v1 br v1.22.0 Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * k8s job ci pipeline for dev-v1 br v1.21.2 Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * remove v1.21.1 version Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * Add controller.watchIngressWithoutClass config option (#7459) Signed-off-by: Akshit Grover <akshit.grover2016@gmail.com> * Release new helm chart with certgen fixed (#7478) * Update go version, modules and remove ioutil * Release new helm chart with certgen fixed * changed appversion, chartversion, TAG, image (#7490) * Fix CI conflict * Fix CI conflict * Fix build.sh from rebase process * Fix controller_test post rebase Co-authored-by: Tianhao Guo <rggth09@gmail.com> Co-authored-by: Ray <61553+rctay@users.noreply.github.com> Co-authored-by: Bill Cassidy <cassid4@gmail.com> Co-authored-by: Jintao Zhang <tao12345666333@163.com> Co-authored-by: Sathish Ramani <rsathishx87@gmail.com> Co-authored-by: Mansur Marvanov <nanorobocop@gmail.com> Co-authored-by: Matt1360 <568198+Matt1360@users.noreply.github.com> Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com> Co-authored-by: Kundan Kumar <kundan.kumar@india.nec.com> Co-authored-by: Tom Hayward <thayward@infoblox.com> Co-authored-by: Sergey Shakuto <sshakuto@infoblox.com> Co-authored-by: Tore <tore.lonoy@gmail.com> Co-authored-by: Bouke Versteegh <info@boukeversteegh.nl> Co-authored-by: Shahid <shahid@us.ibm.com> Co-authored-by: James Strong <strong.james.e@gmail.com> Co-authored-by: Long Wu Yuan <longwuyuan@gmail.com> Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com> Co-authored-by: Neha Lohia <nehapithadiya444@gmail.com> Co-authored-by: Akshit Grover <akshit.grover2016@gmail.com>
234 lines
5.8 KiB
Go
234 lines
5.8 KiB
Go
/*
|
|
Copyright 2019 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package ingresses
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"text/tabwriter"
|
|
|
|
"github.com/spf13/cobra"
|
|
networking "k8s.io/api/networking/v1"
|
|
"k8s.io/apimachinery/pkg/util/intstr"
|
|
"k8s.io/cli-runtime/pkg/genericclioptions"
|
|
|
|
"k8s.io/ingress-nginx/cmd/plugin/request"
|
|
"k8s.io/ingress-nginx/cmd/plugin/util"
|
|
)
|
|
|
|
// CreateCommand creates and returns this cobra subcommand
|
|
func CreateCommand(flags *genericclioptions.ConfigFlags) *cobra.Command {
|
|
cmd := &cobra.Command{
|
|
Use: "ingresses",
|
|
Aliases: []string{"ingress", "ing"},
|
|
Short: "Provide a short summary of all of the ingress definitions",
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
host, err := cmd.Flags().GetString("host")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
allNamespaces, err := cmd.Flags().GetBool("all-namespaces")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
util.PrintError(ingresses(flags, host, allNamespaces))
|
|
return nil
|
|
},
|
|
}
|
|
cmd.Flags().String("host", "", "Show just the ingress definitions for this hostname")
|
|
cmd.Flags().Bool("all-namespaces", false, "Find ingress definitions from all namespaces")
|
|
|
|
return cmd
|
|
}
|
|
|
|
func ingresses(flags *genericclioptions.ConfigFlags, host string, allNamespaces bool) error {
|
|
var namespace string
|
|
if allNamespaces {
|
|
namespace = ""
|
|
} else {
|
|
namespace = util.GetNamespace(flags)
|
|
}
|
|
|
|
ingresses, err := request.GetIngressDefinitions(flags, namespace)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
rows := getIngressRows(&ingresses)
|
|
|
|
if host != "" {
|
|
rowsWithHost := make([]ingressRow, 0)
|
|
for _, row := range rows {
|
|
if row.Host == host {
|
|
rowsWithHost = append(rowsWithHost, row)
|
|
}
|
|
}
|
|
rows = rowsWithHost
|
|
}
|
|
|
|
printer := tabwriter.NewWriter(os.Stdout, 6, 4, 3, ' ', 0)
|
|
defer printer.Flush()
|
|
|
|
if allNamespaces {
|
|
fmt.Fprintln(printer, "NAMESPACE\tINGRESS NAME\tHOST+PATH\tADDRESSES\tTLS\tSERVICE\tSERVICE PORT\tENDPOINTS")
|
|
} else {
|
|
fmt.Fprintln(printer, "INGRESS NAME\tHOST+PATH\tADDRESSES\tTLS\tSERVICE\tSERVICE PORT\tENDPOINTS")
|
|
}
|
|
|
|
for _, row := range rows {
|
|
var tlsMsg string
|
|
if row.TLS {
|
|
tlsMsg = "YES"
|
|
} else {
|
|
tlsMsg = "NO"
|
|
}
|
|
|
|
numEndpoints, err := request.GetNumEndpoints(flags, row.Namespace, row.ServiceName)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if numEndpoints == nil {
|
|
row.NumEndpoints = "N/A"
|
|
} else {
|
|
row.NumEndpoints = fmt.Sprint(*numEndpoints)
|
|
}
|
|
|
|
if allNamespaces {
|
|
fmt.Fprintf(printer, "%v\t%v\t%v\t%v\t%v\t%v\t%v\t%v\n", row.Namespace, row.IngressName, row.Host+row.Path, row.Address, tlsMsg, row.ServiceName, row.ServicePort, row.NumEndpoints)
|
|
} else {
|
|
fmt.Fprintf(printer, "%v\t%v\t%v\t%v\t%v\t%v\t%v\n", row.IngressName, row.Host+row.Path, row.Address, tlsMsg, row.ServiceName, row.ServicePort, row.NumEndpoints)
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
type ingressRow struct {
|
|
Namespace string
|
|
IngressName string
|
|
Host string
|
|
Path string
|
|
TLS bool
|
|
ServiceName string
|
|
ServicePort string
|
|
Address string
|
|
NumEndpoints string
|
|
}
|
|
|
|
func getIngressRows(ingresses *[]networking.Ingress) []ingressRow {
|
|
rows := make([]ingressRow, 0)
|
|
|
|
for _, ing := range *ingresses {
|
|
|
|
address := ""
|
|
for _, lbIng := range ing.Status.LoadBalancer.Ingress {
|
|
if len(lbIng.IP) > 0 {
|
|
address = address + lbIng.IP + ","
|
|
}
|
|
if len(lbIng.Hostname) > 0 {
|
|
address = address + lbIng.Hostname + ","
|
|
}
|
|
}
|
|
if len(address) > 0 {
|
|
address = address[:len(address)-1]
|
|
}
|
|
|
|
tlsHosts := make(map[string]struct{})
|
|
for _, tls := range ing.Spec.TLS {
|
|
for _, host := range tls.Hosts {
|
|
tlsHosts[host] = struct{}{}
|
|
}
|
|
}
|
|
|
|
defaultBackendService := ""
|
|
defaultBackendPort := ""
|
|
if ing.Spec.DefaultBackend != nil {
|
|
name, port := serviceToNameAndPort(ing.Spec.DefaultBackend.Service)
|
|
defaultBackendService = name
|
|
defaultBackendPort = port.String()
|
|
}
|
|
|
|
// Handle catch-all ingress
|
|
if len(ing.Spec.Rules) == 0 && len(defaultBackendService) > 0 {
|
|
row := ingressRow{
|
|
Namespace: ing.Namespace,
|
|
IngressName: ing.Name,
|
|
Host: "*",
|
|
ServiceName: defaultBackendService,
|
|
ServicePort: defaultBackendPort,
|
|
Address: address,
|
|
}
|
|
|
|
rows = append(rows, row)
|
|
continue
|
|
}
|
|
|
|
for _, rule := range ing.Spec.Rules {
|
|
_, hasTLS := tlsHosts[rule.Host]
|
|
|
|
//Handle ingress with no paths
|
|
if rule.HTTP == nil {
|
|
row := ingressRow{
|
|
Namespace: ing.Namespace,
|
|
IngressName: ing.Name,
|
|
Host: rule.Host,
|
|
Path: "",
|
|
TLS: hasTLS,
|
|
ServiceName: defaultBackendService,
|
|
ServicePort: defaultBackendPort,
|
|
Address: address,
|
|
}
|
|
rows = append(rows, row)
|
|
continue
|
|
}
|
|
|
|
for _, path := range rule.HTTP.Paths {
|
|
svcName, svcPort := serviceToNameAndPort(path.Backend.Service)
|
|
row := ingressRow{
|
|
Namespace: ing.Namespace,
|
|
IngressName: ing.Name,
|
|
Host: rule.Host,
|
|
Path: path.Path,
|
|
TLS: hasTLS,
|
|
ServiceName: svcName,
|
|
ServicePort: svcPort.String(),
|
|
Address: address,
|
|
}
|
|
|
|
rows = append(rows, row)
|
|
}
|
|
}
|
|
}
|
|
|
|
return rows
|
|
}
|
|
|
|
func serviceToNameAndPort(svc *networking.IngressServiceBackend) (string, intstr.IntOrString) {
|
|
var svcName string
|
|
if svc != nil {
|
|
svcName = svc.Name
|
|
if svc.Port.Number > 0 {
|
|
return svcName, intstr.FromInt(int(svc.Port.Number))
|
|
}
|
|
if svc.Port.Name != "" {
|
|
return svcName, intstr.FromString(svc.Port.Name)
|
|
}
|
|
}
|
|
return "", intstr.IntOrString{}
|
|
}
|