
* Drop v1beta1 from ingress nginx (#7156) * Drop v1beta1 from ingress nginx Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix intorstr logic in controller Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * fixing admission Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * more intorstr fixing * correct template rendering Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix e2e tests for v1 api Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix gofmt errors * This is finally working...almost there... Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Re-add removed validation of AdmissionReview * Prepare for v1.0.0-alpha.1 release Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Update changelog and matrix table for v1.0.0-alpha.1 (#7274) Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * add docs for syslog feature (#7219) * Fix link to e2e-tests.md in developer-guide (#7201) * Use ENV expansion for namespace in args (#7146) Update the DaemonSet namespace references to use the `POD_NAMESPACE` environment variable in the same way that the Deployment does. * chart: using Helm builtin capabilities check (#7190) Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> * Update proper default value for HTTP2MaxConcurrentStreams in Docs (#6944) It should be 128 as documented in https://github.com/kubernetes/ingress-nginx/blob/master/internal/ingress/controller/config/config.go#L780 * Fix MaxWorkerOpenFiles calculation on high cores nodes (#7107) * Fix MaxWorkerOpenFiles calculation on high cores nodes * Add e2e test for rlimit_nofile * Fix doc for max-worker-open-files * ingress/tcp: add additional error logging on failed (#7208) * Add file containing stable release (#7313) * Handle named (non-numeric) ports correctly (#7311) Signed-off-by: Carlos Panato <ctadeu@gmail.com> * Updated v1beta1 to v1 as its deprecated (#7308) * remove mercurial from build (#7031) * Retry to download maxmind DB if it fails (#7242) * Retry to download maxmind DB if it fails. Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Add retries count arg, move retry logic into DownloadGeoLite2DB function Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Reorder parameters in DownloadGeoLite2DB Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Remove hardcoded value Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Release v1.0.0-alpha.1 * Add changelog for v1.0.0-alpha.2 * controller: ignore non-service backends (#7332) * controller: ignore non-service backends Signed-off-by: Carlos Panato <ctadeu@gmail.com> * update per feedback Signed-off-by: Carlos Panato <ctadeu@gmail.com> * fix: allow scope/tcp/udp configmap namespace to altered (#7161) * Lower webhook timeout for digital ocean (#7319) * Lower webhook timeout for digital ocean * Set Digital Ocean value controller.admissionWebhooks.timeoutSeconds to 29 * update OWNERS and aliases files (#7365) (#7366) Signed-off-by: Carlos Panato <ctadeu@gmail.com> * Downgrade Lua modules for s390x (#7355) Downgrade Lua modules to last known working version. * Fix IngressClass logic for newer releases (#7341) * Fix IngressClass logic for newer releases Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Change e2e tests for the new IngressClass presence * Fix chart and admission tests Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix helm chart test Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix reviews * Remove ingressclass code from admission * update tag to v1.0.0-beta.1 * update readme and changelog for v1.0.0-beta.1 * Release v1.0.0-beta.1 - helm and manifests (#7422) * Change the order of annotation just to trigger a new helm release (#7425) * [cherry-pick] Add dev-v1 branch into helm releaser (#7428) * Add dev-v1 branch into helm releaser (#7424) * chore: add link for artifacthub.io/prerelease annotations Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com> * k8s job ci pipeline for dev-v1 br v1.22.0 (#7453) * k8s job ci pipeline for dev-v1 br v1.22.0 Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * k8s job ci pipeline for dev-v1 br v1.21.2 Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * remove v1.21.1 version Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * Add controller.watchIngressWithoutClass config option (#7459) Signed-off-by: Akshit Grover <akshit.grover2016@gmail.com> * Release new helm chart with certgen fixed (#7478) * Update go version, modules and remove ioutil * Release new helm chart with certgen fixed * changed appversion, chartversion, TAG, image (#7490) * Fix CI conflict * Fix CI conflict * Fix build.sh from rebase process * Fix controller_test post rebase Co-authored-by: Tianhao Guo <rggth09@gmail.com> Co-authored-by: Ray <61553+rctay@users.noreply.github.com> Co-authored-by: Bill Cassidy <cassid4@gmail.com> Co-authored-by: Jintao Zhang <tao12345666333@163.com> Co-authored-by: Sathish Ramani <rsathishx87@gmail.com> Co-authored-by: Mansur Marvanov <nanorobocop@gmail.com> Co-authored-by: Matt1360 <568198+Matt1360@users.noreply.github.com> Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com> Co-authored-by: Kundan Kumar <kundan.kumar@india.nec.com> Co-authored-by: Tom Hayward <thayward@infoblox.com> Co-authored-by: Sergey Shakuto <sshakuto@infoblox.com> Co-authored-by: Tore <tore.lonoy@gmail.com> Co-authored-by: Bouke Versteegh <info@boukeversteegh.nl> Co-authored-by: Shahid <shahid@us.ibm.com> Co-authored-by: James Strong <strong.james.e@gmail.com> Co-authored-by: Long Wu Yuan <longwuyuan@gmail.com> Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com> Co-authored-by: Neha Lohia <nehapithadiya444@gmail.com> Co-authored-by: Akshit Grover <akshit.grover2016@gmail.com>
328 lines
8.4 KiB
Go
328 lines
8.4 KiB
Go
/*
|
|
Copyright 2019 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package request
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
appsv1 "k8s.io/api/apps/v1"
|
|
apiv1 "k8s.io/api/core/v1"
|
|
networking "k8s.io/api/networking/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/cli-runtime/pkg/genericclioptions"
|
|
appsv1client "k8s.io/client-go/kubernetes/typed/apps/v1"
|
|
corev1 "k8s.io/client-go/kubernetes/typed/core/v1"
|
|
typednetworking "k8s.io/client-go/kubernetes/typed/networking/v1"
|
|
|
|
"k8s.io/ingress-nginx/cmd/plugin/util"
|
|
)
|
|
|
|
// ChoosePod finds a pod either by deployment or by name
|
|
func ChoosePod(flags *genericclioptions.ConfigFlags, podName string, deployment string, selector string) (apiv1.Pod, error) {
|
|
if podName != "" {
|
|
return GetNamedPod(flags, podName)
|
|
}
|
|
|
|
if selector != "" {
|
|
return GetLabeledPod(flags, selector)
|
|
}
|
|
|
|
return GetDeploymentPod(flags, deployment)
|
|
}
|
|
|
|
// GetNamedPod finds a pod with the given name
|
|
func GetNamedPod(flags *genericclioptions.ConfigFlags, name string) (apiv1.Pod, error) {
|
|
allPods, err := getPods(flags)
|
|
if err != nil {
|
|
return apiv1.Pod{}, err
|
|
}
|
|
|
|
for _, pod := range allPods {
|
|
if pod.Name == name {
|
|
return pod, nil
|
|
}
|
|
}
|
|
|
|
return apiv1.Pod{}, fmt.Errorf("pod %v not found in namespace %v", name, util.GetNamespace(flags))
|
|
}
|
|
|
|
// GetDeploymentPod finds a pod from a given deployment
|
|
func GetDeploymentPod(flags *genericclioptions.ConfigFlags, deployment string) (apiv1.Pod, error) {
|
|
ings, err := getDeploymentPods(flags, deployment)
|
|
if err != nil {
|
|
return apiv1.Pod{}, err
|
|
}
|
|
|
|
if len(ings) == 0 {
|
|
return apiv1.Pod{}, fmt.Errorf("no pods for deployment %v found in namespace %v", deployment, util.GetNamespace(flags))
|
|
}
|
|
|
|
return ings[0], nil
|
|
}
|
|
|
|
// GetLabeledPod finds a pod from a given label
|
|
func GetLabeledPod(flags *genericclioptions.ConfigFlags, label string) (apiv1.Pod, error) {
|
|
ings, err := getLabeledPods(flags, label)
|
|
if err != nil {
|
|
return apiv1.Pod{}, err
|
|
}
|
|
|
|
if len(ings) == 0 {
|
|
return apiv1.Pod{}, fmt.Errorf("no pods for label selector %v found in namespace %v", label, util.GetNamespace(flags))
|
|
}
|
|
|
|
return ings[0], nil
|
|
}
|
|
|
|
// GetDeployments returns an array of Deployments
|
|
func GetDeployments(flags *genericclioptions.ConfigFlags, namespace string) ([]appsv1.Deployment, error) {
|
|
rawConfig, err := flags.ToRESTConfig()
|
|
if err != nil {
|
|
return make([]appsv1.Deployment, 0), err
|
|
}
|
|
|
|
api, err := appsv1client.NewForConfig(rawConfig)
|
|
if err != nil {
|
|
return make([]appsv1.Deployment, 0), err
|
|
}
|
|
|
|
deployments, err := api.Deployments(namespace).List(context.TODO(), metav1.ListOptions{})
|
|
if err != nil {
|
|
return make([]appsv1.Deployment, 0), err
|
|
}
|
|
|
|
return deployments.Items, nil
|
|
}
|
|
|
|
// GetIngressDefinitions returns an array of Ingress resource definitions
|
|
func GetIngressDefinitions(flags *genericclioptions.ConfigFlags, namespace string) ([]networking.Ingress, error) {
|
|
rawConfig, err := flags.ToRESTConfig()
|
|
if err != nil {
|
|
return make([]networking.Ingress, 0), err
|
|
}
|
|
|
|
api, err := typednetworking.NewForConfig(rawConfig)
|
|
if err != nil {
|
|
return make([]networking.Ingress, 0), err
|
|
}
|
|
|
|
pods, err := api.Ingresses(namespace).List(context.TODO(), metav1.ListOptions{})
|
|
if err != nil {
|
|
return make([]networking.Ingress, 0), err
|
|
}
|
|
|
|
return pods.Items, nil
|
|
}
|
|
|
|
// GetNumEndpoints counts the number of endpoints for the service with the given name
|
|
func GetNumEndpoints(flags *genericclioptions.ConfigFlags, namespace string, serviceName string) (*int, error) {
|
|
endpoints, err := GetEndpointsByName(flags, namespace, serviceName)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if endpoints == nil {
|
|
return nil, nil
|
|
}
|
|
|
|
ret := 0
|
|
for _, subset := range endpoints.Subsets {
|
|
ret += len(subset.Addresses)
|
|
}
|
|
return &ret, nil
|
|
}
|
|
|
|
// GetEndpointsByName returns the endpoints for the service with the given name
|
|
func GetEndpointsByName(flags *genericclioptions.ConfigFlags, namespace string, name string) (*apiv1.Endpoints, error) {
|
|
allEndpoints, err := getEndpoints(flags, namespace)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
for _, endpoints := range allEndpoints {
|
|
if endpoints.Name == name {
|
|
return &endpoints, nil
|
|
}
|
|
}
|
|
|
|
return nil, nil
|
|
}
|
|
|
|
var endpointsCache = make(map[string]*[]apiv1.Endpoints)
|
|
|
|
func getEndpoints(flags *genericclioptions.ConfigFlags, namespace string) ([]apiv1.Endpoints, error) {
|
|
cachedEndpoints, ok := endpointsCache[namespace]
|
|
if ok {
|
|
return *cachedEndpoints, nil
|
|
}
|
|
|
|
if namespace != "" {
|
|
tryAllNamespacesEndpointsCache(flags)
|
|
}
|
|
|
|
cachedEndpoints = tryFilteringEndpointsFromAllNamespacesCache(flags, namespace)
|
|
if cachedEndpoints != nil {
|
|
return *cachedEndpoints, nil
|
|
}
|
|
|
|
rawConfig, err := flags.ToRESTConfig()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
api, err := corev1.NewForConfig(rawConfig)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
endpointsList, err := api.Endpoints(namespace).List(context.TODO(), metav1.ListOptions{})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
endpoints := endpointsList.Items
|
|
|
|
endpointsCache[namespace] = &endpoints
|
|
return endpoints, nil
|
|
}
|
|
|
|
func tryAllNamespacesEndpointsCache(flags *genericclioptions.ConfigFlags) {
|
|
_, ok := endpointsCache[""]
|
|
if !ok {
|
|
_, err := getEndpoints(flags, "")
|
|
if err != nil {
|
|
endpointsCache[""] = nil
|
|
}
|
|
}
|
|
}
|
|
|
|
func tryFilteringEndpointsFromAllNamespacesCache(flags *genericclioptions.ConfigFlags, namespace string) *[]apiv1.Endpoints {
|
|
allEndpoints := endpointsCache[""]
|
|
if allEndpoints != nil {
|
|
endpoints := make([]apiv1.Endpoints, 0)
|
|
for _, thisEndpoints := range *allEndpoints {
|
|
if thisEndpoints.Namespace == namespace {
|
|
endpoints = append(endpoints, thisEndpoints)
|
|
}
|
|
}
|
|
endpointsCache[namespace] = &endpoints
|
|
return &endpoints
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// GetServiceByName finds and returns the service definition with the given name
|
|
func GetServiceByName(flags *genericclioptions.ConfigFlags, name string, services *[]apiv1.Service) (apiv1.Service, error) {
|
|
if services == nil {
|
|
servicesArray, err := getServices(flags)
|
|
if err != nil {
|
|
return apiv1.Service{}, err
|
|
}
|
|
services = &servicesArray
|
|
}
|
|
|
|
for _, svc := range *services {
|
|
if svc.Name == name {
|
|
return svc, nil
|
|
}
|
|
}
|
|
|
|
return apiv1.Service{}, fmt.Errorf("could not find service %v in namespace %v", name, util.GetNamespace(flags))
|
|
}
|
|
|
|
func getPods(flags *genericclioptions.ConfigFlags) ([]apiv1.Pod, error) {
|
|
namespace := util.GetNamespace(flags)
|
|
|
|
rawConfig, err := flags.ToRESTConfig()
|
|
if err != nil {
|
|
return make([]apiv1.Pod, 0), err
|
|
}
|
|
|
|
api, err := corev1.NewForConfig(rawConfig)
|
|
if err != nil {
|
|
return make([]apiv1.Pod, 0), err
|
|
}
|
|
|
|
pods, err := api.Pods(namespace).List(context.TODO(), metav1.ListOptions{})
|
|
if err != nil {
|
|
return make([]apiv1.Pod, 0), err
|
|
}
|
|
|
|
return pods.Items, nil
|
|
}
|
|
|
|
func getLabeledPods(flags *genericclioptions.ConfigFlags, label string) ([]apiv1.Pod, error) {
|
|
namespace := util.GetNamespace(flags)
|
|
|
|
rawConfig, err := flags.ToRESTConfig()
|
|
if err != nil {
|
|
return make([]apiv1.Pod, 0), err
|
|
}
|
|
|
|
api, err := corev1.NewForConfig(rawConfig)
|
|
if err != nil {
|
|
return make([]apiv1.Pod, 0), err
|
|
}
|
|
|
|
pods, err := api.Pods(namespace).List(context.TODO(), metav1.ListOptions{
|
|
LabelSelector: label,
|
|
})
|
|
|
|
if err != nil {
|
|
return make([]apiv1.Pod, 0), err
|
|
}
|
|
|
|
return pods.Items, nil
|
|
}
|
|
|
|
func getDeploymentPods(flags *genericclioptions.ConfigFlags, deployment string) ([]apiv1.Pod, error) {
|
|
pods, err := getPods(flags)
|
|
if err != nil {
|
|
return make([]apiv1.Pod, 0), err
|
|
}
|
|
|
|
ingressPods := make([]apiv1.Pod, 0)
|
|
for _, pod := range pods {
|
|
if util.PodInDeployment(pod, deployment) {
|
|
ingressPods = append(ingressPods, pod)
|
|
}
|
|
}
|
|
|
|
return ingressPods, nil
|
|
}
|
|
|
|
func getServices(flags *genericclioptions.ConfigFlags) ([]apiv1.Service, error) {
|
|
namespace := util.GetNamespace(flags)
|
|
|
|
rawConfig, err := flags.ToRESTConfig()
|
|
if err != nil {
|
|
return make([]apiv1.Service, 0), err
|
|
}
|
|
|
|
api, err := corev1.NewForConfig(rawConfig)
|
|
if err != nil {
|
|
return make([]apiv1.Service, 0), err
|
|
}
|
|
|
|
services, err := api.Services(namespace).List(context.TODO(), metav1.ListOptions{})
|
|
if err != nil {
|
|
return make([]apiv1.Service, 0), err
|
|
}
|
|
|
|
return services.Items, nil
|
|
|
|
}
|