
* Drop v1beta1 from ingress nginx (#7156) * Drop v1beta1 from ingress nginx Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix intorstr logic in controller Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * fixing admission Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * more intorstr fixing * correct template rendering Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix e2e tests for v1 api Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix gofmt errors * This is finally working...almost there... Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Re-add removed validation of AdmissionReview * Prepare for v1.0.0-alpha.1 release Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Update changelog and matrix table for v1.0.0-alpha.1 (#7274) Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * add docs for syslog feature (#7219) * Fix link to e2e-tests.md in developer-guide (#7201) * Use ENV expansion for namespace in args (#7146) Update the DaemonSet namespace references to use the `POD_NAMESPACE` environment variable in the same way that the Deployment does. * chart: using Helm builtin capabilities check (#7190) Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> * Update proper default value for HTTP2MaxConcurrentStreams in Docs (#6944) It should be 128 as documented in https://github.com/kubernetes/ingress-nginx/blob/master/internal/ingress/controller/config/config.go#L780 * Fix MaxWorkerOpenFiles calculation on high cores nodes (#7107) * Fix MaxWorkerOpenFiles calculation on high cores nodes * Add e2e test for rlimit_nofile * Fix doc for max-worker-open-files * ingress/tcp: add additional error logging on failed (#7208) * Add file containing stable release (#7313) * Handle named (non-numeric) ports correctly (#7311) Signed-off-by: Carlos Panato <ctadeu@gmail.com> * Updated v1beta1 to v1 as its deprecated (#7308) * remove mercurial from build (#7031) * Retry to download maxmind DB if it fails (#7242) * Retry to download maxmind DB if it fails. Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Add retries count arg, move retry logic into DownloadGeoLite2DB function Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Reorder parameters in DownloadGeoLite2DB Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Remove hardcoded value Signed-off-by: Sergey Shakuto <sshakuto@infoblox.com> * Release v1.0.0-alpha.1 * Add changelog for v1.0.0-alpha.2 * controller: ignore non-service backends (#7332) * controller: ignore non-service backends Signed-off-by: Carlos Panato <ctadeu@gmail.com> * update per feedback Signed-off-by: Carlos Panato <ctadeu@gmail.com> * fix: allow scope/tcp/udp configmap namespace to altered (#7161) * Lower webhook timeout for digital ocean (#7319) * Lower webhook timeout for digital ocean * Set Digital Ocean value controller.admissionWebhooks.timeoutSeconds to 29 * update OWNERS and aliases files (#7365) (#7366) Signed-off-by: Carlos Panato <ctadeu@gmail.com> * Downgrade Lua modules for s390x (#7355) Downgrade Lua modules to last known working version. * Fix IngressClass logic for newer releases (#7341) * Fix IngressClass logic for newer releases Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Change e2e tests for the new IngressClass presence * Fix chart and admission tests Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix helm chart test Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com> * Fix reviews * Remove ingressclass code from admission * update tag to v1.0.0-beta.1 * update readme and changelog for v1.0.0-beta.1 * Release v1.0.0-beta.1 - helm and manifests (#7422) * Change the order of annotation just to trigger a new helm release (#7425) * [cherry-pick] Add dev-v1 branch into helm releaser (#7428) * Add dev-v1 branch into helm releaser (#7424) * chore: add link for artifacthub.io/prerelease annotations Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> Co-authored-by: Ricardo Katz <rikatz@users.noreply.github.com> * k8s job ci pipeline for dev-v1 br v1.22.0 (#7453) * k8s job ci pipeline for dev-v1 br v1.22.0 Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * k8s job ci pipeline for dev-v1 br v1.21.2 Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * remove v1.21.1 version Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com> * Add controller.watchIngressWithoutClass config option (#7459) Signed-off-by: Akshit Grover <akshit.grover2016@gmail.com> * Release new helm chart with certgen fixed (#7478) * Update go version, modules and remove ioutil * Release new helm chart with certgen fixed * changed appversion, chartversion, TAG, image (#7490) * Fix CI conflict * Fix CI conflict * Fix build.sh from rebase process * Fix controller_test post rebase Co-authored-by: Tianhao Guo <rggth09@gmail.com> Co-authored-by: Ray <61553+rctay@users.noreply.github.com> Co-authored-by: Bill Cassidy <cassid4@gmail.com> Co-authored-by: Jintao Zhang <tao12345666333@163.com> Co-authored-by: Sathish Ramani <rsathishx87@gmail.com> Co-authored-by: Mansur Marvanov <nanorobocop@gmail.com> Co-authored-by: Matt1360 <568198+Matt1360@users.noreply.github.com> Co-authored-by: Carlos Tadeu Panato Junior <ctadeu@gmail.com> Co-authored-by: Kundan Kumar <kundan.kumar@india.nec.com> Co-authored-by: Tom Hayward <thayward@infoblox.com> Co-authored-by: Sergey Shakuto <sshakuto@infoblox.com> Co-authored-by: Tore <tore.lonoy@gmail.com> Co-authored-by: Bouke Versteegh <info@boukeversteegh.nl> Co-authored-by: Shahid <shahid@us.ibm.com> Co-authored-by: James Strong <strong.james.e@gmail.com> Co-authored-by: Long Wu Yuan <longwuyuan@gmail.com> Co-authored-by: Jintao Zhang <zhangjintao9020@gmail.com> Co-authored-by: Neha Lohia <nehapithadiya444@gmail.com> Co-authored-by: Akshit Grover <akshit.grover2016@gmail.com>
171 lines
4.7 KiB
Go
171 lines
4.7 KiB
Go
/*
|
|
Copyright 2015 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package k8s
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"os"
|
|
"strings"
|
|
|
|
"k8s.io/klog/v2"
|
|
|
|
apiv1 "k8s.io/api/core/v1"
|
|
networkingv1 "k8s.io/api/networking/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/util/version"
|
|
clientset "k8s.io/client-go/kubernetes"
|
|
"k8s.io/client-go/tools/cache"
|
|
)
|
|
|
|
// ParseNameNS parses a string searching a namespace and name
|
|
func ParseNameNS(input string) (string, string, error) {
|
|
nsName := strings.Split(input, "/")
|
|
if len(nsName) != 2 {
|
|
return "", "", fmt.Errorf("invalid format (namespace/name) found in '%v'", input)
|
|
}
|
|
|
|
return nsName[0], nsName[1], nil
|
|
}
|
|
|
|
// GetNodeIPOrName returns the IP address or the name of a node in the cluster
|
|
func GetNodeIPOrName(kubeClient clientset.Interface, name string, useInternalIP bool) string {
|
|
node, err := kubeClient.CoreV1().Nodes().Get(context.TODO(), name, metav1.GetOptions{})
|
|
if err != nil {
|
|
klog.ErrorS(err, "Error getting node", "name", name)
|
|
return ""
|
|
}
|
|
|
|
defaultOrInternalIP := ""
|
|
for _, address := range node.Status.Addresses {
|
|
if address.Type == apiv1.NodeInternalIP {
|
|
if address.Address != "" {
|
|
defaultOrInternalIP = address.Address
|
|
break
|
|
}
|
|
}
|
|
}
|
|
|
|
if useInternalIP {
|
|
return defaultOrInternalIP
|
|
}
|
|
|
|
for _, address := range node.Status.Addresses {
|
|
if address.Type == apiv1.NodeExternalIP {
|
|
if address.Address != "" {
|
|
return address.Address
|
|
}
|
|
}
|
|
}
|
|
|
|
return defaultOrInternalIP
|
|
}
|
|
|
|
var (
|
|
// IngressPodDetails hold information about the ingress-nginx pod
|
|
IngressPodDetails *PodInfo
|
|
)
|
|
|
|
// PodInfo contains runtime information about the pod running the Ingres controller
|
|
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
|
|
type PodInfo struct {
|
|
metav1.TypeMeta
|
|
metav1.ObjectMeta
|
|
}
|
|
|
|
// GetIngressPod load the ingress-nginx pod
|
|
func GetIngressPod(kubeClient clientset.Interface) error {
|
|
podName := os.Getenv("POD_NAME")
|
|
podNs := os.Getenv("POD_NAMESPACE")
|
|
|
|
if podName == "" || podNs == "" {
|
|
return fmt.Errorf("unable to get POD information (missing POD_NAME or POD_NAMESPACE environment variable")
|
|
}
|
|
|
|
pod, err := kubeClient.CoreV1().Pods(podNs).Get(context.TODO(), podName, metav1.GetOptions{})
|
|
if err != nil {
|
|
return fmt.Errorf("unable to get POD information: %v", err)
|
|
}
|
|
|
|
IngressPodDetails = &PodInfo{
|
|
TypeMeta: metav1.TypeMeta{APIVersion: "v1", Kind: "Pod"},
|
|
}
|
|
|
|
pod.ObjectMeta.DeepCopyInto(&IngressPodDetails.ObjectMeta)
|
|
IngressPodDetails.SetLabels(pod.GetLabels())
|
|
|
|
return nil
|
|
}
|
|
|
|
// MetaNamespaceKey knows how to make keys for API objects which implement meta.Interface.
|
|
func MetaNamespaceKey(obj interface{}) string {
|
|
key, err := cache.DeletionHandlingMetaNamespaceKeyFunc(obj)
|
|
if err != nil {
|
|
klog.Warning(err)
|
|
}
|
|
|
|
return key
|
|
}
|
|
|
|
// IsIngressV1Ready indicates if the running Kubernetes version is at least v1.19.0
|
|
var IsIngressV1Ready bool
|
|
|
|
// IngressNGINXController defines the valid value of IngressClass
|
|
// Controller field for ingress-nginx
|
|
const IngressNGINXController = "k8s.io/ingress-nginx"
|
|
|
|
// NetworkingIngressAvailable checks if the package "k8s.io/api/networking/v1"
|
|
// is available or not and if Ingress V1 is supported (k8s >= v1.19.0)
|
|
func NetworkingIngressAvailable(client clientset.Interface) bool {
|
|
version119, _ := version.ParseGeneric("v1.19.0")
|
|
|
|
serverVersion, err := client.Discovery().ServerVersion()
|
|
if err != nil {
|
|
return false
|
|
}
|
|
|
|
runningVersion, err := version.ParseGeneric(serverVersion.String())
|
|
if err != nil {
|
|
klog.ErrorS(err, "unexpected error parsing running Kubernetes version")
|
|
return false
|
|
}
|
|
|
|
return runningVersion.AtLeast(version119)
|
|
}
|
|
|
|
// default path type is Prefix to not break existing definitions
|
|
var defaultPathType = networkingv1.PathTypePrefix
|
|
|
|
// SetDefaultNGINXPathType sets a default PathType when is not defined.
|
|
func SetDefaultNGINXPathType(ing *networkingv1.Ingress) {
|
|
for _, rule := range ing.Spec.Rules {
|
|
if rule.IngressRuleValue.HTTP == nil {
|
|
continue
|
|
}
|
|
|
|
for idx := range rule.IngressRuleValue.HTTP.Paths {
|
|
p := &rule.IngressRuleValue.HTTP.Paths[idx]
|
|
if p.PathType == nil {
|
|
p.PathType = &defaultPathType
|
|
}
|
|
|
|
if *p.PathType == networkingv1.PathTypeImplementationSpecific {
|
|
p.PathType = &defaultPathType
|
|
}
|
|
}
|
|
}
|
|
}
|