package webhookconfig import ( "fmt" "github.com/golang/glog" "github.com/nirmata/kyverno/pkg/config" admregapi "k8s.io/api/admissionregistration/v1beta1" "k8s.io/apimachinery/pkg/api/errors" v1 "k8s.io/apimachinery/pkg/apis/meta/v1" ) func (wrc *WebhookRegistrationClient) constructDebugMutatingWebhookConfig(caData []byte) *admregapi.MutatingWebhookConfiguration { url := fmt.Sprintf("https://%s%s", wrc.serverIP, config.MutatingWebhookServicePath) glog.V(4).Infof("Debug MutatingWebhookConfig is registered with url %s\n", url) return &admregapi.MutatingWebhookConfiguration{ ObjectMeta: v1.ObjectMeta{ Name: config.MutatingWebhookConfigurationDebugName, }, Webhooks: []admregapi.Webhook{ generateDebugWebhook( config.MutatingWebhookName, url, caData, true, wrc.timeoutSeconds, "*/*", "*", "*", []admregapi.OperationType{admregapi.Create, admregapi.Update}, ), }, } } func (wrc *WebhookRegistrationClient) constructMutatingWebhookConfig(caData []byte) *admregapi.MutatingWebhookConfiguration { return &admregapi.MutatingWebhookConfiguration{ ObjectMeta: v1.ObjectMeta{ Name: config.MutatingWebhookConfigurationName, OwnerReferences: []v1.OwnerReference{ wrc.constructOwner(), }, }, Webhooks: []admregapi.Webhook{ generateWebhook( config.MutatingWebhookName, config.MutatingWebhookServicePath, caData, false, wrc.timeoutSeconds, "*/*", "*", "*", []admregapi.OperationType{admregapi.Create, admregapi.Update}, ), }, } } //GetResourceMutatingWebhookConfigName provi func (wrc *WebhookRegistrationClient) GetResourceMutatingWebhookConfigName() string { if wrc.serverIP != "" { return config.MutatingWebhookConfigurationDebugName } return config.MutatingWebhookConfigurationName } //RemoveResourceMutatingWebhookConfiguration removes mutating webhook configuration for all resources func (wrc *WebhookRegistrationClient) RemoveResourceMutatingWebhookConfiguration() error { configName := wrc.GetResourceMutatingWebhookConfigName() // delete webhook configuration err := wrc.client.DeleteResource(MutatingWebhookConfigurationKind, "", configName, false) if errors.IsNotFound(err) { glog.V(4).Infof("resource webhook configuration %s does not exits, so not deleting", configName) return nil } if err != nil { glog.V(4).Infof("failed to delete resource webhook configuration %s: %v", configName, err) return err } glog.V(4).Infof("deleted resource webhook configuration %s", configName) return nil } func (wrc *WebhookRegistrationClient) constructDebugValidatingWebhookConfig(caData []byte) *admregapi.ValidatingWebhookConfiguration { url := fmt.Sprintf("https://%s%s", wrc.serverIP, config.ValidatingWebhookServicePath) glog.V(4).Infof("Debug ValidatingWebhookConfig is registered with url %s\n", url) return &admregapi.ValidatingWebhookConfiguration{ ObjectMeta: v1.ObjectMeta{ Name: config.ValidatingWebhookConfigurationDebugName, }, Webhooks: []admregapi.Webhook{ generateDebugWebhook( config.ValidatingWebhookName, url, caData, true, wrc.timeoutSeconds, "*/*", "*", "*", []admregapi.OperationType{admregapi.Create, admregapi.Update}, ), }, } } func (wrc *WebhookRegistrationClient) constructValidatingWebhookConfig(caData []byte) *admregapi.ValidatingWebhookConfiguration { return &admregapi.ValidatingWebhookConfiguration{ ObjectMeta: v1.ObjectMeta{ Name: config.ValidatingWebhookConfigurationName, OwnerReferences: []v1.OwnerReference{ wrc.constructOwner(), }, }, Webhooks: []admregapi.Webhook{ generateWebhook( config.ValidatingWebhookName, config.ValidatingWebhookServicePath, caData, false, wrc.timeoutSeconds, "*/*", "*", "*", []admregapi.OperationType{admregapi.Create, admregapi.Update}, ), }, } } func (wrc *WebhookRegistrationClient) GetResourceValidatingWebhookConfigName() string { if wrc.serverIP != "" { return config.ValidatingWebhookConfigurationDebugName } return config.ValidatingWebhookConfigurationName } func (wrc *WebhookRegistrationClient) RemoveResourceValidatingWebhookConfiguration() error { configName := wrc.GetResourceValidatingWebhookConfigName() err := wrc.client.DeleteResource(ValidatingWebhookConfigurationKind, "", configName, false) if errors.IsNotFound(err) { glog.V(4).Infof("resource webhook configuration %s does not exits, so not deleting", configName) return nil } if err != nil { glog.V(4).Infof("failed to delete resource webhook configuration %s: %v", configName, err) return err } glog.V(4).Infof("deleted resource webhook configuration %s", configName) return nil }