mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-14 11:57:48 +00:00
103 lines
3.5 KiB
Go
103 lines
3.5 KiB
Go
package updaterequest
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
backoff "github.com/cenkalti/backoff"
|
|
kyvernov2 "github.com/kyverno/kyverno/api/kyverno/v2"
|
|
"github.com/kyverno/kyverno/pkg/background/common"
|
|
"github.com/kyverno/kyverno/pkg/client/clientset/versioned"
|
|
kyvernov2informers "github.com/kyverno/kyverno/pkg/client/informers/externalversions/kyverno/v2"
|
|
kyvernov2listers "github.com/kyverno/kyverno/pkg/client/listers/kyverno/v2"
|
|
"github.com/kyverno/kyverno/pkg/config"
|
|
generatorutils "github.com/kyverno/kyverno/pkg/utils/generator"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/labels"
|
|
)
|
|
|
|
// Generator provides interface to manage update requests
|
|
type Generator interface {
|
|
Apply(context.Context, kyvernov2.UpdateRequestSpec) error
|
|
}
|
|
|
|
// generator defines the implementation to manage update request resource
|
|
type generator struct {
|
|
// clients
|
|
client versioned.Interface
|
|
|
|
// listers
|
|
urLister kyvernov2listers.UpdateRequestNamespaceLister
|
|
|
|
urGenerator generatorutils.UpdateRequestGenerator
|
|
}
|
|
|
|
// NewGenerator returns a new instance of UpdateRequest resource generator
|
|
func NewGenerator(client versioned.Interface, urInformer kyvernov2informers.UpdateRequestInformer, urGenerator generatorutils.UpdateRequestGenerator) Generator {
|
|
return &generator{
|
|
client: client,
|
|
urLister: urInformer.Lister().UpdateRequests(config.KyvernoNamespace()),
|
|
urGenerator: urGenerator,
|
|
}
|
|
}
|
|
|
|
// Apply creates update request resource
|
|
func (g *generator) Apply(ctx context.Context, ur kyvernov2.UpdateRequestSpec) error {
|
|
if ur.Type == kyvernov2.Generate && len(ur.RuleContext) == 0 {
|
|
return nil
|
|
}
|
|
logger.V(4).Info("apply Update Request", "request", ur)
|
|
go g.applyResource(context.TODO(), ur)
|
|
return nil
|
|
}
|
|
|
|
func (g *generator) applyResource(ctx context.Context, urSpec kyvernov2.UpdateRequestSpec) {
|
|
exbackoff := &backoff.ExponentialBackOff{
|
|
InitialInterval: 500 * time.Millisecond,
|
|
RandomizationFactor: 0.5,
|
|
Multiplier: 1.5,
|
|
MaxInterval: time.Second,
|
|
MaxElapsedTime: 3 * time.Second,
|
|
Clock: backoff.SystemClock,
|
|
}
|
|
exbackoff.Reset()
|
|
if err := backoff.Retry(func() error { return g.tryApplyResource(ctx, urSpec) }, exbackoff); err != nil {
|
|
logger.Error(err, "failed to update request CR")
|
|
}
|
|
}
|
|
|
|
func (g *generator) tryApplyResource(ctx context.Context, urSpec kyvernov2.UpdateRequestSpec) error {
|
|
l := logger.WithValues("ruleType", urSpec.GetRequestType(), "resource", urSpec.GetResource().String())
|
|
var queryLabels labels.Set
|
|
|
|
if urSpec.GetRequestType() == kyvernov2.Mutate {
|
|
queryLabels = common.MutateLabelsSet(urSpec.Policy, urSpec.GetResource())
|
|
} else if urSpec.GetRequestType() == kyvernov2.Generate {
|
|
queryLabels = common.GenerateLabelsSet(urSpec.Policy)
|
|
}
|
|
|
|
l.V(4).Info("creating new UpdateRequest")
|
|
ur := kyvernov2.UpdateRequest{
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Namespace: config.KyvernoNamespace(),
|
|
GenerateName: "ur-",
|
|
Labels: queryLabels,
|
|
},
|
|
Spec: urSpec,
|
|
}
|
|
created, err := g.urGenerator.Generate(ctx, g.client, &ur, l)
|
|
if err != nil {
|
|
l.V(4).Error(err, "failed to create UpdateRequest, retrying", "name", ur.GetGenerateName(), "namespace", ur.GetNamespace())
|
|
return err
|
|
} else if created == nil {
|
|
return nil
|
|
}
|
|
updated := created.DeepCopy()
|
|
updated.Status.State = kyvernov2.Pending
|
|
_, err = g.client.KyvernoV2().UpdateRequests(config.KyvernoNamespace()).UpdateStatus(context.TODO(), updated, metav1.UpdateOptions{})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
l.V(4).Info("successfully created UpdateRequest", "name", updated.GetName(), "namespace", ur.GetNamespace())
|
|
return nil
|
|
}
|