mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-13 19:28:55 +00:00
4912f20885
TLS pair initialization functionality moved to init.go. Separated server and mutation webhook objects, implemented registration of webhook with the creation of corresponding object. Added comments for webhook configuration definitions, changed name of configuration for debug.
76 lines
1.9 KiB
Go
76 lines
1.9 KiB
Go
package main
|
|
|
|
import (
|
|
"flag"
|
|
"log"
|
|
|
|
"github.com/nirmata/kube-policy/controller"
|
|
"github.com/nirmata/kube-policy/kubeclient"
|
|
"github.com/nirmata/kube-policy/server"
|
|
"github.com/nirmata/kube-policy/webhooks"
|
|
|
|
signals "k8s.io/sample-controller/pkg/signals"
|
|
)
|
|
|
|
var (
|
|
kubeconfig string
|
|
cert string
|
|
key string
|
|
)
|
|
|
|
func main() {
|
|
clientConfig, err := createClientConfig(kubeconfig)
|
|
if err != nil {
|
|
log.Fatalf("Error building kubeconfig: %v\n", err)
|
|
}
|
|
|
|
controller, err := controller.NewPolicyController(clientConfig, nil)
|
|
if err != nil {
|
|
log.Fatalf("Error creating PolicyController: %s\n", err)
|
|
}
|
|
|
|
kubeclient, err := kubeclient.NewKubeClient(clientConfig, nil)
|
|
if err != nil {
|
|
log.Fatalf("Error creating kubeclient: %v\n", err)
|
|
}
|
|
|
|
mutationWebhook, err := webhooks.CreateMutationWebhook(clientConfig, kubeclient, controller, nil)
|
|
if err != nil {
|
|
log.Fatalf("Error creating mutation webhook: %v\n", err)
|
|
}
|
|
|
|
tlsPair, err := initTlsPemPair(cert, key, clientConfig, kubeclient)
|
|
if err != nil {
|
|
log.Fatalf("Failed to initialize TLS key/certificate pair: %v\n", err)
|
|
}
|
|
|
|
server, err := server.NewWebhookServer(tlsPair, mutationWebhook, nil)
|
|
if err != nil {
|
|
log.Fatalf("Unable to create webhook server: %v\n", err)
|
|
}
|
|
server.RunAsync()
|
|
|
|
stopCh := signals.SetupSignalHandler()
|
|
controller.Run(stopCh)
|
|
|
|
if err != nil {
|
|
log.Fatalf("Error running PolicyController: %s\n", err)
|
|
}
|
|
log.Println("Policy Controller has started")
|
|
|
|
<-stopCh
|
|
server.Stop()
|
|
err = mutationWebhook.Deregister()
|
|
if err != nil {
|
|
log.Printf("Unable to deregister mutation webhook: %v", err)
|
|
}
|
|
|
|
log.Println("Policy Controller has stopped")
|
|
}
|
|
|
|
func init() {
|
|
flag.StringVar(&kubeconfig, "kubeconfig", "", "Path to a kubeconfig. Only required if out-of-cluster.")
|
|
flag.StringVar(&cert, "cert", "", "TLS certificate used in connection with cluster.")
|
|
flag.StringVar(&key, "key", "", "Key, used in TLS connection.")
|
|
flag.Parse()
|
|
}
|