mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 16:06:56 +00:00
100 lines
3.5 KiB
Go
100 lines
3.5 KiB
Go
package main
|
|
|
|
import (
|
|
"flag"
|
|
|
|
"github.com/golang/glog"
|
|
"github.com/nirmata/kyverno/pkg/annotations"
|
|
"github.com/nirmata/kyverno/pkg/config"
|
|
controller "github.com/nirmata/kyverno/pkg/controller"
|
|
client "github.com/nirmata/kyverno/pkg/dclient"
|
|
event "github.com/nirmata/kyverno/pkg/event"
|
|
gencontroller "github.com/nirmata/kyverno/pkg/gencontroller"
|
|
"github.com/nirmata/kyverno/pkg/sharedinformer"
|
|
"github.com/nirmata/kyverno/pkg/utils"
|
|
"github.com/nirmata/kyverno/pkg/violation"
|
|
"github.com/nirmata/kyverno/pkg/webhooks"
|
|
"k8s.io/sample-controller/pkg/signals"
|
|
)
|
|
|
|
var (
|
|
kubeconfig string
|
|
serverIP string
|
|
filterK8Resources string
|
|
)
|
|
|
|
func main() {
|
|
defer glog.Flush()
|
|
printVersionInfo()
|
|
clientConfig, err := createClientConfig(kubeconfig)
|
|
if err != nil {
|
|
glog.Fatalf("Error building kubeconfig: %v\n", err)
|
|
}
|
|
|
|
client, err := client.NewClient(clientConfig)
|
|
if err != nil {
|
|
glog.Fatalf("Error creating client: %v\n", err)
|
|
}
|
|
|
|
policyInformerFactory, err := sharedinformer.NewSharedInformerFactory(clientConfig)
|
|
if err != nil {
|
|
glog.Fatalf("Error creating policy sharedinformer: %v\n", err)
|
|
}
|
|
kubeInformer := utils.NewKubeInformerFactory(clientConfig)
|
|
eventController := event.NewEventController(client, policyInformerFactory)
|
|
violationBuilder := violation.NewPolicyViolationBuilder(client, policyInformerFactory, eventController)
|
|
annotationsController := annotations.NewAnnotationControler(client)
|
|
policyController := controller.NewPolicyController(
|
|
client,
|
|
policyInformerFactory,
|
|
violationBuilder,
|
|
eventController,
|
|
annotationsController,
|
|
filterK8Resources)
|
|
|
|
genControler := gencontroller.NewGenController(client, eventController, policyInformerFactory, violationBuilder, kubeInformer.Core().V1().Namespaces(), annotationsController)
|
|
tlsPair, err := initTLSPemPair(clientConfig, client)
|
|
if err != nil {
|
|
glog.Fatalf("Failed to initialize TLS key/certificate pair: %v\n", err)
|
|
}
|
|
server, err := webhooks.NewWebhookServer(client, tlsPair, policyInformerFactory, eventController, violationBuilder, annotationsController, filterK8Resources)
|
|
if err != nil {
|
|
glog.Fatalf("Unable to create webhook server: %v\n", err)
|
|
}
|
|
|
|
webhookRegistrationClient, err := webhooks.NewWebhookRegistrationClient(clientConfig, client, serverIP)
|
|
if err != nil {
|
|
glog.Fatalf("Unable to register admission webhooks on cluster: %v\n", err)
|
|
}
|
|
|
|
stopCh := signals.SetupSignalHandler()
|
|
|
|
if err = webhookRegistrationClient.Register(); err != nil {
|
|
glog.Fatalf("Failed registering Admission Webhooks: %v\n", err)
|
|
}
|
|
|
|
policyInformerFactory.Run(stopCh)
|
|
kubeInformer.Start(stopCh)
|
|
eventController.Run(stopCh)
|
|
genControler.Run(stopCh)
|
|
annotationsController.Run(stopCh)
|
|
if err = policyController.Run(stopCh); err != nil {
|
|
glog.Fatalf("Error running PolicyController: %v\n", err)
|
|
}
|
|
|
|
server.RunAsync()
|
|
<-stopCh
|
|
server.Stop()
|
|
genControler.Stop()
|
|
eventController.Stop()
|
|
annotationsController.Stop()
|
|
policyController.Stop()
|
|
}
|
|
|
|
func init() {
|
|
flag.StringVar(&kubeconfig, "kubeconfig", "", "Path to a kubeconfig. Only required if out-of-cluster.")
|
|
flag.StringVar(&serverIP, "serverIP", "", "IP address where Kyverno controller runs. Only required if out-of-cluster.")
|
|
flag.StringVar(&filterK8Resources, "filterK8Resources", "", "k8 resource in format [kind,namespace,name] where policy is not evaluated by the admission webhook. example --filterKind \"[Deployment, kyverno, kyverno]\" --filterKind \"[Deployment, kyverno, kyverno],[Events, *, *]\"")
|
|
config.LogDefaultFlags()
|
|
flag.Parse()
|
|
}
|