mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-14 11:57:48 +00:00
b385693509
* feat: add interface for image verify cache Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: add basic client for cache Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: add ttl to client Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: add flags and flag setup Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: added a default image verify cache Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: add propogation of cache to image verifier Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: add useCache to image verification types Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * bug: add ivcache to image verifier Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: add logger to cache Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * typo: DisabledImageVerfiyCache Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * typo: DisabledImageVerfiyCache Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * Update cmd/internal/flag.go Signed-off-by: shuting <shutting06@gmail.com> * feat: add use cache to v2beta1 crd Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * bug: change public attribute TTL to private Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * fix: replace nil in test with disabled cache Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * fix: convert ttl time to time.Duration Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: update opts to use time.Duration Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat:add policy version and remove delete functions by adding policy version, old entries will automatically become outdated and we will not have to remove them manually Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * feat: remove clear and update get and set to take interface as input Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> * style: fix lint issue Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> --------- Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com> Signed-off-by: shuting <shutting06@gmail.com> Co-authored-by: shuting <shutting06@gmail.com> Co-authored-by: shuting <shuting@nirmata.com> Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
118 lines
4.9 KiB
Go
118 lines
4.9 KiB
Go
package internal
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/go-logr/logr"
|
|
apiserverclient "github.com/kyverno/kyverno/pkg/clients/apiserver"
|
|
"github.com/kyverno/kyverno/pkg/clients/dclient"
|
|
dynamicclient "github.com/kyverno/kyverno/pkg/clients/dynamic"
|
|
kubeclient "github.com/kyverno/kyverno/pkg/clients/kube"
|
|
kyvernoclient "github.com/kyverno/kyverno/pkg/clients/kyverno"
|
|
metadataclient "github.com/kyverno/kyverno/pkg/clients/metadata"
|
|
"github.com/kyverno/kyverno/pkg/config"
|
|
"github.com/kyverno/kyverno/pkg/engine/jmespath"
|
|
"github.com/kyverno/kyverno/pkg/imageverifycache"
|
|
"github.com/kyverno/kyverno/pkg/metrics"
|
|
"github.com/kyverno/kyverno/pkg/registryclient"
|
|
corev1listers "k8s.io/client-go/listers/core/v1"
|
|
)
|
|
|
|
func shutdown(logger logr.Logger, sdowns ...context.CancelFunc) context.CancelFunc {
|
|
return func() {
|
|
for i := range sdowns {
|
|
if sdowns[i] != nil {
|
|
logger.Info("shutting down...")
|
|
defer sdowns[i]()
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
type SetupResult struct {
|
|
Logger logr.Logger
|
|
Configuration config.Configuration
|
|
MetricsConfiguration config.MetricsConfiguration
|
|
MetricsManager metrics.MetricsConfigManager
|
|
Jp jmespath.Interface
|
|
KubeClient kubeclient.UpstreamInterface
|
|
LeaderElectionClient kubeclient.UpstreamInterface
|
|
RegistryClient registryclient.Client
|
|
ImageVerifyCacheClient imageverifycache.Client
|
|
RegistrySecretLister corev1listers.SecretNamespaceLister
|
|
KyvernoClient kyvernoclient.UpstreamInterface
|
|
DynamicClient dynamicclient.UpstreamInterface
|
|
ApiServerClient apiserverclient.UpstreamInterface
|
|
MetadataClient metadataclient.UpstreamInterface
|
|
KyvernoDynamicClient dclient.Interface
|
|
}
|
|
|
|
func Setup(config Configuration, name string, skipResourceFilters bool) (context.Context, SetupResult, context.CancelFunc) {
|
|
logger := setupLogger()
|
|
showVersion(logger)
|
|
printFlagSettings(logger)
|
|
showWarnings(config, logger)
|
|
check(logger)
|
|
sdownMaxProcs := setupMaxProcs(logger)
|
|
setupProfiling(logger)
|
|
ctx, sdownSignals := setupSignals(logger)
|
|
client := kubeclient.From(createKubernetesClient(logger), kubeclient.WithTracing())
|
|
metricsConfiguration := startMetricsConfigController(ctx, logger, client)
|
|
metricsManager, sdownMetrics := SetupMetrics(ctx, logger, metricsConfiguration, client)
|
|
client = client.WithMetrics(metricsManager, metrics.KubeClient)
|
|
configuration := startConfigController(ctx, logger, client, skipResourceFilters)
|
|
sdownTracing := SetupTracing(logger, name, client)
|
|
var registryClient registryclient.Client
|
|
var registrySecretLister corev1listers.SecretNamespaceLister
|
|
if config.UsesRegistryClient() {
|
|
registryClient, registrySecretLister = setupRegistryClient(ctx, logger, client)
|
|
}
|
|
var imageVerifyCache imageverifycache.Client
|
|
if config.UsesImageVerifyCache() {
|
|
imageVerifyCache = setupImageVerifyCache(ctx, logger)
|
|
}
|
|
var leaderElectionClient kubeclient.UpstreamInterface
|
|
if config.UsesLeaderElection() {
|
|
leaderElectionClient = createKubernetesClient(logger, kubeclient.WithMetrics(metricsManager, metrics.KubeClient), kubeclient.WithTracing())
|
|
}
|
|
var kyvernoClient kyvernoclient.UpstreamInterface
|
|
if config.UsesKyvernoClient() {
|
|
kyvernoClient = createKyvernoClient(logger, kyvernoclient.WithMetrics(metricsManager, metrics.KyvernoClient), kyvernoclient.WithTracing())
|
|
}
|
|
var dynamicClient dynamicclient.UpstreamInterface
|
|
if config.UsesDynamicClient() {
|
|
dynamicClient = createDynamicClient(logger, dynamicclient.WithMetrics(metricsManager, metrics.DynamicClient), dynamicclient.WithTracing())
|
|
}
|
|
var apiServerClient apiserverclient.UpstreamInterface
|
|
if config.UsesApiServerClient() {
|
|
apiServerClient = createApiServerClient(logger, apiserverclient.WithMetrics(metricsManager, metrics.ApiServerClient), apiserverclient.WithTracing())
|
|
}
|
|
var dClient dclient.Interface
|
|
if config.UsesKyvernoDynamicClient() {
|
|
dClient = createKyvernoDynamicClient(logger, ctx, dynamicClient, client, 15*time.Minute)
|
|
}
|
|
var metadataClient metadataclient.UpstreamInterface
|
|
if config.UsesMetadataClient() {
|
|
metadataClient = createMetadataClient(logger, metadataclient.WithMetrics(metricsManager, metrics.MetadataClient), metadataclient.WithTracing())
|
|
}
|
|
return ctx,
|
|
SetupResult{
|
|
Logger: logger,
|
|
Configuration: configuration,
|
|
MetricsConfiguration: metricsConfiguration,
|
|
MetricsManager: metricsManager,
|
|
Jp: jmespath.New(configuration),
|
|
KubeClient: client,
|
|
LeaderElectionClient: leaderElectionClient,
|
|
RegistryClient: registryClient,
|
|
ImageVerifyCacheClient: imageVerifyCache,
|
|
RegistrySecretLister: registrySecretLister,
|
|
KyvernoClient: kyvernoClient,
|
|
DynamicClient: dynamicClient,
|
|
ApiServerClient: apiServerClient,
|
|
MetadataClient: metadataClient,
|
|
KyvernoDynamicClient: dClient,
|
|
},
|
|
shutdown(logger.WithName("shutdown"), sdownMaxProcs, sdownMetrics, sdownTracing, sdownSignals)
|
|
}
|