mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-07 00:17:13 +00:00
110 lines
5.1 KiB
Go
110 lines
5.1 KiB
Go
package config
|
|
|
|
import (
|
|
"os"
|
|
|
|
"github.com/go-logr/logr"
|
|
rest "k8s.io/client-go/rest"
|
|
clientcmd "k8s.io/client-go/tools/clientcmd"
|
|
)
|
|
|
|
// These constants MUST be equal to the corresponding names in service definition in definitions/install.yaml
|
|
const (
|
|
//MutatingWebhookConfigurationName default resource mutating webhook configuration name
|
|
MutatingWebhookConfigurationName = "kyverno-resource-mutating-webhook-cfg"
|
|
//MutatingWebhookConfigurationDebugName default resource mutating webhook configuration name for debug mode
|
|
MutatingWebhookConfigurationDebugName = "kyverno-resource-mutating-webhook-cfg-debug"
|
|
//MutatingWebhookName default resource mutating webhook name
|
|
MutatingWebhookName = "nirmata.kyverno.resource.mutating-webhook"
|
|
|
|
ValidatingWebhookConfigurationName = "kyverno-resource-validating-webhook-cfg"
|
|
ValidatingWebhookConfigurationDebugName = "kyverno-resource-validating-webhook-cfg-debug"
|
|
ValidatingWebhookName = "nirmata.kyverno.resource.validating-webhook"
|
|
|
|
//VerifyMutatingWebhookConfigurationName default verify mutating webhook configuration name
|
|
VerifyMutatingWebhookConfigurationName = "kyverno-verify-mutating-webhook-cfg"
|
|
//VerifyMutatingWebhookConfigurationDebugName default verify mutating webhook configuration name for debug mode
|
|
VerifyMutatingWebhookConfigurationDebugName = "kyverno-verify-mutating-webhook-cfg-debug"
|
|
//VerifyMutatingWebhookName default verify mutating webhook name
|
|
VerifyMutatingWebhookName = "nirmata.kyverno.verify-mutating-webhook"
|
|
|
|
//PolicyValidatingWebhookConfigurationName default policy validating webhook configuration name
|
|
PolicyValidatingWebhookConfigurationName = "kyverno-policy-validating-webhook-cfg"
|
|
//PolicyValidatingWebhookConfigurationDebugName default policy validating webhook configuration name for debug mode
|
|
PolicyValidatingWebhookConfigurationDebugName = "kyverno-policy-validating-webhook-cfg-debug"
|
|
//PolicyValidatingWebhookName default policy validating webhook name
|
|
PolicyValidatingWebhookName = "nirmata.kyverno.policy-validating-webhook"
|
|
|
|
//PolicyMutatingWebhookConfigurationName default policy mutating webhook configuration name
|
|
PolicyMutatingWebhookConfigurationName = "kyverno-policy-mutating-webhook-cfg"
|
|
//PolicyMutatingWebhookConfigurationDebugName default policy mutating webhook configuration name for debug mode
|
|
PolicyMutatingWebhookConfigurationDebugName = "kyverno-policy-mutating-webhook-cfg-debug"
|
|
//PolicyMutatingWebhookName default policy mutating webhook name
|
|
PolicyMutatingWebhookName = "nirmata.kyverno.policy-mutating-webhook"
|
|
|
|
// Due to kubernetes issue, we must use next literal constants instead of deployment TypeMeta fields
|
|
// Issue: https://github.com/kubernetes/kubernetes/pull/63972
|
|
// When the issue is closed, we should use TypeMeta struct instead of this constants
|
|
|
|
// DeploymentKind define the default deployment resource kind
|
|
DeploymentKind = "Deployment"
|
|
|
|
// DeploymentAPIVersion define the default deployment resource apiVersion
|
|
DeploymentAPIVersion = "extensions/v1beta1"
|
|
)
|
|
|
|
var (
|
|
//KubePolicyNamespace is the kyverno policy namespace
|
|
KubePolicyNamespace = getKyvernoNameSpace()
|
|
// KubePolicyDeploymentName define the default deployment namespace
|
|
KubePolicyDeploymentName = "kyverno"
|
|
// Kyverno CLI Image
|
|
KyvernoCliImage = "nirmata/kyverno-cli:latest"
|
|
|
|
//WebhookServiceName default kyverno webhook service name
|
|
WebhookServiceName = getWebhookServiceName()
|
|
|
|
//MutatingWebhookServicePath is the path for mutation webhook
|
|
MutatingWebhookServicePath = "/mutate"
|
|
//ValidatingWebhookServicePath is the path for validation webhook
|
|
ValidatingWebhookServicePath = "/validate"
|
|
//PolicyValidatingWebhookServicePath is the path for policy validation webhook(used to validate policy resource)
|
|
PolicyValidatingWebhookServicePath = "/policyvalidate"
|
|
//PolicyMutatingWebhookServicePath is the path for policy mutation webhook(used to default)
|
|
PolicyMutatingWebhookServicePath = "/policymutate"
|
|
//VerifyMutatingWebhookServicePath is the path for verify webhook(used to veryfing if admission control is enabled and active)
|
|
VerifyMutatingWebhookServicePath = "/verifymutate"
|
|
// LivenessServicePath is the path for check liveness health
|
|
LivenessServicePath = "/health/liveness"
|
|
// ReadinessServicePath is the path for check readness health
|
|
ReadinessServicePath = "/health/readiness"
|
|
)
|
|
|
|
//CreateClientConfig creates client config
|
|
func CreateClientConfig(kubeconfig string, log logr.Logger) (*rest.Config, error) {
|
|
logger := log.WithName("CreateClientConfig")
|
|
if kubeconfig == "" {
|
|
logger.Info("Using in-cluster configuration")
|
|
return rest.InClusterConfig()
|
|
}
|
|
logger.V(4).Info("Using specified kubeconfig", "kubeconfig", kubeconfig)
|
|
return clientcmd.BuildConfigFromFlags("", kubeconfig)
|
|
}
|
|
|
|
// getKubePolicyNameSpace - setting default KubePolicyNameSpace
|
|
func getKyvernoNameSpace() string {
|
|
kyvernoNamespace := os.Getenv("KYVERNO_NAMESPACE")
|
|
if kyvernoNamespace == "" {
|
|
kyvernoNamespace = "kyverno"
|
|
}
|
|
return kyvernoNamespace
|
|
}
|
|
|
|
// getWebhookServiceName - setting default WebhookServiceName
|
|
func getWebhookServiceName() string {
|
|
webhookServiceName := os.Getenv("KYVERNO_SVC")
|
|
if webhookServiceName == "" {
|
|
webhookServiceName = "kyverno-svc"
|
|
}
|
|
return webhookServiceName
|
|
}
|