-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
refactor(kube-api-rewriter): rewrite labels, annotations and finalizers
- Add KubeVirt and CDI rules for labels, annotations and finalizers. - Add rewriter for labelSelector in queries. - Add rewriters for affinity, labelSelectors in different resources. - Add metadata patch rewriters: nodes, services, deployments, ds, ... - Add webhooks patch rewriters: validatingwebhookconfigurations, mutatingwebhookconfigurations - Add more resources for rewrite: jobs, services, deployments, sts, ds, pvc, pod, ... - Enable rewrite for 3rd party resources: servicemonitors, prometheusrules, ... - Rename labels in our templates. Add kubectl.kubernetes.io/default-container annotation. - Add virt-operator patch to rename install-strategy labels: there is no way to rewrite these labels with kube-api-rewriter. - Simplify some Rewrite* methods using transformers - Create PrefixedNameRewriter to hold original-renamed indexes. Signed-off-by: Ivan Mikheykin <[email protected]>
- Loading branch information
Showing
32 changed files
with
1,462 additions
and
416 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| /* | ||
| Copyright 2024 Flant JSC | ||
| Licensed under the Apache License, Version 2.0 (the "License"); | ||
| you may not use this file except in compliance with the License. | ||
| You may obtain a copy of the License at | ||
| http://www.apache.org/licenses/LICENSE-2.0 | ||
| Unless required by applicable law or agreed to in writing, software | ||
| distributed under the License is distributed on an "AS IS" BASIS, | ||
| WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| See the License for the specific language governing permissions and | ||
| limitations under the License. | ||
| */ | ||
|
|
||
| package rewriter | ||
|
|
||
| // Rewrite routines for 3rd party resources, i.e. ServiceMonitor. | ||
|
|
||
| const ( | ||
| PrometheusRuleKind = "PrometheusRule" | ||
| PrometheusRuleListKind = "PrometheusRuleList" | ||
| ServiceMonitorKind = "ServiceMonitor" | ||
| ServiceMonitorListKind = "ServiceMonitorList" | ||
| ) | ||
|
|
||
| func RewriteServiceMonitorOrList(rules *RewriteRules, obj []byte, action Action) ([]byte, error) { | ||
| return TransformObject(obj, "spec.selector", func(obj []byte) ([]byte, error) { | ||
| return rewriteLabelSelector(rules, obj, action) | ||
| }) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,151 @@ | ||
| /* | ||
| Copyright 2024 Flant JSC | ||
| Licensed under the Apache License, Version 2.0 (the "License"); | ||
| you may not use this file except in compliance with the License. | ||
| You may obtain a copy of the License at | ||
| http://www.apache.org/licenses/LICENSE-2.0 | ||
| Unless required by applicable law or agreed to in writing, software | ||
| distributed under the License is distributed on an "AS IS" BASIS, | ||
| WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| See the License for the specific language governing permissions and | ||
| limitations under the License. | ||
| */ | ||
|
|
||
| package rewriter | ||
|
|
||
| // RewriteAffinity renames or restores labels in labelSelector of affinity structure. | ||
| // See https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity | ||
| func RewriteAffinity(rules *RewriteRules, obj []byte, path string, action Action) ([]byte, error) { | ||
| return TransformObject(obj, path, func(affinity []byte) ([]byte, error) { | ||
| rwrAffinity, err := TransformObject(affinity, "nodeAffinity", func(item []byte) ([]byte, error) { | ||
| return rewriteNodeAffinity(rules, item, action) | ||
| }) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| rwrAffinity, err = TransformObject(rwrAffinity, "podAffinity", func(item []byte) ([]byte, error) { | ||
| return rewritePodAffinity(rules, item, action) | ||
| }) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| return TransformObject(rwrAffinity, "podAntiAffinity", func(item []byte) ([]byte, error) { | ||
| return rewritePodAffinity(rules, item, action) | ||
| }) | ||
|
|
||
| }) | ||
| } | ||
|
|
||
| // rewriteNodeAffinity rewrites labels in nodeAffinity structure. | ||
| // nodeAffinity: | ||
| // | ||
| // requiredDuringSchedulingIgnoredDuringExecution: | ||
| // nodeSelectorTerms []NodeSelector -> rewrite each item: key in each matchExpressions and matchFields | ||
| // preferredDuringSchedulingIgnoredDuringExecution: -> array of PreferredSchedulingTerm: | ||
| // preference NodeSelector -> rewrite key in each matchExpressions and matchFields | ||
| // weight: | ||
| func rewriteNodeAffinity(rules *RewriteRules, obj []byte, action Action) ([]byte, error) { | ||
| // Rewrite an array of nodeSelectorTerms in requiredDuringSchedulingIgnoredDuringExecution field. | ||
| var err error | ||
| obj, err = TransformObject(obj, "requiredDuringSchedulingIgnoredDuringExecution", func(affinityTerm []byte) ([]byte, error) { | ||
| return RewriteArray(affinityTerm, "nodeSelectorTerms", func(item []byte) ([]byte, error) { | ||
| return rewriteNodeSelectorTerm(rules, item, action) | ||
| }) | ||
| }) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| // Rewrite an array of weightedNodeSelectorTerms in preferredDuringSchedulingIgnoredDuringExecution field. | ||
| return RewriteArray(obj, "preferredDuringSchedulingIgnoredDuringExecution", func(item []byte) ([]byte, error) { | ||
| return TransformObject(item, "preference", func(preference []byte) ([]byte, error) { | ||
| return rewriteNodeSelectorTerm(rules, preference, action) | ||
| }) | ||
| }) | ||
| } | ||
|
|
||
| // rewriteNodeSelectorTerm renames or restores key fields in matchLabels or matchExpressions of NodeSelectorTerm. | ||
| func rewriteNodeSelectorTerm(rules *RewriteRules, obj []byte, action Action) ([]byte, error) { | ||
| obj, err := RewriteArray(obj, "matchLabels", func(item []byte) ([]byte, error) { | ||
| return rewriteSelectorRequirement(rules, item, action) | ||
| }) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| return RewriteArray(obj, "matchExpressions", func(item []byte) ([]byte, error) { | ||
| return rewriteSelectorRequirement(rules, item, action) | ||
| }) | ||
| } | ||
|
|
||
| func rewriteSelectorRequirement(rules *RewriteRules, obj []byte, action Action) ([]byte, error) { | ||
| return TransformString(obj, "key", func(field string) string { | ||
| return rules.LabelsRewriter().Rewrite(field, action) | ||
| }) | ||
| } | ||
|
|
||
| // rewritePodAffinity rewrites PodAffinity and PodAntiAffinity structures. | ||
| // PodAffinity and PodAntiAffinity structures are the same: | ||
| // | ||
| // requiredDuringSchedulingIgnoredDuringExecution -> array of PodAffinityTerm structures: | ||
| // labelSelector: | ||
| // matchLabels -> rewrite map | ||
| // matchExpressions -> rewrite key in each item | ||
| // topologyKey -> rewrite as label name | ||
| // namespaceSelector -> rewrite as labelSelector | ||
| // preferredDuringSchedulingIgnoredDuringExecution -> array of WeightedPodAffinityTerm: | ||
| // weight | ||
| // podAffinityTerm PodAffinityTerm -> rewrite as described above | ||
| func rewritePodAffinity(rules *RewriteRules, obj []byte, action Action) ([]byte, error) { | ||
| // Rewrite an array of PodAffinityTerms in requiredDuringSchedulingIgnoredDuringExecution field. | ||
| obj, err := RewriteArray(obj, "requiredDuringSchedulingIgnoredDuringExecution", func(affinityTerm []byte) ([]byte, error) { | ||
| return rewritePodAffinityTerm(rules, affinityTerm, action) | ||
| }) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| // Rewrite an array of WeightedPodAffinityTerms in requiredDuringSchedulingIgnoredDuringExecution field. | ||
| return RewriteArray(obj, "preferredDuringSchedulingIgnoredDuringExecution", func(affinityTerm []byte) ([]byte, error) { | ||
| return TransformObject(affinityTerm, "podAffinityTerm", func(podAffinityTerm []byte) ([]byte, error) { | ||
| return rewritePodAffinityTerm(rules, podAffinityTerm, action) | ||
| }) | ||
| }) | ||
| } | ||
|
|
||
| func rewritePodAffinityTerm(rules *RewriteRules, obj []byte, action Action) ([]byte, error) { | ||
| obj, err := TransformObject(obj, "labelSelector", func(labelSelector []byte) ([]byte, error) { | ||
| return rewriteLabelSelector(rules, labelSelector, action) | ||
| }) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| obj, err = TransformString(obj, "topologyKey", func(field string) string { | ||
| return rules.LabelsRewriter().Rewrite(field, action) | ||
| }) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| return TransformObject(obj, "namespaceSelector", func(selector []byte) ([]byte, error) { | ||
| return rewriteLabelSelector(rules, selector, action) | ||
| }) | ||
| } | ||
|
|
||
| // rewriteLabelSelector rewrites matchLabels and matchExpressions. It is similar to rewriteNodeSelectorTerm | ||
| // but matchLabels is a map here, not an array of requirements. | ||
| func rewriteLabelSelector(rules *RewriteRules, obj []byte, action Action) ([]byte, error) { | ||
| obj, err := RewriteLabelsMap(rules, obj, "matchLabels", action) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| return RewriteArray(obj, "matchExpressions", func(item []byte) ([]byte, error) { | ||
| return rewriteSelectorRequirement(rules, item, action) | ||
| }) | ||
| } |
Oops, something went wrong.