Sanket SudakeandGitHub
6af53807aa
We allow functions to refer to configmap/secrets. We are monitoring all namespaces for config maps and secrets and also allow cross-namespace references. This fix monitors configmaps/secret updates in specific namespaces. Also, we ignore cross-namespace references for configmap/secret updates. Signed-off-by: Sanket Sudake <sanketsudake@gmail.com> Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
72 lines
2.7 KiB
Go
72 lines
2.7 KiB
Go
/*
|
|
Copyright 2021 The Fission Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
package cms
|
|
|
|
import (
|
|
"context"
|
|
|
|
"go.uber.org/zap"
|
|
apiv1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/client-go/kubernetes"
|
|
k8sCache "k8s.io/client-go/tools/cache"
|
|
|
|
fv1 "github.com/fission/fission/pkg/apis/core/v1"
|
|
"github.com/fission/fission/pkg/executor/executortype"
|
|
"github.com/fission/fission/pkg/generated/clientset/versioned"
|
|
)
|
|
|
|
// getSecretRelatedFuncs returns functions that are related to the secret in the same namespace
|
|
func getSecretRelatedFuncs(ctx context.Context, logger *zap.Logger, m *metav1.ObjectMeta, fissionClient versioned.Interface) ([]fv1.Function, error) {
|
|
funcList, err := fissionClient.CoreV1().Functions(m.Namespace).List(ctx, metav1.ListOptions{})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
// In future a cache that populates at start and is updated on changes might be better solution
|
|
relatedFunctions := make([]fv1.Function, 0)
|
|
for _, f := range funcList.Items {
|
|
for _, secret := range f.Spec.Secrets {
|
|
if (secret.Name == m.Name) && (secret.Namespace == m.Namespace) {
|
|
relatedFunctions = append(relatedFunctions, f)
|
|
break
|
|
}
|
|
}
|
|
}
|
|
return relatedFunctions, nil
|
|
}
|
|
|
|
func SecretEventHandlers(ctx context.Context, logger *zap.Logger, fissionClient versioned.Interface,
|
|
kubernetesClient kubernetes.Interface, types map[fv1.ExecutorType]executortype.ExecutorType) k8sCache.ResourceEventHandlerFuncs {
|
|
return k8sCache.ResourceEventHandlerFuncs{
|
|
AddFunc: func(obj interface{}) {},
|
|
DeleteFunc: func(obj interface{}) {},
|
|
UpdateFunc: func(oldObj interface{}, newObj interface{}) {
|
|
oldS := oldObj.(*apiv1.Secret)
|
|
newS := newObj.(*apiv1.Secret)
|
|
if oldS.ObjectMeta.ResourceVersion != newS.ObjectMeta.ResourceVersion {
|
|
logger.Debug("Secret changed",
|
|
zap.String("configmap_name", newS.ObjectMeta.Name),
|
|
zap.String("configmap_namespace", newS.ObjectMeta.Namespace))
|
|
funcs, err := getSecretRelatedFuncs(ctx, logger, &newS.ObjectMeta, fissionClient)
|
|
if err != nil {
|
|
logger.Error("Failed to get functions related to secret", zap.String("secret_name", newS.ObjectMeta.Name), zap.String("secret_namespace", newS.ObjectMeta.Namespace))
|
|
}
|
|
refreshPods(ctx, logger, funcs, types)
|
|
}
|
|
},
|
|
}
|
|
}
|