github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-11 04:52:08 +00:00
Code Issues Projects Releases Wiki Activity

user --prune-allowlist in kube-addons.sh

Browse Source 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
This commit is contained in:
Paco Xu 2023-04-25 09:29:28 +08:00
parent 08755fe249
commit eb1483fe64
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
cluster/addons/addon-manager/kube-addons.sh
View File

@ -114,28 +114,28 @@ function log() {
esac esac
} }
# Generate kubectl prune-whitelist flags from provided resource list. # Generate kubectl prune-allowlist flags from provided resource list.
function generate_prune_whitelist_flags() { function generate_prune_allowlist_flags() {
local -r resources=( "$@" ) local -r resources=( "$@" )
for resource in "${resources[@]}"; do for resource in "${resources[@]}"; do
# Check if $resource isn't composed just of whitespaces by replacing ' ' # Check if $resource isn't composed just of whitespaces by replacing ' '
# with '' and checking whether the resulting string is not empty. # with '' and checking whether the resulting string is not empty.
if [[ -n "${resource// /}" ]]; then if [[ -n "${resource// /}" ]]; then
printf "%s" "--prune-whitelist ${resource} " printf "%s" "--prune-allowlist ${resource} "
fi fi
done done
} }
# KUBECTL_EXTRA_PRUNE_WHITELIST is a list of extra whitelisted resources # KUBECTL_EXTRA_PRUNE_WHITELIST is a list of extra allowed resources
# besides the default ones. # besides the default ones.
extra_prune_whitelist= extra_prune_allowlist=
if [ -n "${KUBECTL_EXTRA_PRUNE_WHITELIST:-}" ]; then if [ -n "${KUBECTL_EXTRA_PRUNE_WHITELIST:-}" ]; then
read -ra extra_prune_whitelist <<< "${KUBECTL_EXTRA_PRUNE_WHITELIST}" read -ra extra_prune_allowlist <<< "${KUBECTL_EXTRA_PRUNE_WHITELIST}"
fi fi
prune_whitelist=( "${KUBECTL_PRUNE_WHITELIST[@]}" "${extra_prune_whitelist[@]}" ) prune_allowlist=( "${KUBECTL_PRUNE_WHITELIST[@]}" "${extra_prune_allowlist[@]}" )
prune_whitelist_flags=$(generate_prune_whitelist_flags "${prune_whitelist[@]}") prune_allowlist_flags=$(generate_prune_allowallowlist_flags "${prune_allowlist[@]}")
log INFO "== Generated kubectl prune whitelist flags: $prune_whitelist_flags ==" log INFO "== Generated kubectl prune allowlist flags: $prune_allowlist_flags =="
# $1 filename of addon to start. # $1 filename of addon to start.
# $2 count of tries to start the addon. # $2 count of tries to start the addon.
@ -240,14 +240,14 @@ function reconcile_addons() {
# Disabling because "${KUBECTL_OPTS}" needs to allow for expansion here # Disabling because "${KUBECTL_OPTS}" needs to allow for expansion here
${KUBECTL} ${KUBECTL_OPTS} apply -f ${ADDON_PATH} \ ${KUBECTL} ${KUBECTL_OPTS} apply -f ${ADDON_PATH} \
-l ${CLUSTER_SERVICE_LABEL}=true,${ADDON_MANAGER_LABEL}!=EnsureExists \ -l ${CLUSTER_SERVICE_LABEL}=true,${ADDON_MANAGER_LABEL}!=EnsureExists \
--prune=true ${prune_whitelist_flags} --recursive | grep -v configured --prune=true ${prune_allowlist_flags} --recursive | grep -v configured
log INFO "== Reconciling with addon-manager label ==" log INFO "== Reconciling with addon-manager label =="
# shellcheck disable=SC2086 # shellcheck disable=SC2086
# Disabling because "${KUBECTL_OPTS}" needs to allow for expansion here # Disabling because "${KUBECTL_OPTS}" needs to allow for expansion here
${KUBECTL} ${KUBECTL_OPTS} apply -f ${ADDON_PATH} \ ${KUBECTL} ${KUBECTL_OPTS} apply -f ${ADDON_PATH} \
-l ${CLUSTER_SERVICE_LABEL}!=true,${ADDON_MANAGER_LABEL}=Reconcile \ -l ${CLUSTER_SERVICE_LABEL}!=true,${ADDON_MANAGER_LABEL}=Reconcile \
--prune=true ${prune_whitelist_flags} --recursive | grep -v configured --prune=true ${prune_allowlist_flags} --recursive | grep -v configured
log INFO "== Kubernetes addon reconcile completed at $(date -Is) ==" log INFO "== Kubernetes addon reconcile completed at $(date -Is) =="
} }