mirror of
https://github.com/kairos-io/osbuilder.git
synced 2025-06-30 17:02:13 +00:00
336 lines
9.9 KiB
Go
336 lines
9.9 KiB
Go
/*
|
|
Copyright 2022.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package controllers
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
osbuilder "github.com/kairos-io/osbuilder/api/v1alpha2"
|
|
batchv1 "k8s.io/api/batch/v1"
|
|
corev1 "k8s.io/api/core/v1"
|
|
apierrors "k8s.io/apimachinery/pkg/api/errors"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/labels"
|
|
"k8s.io/apimachinery/pkg/types"
|
|
ctrl "sigs.k8s.io/controller-runtime"
|
|
"sigs.k8s.io/controller-runtime/pkg/builder"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
"sigs.k8s.io/controller-runtime/pkg/controller/controllerutil"
|
|
"sigs.k8s.io/controller-runtime/pkg/handler"
|
|
"sigs.k8s.io/controller-runtime/pkg/log"
|
|
"sigs.k8s.io/controller-runtime/pkg/predicate"
|
|
"sigs.k8s.io/controller-runtime/pkg/reconcile"
|
|
"sigs.k8s.io/controller-runtime/pkg/source"
|
|
)
|
|
|
|
const (
|
|
FinalizerName = "build.kairos.io/osbuilder-finalizer"
|
|
artifactLabel = "build.kairos.io/artifact"
|
|
artifactExporterIndexAnnotation = "build.kairos.io/export-index"
|
|
)
|
|
|
|
// OSArtifactReconciler reconciles a OSArtifact object
|
|
type OSArtifactReconciler struct {
|
|
client.Client
|
|
ServingImage, ToolImage, CopierImage string
|
|
}
|
|
|
|
func (r *OSArtifactReconciler) InjectClient(c client.Client) error {
|
|
r.Client = c
|
|
|
|
return nil
|
|
}
|
|
|
|
//+kubebuilder:rbac:groups=build.kairos.io,resources=osartifacts,verbs=get;list;watch;create;update;patch;delete
|
|
//+kubebuilder:rbac:groups=build.kairos.io,resources=osartifacts/status,verbs=get;update;patch
|
|
//+kubebuilder:rbac:groups=build.kairos.io,resources=osartifacts/finalizers,verbs=update
|
|
//+kubebuilder:rbac:groups="",resources=pods,verbs=get;list;watch;create;delete
|
|
//+kubebuilder:rbac:groups="",resources=persistentvolumeclaims,verbs=get;list;create;delete;watch
|
|
//+kubebuilder:rbac:groups="",resources=secrets,verbs=get;
|
|
//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;create;
|
|
//+kubebuilder:rbac:groups=batch,resources=jobs,verbs=get;list;watch;create;delete
|
|
|
|
func (r *OSArtifactReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
|
|
logger := log.FromContext(ctx)
|
|
|
|
var artifact osbuilder.OSArtifact
|
|
if err := r.Get(ctx, req.NamespacedName, &artifact); err != nil {
|
|
if apierrors.IsNotFound(err) {
|
|
return ctrl.Result{}, nil
|
|
}
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
if artifact.DeletionTimestamp != nil {
|
|
controllerutil.RemoveFinalizer(&artifact, FinalizerName)
|
|
return ctrl.Result{}, r.Update(ctx, &artifact)
|
|
}
|
|
|
|
if !controllerutil.ContainsFinalizer(&artifact, FinalizerName) {
|
|
controllerutil.AddFinalizer(&artifact, FinalizerName)
|
|
if err := r.Update(ctx, &artifact); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
}
|
|
|
|
logger.Info(fmt.Sprintf("Reconciling %s/%s", artifact.Namespace, artifact.Name))
|
|
|
|
switch artifact.Status.Phase {
|
|
case osbuilder.Exporting:
|
|
return r.checkExport(ctx, &artifact)
|
|
case osbuilder.Ready, osbuilder.Error:
|
|
return ctrl.Result{}, nil
|
|
default:
|
|
return r.checkBuild(ctx, &artifact)
|
|
}
|
|
}
|
|
|
|
// CreateConfigMap generates a configmap required for building a custom image
|
|
func (r *OSArtifactReconciler) CreateConfigMap(ctx context.Context, artifact *osbuilder.OSArtifact) error {
|
|
cm := r.genConfigMap(artifact)
|
|
|
|
if cm.Labels == nil {
|
|
cm.Labels = map[string]string{}
|
|
}
|
|
cm.Labels[artifactLabel] = artifact.Name
|
|
if err := controllerutil.SetOwnerReference(artifact, cm, r.Scheme()); err != nil {
|
|
return err
|
|
}
|
|
if err := r.Create(ctx, cm); err != nil && !apierrors.IsAlreadyExists(err) {
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (r *OSArtifactReconciler) createPVC(ctx context.Context, artifact *osbuilder.OSArtifact) (*corev1.PersistentVolumeClaim, error) {
|
|
pvc := r.newArtifactPVC(artifact)
|
|
if pvc.Labels == nil {
|
|
pvc.Labels = map[string]string{}
|
|
}
|
|
pvc.Labels[artifactLabel] = artifact.Name
|
|
if err := controllerutil.SetOwnerReference(artifact, pvc, r.Scheme()); err != nil {
|
|
return pvc, err
|
|
}
|
|
if err := r.Create(ctx, pvc); err != nil {
|
|
return pvc, err
|
|
}
|
|
|
|
return pvc, nil
|
|
}
|
|
|
|
func (r *OSArtifactReconciler) createBuilderPod(ctx context.Context, artifact *osbuilder.OSArtifact, pvc *corev1.PersistentVolumeClaim) (*corev1.Pod, error) {
|
|
pod := r.newBuilderPod(pvc.Name, artifact)
|
|
if pod.Labels == nil {
|
|
pod.Labels = map[string]string{}
|
|
}
|
|
pod.Labels[artifactLabel] = artifact.Name
|
|
if err := controllerutil.SetOwnerReference(artifact, pod, r.Scheme()); err != nil {
|
|
return pod, err
|
|
}
|
|
|
|
if err := r.Create(ctx, pod); err != nil {
|
|
return pod, err
|
|
}
|
|
|
|
return pod, nil
|
|
}
|
|
|
|
func (r *OSArtifactReconciler) startBuild(ctx context.Context, artifact *osbuilder.OSArtifact) (ctrl.Result, error) {
|
|
err := r.CreateConfigMap(ctx, artifact)
|
|
if err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
pvc, err := r.createPVC(ctx, artifact)
|
|
if err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
_, err = r.createBuilderPod(ctx, artifact, pvc)
|
|
if err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
artifact.Status.Phase = osbuilder.Building
|
|
if err := r.Status().Update(ctx, artifact); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
return ctrl.Result{}, nil
|
|
}
|
|
|
|
func (r *OSArtifactReconciler) checkBuild(ctx context.Context, artifact *osbuilder.OSArtifact) (ctrl.Result, error) {
|
|
var pods corev1.PodList
|
|
if err := r.List(ctx, &pods, &client.ListOptions{
|
|
LabelSelector: labels.SelectorFromSet(labels.Set{
|
|
artifactLabel: artifact.Name,
|
|
}),
|
|
}); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
for _, pod := range pods.Items {
|
|
switch pod.Status.Phase {
|
|
case corev1.PodSucceeded:
|
|
artifact.Status.Phase = osbuilder.Exporting
|
|
return ctrl.Result{Requeue: true}, r.Status().Update(ctx, artifact)
|
|
case corev1.PodFailed:
|
|
artifact.Status.Phase = osbuilder.Error
|
|
return ctrl.Result{Requeue: true}, r.Status().Update(ctx, artifact)
|
|
case corev1.PodPending, corev1.PodRunning:
|
|
return ctrl.Result{}, nil
|
|
}
|
|
}
|
|
|
|
return r.startBuild(ctx, artifact)
|
|
}
|
|
|
|
func (r *OSArtifactReconciler) checkExport(ctx context.Context, artifact *osbuilder.OSArtifact) (ctrl.Result, error) {
|
|
var jobs batchv1.JobList
|
|
if err := r.List(ctx, &jobs, &client.ListOptions{
|
|
LabelSelector: labels.SelectorFromSet(labels.Set{
|
|
artifactLabel: artifact.Name,
|
|
}),
|
|
}); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
indexedJobs := make(map[string]*batchv1.Job, len(artifact.Spec.Exporters))
|
|
for _, job := range jobs.Items {
|
|
if job.GetAnnotations() != nil {
|
|
if idx, ok := job.GetAnnotations()[artifactExporterIndexAnnotation]; ok {
|
|
indexedJobs[idx] = &job
|
|
}
|
|
}
|
|
}
|
|
|
|
var pvcs corev1.PersistentVolumeClaimList
|
|
var pvc *corev1.PersistentVolumeClaim
|
|
if err := r.List(ctx, &pvcs, &client.ListOptions{LabelSelector: labels.SelectorFromSet(labels.Set{artifactLabel: artifact.Name})}); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
for _, item := range pvcs.Items {
|
|
pvc = &item
|
|
break
|
|
}
|
|
|
|
if pvc == nil {
|
|
log.FromContext(ctx).Error(nil, "failed to locate pvc for artifact, this should not happen")
|
|
return ctrl.Result{}, fmt.Errorf("failed to locate artifact pvc")
|
|
}
|
|
|
|
var succeeded int
|
|
for i := range artifact.Spec.Exporters {
|
|
idx := fmt.Sprintf("%d", i)
|
|
|
|
job := indexedJobs[idx]
|
|
if job == nil {
|
|
job = &batchv1.Job{
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Name: fmt.Sprintf("%s-export-%s", artifact.Name, idx),
|
|
Namespace: artifact.Namespace,
|
|
Annotations: map[string]string{
|
|
artifactExporterIndexAnnotation: idx,
|
|
},
|
|
Labels: map[string]string{
|
|
artifactLabel: artifact.Name,
|
|
},
|
|
},
|
|
Spec: artifact.Spec.Exporters[i],
|
|
}
|
|
|
|
job.Spec.Template.Spec.Volumes = append(job.Spec.Template.Spec.Volumes, corev1.Volume{
|
|
Name: "artifacts",
|
|
VolumeSource: corev1.VolumeSource{
|
|
PersistentVolumeClaim: &corev1.PersistentVolumeClaimVolumeSource{
|
|
ClaimName: pvc.Name,
|
|
ReadOnly: true,
|
|
},
|
|
},
|
|
})
|
|
|
|
if err := controllerutil.SetOwnerReference(artifact, job, r.Scheme()); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
if err := r.Create(ctx, job); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
|
|
} else if job.Spec.Completions == nil || *job.Spec.Completions == 1 {
|
|
if job.Status.Succeeded > 0 {
|
|
succeeded++
|
|
}
|
|
} else if *job.Spec.BackoffLimit <= job.Status.Failed {
|
|
artifact.Status.Phase = osbuilder.Error
|
|
if err := r.Status().Update(ctx, artifact); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
break
|
|
}
|
|
}
|
|
|
|
if succeeded == len(artifact.Spec.Exporters) {
|
|
artifact.Status.Phase = osbuilder.Ready
|
|
if err := r.Status().Update(ctx, artifact); err != nil {
|
|
return ctrl.Result{Requeue: true}, err
|
|
}
|
|
}
|
|
|
|
return ctrl.Result{}, nil
|
|
}
|
|
|
|
// SetupWithManager sets up the controller with the Manager.
|
|
func (r *OSArtifactReconciler) SetupWithManager(mgr ctrl.Manager) error {
|
|
return ctrl.NewControllerManagedBy(mgr).
|
|
For(&osbuilder.OSArtifact{}).
|
|
Owns(&osbuilder.OSArtifact{}).
|
|
Watches(
|
|
&source.Kind{Type: &corev1.Pod{}},
|
|
handler.EnqueueRequestsFromMapFunc(r.findOwningArtifact),
|
|
builder.WithPredicates(predicate.ResourceVersionChangedPredicate{}),
|
|
).
|
|
Watches(
|
|
&source.Kind{Type: &batchv1.Job{}},
|
|
handler.EnqueueRequestsFromMapFunc(r.findOwningArtifact),
|
|
builder.WithPredicates(predicate.ResourceVersionChangedPredicate{}),
|
|
).
|
|
Complete(r)
|
|
}
|
|
|
|
func (r *OSArtifactReconciler) findOwningArtifact(obj client.Object) []reconcile.Request {
|
|
if obj.GetLabels() == nil {
|
|
return nil
|
|
}
|
|
|
|
if artifactName, ok := obj.GetLabels()[artifactLabel]; ok {
|
|
return []reconcile.Request{
|
|
{
|
|
NamespacedName: types.NamespacedName{
|
|
Name: artifactName,
|
|
Namespace: obj.GetNamespace(),
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|