mirror of
https://github.com/rancher/steve.git
synced 2025-08-14 04:25:20 +00:00
129 lines
3.2 KiB
Go
129 lines
3.2 KiB
Go
package server
|
|
|
|
import (
|
|
"context"
|
|
"github.com/rancher/norman/pkg/auth"
|
|
"net/http"
|
|
|
|
"github.com/rancher/steve/pkg/accesscontrol"
|
|
"github.com/rancher/steve/pkg/client"
|
|
"github.com/rancher/steve/pkg/clustercache"
|
|
"github.com/rancher/steve/pkg/controllers/schema"
|
|
"github.com/rancher/steve/pkg/resources"
|
|
"github.com/rancher/steve/pkg/server/publicapi"
|
|
"github.com/rancher/wrangler-api/pkg/generated/controllers/apiextensions.k8s.io"
|
|
"github.com/rancher/wrangler-api/pkg/generated/controllers/apiregistration.k8s.io"
|
|
"github.com/rancher/wrangler-api/pkg/generated/controllers/core"
|
|
rbaccontroller "github.com/rancher/wrangler-api/pkg/generated/controllers/rbac"
|
|
"github.com/rancher/wrangler/pkg/generic"
|
|
"github.com/rancher/wrangler/pkg/kubeconfig"
|
|
"github.com/rancher/wrangler/pkg/start"
|
|
"github.com/sirupsen/logrus"
|
|
schema2 "k8s.io/apimachinery/pkg/runtime/schema"
|
|
"k8s.io/client-go/kubernetes"
|
|
)
|
|
|
|
type Config struct {
|
|
Kubeconfig string
|
|
ListenAddress string
|
|
WebhookKubeconfig string
|
|
Authentication bool
|
|
}
|
|
|
|
func Run(ctx context.Context, cfg Config) error {
|
|
restConfig, err := kubeconfig.GetNonInteractiveClientConfig(cfg.Kubeconfig).ClientConfig()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
restConfig.QPS = 100
|
|
restConfig.Burst = 100
|
|
|
|
rbac, err := rbaccontroller.NewFactoryFromConfig(restConfig)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
core, err := core.NewFactoryFromConfig(restConfig)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
k8s, err := kubernetes.NewForConfig(restConfig)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
api, err := apiregistration.NewFactoryFromConfig(restConfig)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
crd, err := apiextensions.NewFactoryFromConfig(restConfig)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
cf, err := client.NewFactory(restConfig)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
ccache := clustercache.NewClusterCache(ctx, cf.DynamicClient())
|
|
|
|
sf := resources.SchemaFactory(cf,
|
|
accesscontrol.NewAccessStore(rbac.Rbac().V1()),
|
|
k8s,
|
|
ccache,
|
|
core.Core().V1().ConfigMap(),
|
|
core.Core().V1().Secret())
|
|
|
|
sync := schema.Register(ctx,
|
|
k8s.Discovery(),
|
|
crd.Apiextensions().V1beta1().CustomResourceDefinition(),
|
|
api.Apiregistration().V1().APIService(),
|
|
k8s.AuthorizationV1().SelfSubjectAccessReviews(),
|
|
ccache,
|
|
sf)
|
|
|
|
handler, err := publicapi.NewHandler(restConfig, sf)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if cfg.Authentication {
|
|
authMiddleware, err := auth.NewWebhookMiddleware(cfg.WebhookKubeconfig)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
handler = wrapHandler(handler, authMiddleware)
|
|
}
|
|
|
|
for _, controllers := range []controllers{api, crd, rbac} {
|
|
for gvk, controller := range controllers.Controllers() {
|
|
ccache.AddController(gvk, controller.Informer())
|
|
}
|
|
}
|
|
|
|
if err := start.All(ctx, 5, api, crd, rbac); err != nil {
|
|
return err
|
|
}
|
|
|
|
if err := sync(); err != nil {
|
|
return err
|
|
}
|
|
|
|
logrus.Infof("listening on %s", cfg.ListenAddress)
|
|
return http.ListenAndServe(cfg.ListenAddress, handler)
|
|
}
|
|
|
|
func wrapHandler(handler http.Handler, middleware func(http.ResponseWriter, *http.Request, http.Handler)) http.Handler {
|
|
return http.HandlerFunc(func(resp http.ResponseWriter, req *http.Request) {
|
|
middleware(resp, req, handler)
|
|
})
|
|
}
|
|
|
|
type controllers interface {
|
|
Controllers() map[schema2.GroupVersionKind]*generic.Controller
|
|
}
|