Add new impersonation-related constants to api types and run codegen
This commit is contained in:
parent
1ad2c38509
commit
8bf03257f4
@ -1,4 +1,4 @@
|
|||||||
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
// Copyright 2020-2021 the Pinniped contributors. All Rights Reserved.
|
||||||
// SPDX-License-Identifier: Apache-2.0
|
// SPDX-License-Identifier: Apache-2.0
|
||||||
|
|
||||||
package v1alpha1
|
package v1alpha1
|
||||||
@ -19,6 +19,7 @@ type StrategyReason string
|
|||||||
|
|
||||||
const (
|
const (
|
||||||
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
||||||
|
ImpersonationProxyStrategyType = StrategyType("ImpersonationProxy")
|
||||||
|
|
||||||
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
||||||
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
||||||
@ -26,6 +27,10 @@ const (
|
|||||||
SuccessStrategyStatus = StrategyStatus("Success")
|
SuccessStrategyStatus = StrategyStatus("Success")
|
||||||
ErrorStrategyStatus = StrategyStatus("Error")
|
ErrorStrategyStatus = StrategyStatus("Error")
|
||||||
|
|
||||||
|
ListeningStrategyReason = StrategyReason("Listening")
|
||||||
|
PendingStrategyReason = StrategyReason("Pending")
|
||||||
|
DisabledStrategyReason = StrategyReason("Disabled")
|
||||||
|
ErrorDuringSetupStrategyReason = StrategyReason("ErrorDuringSetup")
|
||||||
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
||||||
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
||||||
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
||||||
|
@ -250,8 +250,7 @@ func configureConcierge(credentialIssuer *configv1alpha1.CredentialIssuer, authe
|
|||||||
var conciergeCABundleData []byte
|
var conciergeCABundleData []byte
|
||||||
|
|
||||||
// Autodiscover the --concierge-mode.
|
// Autodiscover the --concierge-mode.
|
||||||
if flags.concierge.mode == modeUnknown {
|
if flags.concierge.mode == modeUnknown { //nolint:nestif
|
||||||
|
|
||||||
for _, strategy := range credentialIssuer.Status.Strategies {
|
for _, strategy := range credentialIssuer.Status.Strategies {
|
||||||
fe := strategy.Frontend
|
fe := strategy.Frontend
|
||||||
if strategy.Status != configv1alpha1.SuccessStrategyStatus || fe == nil {
|
if strategy.Status != configv1alpha1.SuccessStrategyStatus || fe == nil {
|
||||||
@ -475,9 +474,9 @@ func copyCurrentClusterFromExistingKubeConfig(currentKubeConfig clientcmdapi.Con
|
|||||||
if currentContextNameOverride != "" {
|
if currentContextNameOverride != "" {
|
||||||
contextName = currentContextNameOverride
|
contextName = currentContextNameOverride
|
||||||
}
|
}
|
||||||
context := currentKubeConfig.Contexts[contextName]
|
ctx := currentKubeConfig.Contexts[contextName]
|
||||||
if context == nil {
|
if ctx == nil {
|
||||||
return nil, fmt.Errorf("no such context %q", contextName)
|
return nil, fmt.Errorf("no such context %q", contextName)
|
||||||
}
|
}
|
||||||
return currentKubeConfig.Clusters[context.Cluster], nil
|
return currentKubeConfig.Clusters[ctx.Cluster], nil
|
||||||
}
|
}
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
// Copyright 2020-2021 the Pinniped contributors. All Rights Reserved.
|
||||||
// SPDX-License-Identifier: Apache-2.0
|
// SPDX-License-Identifier: Apache-2.0
|
||||||
|
|
||||||
package v1alpha1
|
package v1alpha1
|
||||||
@ -19,6 +19,7 @@ type StrategyReason string
|
|||||||
|
|
||||||
const (
|
const (
|
||||||
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
||||||
|
ImpersonationProxyStrategyType = StrategyType("ImpersonationProxy")
|
||||||
|
|
||||||
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
||||||
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
||||||
@ -26,6 +27,10 @@ const (
|
|||||||
SuccessStrategyStatus = StrategyStatus("Success")
|
SuccessStrategyStatus = StrategyStatus("Success")
|
||||||
ErrorStrategyStatus = StrategyStatus("Error")
|
ErrorStrategyStatus = StrategyStatus("Error")
|
||||||
|
|
||||||
|
ListeningStrategyReason = StrategyReason("Listening")
|
||||||
|
PendingStrategyReason = StrategyReason("Pending")
|
||||||
|
DisabledStrategyReason = StrategyReason("Disabled")
|
||||||
|
ErrorDuringSetupStrategyReason = StrategyReason("ErrorDuringSetup")
|
||||||
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
||||||
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
||||||
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
// Copyright 2020-2021 the Pinniped contributors. All Rights Reserved.
|
||||||
// SPDX-License-Identifier: Apache-2.0
|
// SPDX-License-Identifier: Apache-2.0
|
||||||
|
|
||||||
package v1alpha1
|
package v1alpha1
|
||||||
@ -19,6 +19,7 @@ type StrategyReason string
|
|||||||
|
|
||||||
const (
|
const (
|
||||||
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
||||||
|
ImpersonationProxyStrategyType = StrategyType("ImpersonationProxy")
|
||||||
|
|
||||||
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
||||||
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
||||||
@ -26,6 +27,10 @@ const (
|
|||||||
SuccessStrategyStatus = StrategyStatus("Success")
|
SuccessStrategyStatus = StrategyStatus("Success")
|
||||||
ErrorStrategyStatus = StrategyStatus("Error")
|
ErrorStrategyStatus = StrategyStatus("Error")
|
||||||
|
|
||||||
|
ListeningStrategyReason = StrategyReason("Listening")
|
||||||
|
PendingStrategyReason = StrategyReason("Pending")
|
||||||
|
DisabledStrategyReason = StrategyReason("Disabled")
|
||||||
|
ErrorDuringSetupStrategyReason = StrategyReason("ErrorDuringSetup")
|
||||||
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
||||||
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
||||||
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
// Copyright 2020-2021 the Pinniped contributors. All Rights Reserved.
|
||||||
// SPDX-License-Identifier: Apache-2.0
|
// SPDX-License-Identifier: Apache-2.0
|
||||||
|
|
||||||
package v1alpha1
|
package v1alpha1
|
||||||
@ -19,6 +19,7 @@ type StrategyReason string
|
|||||||
|
|
||||||
const (
|
const (
|
||||||
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
||||||
|
ImpersonationProxyStrategyType = StrategyType("ImpersonationProxy")
|
||||||
|
|
||||||
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
||||||
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
||||||
@ -26,6 +27,10 @@ const (
|
|||||||
SuccessStrategyStatus = StrategyStatus("Success")
|
SuccessStrategyStatus = StrategyStatus("Success")
|
||||||
ErrorStrategyStatus = StrategyStatus("Error")
|
ErrorStrategyStatus = StrategyStatus("Error")
|
||||||
|
|
||||||
|
ListeningStrategyReason = StrategyReason("Listening")
|
||||||
|
PendingStrategyReason = StrategyReason("Pending")
|
||||||
|
DisabledStrategyReason = StrategyReason("Disabled")
|
||||||
|
ErrorDuringSetupStrategyReason = StrategyReason("ErrorDuringSetup")
|
||||||
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
||||||
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
||||||
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
// Copyright 2020-2021 the Pinniped contributors. All Rights Reserved.
|
||||||
// SPDX-License-Identifier: Apache-2.0
|
// SPDX-License-Identifier: Apache-2.0
|
||||||
|
|
||||||
package v1alpha1
|
package v1alpha1
|
||||||
@ -19,6 +19,7 @@ type StrategyReason string
|
|||||||
|
|
||||||
const (
|
const (
|
||||||
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
||||||
|
ImpersonationProxyStrategyType = StrategyType("ImpersonationProxy")
|
||||||
|
|
||||||
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
||||||
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
||||||
@ -26,6 +27,10 @@ const (
|
|||||||
SuccessStrategyStatus = StrategyStatus("Success")
|
SuccessStrategyStatus = StrategyStatus("Success")
|
||||||
ErrorStrategyStatus = StrategyStatus("Error")
|
ErrorStrategyStatus = StrategyStatus("Error")
|
||||||
|
|
||||||
|
ListeningStrategyReason = StrategyReason("Listening")
|
||||||
|
PendingStrategyReason = StrategyReason("Pending")
|
||||||
|
DisabledStrategyReason = StrategyReason("Disabled")
|
||||||
|
ErrorDuringSetupStrategyReason = StrategyReason("ErrorDuringSetup")
|
||||||
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
||||||
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
||||||
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
// Copyright 2020-2021 the Pinniped contributors. All Rights Reserved.
|
||||||
// SPDX-License-Identifier: Apache-2.0
|
// SPDX-License-Identifier: Apache-2.0
|
||||||
|
|
||||||
package v1alpha1
|
package v1alpha1
|
||||||
@ -19,6 +19,7 @@ type StrategyReason string
|
|||||||
|
|
||||||
const (
|
const (
|
||||||
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
KubeClusterSigningCertificateStrategyType = StrategyType("KubeClusterSigningCertificate")
|
||||||
|
ImpersonationProxyStrategyType = StrategyType("ImpersonationProxy")
|
||||||
|
|
||||||
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
TokenCredentialRequestAPIFrontendType = FrontendType("TokenCredentialRequestAPI")
|
||||||
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
ImpersonationProxyFrontendType = FrontendType("ImpersonationProxy")
|
||||||
@ -26,6 +27,10 @@ const (
|
|||||||
SuccessStrategyStatus = StrategyStatus("Success")
|
SuccessStrategyStatus = StrategyStatus("Success")
|
||||||
ErrorStrategyStatus = StrategyStatus("Error")
|
ErrorStrategyStatus = StrategyStatus("Error")
|
||||||
|
|
||||||
|
ListeningStrategyReason = StrategyReason("Listening")
|
||||||
|
PendingStrategyReason = StrategyReason("Pending")
|
||||||
|
DisabledStrategyReason = StrategyReason("Disabled")
|
||||||
|
ErrorDuringSetupStrategyReason = StrategyReason("ErrorDuringSetup")
|
||||||
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
CouldNotFetchKeyStrategyReason = StrategyReason("CouldNotFetchKey")
|
||||||
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
CouldNotGetClusterInfoStrategyReason = StrategyReason("CouldNotGetClusterInfo")
|
||||||
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
FetchedKeyStrategyReason = StrategyReason("FetchedKey")
|
||||||
|
@ -44,10 +44,6 @@ const (
|
|||||||
caCrtKey = "ca.crt"
|
caCrtKey = "ca.crt"
|
||||||
caKeyKey = "ca.key"
|
caKeyKey = "ca.key"
|
||||||
appLabelKey = "app"
|
appLabelKey = "app"
|
||||||
|
|
||||||
// TODO move these to the api package after resolving an upcoming merge.
|
|
||||||
PendingStrategyReason = v1alpha1.StrategyReason("Pending")
|
|
||||||
ErrorDuringSetupStrategyReason = v1alpha1.StrategyReason("ErrorDuringSetup")
|
|
||||||
)
|
)
|
||||||
|
|
||||||
type impersonatorConfigController struct {
|
type impersonatorConfigController struct {
|
||||||
@ -153,7 +149,7 @@ func (c *impersonatorConfigController) Sync(syncCtx controllerlib.Context) error
|
|||||||
strategy = &v1alpha1.CredentialIssuerStrategy{
|
strategy = &v1alpha1.CredentialIssuerStrategy{
|
||||||
Type: v1alpha1.ImpersonationProxyStrategyType,
|
Type: v1alpha1.ImpersonationProxyStrategyType,
|
||||||
Status: v1alpha1.ErrorStrategyStatus,
|
Status: v1alpha1.ErrorStrategyStatus,
|
||||||
Reason: ErrorDuringSetupStrategyReason,
|
Reason: v1alpha1.ErrorDuringSetupStrategyReason,
|
||||||
Message: err.Error(),
|
Message: err.Error(),
|
||||||
LastUpdateTime: metav1.NewTime(c.clock.Now()),
|
LastUpdateTime: metav1.NewTime(c.clock.Now()),
|
||||||
}
|
}
|
||||||
@ -740,7 +736,7 @@ func (c *impersonatorConfigController) doSyncResult(waitingForLoadBalancer bool,
|
|||||||
return &v1alpha1.CredentialIssuerStrategy{
|
return &v1alpha1.CredentialIssuerStrategy{
|
||||||
Type: v1alpha1.ImpersonationProxyStrategyType,
|
Type: v1alpha1.ImpersonationProxyStrategyType,
|
||||||
Status: v1alpha1.ErrorStrategyStatus,
|
Status: v1alpha1.ErrorStrategyStatus,
|
||||||
Reason: PendingStrategyReason,
|
Reason: v1alpha1.PendingStrategyReason,
|
||||||
Message: "waiting for load balancer Service to be assigned IP or hostname",
|
Message: "waiting for load balancer Service to be assigned IP or hostname",
|
||||||
LastUpdateTime: metav1.NewTime(c.clock.Now()),
|
LastUpdateTime: metav1.NewTime(c.clock.Now()),
|
||||||
}
|
}
|
||||||
|
@ -694,7 +694,7 @@ func TestImpersonatorConfigControllerSync(t *testing.T) {
|
|||||||
return v1alpha1.CredentialIssuerStrategy{
|
return v1alpha1.CredentialIssuerStrategy{
|
||||||
Type: v1alpha1.ImpersonationProxyStrategyType,
|
Type: v1alpha1.ImpersonationProxyStrategyType,
|
||||||
Status: v1alpha1.ErrorStrategyStatus,
|
Status: v1alpha1.ErrorStrategyStatus,
|
||||||
Reason: PendingStrategyReason,
|
Reason: v1alpha1.PendingStrategyReason,
|
||||||
Message: "waiting for load balancer Service to be assigned IP or hostname",
|
Message: "waiting for load balancer Service to be assigned IP or hostname",
|
||||||
LastUpdateTime: metav1.NewTime(frozenNow),
|
LastUpdateTime: metav1.NewTime(frozenNow),
|
||||||
}
|
}
|
||||||
@ -704,7 +704,7 @@ func TestImpersonatorConfigControllerSync(t *testing.T) {
|
|||||||
return v1alpha1.CredentialIssuerStrategy{
|
return v1alpha1.CredentialIssuerStrategy{
|
||||||
Type: v1alpha1.ImpersonationProxyStrategyType,
|
Type: v1alpha1.ImpersonationProxyStrategyType,
|
||||||
Status: v1alpha1.ErrorStrategyStatus,
|
Status: v1alpha1.ErrorStrategyStatus,
|
||||||
Reason: ErrorDuringSetupStrategyReason,
|
Reason: v1alpha1.ErrorDuringSetupStrategyReason,
|
||||||
Message: msg,
|
Message: msg,
|
||||||
LastUpdateTime: metav1.NewTime(frozenNow),
|
LastUpdateTime: metav1.NewTime(frozenNow),
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user