efe1fa89fe
Yes, this is a huge commit.
The middleware allows you to customize the API groups of all of the
*.pinniped.dev API groups.
Some notes about other small things in this commit:
- We removed the internal/client package in favor of pkg/conciergeclient. The
two packages do basically the same thing. I don't think we use the former
anymore.
- We re-enabled cluster-scoped owner assertions in the integration tests.
This code was added in internal/ownerref. See a0546942 for when this
assertion was removed.
- Note: the middlware code is in charge of restoring the GV of a request object,
so we should never need to write mutations that do that.
- We updated the supervisor secret generation to no longer manually set an owner
reference to the deployment since the middleware code now does this. I think we
still need some way to make an initial event for the secret generator
controller, which involves knowing the namespace and the name of the generated
secret, so I still wired the deployment through. We could use a namespace/name
tuple here, but I was lazy.
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
Co-authored-by: Ryan Richard <richardry@vmware.com>
85 lines
2.5 KiB
Go
85 lines
2.5 KiB
Go
// Copyright 2021 the Pinniped contributors. All Rights Reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package kubeclient
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"k8s.io/apimachinery/pkg/api/meta"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/conversion"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
"k8s.io/apimachinery/pkg/runtime/schema"
|
|
"k8s.io/gengo/namer"
|
|
"k8s.io/gengo/types"
|
|
)
|
|
|
|
type objectList interface {
|
|
runtime.Object // generic access to TypeMeta
|
|
metav1.ListInterface // generic access to ListMeta
|
|
}
|
|
|
|
func schemeRestMapper(scheme *runtime.Scheme) func(schema.GroupVersionResource, Verb) (schema.GroupVersionKind, bool) {
|
|
// we are assuming that no code uses the `// +resourceName=CUSTOM_RESOURCE_NAME` directive
|
|
// and that no Kube code generator is passed a --plural-exceptions argument
|
|
pluralExceptions := map[string]string{"Endpoints": "Endpoints"} // default copied from client-gen
|
|
lowercaseNamer := namer.NewAllLowercasePluralNamer(pluralExceptions)
|
|
|
|
listVerbMapping := map[schema.GroupVersionResource]schema.GroupVersionKind{}
|
|
nonListVerbMapping := map[schema.GroupVersionResource]schema.GroupVersionKind{}
|
|
|
|
for gvk := range scheme.AllKnownTypes() {
|
|
obj, err := scheme.New(gvk)
|
|
if err != nil {
|
|
panic(err) // programmer error (internal scheme code is broken)
|
|
}
|
|
|
|
switch t := obj.(type) {
|
|
case interface {
|
|
Object
|
|
objectList
|
|
}:
|
|
panic(fmt.Errorf("type is both list and non-list: %T", t))
|
|
|
|
case Object:
|
|
resource := lowercaseNamer.Name(types.Ref("ignored", gvk.Kind))
|
|
gvr := gvk.GroupVersion().WithResource(resource)
|
|
nonListVerbMapping[gvr] = gvk
|
|
|
|
case objectList:
|
|
if _, ok := t.(*metav1.Status); ok {
|
|
continue // ignore status since it does not have an Items field
|
|
}
|
|
|
|
itemsPtr, err := meta.GetItemsPtr(obj)
|
|
if err != nil {
|
|
panic(err) // programmer error (internal scheme code is broken)
|
|
}
|
|
items, err := conversion.EnforcePtr(itemsPtr)
|
|
if err != nil {
|
|
panic(err) // programmer error (internal scheme code is broken)
|
|
}
|
|
nonListKind := items.Type().Elem().Name()
|
|
resource := lowercaseNamer.Name(types.Ref("ignored", nonListKind))
|
|
gvr := gvk.GroupVersion().WithResource(resource)
|
|
listVerbMapping[gvr] = gvk
|
|
|
|
default:
|
|
// ignore stuff like ListOptions
|
|
}
|
|
}
|
|
|
|
return func(resource schema.GroupVersionResource, v Verb) (schema.GroupVersionKind, bool) {
|
|
switch v {
|
|
case VerbList:
|
|
gvk, ok := listVerbMapping[resource]
|
|
return gvk, ok
|
|
|
|
default:
|
|
gvk, ok := nonListVerbMapping[resource]
|
|
return gvk, ok
|
|
}
|
|
}
|
|
}
|