mirror of
https://github.com/projectcapsule/capsule.git
synced 2026-02-14 18:09:58 +00:00
* fix(controller): decode old object for delete requests Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: modernize golang Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: modernize golang Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: modernize golang Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * fix(config): remove usergroups default Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * fix(config): remove usergroups default Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * sec(ghsa-2ww6-hf35-mfjm): intercept namespace subresource Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * feat(api): add rulestatus api Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: conflicts Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * feat(api): add rulestatus api Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * feat(api): add rulestatus api Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * feat(api): add rulestatus api Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * feat(api): add rulestatus api Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * feat(api): add rulestatus api Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * feat(api): add rulestatus api Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> --------- Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
122 lines
3.1 KiB
Go
122 lines
3.1 KiB
Go
// Copyright 2020-2026 Project Capsule Authors
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package pv
|
|
|
|
import (
|
|
"context"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
"k8s.io/apimachinery/pkg/api/errors"
|
|
"k8s.io/client-go/util/retry"
|
|
ctrl "sigs.k8s.io/controller-runtime"
|
|
"sigs.k8s.io/controller-runtime/pkg/builder"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
"sigs.k8s.io/controller-runtime/pkg/controller"
|
|
log2 "sigs.k8s.io/controller-runtime/pkg/log"
|
|
"sigs.k8s.io/controller-runtime/pkg/predicate"
|
|
"sigs.k8s.io/controller-runtime/pkg/reconcile"
|
|
|
|
capsulev1beta2 "github.com/projectcapsule/capsule/api/v1beta2"
|
|
"github.com/projectcapsule/capsule/internal/controllers/utils"
|
|
"github.com/projectcapsule/capsule/pkg/tenant"
|
|
capsuleutils "github.com/projectcapsule/capsule/pkg/utils"
|
|
)
|
|
|
|
type Controller struct {
|
|
client client.Client
|
|
label string
|
|
}
|
|
|
|
func (c *Controller) SetupWithManager(mgr ctrl.Manager, cfg utils.ControllerOptions) error {
|
|
label, err := capsuleutils.GetTypeLabel(&capsulev1beta2.Tenant{})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
c.client = mgr.GetClient()
|
|
c.label = label
|
|
|
|
return ctrl.NewControllerManagedBy(mgr).
|
|
Named("capsule/persistentvolumes").
|
|
For(&corev1.PersistentVolume{}, builder.WithPredicates(predicate.NewPredicateFuncs(func(object client.Object) bool {
|
|
pv, ok := object.(*corev1.PersistentVolume)
|
|
if !ok {
|
|
return false
|
|
}
|
|
|
|
if pv.Spec.ClaimRef == nil {
|
|
return false
|
|
}
|
|
|
|
labels := object.GetLabels()
|
|
_, ok = labels[c.label]
|
|
|
|
return !ok
|
|
}))).
|
|
WithOptions(controller.Options{MaxConcurrentReconciles: cfg.MaxConcurrentReconciles}).
|
|
Complete(c)
|
|
}
|
|
|
|
func (c *Controller) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error) {
|
|
log := log2.FromContext(ctx)
|
|
|
|
persistentVolume := corev1.PersistentVolume{}
|
|
if err := c.client.Get(ctx, request.NamespacedName, &persistentVolume); err != nil {
|
|
if errors.IsNotFound(err) {
|
|
log.V(3).Info("skipping reconciliation, resource may have been deleted")
|
|
|
|
return reconcile.Result{}, nil
|
|
}
|
|
|
|
log.Error(err, "cannot retrieve corev1.PersistentVolume")
|
|
|
|
return reconcile.Result{}, err
|
|
}
|
|
|
|
if persistentVolume.Spec.ClaimRef == nil {
|
|
log.Info("skipping reconciliation, missing claimRef")
|
|
|
|
return reconcile.Result{}, nil
|
|
}
|
|
|
|
tnt, err := tenant.TenantByStatusNamespace(ctx, c.client, persistentVolume.Spec.ClaimRef.Namespace)
|
|
if err != nil {
|
|
log.Error(err, "unable to retrieve Tenant from the claimRef")
|
|
|
|
return reconcile.Result{}, err
|
|
}
|
|
|
|
if tnt == nil {
|
|
log.V(4).Info("skipping reconciliation, PV is claimed by a PVC not managed in a Tenant")
|
|
|
|
return reconcile.Result{}, nil
|
|
}
|
|
|
|
retryErr := retry.RetryOnConflict(retry.DefaultRetry, func() error {
|
|
pv := persistentVolume
|
|
|
|
if err = c.client.Get(ctx, request.NamespacedName, &pv); err != nil {
|
|
return err
|
|
}
|
|
|
|
labels := pv.GetLabels()
|
|
if labels == nil {
|
|
labels = map[string]string{}
|
|
}
|
|
|
|
labels[c.label] = tnt.GetName()
|
|
|
|
pv.SetLabels(labels)
|
|
|
|
return c.client.Update(ctx, &pv)
|
|
})
|
|
if retryErr != nil {
|
|
log.Error(retryErr, "unable to update PersistentVolume with Capsule label")
|
|
|
|
return reconcile.Result{}, retryErr
|
|
}
|
|
|
|
return reconcile.Result{}, nil
|
|
}
|