mirror of
https://github.com/kubevela/kubevela.git
synced 2026-03-05 19:22:03 +00:00
* Refactor: refactor multi cluster round trippers Before adding more RoundTrippers, it would be better to expose common logic in the utility package. This commit exports `tryCancelRequest` at `utils` package, and make `secretMultiClusterRoundTripper` implement `RoundTripperWrapper` interface to allow chaining multiple round trippers. Refs #3432 Signed-off-by: Sunghoon Kang <hoon@linecorp.com> * Feat: reconcile app with scoped permissions Currently, all Application resources are reconciled by the Roles bound to the controller service account. This behavior gives us the power to manage resources across multiple namespaces. However, this behavior can be problematic in the soft-multitenancy environment. This commit adds `serviceAccountName` to ApplicationSepc to reconcile Application with the given service account for reconciling Application with scoped permissions. Refs #3432 Signed-off-by: Sunghoon Kang <hoon@linecorp.com> * Refactor: extract context setter as method https://github.com/oam-dev/kubevela/pull/3434#discussion_r825561603 Signed-off-by: Sunghoon Kang <hoon@linecorp.com> * Feat: use annotation instead of spec https://github.com/oam-dev/kubevela/issues/3432#issuecomment-1066460269 Signed-off-by: Sunghoon Kang <hoon@linecorp.com> * Refactor: unify service account setter caller https://github.com/oam-dev/kubevela/pull/3434#discussion_r825853612 Signed-off-by: Sunghoon Kang <hoon@linecorp.com> * Refactor: rename GetServiceAccountName https://github.com/oam-dev/kubevela/pull/3434#discussion_r826514565 Signed-off-by: Sunghoon Kang <hoon@linecorp.com>
136 lines
4.5 KiB
Go
136 lines
4.5 KiB
Go
/*
|
|
Copyright 2021 The KubeVela Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package tasks
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/pkg/errors"
|
|
"k8s.io/client-go/rest"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
|
|
"github.com/oam-dev/kubevela/apis/core.oam.dev/common"
|
|
"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
|
|
"github.com/oam-dev/kubevela/pkg/cue/packages"
|
|
"github.com/oam-dev/kubevela/pkg/cue/process"
|
|
"github.com/oam-dev/kubevela/pkg/oam/discoverymapper"
|
|
"github.com/oam-dev/kubevela/pkg/velaql/providers/query"
|
|
wfContext "github.com/oam-dev/kubevela/pkg/workflow/context"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/providers"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/providers/email"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/providers/http"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/providers/kube"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/providers/time"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/providers/util"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/providers/workspace"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/tasks/custom"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/tasks/template"
|
|
"github.com/oam-dev/kubevela/pkg/workflow/types"
|
|
)
|
|
|
|
type taskDiscover struct {
|
|
builtins map[string]types.TaskGenerator
|
|
remoteTaskDiscover *custom.TaskLoader
|
|
templateLoader template.Loader
|
|
}
|
|
|
|
// GetTaskGenerator get task generator by name.
|
|
func (td *taskDiscover) GetTaskGenerator(ctx context.Context, name string) (types.TaskGenerator, error) {
|
|
|
|
tg, ok := td.builtins[name]
|
|
if ok {
|
|
return tg, nil
|
|
}
|
|
if td.remoteTaskDiscover != nil {
|
|
var err error
|
|
tg, err = td.remoteTaskDiscover.GetTaskGenerator(ctx, name)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return tg, nil
|
|
|
|
}
|
|
return nil, errors.Errorf("can't find task generator: %s", name)
|
|
}
|
|
|
|
func suspend(step v1beta1.WorkflowStep, opt *types.GeneratorOptions) (types.TaskRunner, error) {
|
|
return &suspendTaskRunner{
|
|
id: opt.ID,
|
|
name: step.Name,
|
|
}, nil
|
|
}
|
|
|
|
// NewTaskDiscover will create a client for load task generator.
|
|
func NewTaskDiscover(providerHandlers providers.Providers, pd *packages.PackageDiscover, cli client.Client, dm discoverymapper.DiscoveryMapper, pCtx process.Context) types.TaskDiscover {
|
|
// install builtin provider
|
|
workspace.Install(providerHandlers)
|
|
email.Install(providerHandlers)
|
|
util.Install(providerHandlers)
|
|
|
|
templateLoader := template.NewWorkflowStepTemplateLoader(cli, dm)
|
|
return &taskDiscover{
|
|
builtins: map[string]types.TaskGenerator{
|
|
"suspend": suspend,
|
|
},
|
|
remoteTaskDiscover: custom.NewTaskLoader(templateLoader.LoadTaskTemplate, pd, providerHandlers, 0, pCtx),
|
|
templateLoader: templateLoader,
|
|
}
|
|
}
|
|
|
|
type suspendTaskRunner struct {
|
|
id string
|
|
name string
|
|
}
|
|
|
|
// Name return suspend step name.
|
|
func (tr *suspendTaskRunner) Name() string {
|
|
return tr.name
|
|
}
|
|
|
|
// Run make workflow suspend.
|
|
func (tr *suspendTaskRunner) Run(ctx wfContext.Context, options *types.TaskRunOptions) (common.WorkflowStepStatus, *types.Operation, error) {
|
|
return common.WorkflowStepStatus{
|
|
ID: tr.id,
|
|
Name: tr.name,
|
|
Type: "suspend",
|
|
Phase: common.WorkflowStepPhaseSucceeded,
|
|
}, &types.Operation{Suspend: true}, nil
|
|
}
|
|
|
|
// Pending check task should be executed or not.
|
|
func (tr *suspendTaskRunner) Pending(ctx wfContext.Context) bool {
|
|
return false
|
|
}
|
|
|
|
// NewViewTaskDiscover will create a client for load task generator.
|
|
func NewViewTaskDiscover(pd *packages.PackageDiscover, cli client.Client, cfg *rest.Config, apply kube.Dispatcher, delete kube.Deleter, viewNs string, logLevel int, pCtx process.Context) types.TaskDiscover {
|
|
handlerProviders := providers.NewProviders()
|
|
|
|
// install builtin provider
|
|
query.Install(handlerProviders, cli, cfg)
|
|
time.Install(handlerProviders)
|
|
kube.Install(handlerProviders, nil, cli, apply, delete)
|
|
http.Install(handlerProviders, cli, viewNs)
|
|
email.Install(handlerProviders)
|
|
|
|
templateLoader := template.NewViewTemplateLoader(cli, viewNs)
|
|
return &taskDiscover{
|
|
remoteTaskDiscover: custom.NewTaskLoader(templateLoader.LoadTaskTemplate, pd, handlerProviders, logLevel, pCtx),
|
|
templateLoader: templateLoader,
|
|
}
|
|
}
|