webhook.go 3.1 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697
  1. /*
  2. Copyright 2016 The Kubernetes Authors.
  3. Licensed under the Apache License, Version 2.0 (the "License");
  4. you may not use this file except in compliance with the License.
  5. You may obtain a copy of the License at
  6. http://www.apache.org/licenses/LICENSE-2.0
  7. Unless required by applicable law or agreed to in writing, software
  8. distributed under the License is distributed on an "AS IS" BASIS,
  9. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  10. See the License for the specific language governing permissions and
  11. limitations under the License.
  12. */
  13. // Package webhook implements a generic HTTP webhook plugin.
  14. package webhook
  15. import (
  16. "fmt"
  17. "time"
  18. "k8s.io/kubernetes/pkg/api"
  19. "k8s.io/kubernetes/pkg/api/unversioned"
  20. "k8s.io/kubernetes/pkg/apimachinery/registered"
  21. "k8s.io/kubernetes/pkg/client/restclient"
  22. "k8s.io/kubernetes/pkg/client/unversioned/clientcmd"
  23. "k8s.io/kubernetes/pkg/runtime"
  24. runtimeserializer "k8s.io/kubernetes/pkg/runtime/serializer"
  25. "k8s.io/kubernetes/pkg/util/wait"
  26. _ "k8s.io/kubernetes/pkg/apis/authorization/install"
  27. )
  28. type GenericWebhook struct {
  29. RestClient *restclient.RESTClient
  30. initialBackoff time.Duration
  31. }
  32. // NewGenericWebhook creates a new GenericWebhook from the provided kubeconfig file.
  33. func NewGenericWebhook(kubeConfigFile string, groupVersions []unversioned.GroupVersion, initialBackoff time.Duration) (*GenericWebhook, error) {
  34. for _, groupVersion := range groupVersions {
  35. if !registered.IsEnabledVersion(groupVersion) {
  36. return nil, fmt.Errorf("webhook plugin requires enabling extension resource: %s", groupVersion)
  37. }
  38. }
  39. loadingRules := clientcmd.NewDefaultClientConfigLoadingRules()
  40. loadingRules.ExplicitPath = kubeConfigFile
  41. loader := clientcmd.NewNonInteractiveDeferredLoadingClientConfig(loadingRules, &clientcmd.ConfigOverrides{})
  42. clientConfig, err := loader.ClientConfig()
  43. if err != nil {
  44. return nil, err
  45. }
  46. codec := api.Codecs.LegacyCodec(groupVersions...)
  47. clientConfig.ContentConfig.NegotiatedSerializer = runtimeserializer.NegotiatedSerializerWrapper(
  48. runtime.SerializerInfo{Serializer: codec},
  49. runtime.StreamSerializerInfo{},
  50. )
  51. restClient, err := restclient.UnversionedRESTClientFor(clientConfig)
  52. if err != nil {
  53. return nil, err
  54. }
  55. // TODO(ericchiang): Can we ensure remote service is reachable?
  56. return &GenericWebhook{restClient, initialBackoff}, nil
  57. }
  58. // WithExponentialBackoff will retry webhookFn 5 times w/ exponentially
  59. // increasing backoff when a 429 or a 5xx response code is returned.
  60. func (g *GenericWebhook) WithExponentialBackoff(webhookFn func() restclient.Result) restclient.Result {
  61. backoff := wait.Backoff{
  62. Duration: g.initialBackoff,
  63. Factor: 1.5,
  64. Jitter: 0.2,
  65. Steps: 5,
  66. }
  67. var result restclient.Result
  68. wait.ExponentialBackoff(backoff, func() (bool, error) {
  69. result = webhookFn()
  70. // Return from Request.Do() errors immediately.
  71. if err := result.Error(); err != nil {
  72. return false, err
  73. }
  74. // Retry 429s, and 5xxs.
  75. var statusCode int
  76. if result.StatusCode(&statusCode); statusCode == 429 || statusCode >= 500 {
  77. return false, nil
  78. }
  79. return true, nil
  80. })
  81. return result
  82. }