12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697 |
- /*
- Copyright 2016 The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- // Package webhook implements a generic HTTP webhook plugin.
- package webhook
- import (
- "fmt"
- "time"
- "k8s.io/kubernetes/pkg/api"
- "k8s.io/kubernetes/pkg/api/unversioned"
- "k8s.io/kubernetes/pkg/apimachinery/registered"
- "k8s.io/kubernetes/pkg/client/restclient"
- "k8s.io/kubernetes/pkg/client/unversioned/clientcmd"
- "k8s.io/kubernetes/pkg/runtime"
- runtimeserializer "k8s.io/kubernetes/pkg/runtime/serializer"
- "k8s.io/kubernetes/pkg/util/wait"
- _ "k8s.io/kubernetes/pkg/apis/authorization/install"
- )
- type GenericWebhook struct {
- RestClient *restclient.RESTClient
- initialBackoff time.Duration
- }
- // NewGenericWebhook creates a new GenericWebhook from the provided kubeconfig file.
- func NewGenericWebhook(kubeConfigFile string, groupVersions []unversioned.GroupVersion, initialBackoff time.Duration) (*GenericWebhook, error) {
- for _, groupVersion := range groupVersions {
- if !registered.IsEnabledVersion(groupVersion) {
- return nil, fmt.Errorf("webhook plugin requires enabling extension resource: %s", groupVersion)
- }
- }
- loadingRules := clientcmd.NewDefaultClientConfigLoadingRules()
- loadingRules.ExplicitPath = kubeConfigFile
- loader := clientcmd.NewNonInteractiveDeferredLoadingClientConfig(loadingRules, &clientcmd.ConfigOverrides{})
- clientConfig, err := loader.ClientConfig()
- if err != nil {
- return nil, err
- }
- codec := api.Codecs.LegacyCodec(groupVersions...)
- clientConfig.ContentConfig.NegotiatedSerializer = runtimeserializer.NegotiatedSerializerWrapper(
- runtime.SerializerInfo{Serializer: codec},
- runtime.StreamSerializerInfo{},
- )
- restClient, err := restclient.UnversionedRESTClientFor(clientConfig)
- if err != nil {
- return nil, err
- }
- // TODO(ericchiang): Can we ensure remote service is reachable?
- return &GenericWebhook{restClient, initialBackoff}, nil
- }
- // WithExponentialBackoff will retry webhookFn 5 times w/ exponentially
- // increasing backoff when a 429 or a 5xx response code is returned.
- func (g *GenericWebhook) WithExponentialBackoff(webhookFn func() restclient.Result) restclient.Result {
- backoff := wait.Backoff{
- Duration: g.initialBackoff,
- Factor: 1.5,
- Jitter: 0.2,
- Steps: 5,
- }
- var result restclient.Result
- wait.ExponentialBackoff(backoff, func() (bool, error) {
- result = webhookFn()
- // Return from Request.Do() errors immediately.
- if err := result.Error(); err != nil {
- return false, err
- }
- // Retry 429s, and 5xxs.
- var statusCode int
- if result.StatusCode(&statusCode); statusCode == 429 || statusCode >= 500 {
- return false, nil
- }
- return true, nil
- })
- return result
- }
|