9105c6bcd0
Users behind firewalls may be unable to build all the airshipctl images as a result of OpenSSL errors stemming from certificates used with the proxy. To address this, the images impacted have been updated to copy the proxy certificate from airshipctl/certs into the image and run update-ca-certificates command. This is the same behavior that already exists in the base airshipctl image and is simply being extended to the images in krm-functions. Change-Id: I436d1e25fb0726ab7576fec44a7ef2f9fd20f2bd Signed-off-by: Alexander Hughes <Alexander.Hughes@pm.me> |
||
---|---|---|
.. | ||
image | ||
local-resource | ||
Dockerfile.sample | ||
main.go | ||
Makefile | ||
README.md |
Replacement Transformer
This plugin is written in go
and uses the kyaml
and airshipctl
libraries
for parsing the input and writing the output.
Function implementation
The function is implemented as an image, and built using make image
.
Function reads configuration, a collection of input resources, and performs values
replacement based on configuration.
Function invocation
The function is invoked by authoring a local Resource
with metadata.annotations.[config.kubernetes.io/function]
and running:
kustomize config run local-resource/
This exits non-zero if there is an error.
Running the Example
Run Replacement Transformer
with:
kustomize fn run local-resource --dry-run
Value of spec.version
in resource KubeadmControlPlane
(v1.18.6
) will be replaced
with value of kubernetes
field defined in VariableCatalogue
resource
Configuration file format
Replacement Transformer
configuration resource is represented as a standard
k8s resource with Group, Version, Kind and Metadata header. Replacement
configuration is defined under replacements
field which contains a list of
object with following structure.
source:
objref:
group: airshipit.org
version: v1alpha1
kind: Clusterctl
name: resource-name
namespace: capm3
value: "string value"
fieldref: {.data.host}
target:
objref:
group: airshipit.org
version: v1alpha1
kind: KubeConfig
name: resource-name
namespace: capi-system
fieldrefs:
- {.config.kind}
source
defines where a substitution is from. It can from two different kinds of sources from a field of one resource or from a string.objref
refers to a kubernetes object by Group, Version, Kind, Name and Namespace. Each field can be omitted or be an empty string.value
static string value to substitute intotarget
.fieldref
JSON path to particular object field. This field essentially represents JSON query with syntax used inkubectl
executed with flag--jsonpath
. JSON path syntax end elements is defined by https://goessner.net/articles/JsonPath/
target
defines a substitution target.objref
specifies a set of resources. Any resource that matches intersection of all conditions (Group, Version, Kind, Name and Namespace) is included in this set.fieldrefs
list of JSON path strings which identify target field to substitute into. Field reference may have include pattern which is used as a replacement variable. For example in following query{.metadata.name}%NAME%
string surrounded by%
symbols (i.e.NAME
) is considered as a pattern inside a field value identified by JSON pathmetadata.name
. Therefore if value ofmetadata.name
issome-NAME-of-the-pod
onlyNAME
substring is replaced with the string defined by substitution source.