ebf55415b6
There was outstanding review comments for some minor things. In this patch they are resolved. Change-Id: If950900293cae1d1b0c57492d5dfa62770c08a7c
123 lines
4.9 KiB
Python
123 lines
4.9 KiB
Python
# Copyright 2018 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from oslo_config import cfg as oslo_cfg
|
|
from oslo_log import log as logging
|
|
from oslo_serialization import jsonutils
|
|
|
|
from kuryr_kubernetes import clients
|
|
from kuryr_kubernetes import constants
|
|
from kuryr_kubernetes.controller.drivers import base as drivers
|
|
from kuryr_kubernetes.controller.drivers import utils as driver_utils
|
|
from kuryr_kubernetes import exceptions as k_exc
|
|
from kuryr_kubernetes.handlers import k8s_base
|
|
|
|
LOG = logging.getLogger(__name__)
|
|
|
|
|
|
class PodLabelHandler(k8s_base.ResourceEventHandler):
|
|
"""Controller side of Pod Label process for Kubernetes pods.
|
|
|
|
`PodLabelHandler` runs on the Kuryr-Kubernetes controller and is
|
|
responsible for triggering the vif port updates upon pod labels changes.
|
|
"""
|
|
|
|
OBJECT_KIND = constants.K8S_OBJ_POD
|
|
OBJECT_WATCH_PATH = "%s/%s" % (constants.K8S_API_BASE, "pods")
|
|
|
|
def __init__(self):
|
|
super(PodLabelHandler, self).__init__()
|
|
self._drv_project = drivers.PodProjectDriver.get_instance()
|
|
self._drv_sg = drivers.PodSecurityGroupsDriver.get_instance()
|
|
self._drv_svc_sg = drivers.ServiceSecurityGroupsDriver.get_instance()
|
|
self._drv_vif_pool = drivers.VIFPoolDriver.get_instance(
|
|
specific_driver='multi_pool')
|
|
self._drv_vif_pool.set_vif_driver()
|
|
self._drv_lbaas = drivers.LBaaSDriver.get_instance()
|
|
|
|
def on_present(self, pod):
|
|
if driver_utils.is_host_network(pod) or not self._has_vifs(pod):
|
|
# NOTE(ltomasbo): The event will be retried once the vif handler
|
|
# annotates the pod with the pod state.
|
|
return
|
|
|
|
current_pod_info = (pod['metadata'].get('labels'),
|
|
pod['status'].get('podIP'))
|
|
previous_pod_info = self._get_pod_info(pod)
|
|
LOG.debug("Got previous pod info from annotation: %r",
|
|
previous_pod_info)
|
|
|
|
if current_pod_info == previous_pod_info:
|
|
return
|
|
|
|
# FIXME(dulek): We should be able to just do create if only podIP
|
|
# changed, right?
|
|
crd_pod_selectors = self._drv_sg.update_sg_rules(pod)
|
|
|
|
project_id = self._drv_project.get_project(pod)
|
|
security_groups = self._drv_sg.get_security_groups(pod, project_id)
|
|
self._drv_vif_pool.update_vif_sgs(pod, security_groups)
|
|
try:
|
|
self._set_pod_info(pod, current_pod_info)
|
|
except k_exc.K8sResourceNotFound:
|
|
LOG.debug("Pod already deleted, no need to retry.")
|
|
return
|
|
|
|
if oslo_cfg.CONF.octavia_defaults.enforce_sg_rules:
|
|
services = driver_utils.get_services()
|
|
self._update_services(services, crd_pod_selectors, project_id)
|
|
|
|
def _get_pod_info(self, pod):
|
|
try:
|
|
annotations = pod['metadata']['annotations']
|
|
pod_labels_annotation = annotations[constants.K8S_ANNOTATION_LABEL]
|
|
pod_ip_annotation = annotations[constants.K8S_ANNOTATION_IP]
|
|
except KeyError:
|
|
return None, None
|
|
pod_labels = jsonutils.loads(pod_labels_annotation)
|
|
return pod_labels, pod_ip_annotation
|
|
|
|
def _set_pod_info(self, pod, info):
|
|
if not info[0]:
|
|
LOG.debug("Removing info annotations: %r", info)
|
|
annotation = None, info[1]
|
|
else:
|
|
annotation = jsonutils.dumps(info[0], sort_keys=True), info[1]
|
|
LOG.debug("Setting info annotations: %r", annotation)
|
|
|
|
k8s = clients.get_kubernetes_client()
|
|
k8s.annotate(pod['metadata']['selfLink'],
|
|
{
|
|
constants.K8S_ANNOTATION_LABEL: annotation[0],
|
|
constants.K8S_ANNOTATION_IP: annotation[1]
|
|
},
|
|
resource_version=pod['metadata']['resourceVersion'])
|
|
|
|
def _has_vifs(self, pod):
|
|
try:
|
|
kp = driver_utils.get_vifs(pod)
|
|
vifs = kp['status']['vifs']
|
|
LOG.debug("Pod have associated KuryrPort with vifs: %s", vifs)
|
|
except KeyError:
|
|
return False
|
|
return True
|
|
|
|
def _update_services(self, services, crd_pod_selectors, project_id):
|
|
for service in services.get('items'):
|
|
if not driver_utils.service_matches_affected_pods(
|
|
service, crd_pod_selectors):
|
|
continue
|
|
sgs = self._drv_svc_sg.get_security_groups(service, project_id)
|
|
self._drv_lbaas.update_lbaas_sg(service, sgs)
|