forked from jtblin/kube2iam
-
Notifications
You must be signed in to change notification settings - Fork 0
/
pod.go
95 lines (81 loc) · 2.42 KB
/
pod.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
package kube2iam
import (
"fmt"
log "github.com/sirupsen/logrus"
"k8s.io/client-go/pkg/api/v1"
"k8s.io/client-go/tools/cache"
)
// PodHandler represents a pod handler.
type PodHandler struct {
iamRoleKey string
}
func (p *PodHandler) podFields(pod *v1.Pod) log.Fields {
return log.Fields{
"pod.name": pod.GetName(),
"pod.namespace": pod.GetNamespace(),
"pod.status.ip": pod.Status.PodIP,
"pod.status.phase": pod.Status.Phase,
"pod.iam.role": pod.GetAnnotations()[p.iamRoleKey],
}
}
// OnAdd is called when a pod is added.
func (p *PodHandler) OnAdd(obj interface{}) {
pod, ok := obj.(*v1.Pod)
if !ok {
log.Errorf("Expected Pod but OnAdd handler received %+v", obj)
return
}
//TODO JRN: Should we be filtering this by the `isPodActive` to reduce chatter and confusion about
// what is actually being indexed by the indexer? This gets a little tricky with the OnUpdate piece
// of cronjobs that stick around in Completed/Succeeded status
logger := log.WithFields(p.podFields(pod))
logger.Debug("Pod OnAdd")
}
// OnUpdate is called when a pod is modified.
func (p *PodHandler) OnUpdate(oldObj, newObj interface{}) {
_, ok1 := oldObj.(*v1.Pod)
newPod, ok2 := newObj.(*v1.Pod)
if !ok1 || !ok2 {
log.Errorf("Expected Pod but OnUpdate handler received %+v %+v", oldObj, newObj)
return
}
logger := log.WithFields(p.podFields(newPod))
logger.Debug("Pod OnUpdate")
}
// OnDelete is called when a pod is deleted.
func (p *PodHandler) OnDelete(obj interface{}) {
pod, ok := obj.(*v1.Pod)
if !ok {
deletedObj, dok := obj.(cache.DeletedFinalStateUnknown)
if dok {
pod, ok = deletedObj.Obj.(*v1.Pod)
}
}
if !ok {
log.Errorf("Expected Pod but OnDelete handler received %+v", obj)
return
}
logger := log.WithFields(p.podFields(pod))
logger.Debug("Pod OnDelete")
}
func isPodActive(p *v1.Pod) bool {
return p.Status.PodIP != "" &&
v1.PodSucceeded != p.Status.Phase &&
v1.PodFailed != p.Status.Phase &&
p.DeletionTimestamp == nil
}
// PodIPIndexFunc maps a given Pod to it's IP for caching.
func PodIPIndexFunc(obj interface{}) ([]string, error) {
pod, ok := obj.(*v1.Pod)
if !ok {
return nil, fmt.Errorf("obj not pod: %+v", obj)
}
if isPodActive(pod) {
return []string{pod.Status.PodIP}, nil
}
return nil, nil
}
// NewPodHandler constructs a pod handler given the relevant IAM Role Key
func NewPodHandler(iamRoleKey string) *PodHandler {
return &PodHandler{iamRoleKey: iamRoleKey}
}