mirror of
https://github.com/siderolabs/talos.git
synced 2025-08-26 00:51:11 +02:00
cf64847772
This cleans up the multiple listener implementation. Signed-off-by: Brad Beam <brad.beam@talos-systems.com>
111 lines
2.8 KiB
Go
111 lines
2.8 KiB
Go
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"flag"
|
|
"log"
|
|
|
|
"github.com/talos-systems/talos/internal/app/machined/pkg/system/conditions"
|
|
"github.com/talos-systems/talos/internal/app/proxyd/internal/frontend"
|
|
"github.com/talos-systems/talos/internal/app/proxyd/internal/reg"
|
|
"github.com/talos-systems/talos/pkg/constants"
|
|
"github.com/talos-systems/talos/pkg/grpc/factory"
|
|
"github.com/talos-systems/talos/pkg/startup"
|
|
"github.com/talos-systems/talos/pkg/userdata"
|
|
"k8s.io/client-go/kubernetes"
|
|
"k8s.io/client-go/tools/clientcmd"
|
|
|
|
pkgnet "github.com/talos-systems/talos/pkg/net"
|
|
)
|
|
|
|
var (
|
|
dataPath *string
|
|
)
|
|
|
|
func init() {
|
|
log.SetFlags(log.Lshortfile | log.Ldate | log.Lmicroseconds | log.Ltime)
|
|
dataPath = flag.String("userdata", "", "the path to the user data")
|
|
flag.Parse()
|
|
}
|
|
|
|
func main() {
|
|
if err := startup.RandSeed(); err != nil {
|
|
log.Fatalf("startup: %s", err)
|
|
}
|
|
|
|
data, err := userdata.Open(*dataPath)
|
|
if err != nil {
|
|
log.Fatalf("open user data: %v", err)
|
|
}
|
|
|
|
bootstrapCtx, bootstrapCancel := context.WithCancel(context.Background())
|
|
r, err := frontend.NewReverseProxy(data.Services.Trustd.Endpoints, bootstrapCancel)
|
|
if err != nil {
|
|
log.Fatalf("failed to initialize the reverse proxy: %v", err)
|
|
}
|
|
|
|
// Start up with initial bootstrap config
|
|
go r.Bootstrap(bootstrapCtx)
|
|
|
|
go waitForKube(r)
|
|
|
|
errch := make(chan error)
|
|
|
|
// Start up reverse proxy
|
|
go func() {
|
|
errch <- r.Listen(":443")
|
|
}()
|
|
|
|
// Start up gRPC server
|
|
go func() {
|
|
errch <- factory.ListenAndServe(
|
|
reg.NewRegistrator(r),
|
|
factory.Network("unix"),
|
|
factory.SocketPath(constants.ProxydSocketPath),
|
|
)
|
|
|
|
}()
|
|
|
|
log.Fatal(<-errch)
|
|
}
|
|
|
|
func waitForKube(r *frontend.ReverseProxy) {
|
|
kubeconfig := "/etc/kubernetes/admin.conf"
|
|
if err := conditions.WaitForFilesToExist(kubeconfig).Wait(context.Background()); err != nil {
|
|
log.Fatalf("failed to find %s: %v", kubeconfig, err)
|
|
}
|
|
|
|
config, err := clientcmd.BuildConfigFromFlags("", kubeconfig)
|
|
if err != nil {
|
|
log.Fatalf("failed to read config %s: %v", kubeconfig, err)
|
|
}
|
|
|
|
// Discover local non loopback ips
|
|
ips, err := pkgnet.IPAddrs()
|
|
if err != nil {
|
|
log.Fatalf("failed to get local address: %v", err)
|
|
}
|
|
if len(ips) == 0 {
|
|
log.Fatalf("no IP address found for local api server")
|
|
}
|
|
ip := ips[0]
|
|
|
|
// Overwrite defined host so we can target local apiserver
|
|
// and bypass the admin.conf host which is configured for proxyd
|
|
config.Host = ip.String() + ":6443"
|
|
|
|
clientset, err := kubernetes.NewForConfig(config)
|
|
if err != nil {
|
|
log.Fatalf("failed to generate a client from %s: %v", kubeconfig, err)
|
|
}
|
|
|
|
if err = r.Watch(clientset); err != nil {
|
|
log.Fatalf("failed to watch kubernetes api server: %v", err)
|
|
}
|
|
|
|
}
|