mirror of
https://github.com/siderolabs/talos.git
synced 2025-11-02 17:31:11 +01:00
544cb4fe7d
This refactors code to handle partial machine config - only multi-doc without v1alpha1 config. This uses improvements from https://github.com/cosi-project/runtime/pull/300: * where possible, use `TransformController` * use integrated tracker to reduce boilerplate Sometimes fix/rewrite tests where applicable. Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
60 lines
2.0 KiB
Go
60 lines
2.0 KiB
Go
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
package kubeaccess
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/cosi-project/runtime/pkg/controller"
|
|
"github.com/cosi-project/runtime/pkg/controller/generic/transform"
|
|
"github.com/siderolabs/gen/optional"
|
|
"go.uber.org/zap"
|
|
|
|
"github.com/siderolabs/talos/pkg/machinery/resources/config"
|
|
"github.com/siderolabs/talos/pkg/machinery/resources/kubeaccess"
|
|
)
|
|
|
|
// ConfigController watches v1alpha1.Config, updates Talos API access config.
|
|
type ConfigController = transform.Controller[*config.MachineConfig, *kubeaccess.Config]
|
|
|
|
// NewConfigController instanciates the config controller.
|
|
func NewConfigController() *ConfigController {
|
|
return transform.NewController(
|
|
transform.Settings[*config.MachineConfig, *kubeaccess.Config]{
|
|
Name: "kubeaccess.ConfigController",
|
|
MapMetadataOptionalFunc: func(cfg *config.MachineConfig) optional.Optional[*kubeaccess.Config] {
|
|
if cfg.Metadata().ID() != config.V1Alpha1ID {
|
|
return optional.None[*kubeaccess.Config]()
|
|
}
|
|
|
|
if cfg.Config().Machine() == nil {
|
|
return optional.None[*kubeaccess.Config]()
|
|
}
|
|
|
|
if !cfg.Config().Machine().Type().IsControlPlane() {
|
|
return optional.None[*kubeaccess.Config]()
|
|
}
|
|
|
|
return optional.Some(kubeaccess.NewConfig(config.NamespaceName, kubeaccess.ConfigID))
|
|
},
|
|
TransformFunc: func(ctx context.Context, r controller.Reader, logger *zap.Logger, cfg *config.MachineConfig, res *kubeaccess.Config) error {
|
|
spec := res.TypedSpec()
|
|
|
|
*spec = kubeaccess.ConfigSpec{}
|
|
|
|
if cfg != nil && cfg.Config().Machine() != nil {
|
|
c := cfg.Config()
|
|
|
|
spec.Enabled = c.Machine().Features().KubernetesTalosAPIAccess().Enabled()
|
|
spec.AllowedAPIRoles = c.Machine().Features().KubernetesTalosAPIAccess().AllowedRoles()
|
|
spec.AllowedKubernetesNamespaces = c.Machine().Features().KubernetesTalosAPIAccess().AllowedKubernetesNamespaces()
|
|
}
|
|
|
|
return nil
|
|
},
|
|
},
|
|
)
|
|
}
|