123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337 |
- package pod
- import (
- "fmt"
- "time"
- v1 "k8s.io/api/core/v1"
- metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
- "k8s.io/apimachinery/pkg/util/intstr"
- utilfeature "k8s.io/apiserver/pkg/util/feature"
- "k8s.io/kubernetes/pkg/features"
- )
- func FindPort(pod *v1.Pod, svcPort *v1.ServicePort) (int, error) {
- portName := svcPort.TargetPort
- switch portName.Type {
- case intstr.String:
- name := portName.StrVal
- for _, container := range pod.Spec.Containers {
- for _, port := range container.Ports {
- if port.Name == name && port.Protocol == svcPort.Protocol {
- return int(port.ContainerPort), nil
- }
- }
- }
- case intstr.Int:
- return portName.IntValue(), nil
- }
- return 0, fmt.Errorf("no suitable port for manifest: %s", pod.UID)
- }
- type ContainerVisitor func(container *v1.Container) (shouldContinue bool)
- // VisitContainers invokes the visitor function with a pointer to the container
- // spec of every container in the given pod spec. If visitor returns false,
- // visiting is short-circuited. VisitContainers returns true if visiting completes,
- // false if visiting was short-circuited.
- func VisitContainers(podSpec *v1.PodSpec, visitor ContainerVisitor) bool {
- for i := range podSpec.InitContainers {
- if !visitor(&podSpec.InitContainers[i]) {
- return false
- }
- }
- for i := range podSpec.Containers {
- if !visitor(&podSpec.Containers[i]) {
- return false
- }
- }
- if utilfeature.DefaultFeatureGate.Enabled(features.EphemeralContainers) {
- for i := range podSpec.EphemeralContainers {
- if !visitor((*v1.Container)(&podSpec.EphemeralContainers[i].EphemeralContainerCommon)) {
- return false
- }
- }
- }
- return true
- }
- type Visitor func(name string) (shouldContinue bool)
- // VisitPodSecretNames invokes the visitor function with the name of every secret
- // referenced by the pod spec. If visitor returns false, visiting is short-circuited.
- // Transitive references (e.g. pod -> pvc -> pv -> secret) are not visited.
- // Returns true if visiting completed, false if visiting was short-circuited.
- func VisitPodSecretNames(pod *v1.Pod, visitor Visitor) bool {
- for _, reference := range pod.Spec.ImagePullSecrets {
- if !visitor(reference.Name) {
- return false
- }
- }
- VisitContainers(&pod.Spec, func(c *v1.Container) bool {
- return visitContainerSecretNames(c, visitor)
- })
- var source *v1.VolumeSource
- for i := range pod.Spec.Volumes {
- source = &pod.Spec.Volumes[i].VolumeSource
- switch {
- case source.AzureFile != nil:
- if len(source.AzureFile.SecretName) > 0 && !visitor(source.AzureFile.SecretName) {
- return false
- }
- case source.CephFS != nil:
- if source.CephFS.SecretRef != nil && !visitor(source.CephFS.SecretRef.Name) {
- return false
- }
- case source.Cinder != nil:
- if source.Cinder.SecretRef != nil && !visitor(source.Cinder.SecretRef.Name) {
- return false
- }
- case source.FlexVolume != nil:
- if source.FlexVolume.SecretRef != nil && !visitor(source.FlexVolume.SecretRef.Name) {
- return false
- }
- case source.Projected != nil:
- for j := range source.Projected.Sources {
- if source.Projected.Sources[j].Secret != nil {
- if !visitor(source.Projected.Sources[j].Secret.Name) {
- return false
- }
- }
- }
- case source.RBD != nil:
- if source.RBD.SecretRef != nil && !visitor(source.RBD.SecretRef.Name) {
- return false
- }
- case source.Secret != nil:
- if !visitor(source.Secret.SecretName) {
- return false
- }
- case source.ScaleIO != nil:
- if source.ScaleIO.SecretRef != nil && !visitor(source.ScaleIO.SecretRef.Name) {
- return false
- }
- case source.ISCSI != nil:
- if source.ISCSI.SecretRef != nil && !visitor(source.ISCSI.SecretRef.Name) {
- return false
- }
- case source.StorageOS != nil:
- if source.StorageOS.SecretRef != nil && !visitor(source.StorageOS.SecretRef.Name) {
- return false
- }
- case source.CSI != nil:
- if source.CSI.NodePublishSecretRef != nil && !visitor(source.CSI.NodePublishSecretRef.Name) {
- return false
- }
- }
- }
- return true
- }
- func visitContainerSecretNames(container *v1.Container, visitor Visitor) bool {
- for _, env := range container.EnvFrom {
- if env.SecretRef != nil {
- if !visitor(env.SecretRef.Name) {
- return false
- }
- }
- }
- for _, envVar := range container.Env {
- if envVar.ValueFrom != nil && envVar.ValueFrom.SecretKeyRef != nil {
- if !visitor(envVar.ValueFrom.SecretKeyRef.Name) {
- return false
- }
- }
- }
- return true
- }
- func VisitPodConfigmapNames(pod *v1.Pod, visitor Visitor) bool {
- VisitContainers(&pod.Spec, func(c *v1.Container) bool {
- return visitContainerConfigmapNames(c, visitor)
- })
- var source *v1.VolumeSource
- for i := range pod.Spec.Volumes {
- source = &pod.Spec.Volumes[i].VolumeSource
- switch {
- case source.Projected != nil:
- for j := range source.Projected.Sources {
- if source.Projected.Sources[j].ConfigMap != nil {
- if !visitor(source.Projected.Sources[j].ConfigMap.Name) {
- return false
- }
- }
- }
- case source.ConfigMap != nil:
- if !visitor(source.ConfigMap.Name) {
- return false
- }
- }
- }
- return true
- }
- func visitContainerConfigmapNames(container *v1.Container, visitor Visitor) bool {
- for _, env := range container.EnvFrom {
- if env.ConfigMapRef != nil {
- if !visitor(env.ConfigMapRef.Name) {
- return false
- }
- }
- }
- for _, envVar := range container.Env {
- if envVar.ValueFrom != nil && envVar.ValueFrom.ConfigMapKeyRef != nil {
- if !visitor(envVar.ValueFrom.ConfigMapKeyRef.Name) {
- return false
- }
- }
- }
- return true
- }
- func GetContainerStatus(statuses []v1.ContainerStatus, name string) (v1.ContainerStatus, bool) {
- for i := range statuses {
- if statuses[i].Name == name {
- return statuses[i], true
- }
- }
- return v1.ContainerStatus{}, false
- }
- func GetExistingContainerStatus(statuses []v1.ContainerStatus, name string) v1.ContainerStatus {
- status, _ := GetContainerStatus(statuses, name)
- return status
- }
- func IsPodAvailable(pod *v1.Pod, minReadySeconds int32, now metav1.Time) bool {
- if !IsPodReady(pod) {
- return false
- }
- c := GetPodReadyCondition(pod.Status)
- minReadySecondsDuration := time.Duration(minReadySeconds) * time.Second
- if minReadySeconds == 0 || !c.LastTransitionTime.IsZero() && c.LastTransitionTime.Add(minReadySecondsDuration).Before(now.Time) {
- return true
- }
- return false
- }
- func IsPodReady(pod *v1.Pod) bool {
- return IsPodReadyConditionTrue(pod.Status)
- }
- func IsPodReadyConditionTrue(status v1.PodStatus) bool {
- condition := GetPodReadyCondition(status)
- return condition != nil && condition.Status == v1.ConditionTrue
- }
- func GetPodReadyCondition(status v1.PodStatus) *v1.PodCondition {
- _, condition := GetPodCondition(&status, v1.PodReady)
- return condition
- }
- func GetPodCondition(status *v1.PodStatus, conditionType v1.PodConditionType) (int, *v1.PodCondition) {
- if status == nil {
- return -1, nil
- }
- return GetPodConditionFromList(status.Conditions, conditionType)
- }
- func GetPodConditionFromList(conditions []v1.PodCondition, conditionType v1.PodConditionType) (int, *v1.PodCondition) {
- if conditions == nil {
- return -1, nil
- }
- for i := range conditions {
- if conditions[i].Type == conditionType {
- return i, &conditions[i]
- }
- }
- return -1, nil
- }
- func UpdatePodCondition(status *v1.PodStatus, condition *v1.PodCondition) bool {
- condition.LastTransitionTime = metav1.Now()
-
- conditionIndex, oldCondition := GetPodCondition(status, condition.Type)
- if oldCondition == nil {
-
- status.Conditions = append(status.Conditions, *condition)
- return true
- }
-
- if condition.Status == oldCondition.Status {
- condition.LastTransitionTime = oldCondition.LastTransitionTime
- }
- isEqual := condition.Status == oldCondition.Status &&
- condition.Reason == oldCondition.Reason &&
- condition.Message == oldCondition.Message &&
- condition.LastProbeTime.Equal(&oldCondition.LastProbeTime) &&
- condition.LastTransitionTime.Equal(&oldCondition.LastTransitionTime)
- status.Conditions[conditionIndex] = *condition
-
- return !isEqual
- }
- func GetPodPriority(pod *v1.Pod) int32 {
- if pod.Spec.Priority != nil {
- return *pod.Spec.Priority
- }
-
-
-
- return 0
- }
|