157 lines
3.7 KiB
Go
157 lines
3.7 KiB
Go
/*
|
|
Copyright 2018 the Heptio Ark contributors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package install
|
|
|
|
import (
|
|
"strings"
|
|
|
|
appsv1beta1 "k8s.io/api/apps/v1beta1"
|
|
corev1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
)
|
|
|
|
type podTemplateOption func(*podTemplateConfig)
|
|
|
|
type podTemplateConfig struct {
|
|
image string
|
|
withoutCredentialsVolume bool
|
|
envVars []corev1.EnvVar
|
|
}
|
|
|
|
func WithImage(image string) podTemplateOption {
|
|
return func(c *podTemplateConfig) {
|
|
c.image = image
|
|
}
|
|
}
|
|
|
|
func WithoutCredentialsVolume() podTemplateOption {
|
|
return func(c *podTemplateConfig) {
|
|
c.withoutCredentialsVolume = true
|
|
}
|
|
}
|
|
|
|
func WithEnvFromSecretKey(varName, secret, key string) podTemplateOption {
|
|
return func(c *podTemplateConfig) {
|
|
c.envVars = append(c.envVars, corev1.EnvVar{
|
|
Name: varName,
|
|
ValueFrom: &corev1.EnvVarSource{
|
|
SecretKeyRef: &corev1.SecretKeySelector{
|
|
LocalObjectReference: corev1.LocalObjectReference{
|
|
Name: secret,
|
|
},
|
|
Key: key,
|
|
},
|
|
},
|
|
})
|
|
}
|
|
}
|
|
|
|
func Deployment(namespace string, opts ...podTemplateOption) *appsv1beta1.Deployment {
|
|
c := &podTemplateConfig{
|
|
image: "gcr.io/heptio-images/ark:latest",
|
|
}
|
|
|
|
for _, opt := range opts {
|
|
opt(c)
|
|
}
|
|
|
|
pullPolicy := corev1.PullAlways
|
|
imageParts := strings.Split(c.image, ":")
|
|
if len(imageParts) == 2 && imageParts[1] != "latest" {
|
|
pullPolicy = corev1.PullIfNotPresent
|
|
|
|
}
|
|
|
|
deployment := &appsv1beta1.Deployment{
|
|
ObjectMeta: objectMeta(namespace, "ark"),
|
|
Spec: appsv1beta1.DeploymentSpec{
|
|
Template: corev1.PodTemplateSpec{
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Labels: labels(),
|
|
Annotations: podAnnotations(),
|
|
},
|
|
Spec: corev1.PodSpec{
|
|
RestartPolicy: corev1.RestartPolicyAlways,
|
|
ServiceAccountName: "ark",
|
|
Containers: []corev1.Container{
|
|
{
|
|
Name: "ark",
|
|
Image: c.image,
|
|
Ports: containerPorts(),
|
|
ImagePullPolicy: pullPolicy,
|
|
Command: []string{
|
|
"/ark",
|
|
},
|
|
Args: []string{
|
|
"server",
|
|
},
|
|
VolumeMounts: []corev1.VolumeMount{
|
|
{
|
|
Name: "plugins",
|
|
MountPath: "/plugins",
|
|
},
|
|
},
|
|
Env: []corev1.EnvVar{
|
|
{
|
|
Name: "GOOGLE_APPLICATION_CREDENTIALS",
|
|
Value: "/credentials/cloud",
|
|
},
|
|
{
|
|
Name: "AWS_SHARED_CREDENTIALS_FILE",
|
|
Value: "/credentials/cloud",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
Volumes: []corev1.Volume{
|
|
{
|
|
Name: "plugins",
|
|
VolumeSource: corev1.VolumeSource{
|
|
EmptyDir: &corev1.EmptyDirVolumeSource{},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
if !c.withoutCredentialsVolume {
|
|
deployment.Spec.Template.Spec.Volumes = append(
|
|
deployment.Spec.Template.Spec.Volumes,
|
|
corev1.Volume{
|
|
Name: "cloud-credentials",
|
|
VolumeSource: corev1.VolumeSource{
|
|
Secret: &corev1.SecretVolumeSource{
|
|
SecretName: "cloud-credentials",
|
|
},
|
|
},
|
|
},
|
|
)
|
|
|
|
deployment.Spec.Template.Spec.Containers[0].VolumeMounts = append(
|
|
deployment.Spec.Template.Spec.Containers[0].VolumeMounts,
|
|
corev1.VolumeMount{
|
|
Name: "cloud-credentials",
|
|
MountPath: "/credentials",
|
|
},
|
|
)
|
|
}
|
|
|
|
return deployment
|
|
}
|