eff9f360f7
This switches from the ansible/dhall operator framework to kopf, an operator framework written in pure Python. This allows us to: * Build the operator application as a Python app. * Build the operator image using the opendev python builder images. * Run the operator as a Python CLI program "zuul-operator". * Write procedural Python code to handle operator tasks (such as creating new nodepool launchers when providers are added). * Use Jinja for templating config files and k8s resource files (direct pythonic manipulation of resources is an option too). The new CR nearly matches the existing one, with some minor differences. Some missing features and documentation are added in the commits immediately following; they should be reviewed and merged as a unit. Also, fx waiting for scheduler to settle in functional test since we changed this log line in Zuul. Change-Id: Ib37b67e3444b7cd44692d48eee77775ee9049e9f Change-Id: I70ec31ecd8fe264118215944022b2e7b513dced9
62 lines
2.0 KiB
Python
62 lines
2.0 KiB
Python
# Copyright 2021 Acme Gating, LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import time
|
|
import base64
|
|
|
|
import pykube
|
|
|
|
from . import objects
|
|
from . import utils
|
|
|
|
|
|
class CertManager:
|
|
def __init__(self, api, namespace, logger):
|
|
self.api = api
|
|
self.namespace = namespace
|
|
self.log = logger
|
|
|
|
def is_installed(self):
|
|
kind = objects.get_object('apiextensions.k8s.io/v1beta1',
|
|
'CustomResourceDefinition')
|
|
try:
|
|
obj = kind.objects(self.api).\
|
|
get(name="certificaterequests.cert-manager.io")
|
|
except pykube.exceptions.ObjectDoesNotExist:
|
|
return False
|
|
return True
|
|
|
|
def install(self):
|
|
utils.apply_file(self.api, 'cert-manager.yaml', _adopt=False)
|
|
|
|
def create_ca(self):
|
|
utils.apply_file(self.api, 'cert-authority.yaml',
|
|
namespace=self.namespace)
|
|
|
|
def wait_for_webhook(self):
|
|
while True:
|
|
count = 0
|
|
for obj in objects.Pod.objects(self.api).filter(
|
|
namespace='cert-manager',
|
|
selector={'app.kubernetes.io/component': 'webhook',
|
|
'app.kubernetes.io/instance': 'cert-manager'}):
|
|
if obj.obj['status']['phase'] == 'Running':
|
|
count += 1
|
|
if count > 0:
|
|
self.log.info("Cert-manager is running")
|
|
return
|
|
else:
|
|
self.log.info(f"Waiting for Cert-manager")
|
|
time.sleep(10)
|