714daa643e
fix: Use BearerTokenFile instead of BearerToken in BuildKubeconfigFromRestConfig Signed-off-by: yuefanxiao <591649725@qq.com>
95 lines
2.4 KiB
Go
95 lines
2.4 KiB
Go
/*
|
|
* Copyright 2024 the KubeSphere Authors.
|
|
* Please refer to the LICENSE file in the root directory of the project.
|
|
* https://github.com/kubesphere/kubesphere/blob/master/LICENSE
|
|
*/
|
|
|
|
package utils
|
|
|
|
import (
|
|
"os"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
"k8s.io/client-go/rest"
|
|
"k8s.io/client-go/tools/clientcmd"
|
|
"k8s.io/client-go/tools/clientcmd/api"
|
|
|
|
clusterv1alpha1 "kubesphere.io/api/cluster/v1alpha1"
|
|
)
|
|
|
|
func IsClusterReady(cluster *clusterv1alpha1.Cluster) bool {
|
|
for _, condition := range cluster.Status.Conditions {
|
|
if condition.Type == clusterv1alpha1.ClusterReady && condition.Status == corev1.ConditionTrue {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func IsClusterSchedulable(cluster *clusterv1alpha1.Cluster) bool {
|
|
if !cluster.DeletionTimestamp.IsZero() {
|
|
return false
|
|
}
|
|
|
|
if !IsClusterReady(cluster) {
|
|
return false
|
|
}
|
|
|
|
for _, condition := range cluster.Status.Conditions {
|
|
if condition.Type == clusterv1alpha1.ClusterSchedulable && condition.Status == corev1.ConditionFalse {
|
|
return false
|
|
}
|
|
}
|
|
return true
|
|
}
|
|
|
|
func IsHostCluster(cluster *clusterv1alpha1.Cluster) bool {
|
|
if _, ok := cluster.Labels[clusterv1alpha1.HostCluster]; ok {
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
|
|
func BuildKubeconfigFromRestConfig(config *rest.Config) ([]byte, error) {
|
|
apiConfig := api.NewConfig()
|
|
|
|
apiCluster := &api.Cluster{
|
|
Server: config.Host,
|
|
CertificateAuthorityData: config.CAData,
|
|
}
|
|
|
|
// generated kubeconfig will be used by cluster federation, CAFile is not
|
|
// accepted by kubefed, so we need read CAFile
|
|
if len(apiCluster.CertificateAuthorityData) == 0 && len(config.CAFile) != 0 {
|
|
caData, err := os.ReadFile(config.CAFile)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
apiCluster.CertificateAuthorityData = caData
|
|
}
|
|
|
|
apiConfig.Clusters["kubernetes"] = apiCluster
|
|
|
|
apiConfig.AuthInfos["kubernetes-admin"] = &api.AuthInfo{
|
|
ClientCertificateData: config.CertData,
|
|
ClientKeyData: config.KeyData,
|
|
Token: config.BearerToken,
|
|
}
|
|
|
|
if config.BearerTokenFile != "" {
|
|
newToken, _ := os.ReadFile(config.BearerTokenFile)
|
|
if len(newToken) > 0 {
|
|
apiConfig.AuthInfos["kubernetes-admin"].Token = string(newToken)
|
|
}
|
|
}
|
|
|
|
apiConfig.Contexts["kubernetes-admin@kubernetes"] = &api.Context{
|
|
Cluster: "kubernetes",
|
|
AuthInfo: "kubernetes-admin",
|
|
}
|
|
|
|
apiConfig.CurrentContext = "kubernetes-admin@kubernetes"
|
|
|
|
return clientcmd.Write(*apiConfig)
|
|
}
|