client-go for accessing CRD

[mchirico]

client-go for accessing CRD

Recommended Method <<---

fake.go

kubernetes/sample-controller

https://github.com/kubernetes/client-go/blob/master/examples/create-update-delete-deployment/main.go

https://www.martin-helmich.de/en/blog/kubernetes-crd-client.html

More Resources

Slack

Possible

https://www.openshift.com/blog/kubernetes-deep-dive-code-generation-customresources

[tacomonkautobot[bot]]

mchirico, Thanks for opening this issue!

[mchirico]

/*
Copyright 2018 The Kubernetes Authors.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package controller

import (
    "context"
    "fmt"
    "time"

    "github.com/go-logr/logr"
    "k8s.io/client-go/util/workqueue"
    "sigs.k8s.io/controller-runtime/pkg/handler"
    "sigs.k8s.io/controller-runtime/pkg/internal/controller"
    "sigs.k8s.io/controller-runtime/pkg/manager"
    "sigs.k8s.io/controller-runtime/pkg/predicate"
    "sigs.k8s.io/controller-runtime/pkg/ratelimiter"
    "sigs.k8s.io/controller-runtime/pkg/reconcile"
    "sigs.k8s.io/controller-runtime/pkg/source"
)

// Options are the arguments for creating a new Controller
type Options struct {
    // MaxConcurrentReconciles is the maximum number of concurrent Reconciles which can be run. Defaults to 1.
    MaxConcurrentReconciles int

    // Reconciler reconciles an object
    Reconciler reconcile.Reconciler

    // RateLimiter is used to limit how frequently requests may be queued.
    // Defaults to MaxOfRateLimiter which has both overall and per-item rate limiting.
    // The overall is a token bucket and the per-item is exponential.
    RateLimiter ratelimiter.RateLimiter

    // Log is the logger used for this controller and passed to each reconciliation
    // request via the context field.
    Log logr.Logger

    // CacheSyncTimeout refers to the time limit set to wait for syncing caches.
    // Defaults to 2 minutes if not set.
    CacheSyncTimeout time.Duration
}

// Controller implements a Kubernetes API.  A Controller manages a work queue fed reconcile.Requests
// from source.Sources.  Work is performed through the reconcile.Reconciler for each enqueued item.
// Work typically is reads and writes Kubernetes objects to make the system state match the state specified
// in the object Spec.
type Controller interface {
    // Reconciler is called to reconcile an object by Namespace/Name
    reconcile.Reconciler

    // Watch takes events provided by a Source and uses the EventHandler to
    // enqueue reconcile.Requests in response to the events.
    //
    // Watch may be provided one or more Predicates to filter events before
    // they are given to the EventHandler.  Events will be passed to the
    // EventHandler if all provided Predicates evaluate to true.
    Watch(src source.Source, eventhandler handler.EventHandler, predicates ...predicate.Predicate) error

    // Start starts the controller.  Start blocks until the context is closed or a
    // controller has an error starting.
    Start(ctx context.Context) error

    // GetLogger returns this controller logger prefilled with basic information.
    GetLogger() logr.Logger
}

// New returns a new Controller registered with the Manager.  The Manager will ensure that shared Caches have
// been synced before the Controller is Started.
func New(name string, mgr manager.Manager, options Options) (Controller, error) {
    c, err := NewUnmanaged(name, mgr, options)
    if err != nil {
        return nil, err
    }

    // Add the controller as a Manager components
    return c, mgr.Add(c)
}

// NewUnmanaged returns a new controller without adding it to the manager. The
// caller is responsible for starting the returned controller.
func NewUnmanaged(name string, mgr manager.Manager, options Options) (Controller, error) {
    if options.Reconciler == nil {
        return nil, fmt.Errorf("must specify Reconciler")
    }

    if len(name) == 0 {
        return nil, fmt.Errorf("must specify Name for Controller")
    }

    if options.Log == nil {
        options.Log = mgr.GetLogger()
    }

    if options.MaxConcurrentReconciles <= 0 {
        options.MaxConcurrentReconciles = 1
    }

    if options.CacheSyncTimeout == 0 {
        options.CacheSyncTimeout = 2 * time.Minute
    }

    if options.RateLimiter == nil {
        options.RateLimiter = workqueue.DefaultControllerRateLimiter()
    }

    // Inject dependencies into Reconciler
    if err := mgr.SetFields(options.Reconciler); err != nil {
        return nil, err
    }

    // Create controller with dependencies set
    return &controller.Controller{
        Do: options.Reconciler,
        MakeQueue: func() workqueue.RateLimitingInterface {
            return workqueue.NewNamedRateLimitingQueue(options.RateLimiter, name)
        },
        MaxConcurrentReconciles: options.MaxConcurrentReconciles,
        CacheSyncTimeout:        options.CacheSyncTimeout,
        SetFields:               mgr.SetFields,
        Name:                    name,
        Log:                     options.Log.WithName("controller").WithName(name),
    }, nil
}

[mchirico]

Reference:... https://github.com/kubernetes-sigs/controller-runtime/tree/master/examples

[mchirico]

https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/

[mchirico]

k get events --field-selector involvedObject.name=environment-sample

[mchirico]

Cluster API https://github.com/kubernetes-sigs/cluster-api/blob/cf0b6d77851651840600b940ae8dee4c4c165bf0/controllers/cluster_controller.go#L82

[mchirico]

root@ubuntu:/proc# cd /var/run/secrets/kubernetes.io/serviceaccount/
root@ubuntu:/var/run/secrets/kubernetes.io/serviceaccount# ls
ca.crt  namespace  token
root@ubuntu:/var/run/secrets/kubernetes.io/serviceaccount#