mirror of
https://github.com/kubenetworks/kubevpn.git
synced 2025-10-01 05:32:25 +08:00
76 lines
2.3 KiB
Go
76 lines
2.3 KiB
Go
package webhook
|
|
|
|
import (
|
|
"context"
|
|
"crypto/tls"
|
|
"fmt"
|
|
"net/http"
|
|
"os"
|
|
|
|
"golang.org/x/net/http2"
|
|
"golang.org/x/net/http2/h2c"
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/grpc/admin"
|
|
"google.golang.org/grpc/health"
|
|
"google.golang.org/grpc/health/grpc_health_v1"
|
|
"google.golang.org/grpc/reflection"
|
|
"k8s.io/kubectl/pkg/cmd/util"
|
|
|
|
"github.com/wencaiwulue/kubevpn/v2/pkg/config"
|
|
"github.com/wencaiwulue/kubevpn/v2/pkg/daemon"
|
|
"github.com/wencaiwulue/kubevpn/v2/pkg/dhcp"
|
|
"github.com/wencaiwulue/kubevpn/v2/pkg/dhcp/rpc"
|
|
plog "github.com/wencaiwulue/kubevpn/v2/pkg/log"
|
|
putil "github.com/wencaiwulue/kubevpn/v2/pkg/util"
|
|
)
|
|
|
|
func Main(f util.Factory) error {
|
|
clientset, err := f.KubernetesClientSet()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
ns := os.Getenv(config.EnvPodNamespace)
|
|
h := &admissionReviewHandler{f: f, clientset: clientset, ns: ns}
|
|
http.HandleFunc("/pods", func(w http.ResponseWriter, r *http.Request) {
|
|
serve(w, r, newDelegateToV1AdmitHandler(h.admitPods))
|
|
})
|
|
http.HandleFunc("/readyz", func(w http.ResponseWriter, req *http.Request) {
|
|
_, _ = w.Write([]byte("ok"))
|
|
})
|
|
|
|
tlsConfig, err := putil.GetTlsServerConfig(nil)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to load tls certificate: %v", err)
|
|
}
|
|
|
|
grpcServer := grpc.NewServer()
|
|
cleanup, err := admin.Register(grpcServer)
|
|
if err != nil {
|
|
plog.G(context.Background()).Errorf("Failed to register admin: %v", err)
|
|
return err
|
|
}
|
|
grpc_health_v1.RegisterHealthServer(grpcServer, health.NewServer())
|
|
defer cleanup()
|
|
reflection.Register(grpcServer)
|
|
http.DefaultTransport.(*http.Transport).MaxIdleConnsPerHost = 100
|
|
// startup a http server
|
|
// With downgrading-capable gRPC server, which can also handle HTTP.
|
|
downgradingServer := &http.Server{
|
|
Addr: fmt.Sprintf(":%d", 80),
|
|
TLSConfig: &tls.Config{Certificates: tlsConfig.Certificates},
|
|
}
|
|
defer downgradingServer.Close()
|
|
var h2Server http2.Server
|
|
err = http2.ConfigureServer(downgradingServer, &h2Server)
|
|
if err != nil {
|
|
plog.G(context.Background()).Errorf("Failed to configure http2 server: %v", err)
|
|
return err
|
|
}
|
|
handler := daemon.CreateDowngradingHandler(grpcServer, http.HandlerFunc(http.DefaultServeMux.ServeHTTP))
|
|
downgradingServer.Handler = h2c.NewHandler(handler, &h2Server)
|
|
defer downgradingServer.Close()
|
|
rpc.RegisterDHCPServer(grpcServer, dhcp.NewServer(clientset))
|
|
return downgradingServer.ListenAndServeTLS("", "")
|
|
}
|