mirror of
https://github.com/kubenetworks/kubevpn.git
synced 2025-09-27 03:36:09 +08:00
76 lines
2.6 KiB
Go
76 lines
2.6 KiB
Go
package handler
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
apierrors "k8s.io/apimachinery/pkg/api/errors"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/util/errors"
|
|
"sigs.k8s.io/yaml"
|
|
|
|
"github.com/wencaiwulue/kubevpn/v2/pkg/config"
|
|
"github.com/wencaiwulue/kubevpn/v2/pkg/controlplane"
|
|
"github.com/wencaiwulue/kubevpn/v2/pkg/inject"
|
|
plog "github.com/wencaiwulue/kubevpn/v2/pkg/log"
|
|
"github.com/wencaiwulue/kubevpn/v2/pkg/util"
|
|
)
|
|
|
|
func (c *ConnectOptions) LeaveAllProxyResources(ctx context.Context) (err error) {
|
|
if c == nil || c.clientset == nil {
|
|
return
|
|
}
|
|
|
|
mapInterface := c.clientset.CoreV1().ConfigMaps(c.Namespace)
|
|
var cm *corev1.ConfigMap
|
|
cm, err = mapInterface.Get(ctx, config.ConfigMapPodTrafficManager, metav1.GetOptions{})
|
|
if err != nil && !apierrors.IsNotFound(err) {
|
|
return
|
|
}
|
|
if cm == nil || cm.Data == nil || len(cm.Data[config.KeyEnvoy]) == 0 {
|
|
plog.G(ctx).Infof("No proxy resources found")
|
|
return nil
|
|
}
|
|
var v = make([]*controlplane.Virtual, 0)
|
|
str := cm.Data[config.KeyEnvoy]
|
|
if err = yaml.Unmarshal([]byte(str), &v); err != nil {
|
|
plog.G(ctx).Errorf("Unmarshal envoy config error: %v", err)
|
|
return
|
|
}
|
|
v4, _ := c.GetLocalTunIP()
|
|
return c.LeaveResource(ctx, c.ProxyResources().ToResources(), v4)
|
|
}
|
|
|
|
func (c *ConnectOptions) LeaveResource(ctx context.Context, resources []Resources, v4 string) error {
|
|
var errs []error
|
|
for _, workload := range resources {
|
|
// deployments.apps.ry-server --> deployments.apps/ry-server
|
|
object, controller, err := util.GetTopOwnerObject(ctx, c.factory, workload.Namespace, workload.Workload)
|
|
if err != nil {
|
|
plog.G(ctx).Errorf("Failed to get unstructured object: %v", err)
|
|
errs = append(errs, err)
|
|
continue
|
|
}
|
|
nodeID := fmt.Sprintf("%s.%s", object.Mapping.Resource.GroupResource().String(), object.Name)
|
|
var empty bool
|
|
empty, err = inject.UnPatchContainer(ctx, nodeID, c.factory, c.clientset.CoreV1().ConfigMaps(c.Namespace), controller, func(isFargateMode bool, rule *controlplane.Rule) bool {
|
|
if isFargateMode {
|
|
return c.IsMe(workload.Namespace, util.ConvertWorkloadToUid(workload.Workload), rule.Headers)
|
|
}
|
|
return rule.LocalTunIPv4 == v4
|
|
})
|
|
if err != nil {
|
|
plog.G(ctx).Errorf("Failed to leave workload %s in namespace %s: %v", workload.Workload, workload.Namespace, err)
|
|
errs = append(errs, err)
|
|
continue
|
|
}
|
|
if empty && util.IsK8sService(object) {
|
|
err = inject.ModifyServiceTargetPort(ctx, c.clientset, workload.Namespace, object.Name, map[int32]int32{})
|
|
errs = append(errs, err)
|
|
}
|
|
c.LeavePortMap(workload.Namespace, workload.Workload)
|
|
}
|
|
return errors.NewAggregate(errs)
|
|
}
|