controllers/packagebundlecontroller_controller.go

// Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package controllers

import (
	"context"
	"fmt"
	"time"

	"github.com/go-logr/logr"
	"k8s.io/apimachinery/pkg/runtime"
	ctrl "sigs.k8s.io/controller-runtime"
	"sigs.k8s.io/controller-runtime/pkg/client"

	api "github.com/aws/eks-anywhere-packages/api/v1alpha1"
	"github.com/aws/eks-anywhere-packages/pkg/artifacts"
	"github.com/aws/eks-anywhere-packages/pkg/authenticator"
	"github.com/aws/eks-anywhere-packages/pkg/bundle"
	"github.com/aws/eks-anywhere-packages/pkg/config"
	"github.com/aws/eks-anywhere-packages/pkg/registry"
)

//go:generate mockgen -destination=mocks/client.go -package=mocks sigs.k8s.io/controller-runtime/pkg/client Client,StatusWriter
//go:generate mockgen -destination=mocks/manager.go -package=mocks sigs.k8s.io/controller-runtime/pkg/manager Manager

const (
	DefaultUpgradeCheckInterval          = time.Hour * 24
	packageBundleControllerName          = "PackageBundleController"
	webhookInitializationRequeueInterval = 10 * time.Second
)

// PackageBundleControllerReconciler reconciles a PackageBundleController object
type PackageBundleControllerReconciler struct {
	client.Client
	Scheme        *runtime.Scheme
	bundleManager bundle.Manager
	Log           logr.Logger
	// webhookInitialized allows for faster requeues when the webhook isn't
	// yet online.
	webhookInitialized bool
	certInjector       *registry.CertInjector
}

func NewPackageBundleControllerReconciler(
	client client.Client,
	scheme *runtime.Scheme,
	bundleManager bundle.Manager,
	certInjector *registry.CertInjector,
	log logr.Logger,
) *PackageBundleControllerReconciler {
	return &PackageBundleControllerReconciler{
		Client:        client,
		Scheme:        scheme,
		bundleManager: bundleManager,
		certInjector:  certInjector,
		Log:           log,
	}
}

func RegisterPackageBundleControllerReconciler(mgr ctrl.Manager) error {
	log := ctrl.Log.WithName(packageBundleControllerName)

	bundleClient := bundle.NewManagerClient(mgr.GetClient())
	tcc := authenticator.NewTargetClusterClient(log, mgr.GetConfig(), mgr.GetClient())
	puller := artifacts.NewRegistryPuller(log)
	registryClient := bundle.NewRegistryClient(puller)
	bm := bundle.NewBundleManager(log, registryClient, bundleClient, tcc, config.GetGlobalConfig())
	ci := registry.NewCertInjector(mgr.GetClient(), log)
	reconciler := NewPackageBundleControllerReconciler(mgr.GetClient(),
		mgr.GetScheme(), bm, ci, log)
	return ctrl.NewControllerManagedBy(mgr).
		For(&api.PackageBundleController{}).
		Complete(reconciler)
}

//+kubebuilder:rbac:groups=packages.eks.amazonaws.com,resources=packagebundlecontrollers,verbs=get;list;watch;create;update;patch;delete
//+kubebuilder:rbac:groups=packages.eks.amazonaws.com,resources=packagebundlecontrollers/status,verbs=get;update;patch
//+kubebuilder:rbac:groups=packages.eks.amazonaws.com,resources=packagebundlecontrollers/finalizers,verbs=update

// Reconcile is part of the main kubernetes reconciliation loop which aims to
// move the current state of the cluster closer to the desired state.
// the PackageBundleController object against the actual cluster state, and then
// perform operations to make the cluster state reflect the state specified by
// the user.
//
// For more details, check Reconcile and its Result here:
// - https://pkg.go.dev/sigs.k8s.io/controller-runtime@v0.8.3/pkg/reconcile
func (r *PackageBundleControllerReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
	r.Log.V(6).Info("Reconcile:", "PackageBundleController", req.NamespacedName)

	result := ctrl.Result{
		Requeue:      true,
		RequeueAfter: DefaultUpgradeCheckInterval,
	}

	pbc := &api.PackageBundleController{}
	err := r.Client.Get(ctx, req.NamespacedName, pbc)
	if err != nil {
		if client.IgnoreNotFound(err) != nil {
			return result, fmt.Errorf("retrieving package bundle controller: %s", err)
		}
		r.Log.Info("Bundle controller deleted (ignoring)", "bundle controller", req.NamespacedName)
		return withoutRequeue(result), nil
	}
	if pbc.Spec.UpgradeCheckInterval.Duration > 0 {
		result.RequeueAfter = pbc.Spec.UpgradeCheckInterval.Duration
	}

	if pbc.IsIgnored() {
		if pbc.Status.State != api.BundleControllerStateIgnored {
			pbc.Status.State = api.BundleControllerStateIgnored
			r.Log.V(6).Info("update", "PackageBundleController", pbc.Name, "state", pbc.Status.State)
			err = r.Client.Status().Update(ctx, pbc, &client.SubResourceUpdateOptions{})
			if err != nil {
				r.Log.Error(err, "updating ignored status")
				return withoutRequeue(result), nil
			}
		}
		return withoutRequeue(result), nil
	}

	if !pbc.IsDefaultRegistryDefault() {
		if err := r.certInjector.UpdateIfNeeded(ctx, pbc.Name); err != nil {
			return result, fmt.Errorf("ensuring registry CA cert updated: %v", err)
		}
	}

	err = r.bundleManager.ProcessBundleController(ctx, pbc)
	if err != nil {
		if !r.webhookInitialized {
			r.Log.Info("delaying reconciliation until webhook is initialized")
			result.RequeueAfter = webhookInitializationRequeueInterval
			return result, nil
		}
		r.Log.Error(err, "processing bundle controller")
		if pbc.Spec.UpgradeCheckShortInterval.Duration > 0 {
			result.RequeueAfter = pbc.Spec.UpgradeCheckShortInterval.Duration
		}
		return result, nil
	}

	r.webhookInitialized = true

	r.Log.V(6).Info("Reconciled:", "PackageBundleController", req.NamespacedName)
	return result, nil
}

// SetupWithManager sets up the controller with the Manager.
func (r *PackageBundleControllerReconciler) SetupWithManager(mgr ctrl.Manager) error {
	return ctrl.NewControllerManagedBy(mgr).
		For(&api.PackageBundleController{}).
		Complete(r)
}

func withoutRequeue(result ctrl.Result) ctrl.Result {
	result.Requeue = false
	return result
}