/* Copyright 2016 The Kubernetes Authors. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ package cmd import ( "fmt" "io" "github.com/lithammer/dedent" "github.com/spf13/cobra" flag "github.com/spf13/pflag" "k8s.io/apimachinery/pkg/util/sets" clientset "k8s.io/client-go/kubernetes" "k8s.io/klog" kubeadmapi "k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm" kubeadmapiv1beta2 "k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1beta2" "k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/validation" "k8s.io/kubernetes/cmd/kubeadm/app/cmd/options" phases "k8s.io/kubernetes/cmd/kubeadm/app/cmd/phases/reset" "k8s.io/kubernetes/cmd/kubeadm/app/cmd/phases/workflow" cmdutil "k8s.io/kubernetes/cmd/kubeadm/app/cmd/util" kubeadmconstants "k8s.io/kubernetes/cmd/kubeadm/app/constants" kubeadmutil "k8s.io/kubernetes/cmd/kubeadm/app/util" configutil "k8s.io/kubernetes/cmd/kubeadm/app/util/config" utilruntime "k8s.io/kubernetes/cmd/kubeadm/app/util/runtime" ) var ( iptablesCleanupInstructions = dedent.Dedent(` The reset process does not reset or clean up iptables rules or IPVS tables. If you wish to reset iptables, you must do so manually by using the "iptables" command. If your cluster was setup to utilize IPVS, run ipvsadm --clear (or similar) to reset your system's IPVS tables. The reset process does not clean your kubeconfig files and you must remove them manually. Please, check the contents of the $HOME/.kube/config file. `) ) // resetOptions defines all the options exposed via flags by kubeadm reset. type resetOptions struct { certificatesDir string criSocketPath string forceReset bool ignorePreflightErrors []string kubeconfigPath string } // resetData defines all the runtime information used when running the kubeadm reset workflow; // this data is shared across all the phases that are included in the workflow. type resetData struct { certificatesDir string client clientset.Interface criSocketPath string forceReset bool ignorePreflightErrors sets.String inputReader io.Reader outputWriter io.Writer cfg *kubeadmapi.InitConfiguration dirsToClean []string } // newResetOptions returns a struct ready for being used for creating cmd join flags. func newResetOptions() *resetOptions { return &resetOptions{ certificatesDir: kubeadmapiv1beta2.DefaultCertificatesDir, forceReset: false, kubeconfigPath: kubeadmconstants.GetAdminKubeConfigPath(), } } // newResetData returns a new resetData struct to be used for the execution of the kubeadm reset workflow. func newResetData(cmd *cobra.Command, options *resetOptions, in io.Reader, out io.Writer) (*resetData, error) { var cfg *kubeadmapi.InitConfiguration client, err := getClientset(options.kubeconfigPath, false) if err == nil { klog.V(1).Infof("[reset] Loaded client set from kubeconfig file: %s", options.kubeconfigPath) cfg, err = configutil.FetchInitConfigurationFromCluster(client, out, "reset", false) if err != nil { klog.Warningf("[reset] Unable to fetch the kubeadm-config ConfigMap from cluster: %v", err) } } else { klog.V(1).Infof("[reset] Could not obtain a client set from the kubeconfig file: %s", options.kubeconfigPath) } ignorePreflightErrorsSet, err := validation.ValidateIgnorePreflightErrors(options.ignorePreflightErrors, ignorePreflightErrors(cfg)) if err != nil { return nil, err } kubeadmutil.CheckErr(err) if cfg != nil { // Also set the union of pre-flight errors to InitConfiguration, to provide a consistent view of the runtime configuration: cfg.NodeRegistration.IgnorePreflightErrors = ignorePreflightErrorsSet.List() } var criSocketPath string if options.criSocketPath == "" { criSocketPath, err = resetDetectCRISocket(cfg) if err != nil { return nil, err } klog.V(1).Infof("[reset] Detected and using CRI socket: %s", criSocketPath) } else { criSocketPath = options.criSocketPath klog.V(1).Infof("[reset] Using specified CRI socket: %s", criSocketPath) } return &resetData{ certificatesDir: options.certificatesDir, client: client, criSocketPath: criSocketPath, forceReset: options.forceReset, ignorePreflightErrors: ignorePreflightErrorsSet, inputReader: in, outputWriter: out, cfg: cfg, }, nil } func ignorePreflightErrors(cfg *kubeadmapi.InitConfiguration) []string { if cfg == nil { return []string{} } return cfg.NodeRegistration.IgnorePreflightErrors } // AddResetFlags adds reset flags func AddResetFlags(flagSet *flag.FlagSet, resetOptions *resetOptions) { flagSet.StringVar( &resetOptions.certificatesDir, options.CertificatesDir, resetOptions.certificatesDir, `The path to the directory where the certificates are stored. If specified, clean this directory.`, ) flagSet.BoolVarP( &resetOptions.forceReset, options.ForceReset, "f", false, "Reset the node without prompting for confirmation.", ) options.AddKubeConfigFlag(flagSet, &resetOptions.kubeconfigPath) options.AddIgnorePreflightErrorsFlag(flagSet, &resetOptions.ignorePreflightErrors) cmdutil.AddCRISocketFlag(flagSet, &resetOptions.criSocketPath) } // NewCmdReset returns the "kubeadm reset" command func NewCmdReset(in io.Reader, out io.Writer, resetOptions *resetOptions) *cobra.Command { if resetOptions == nil { resetOptions = newResetOptions() } resetRunner := workflow.NewRunner() cmd := &cobra.Command{ Use: "reset", Short: "Run this to revert any changes made to this host by 'kubeadm init' or 'kubeadm join'", Run: func(cmd *cobra.Command, args []string) { c, err := resetRunner.InitData(args) kubeadmutil.CheckErr(err) err = resetRunner.Run(args) kubeadmutil.CheckErr(err) // Then clean contents from the stateful kubelet, etcd and cni directories data := c.(*resetData) cleanDirs(data) // Output help text instructing user how to remove iptables rules fmt.Print(iptablesCleanupInstructions) }, } AddResetFlags(cmd.Flags(), resetOptions) // initialize the workflow runner with the list of phases resetRunner.AppendPhase(phases.NewPreflightPhase()) resetRunner.AppendPhase(phases.NewUpdateClusterStatus()) resetRunner.AppendPhase(phases.NewRemoveETCDMemberPhase()) resetRunner.AppendPhase(phases.NewCleanupNodePhase()) // sets the data builder function, that will be used by the runner // both when running the entire workflow or single phases resetRunner.SetDataInitializer(func(cmd *cobra.Command, args []string) (workflow.RunData, error) { return newResetData(cmd, resetOptions, in, out) }) // binds the Runner to kubeadm init command by altering // command help, adding --skip-phases flag and by adding phases subcommands resetRunner.BindToCommand(cmd) return cmd } func cleanDirs(data *resetData) { fmt.Printf("[reset] Deleting contents of stateful directories: %v\n", data.dirsToClean) for _, dir := range data.dirsToClean { klog.V(1).Infof("[reset] Deleting content of %s", dir) phases.CleanDir(dir) } } // Cfg returns the InitConfiguration. func (r *resetData) Cfg() *kubeadmapi.InitConfiguration { return r.cfg } // CertificatesDir returns the CertificatesDir. func (r *resetData) CertificatesDir() string { return r.certificatesDir } // Client returns the Client for accessing the cluster. func (r *resetData) Client() clientset.Interface { return r.client } // ForceReset returns the forceReset flag. func (r *resetData) ForceReset() bool { return r.forceReset } // InputReader returns the io.reader used to read messages. func (r *resetData) InputReader() io.Reader { return r.inputReader } // IgnorePreflightErrors returns the list of preflight errors to ignore. func (r *resetData) IgnorePreflightErrors() sets.String { return r.ignorePreflightErrors } // AddDirsToClean add a list of dirs to the list of dirs that will be removed. func (r *resetData) AddDirsToClean(dirs ...string) { r.dirsToClean = append(r.dirsToClean, dirs...) } // CRISocketPath returns the criSocketPath. func (r *resetData) CRISocketPath() string { return r.criSocketPath } func resetDetectCRISocket(cfg *kubeadmapi.InitConfiguration) (string, error) { if cfg != nil { // first try to get the CRI socket from the cluster configuration return cfg.NodeRegistration.CRISocket, nil } // if this fails, try to detect it return utilruntime.DetectCRISocket() }