1b59dd887d
This commit is an initial pass at providing an admission API group. The API group is required by the webhook admission controller being developed as part of https://github.com/kubernetes/community/pull/132 and could be used more as that proposal comes to fruition.
166 lines
4.3 KiB
Bash
166 lines
4.3 KiB
Bash
#!/bin/bash
|
|
|
|
# Copyright 2014 The Kubernetes Authors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
set -o errexit
|
|
set -o nounset
|
|
set -o pipefail
|
|
|
|
# The root of the build/dist directory
|
|
KUBE_ROOT="$(cd "$(dirname "${BASH_SOURCE}")/../.." && pwd -P)"
|
|
|
|
KUBE_OUTPUT_SUBPATH="${KUBE_OUTPUT_SUBPATH:-_output/local}"
|
|
KUBE_OUTPUT="${KUBE_ROOT}/${KUBE_OUTPUT_SUBPATH}"
|
|
KUBE_OUTPUT_BINPATH="${KUBE_OUTPUT}/bin"
|
|
|
|
# This controls rsync compression. Set to a value > 0 to enable rsync
|
|
# compression for build container
|
|
KUBE_RSYNC_COMPRESS="${KUBE_RSYNC_COMPRESS:-0}"
|
|
|
|
# Set no_proxy for localhost if behind a proxy, otherwise,
|
|
# the connections to localhost in scripts will time out
|
|
export no_proxy=127.0.0.1,localhost
|
|
|
|
# This is a symlink to binaries for "this platform", e.g. build tools.
|
|
THIS_PLATFORM_BIN="${KUBE_ROOT}/_output/bin"
|
|
|
|
source "${KUBE_ROOT}/hack/lib/util.sh"
|
|
source "${KUBE_ROOT}/cluster/lib/logging.sh"
|
|
|
|
kube::log::install_errexit
|
|
|
|
source "${KUBE_ROOT}/hack/lib/version.sh"
|
|
source "${KUBE_ROOT}/hack/lib/golang.sh"
|
|
source "${KUBE_ROOT}/hack/lib/etcd.sh"
|
|
|
|
KUBE_OUTPUT_HOSTBIN="${KUBE_OUTPUT_BINPATH}/$(kube::util::host_platform)"
|
|
|
|
# list of all available group versions. This should be used when generated code
|
|
# or when starting an API server that you want to have everything.
|
|
# most preferred version for a group should appear first
|
|
KUBE_AVAILABLE_GROUP_VERSIONS="${KUBE_AVAILABLE_GROUP_VERSIONS:-\
|
|
v1 \
|
|
apps/v1beta1 \
|
|
authentication.k8s.io/v1 \
|
|
authentication.k8s.io/v1beta1 \
|
|
authorization.k8s.io/v1 \
|
|
authorization.k8s.io/v1beta1 \
|
|
autoscaling/v1 \
|
|
autoscaling/v2alpha1 \
|
|
batch/v1 \
|
|
batch/v2alpha1 \
|
|
certificates.k8s.io/v1beta1 \
|
|
extensions/v1beta1 \
|
|
imagepolicy.k8s.io/v1alpha1 \
|
|
policy/v1beta1 \
|
|
rbac.authorization.k8s.io/v1beta1 \
|
|
rbac.authorization.k8s.io/v1alpha1 \
|
|
settings.k8s.io/v1alpha1 \
|
|
storage.k8s.io/v1beta1 \
|
|
storage.k8s.io/v1\
|
|
}"
|
|
|
|
# not all group versions are exposed by the server. This list contains those
|
|
# which are not available so we don't generate clients or swagger for them
|
|
KUBE_NONSERVER_GROUP_VERSIONS="
|
|
abac.authorization.kubernetes.io/v0 \
|
|
abac.authorization.kubernetes.io/v1beta1 \
|
|
componentconfig/v1alpha1 \
|
|
imagepolicy.k8s.io/v1alpha1\
|
|
admission.k8s.io/v1alpha1\
|
|
"
|
|
|
|
# This emulates "readlink -f" which is not available on MacOS X.
|
|
# Test:
|
|
# T=/tmp/$$.$RANDOM
|
|
# mkdir $T
|
|
# touch $T/file
|
|
# mkdir $T/dir
|
|
# ln -s $T/file $T/linkfile
|
|
# ln -s $T/dir $T/linkdir
|
|
# function testone() {
|
|
# X=$(readlink -f $1 2>&1)
|
|
# Y=$(kube::readlinkdashf $1 2>&1)
|
|
# if [ "$X" != "$Y" ]; then
|
|
# echo readlinkdashf $1: expected "$X", got "$Y"
|
|
# fi
|
|
# }
|
|
# testone /
|
|
# testone /tmp
|
|
# testone $T
|
|
# testone $T/file
|
|
# testone $T/dir
|
|
# testone $T/linkfile
|
|
# testone $T/linkdir
|
|
# testone $T/nonexistant
|
|
# testone $T/linkdir/file
|
|
# testone $T/linkdir/dir
|
|
# testone $T/linkdir/linkfile
|
|
# testone $T/linkdir/linkdir
|
|
function kube::readlinkdashf {
|
|
# run in a subshell for simpler 'cd'
|
|
(
|
|
if [[ -d "$1" ]]; then # This also catch symlinks to dirs.
|
|
cd "$1"
|
|
pwd -P
|
|
else
|
|
cd $(dirname "$1")
|
|
local f
|
|
f=$(basename "$1")
|
|
if [[ -L "$f" ]]; then
|
|
readlink "$f"
|
|
else
|
|
echo "$(pwd -P)/${f}"
|
|
fi
|
|
fi
|
|
)
|
|
}
|
|
|
|
# This emulates "realpath" which is not available on MacOS X
|
|
# Test:
|
|
# T=/tmp/$$.$RANDOM
|
|
# mkdir $T
|
|
# touch $T/file
|
|
# mkdir $T/dir
|
|
# ln -s $T/file $T/linkfile
|
|
# ln -s $T/dir $T/linkdir
|
|
# function testone() {
|
|
# X=$(realpath $1 2>&1)
|
|
# Y=$(kube::realpath $1 2>&1)
|
|
# if [ "$X" != "$Y" ]; then
|
|
# echo realpath $1: expected "$X", got "$Y"
|
|
# fi
|
|
# }
|
|
# testone /
|
|
# testone /tmp
|
|
# testone $T
|
|
# testone $T/file
|
|
# testone $T/dir
|
|
# testone $T/linkfile
|
|
# testone $T/linkdir
|
|
# testone $T/nonexistant
|
|
# testone $T/linkdir/file
|
|
# testone $T/linkdir/dir
|
|
# testone $T/linkdir/linkfile
|
|
# testone $T/linkdir/linkdir
|
|
kube::realpath() {
|
|
if [[ ! -e "$1" ]]; then
|
|
echo "$1: No such file or directory" >&2
|
|
return 1
|
|
fi
|
|
kube::readlinkdashf "$1"
|
|
}
|
|
|