
IsLikelyNotMountPoint determines if a directory is not a mountpoint. It is fast but not necessarily ALWAYS correct. If the path is in fact a bind mount from one part of a mount to another it will not be detected. mkdir /tmp/a /tmp/b; mount --bin /tmp/a /tmp/b; IsLikelyNotMountPoint("/tmp/b") will return true. When in fact /tmp/b is a mount point. So this patch renames the function and switches it from a positive to a negative (I could think of a good positive name). This should make future users of this function aware that it isn't quite perfect, but probably good enough.
312 lines
8.5 KiB
Go
312 lines
8.5 KiB
Go
/*
|
|
Copyright 2014 The Kubernetes Authors All rights reserved.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package nfs
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
|
|
"k8s.io/kubernetes/pkg/api"
|
|
"k8s.io/kubernetes/pkg/types"
|
|
"k8s.io/kubernetes/pkg/util"
|
|
"k8s.io/kubernetes/pkg/util/mount"
|
|
"k8s.io/kubernetes/pkg/volume"
|
|
|
|
"github.com/golang/glog"
|
|
)
|
|
|
|
// This is the primary entrypoint for volume plugins.
|
|
// Tests covering recycling should not use this func but instead
|
|
// use their own array of plugins w/ a custom recyclerFunc as appropriate
|
|
func ProbeVolumePlugins() []volume.VolumePlugin {
|
|
return []volume.VolumePlugin{&nfsPlugin{nil, newRecycler}}
|
|
}
|
|
|
|
type nfsPlugin struct {
|
|
host volume.VolumeHost
|
|
// decouple creating recyclers by deferring to a function. Allows for easier testing.
|
|
newRecyclerFunc func(spec *volume.Spec, host volume.VolumeHost) (volume.Recycler, error)
|
|
}
|
|
|
|
var _ volume.VolumePlugin = &nfsPlugin{}
|
|
var _ volume.PersistentVolumePlugin = &nfsPlugin{}
|
|
var _ volume.RecyclableVolumePlugin = &nfsPlugin{}
|
|
|
|
const (
|
|
nfsPluginName = "kubernetes.io/nfs"
|
|
)
|
|
|
|
func (plugin *nfsPlugin) Init(host volume.VolumeHost) {
|
|
plugin.host = host
|
|
}
|
|
|
|
func (plugin *nfsPlugin) Name() string {
|
|
return nfsPluginName
|
|
}
|
|
|
|
func (plugin *nfsPlugin) CanSupport(spec *volume.Spec) bool {
|
|
return spec.VolumeSource.NFS != nil || spec.PersistentVolumeSource.NFS != nil
|
|
}
|
|
|
|
func (plugin *nfsPlugin) GetAccessModes() []api.PersistentVolumeAccessMode {
|
|
return []api.PersistentVolumeAccessMode{
|
|
api.ReadWriteOnce,
|
|
api.ReadOnlyMany,
|
|
api.ReadWriteMany,
|
|
}
|
|
}
|
|
|
|
func (plugin *nfsPlugin) NewBuilder(spec *volume.Spec, pod *api.Pod, _ volume.VolumeOptions, mounter mount.Interface) (volume.Builder, error) {
|
|
return plugin.newBuilderInternal(spec, pod, mounter)
|
|
}
|
|
|
|
func (plugin *nfsPlugin) newBuilderInternal(spec *volume.Spec, pod *api.Pod, mounter mount.Interface) (volume.Builder, error) {
|
|
var source *api.NFSVolumeSource
|
|
var readOnly bool
|
|
if spec.VolumeSource.NFS != nil {
|
|
source = spec.VolumeSource.NFS
|
|
readOnly = spec.VolumeSource.NFS.ReadOnly
|
|
} else {
|
|
source = spec.PersistentVolumeSource.NFS
|
|
readOnly = spec.ReadOnly
|
|
}
|
|
return &nfsBuilder{
|
|
nfs: &nfs{
|
|
volName: spec.Name,
|
|
mounter: mounter,
|
|
pod: pod,
|
|
plugin: plugin,
|
|
},
|
|
server: source.Server,
|
|
exportPath: source.Path,
|
|
readOnly: readOnly,
|
|
}, nil
|
|
}
|
|
|
|
func (plugin *nfsPlugin) NewCleaner(volName string, podUID types.UID, mounter mount.Interface) (volume.Cleaner, error) {
|
|
return plugin.newCleanerInternal(volName, podUID, mounter)
|
|
}
|
|
|
|
func (plugin *nfsPlugin) newCleanerInternal(volName string, podUID types.UID, mounter mount.Interface) (volume.Cleaner, error) {
|
|
return &nfsCleaner{&nfs{
|
|
volName: volName,
|
|
mounter: mounter,
|
|
pod: &api.Pod{ObjectMeta: api.ObjectMeta{UID: podUID}},
|
|
plugin: plugin,
|
|
}}, nil
|
|
}
|
|
|
|
func (plugin *nfsPlugin) NewRecycler(spec *volume.Spec) (volume.Recycler, error) {
|
|
return plugin.newRecyclerFunc(spec, plugin.host)
|
|
}
|
|
|
|
// NFS volumes represent a bare host file or directory mount of an NFS export.
|
|
type nfs struct {
|
|
volName string
|
|
pod *api.Pod
|
|
mounter mount.Interface
|
|
plugin *nfsPlugin
|
|
// decouple creating recyclers by deferring to a function. Allows for easier testing.
|
|
newRecyclerFunc func(spec *volume.Spec, host volume.VolumeHost) (volume.Recycler, error)
|
|
}
|
|
|
|
func (nfsVolume *nfs) GetPath() string {
|
|
name := nfsPluginName
|
|
return nfsVolume.plugin.host.GetPodVolumeDir(nfsVolume.pod.UID, util.EscapeQualifiedNameForDisk(name), nfsVolume.volName)
|
|
}
|
|
|
|
type nfsBuilder struct {
|
|
*nfs
|
|
server string
|
|
exportPath string
|
|
readOnly bool
|
|
}
|
|
|
|
var _ volume.Builder = &nfsBuilder{}
|
|
|
|
// SetUp attaches the disk and bind mounts to the volume path.
|
|
func (b *nfsBuilder) SetUp() error {
|
|
return b.SetUpAt(b.GetPath())
|
|
}
|
|
|
|
func (b *nfsBuilder) SetUpAt(dir string) error {
|
|
notMnt, err := b.mounter.IsLikelyNotMountPoint(dir)
|
|
glog.V(4).Infof("NFS mount set up: %s %v %v", dir, !notMnt, err)
|
|
if err != nil && !os.IsNotExist(err) {
|
|
return err
|
|
}
|
|
if !notMnt {
|
|
return nil
|
|
}
|
|
os.MkdirAll(dir, 0750)
|
|
source := fmt.Sprintf("%s:%s", b.server, b.exportPath)
|
|
options := []string{}
|
|
if b.readOnly {
|
|
options = append(options, "ro")
|
|
}
|
|
err = b.mounter.Mount(source, dir, "nfs", options)
|
|
if err != nil {
|
|
notMnt, mntErr := b.mounter.IsLikelyNotMountPoint(dir)
|
|
if mntErr != nil {
|
|
glog.Errorf("IsLikelyNotMountPoint check failed: %v", mntErr)
|
|
return err
|
|
}
|
|
if !notMnt {
|
|
if mntErr = b.mounter.Unmount(dir); mntErr != nil {
|
|
glog.Errorf("Failed to unmount: %v", mntErr)
|
|
return err
|
|
}
|
|
notMnt, mntErr := b.mounter.IsLikelyNotMountPoint(dir)
|
|
if mntErr != nil {
|
|
glog.Errorf("IsLikelyNotMountPoint check failed: %v", mntErr)
|
|
return err
|
|
}
|
|
if !notMnt {
|
|
// This is very odd, we don't expect it. We'll try again next sync loop.
|
|
glog.Errorf("%s is still mounted, despite call to unmount(). Will try again next sync loop.", dir)
|
|
return err
|
|
}
|
|
}
|
|
os.Remove(dir)
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (b *nfsBuilder) IsReadOnly() bool {
|
|
return b.readOnly
|
|
}
|
|
|
|
//
|
|
//func (c *nfsCleaner) GetPath() string {
|
|
// name := nfsPluginName
|
|
// return c.plugin.host.GetPodVolumeDir(c.pod.UID, util.EscapeQualifiedNameForDisk(name), c.volName)
|
|
//}
|
|
|
|
var _ volume.Cleaner = &nfsCleaner{}
|
|
|
|
type nfsCleaner struct {
|
|
*nfs
|
|
}
|
|
|
|
func (c *nfsCleaner) TearDown() error {
|
|
return c.TearDownAt(c.GetPath())
|
|
}
|
|
|
|
func (c *nfsCleaner) TearDownAt(dir string) error {
|
|
notMnt, err := c.mounter.IsLikelyNotMountPoint(dir)
|
|
if err != nil {
|
|
glog.Errorf("Error checking IsLikelyNotMountPoint: %v", err)
|
|
return err
|
|
}
|
|
if notMnt {
|
|
return os.Remove(dir)
|
|
}
|
|
|
|
if err := c.mounter.Unmount(dir); err != nil {
|
|
glog.Errorf("Unmounting failed: %v", err)
|
|
return err
|
|
}
|
|
notMnt, mntErr := c.mounter.IsLikelyNotMountPoint(dir)
|
|
if mntErr != nil {
|
|
glog.Errorf("IsLikelyNotMountPoint check failed: %v", mntErr)
|
|
return mntErr
|
|
}
|
|
if notMnt {
|
|
if err := os.Remove(dir); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func newRecycler(spec *volume.Spec, host volume.VolumeHost) (volume.Recycler, error) {
|
|
if spec.PersistentVolumeSource.NFS == nil {
|
|
return nil, fmt.Errorf("spec.PersistentVolumeSource.NFS is nil")
|
|
}
|
|
return &nfsRecycler{
|
|
name: spec.Name,
|
|
server: spec.PersistentVolumeSource.NFS.Server,
|
|
path: spec.PersistentVolumeSource.NFS.Path,
|
|
host: host,
|
|
}, nil
|
|
}
|
|
|
|
// nfsRecycler scrubs an NFS volume by running "rm -rf" on the volume in a pod.
|
|
type nfsRecycler struct {
|
|
name string
|
|
server string
|
|
path string
|
|
host volume.VolumeHost
|
|
}
|
|
|
|
func (r *nfsRecycler) GetPath() string {
|
|
return r.path
|
|
}
|
|
|
|
// Recycler provides methods to reclaim the volume resource.
|
|
// A NFS volume is recycled by scheduling a pod to run "rm -rf" on the contents of the volume.
|
|
// Recycle blocks until the pod has completed or any error occurs.
|
|
// The scrubber pod's is expected to succeed within 5 minutes else an error will be returned
|
|
func (r *nfsRecycler) Recycle() error {
|
|
timeout := int64(300) // 5 minutes
|
|
pod := &api.Pod{
|
|
ObjectMeta: api.ObjectMeta{
|
|
GenerateName: "pv-scrubber-" + util.ShortenString(r.name, 44) + "-",
|
|
Namespace: api.NamespaceDefault,
|
|
},
|
|
Spec: api.PodSpec{
|
|
ActiveDeadlineSeconds: &timeout,
|
|
RestartPolicy: api.RestartPolicyNever,
|
|
Volumes: []api.Volume{
|
|
{
|
|
Name: "vol",
|
|
VolumeSource: api.VolumeSource{
|
|
NFS: &api.NFSVolumeSource{
|
|
Server: r.server,
|
|
Path: r.path,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
Containers: []api.Container{
|
|
{
|
|
Name: "scrubber",
|
|
Image: "gcr.io/google_containers/busybox",
|
|
// delete the contents of the volume, but not the directory itself
|
|
Command: []string{"/bin/sh"},
|
|
// the scrubber:
|
|
// 1. validates the /scrub directory exists
|
|
// 2. creates a text file to be scrubbed
|
|
// 3. performs rm -rf on the directory
|
|
// 4. tests to see if the directory is empty
|
|
// the pod fails if the error code is returned
|
|
Args: []string{"-c", "test -e /scrub && echo $(date) > /scrub/trash.txt && rm -rf /scrub/* && test -z \"$(ls -A /scrub)\" || exit 1"},
|
|
VolumeMounts: []api.VolumeMount{
|
|
{
|
|
Name: "vol",
|
|
MountPath: "/scrub",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
return volume.ScrubPodVolumeAndWatchUntilCompletion(pod, r.host.GetKubeClient())
|
|
}
|