04b787b946
Means we can run in newly announced regions without a code change. We don't register the ECR provider in new regions, so we will still need a code change for now. This also means we do trust config / instance metadata, and don't reject incorrectly configured zones. Fix #35014
95 lines
2.4 KiB
Go
95 lines
2.4 KiB
Go
/*
|
|
Copyright 2016 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package aws
|
|
|
|
import (
|
|
"github.com/golang/glog"
|
|
"k8s.io/apimachinery/pkg/util/sets"
|
|
awscredentialprovider "k8s.io/kubernetes/pkg/credentialprovider/aws"
|
|
"sync"
|
|
)
|
|
|
|
// WellKnownRegions is the complete list of regions known to the AWS cloudprovider
|
|
// and credentialprovider.
|
|
var WellKnownRegions = [...]string{
|
|
// from `aws ec2 describe-regions --region us-east-1 --query Regions[].RegionName | sort`
|
|
"ap-northeast-1",
|
|
"ap-northeast-2",
|
|
"ap-south-1",
|
|
"ap-southeast-1",
|
|
"ap-southeast-2",
|
|
"ca-central-1",
|
|
"eu-central-1",
|
|
"eu-west-1",
|
|
"eu-west-2",
|
|
"sa-east-1",
|
|
"us-east-1",
|
|
"us-east-2",
|
|
"us-west-1",
|
|
"us-west-2",
|
|
|
|
// these are not registered in many / most accounts
|
|
"cn-north-1",
|
|
"us-gov-west-1",
|
|
}
|
|
|
|
// awsRegionsMutex protects awsRegions
|
|
var awsRegionsMutex sync.Mutex
|
|
|
|
// awsRegions is a set of recognized regions
|
|
var awsRegions sets.String
|
|
|
|
// RecognizeRegion is called for each AWS region we know about.
|
|
// It currently registers a credential provider for that region.
|
|
// There are two paths to discovering a region:
|
|
// * we hard-code some well-known regions
|
|
// * if a region is discovered from instance metadata, we add that
|
|
func RecognizeRegion(region string) {
|
|
awsRegionsMutex.Lock()
|
|
defer awsRegionsMutex.Unlock()
|
|
|
|
if awsRegions == nil {
|
|
awsRegions = sets.NewString()
|
|
}
|
|
|
|
if awsRegions.Has(region) {
|
|
glog.V(6).Infof("found AWS region %q again - ignoring", region)
|
|
return
|
|
}
|
|
|
|
glog.V(4).Infof("found AWS region %q", region)
|
|
|
|
awscredentialprovider.RegisterCredentialsProvider(region)
|
|
|
|
awsRegions.Insert(region)
|
|
}
|
|
|
|
// RecognizeWellKnownRegions calls RecognizeRegion on each WellKnownRegion
|
|
func RecognizeWellKnownRegions() {
|
|
for _, region := range WellKnownRegions {
|
|
RecognizeRegion(region)
|
|
}
|
|
}
|
|
|
|
// isRegionValid checks if the region is in the set of known regions
|
|
func isRegionValid(region string) bool {
|
|
awsRegionsMutex.Lock()
|
|
defer awsRegionsMutex.Unlock()
|
|
|
|
return awsRegions.Has(region)
|
|
}
|