This follows ideas presented in https://github.com/cert-manager/cert-manager/pull/5214 It might be nice to add these big timeouts globally to all controllers but we're intentionally keeping these changes small and targeted for now in order to minimise the risk when backporting these changes. Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
81 lines
2.4 KiB
Go
81 lines
2.4 KiB
Go
/*
|
|
Copyright 2020 The cert-manager Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package clusterissuers
|
|
|
|
import (
|
|
"context"
|
|
|
|
corev1 "k8s.io/api/core/v1"
|
|
apiequality "k8s.io/apimachinery/pkg/api/equality"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/util/errors"
|
|
|
|
"github.com/cert-manager/cert-manager/internal/controller/feature"
|
|
internalissuers "github.com/cert-manager/cert-manager/internal/controller/issuers"
|
|
cmapi "github.com/cert-manager/cert-manager/pkg/apis/certmanager/v1"
|
|
"github.com/cert-manager/cert-manager/pkg/controller/globals"
|
|
logf "github.com/cert-manager/cert-manager/pkg/logs"
|
|
utilfeature "github.com/cert-manager/cert-manager/pkg/util/feature"
|
|
)
|
|
|
|
const (
|
|
errorInitIssuer = "ErrInitIssuer"
|
|
|
|
messageErrorInitIssuer = "Error initializing issuer: "
|
|
)
|
|
|
|
func (c *controller) Sync(ctx context.Context, iss *cmapi.ClusterIssuer) (err error) {
|
|
log := logf.FromContext(ctx)
|
|
|
|
ctx, cancel := context.WithTimeout(ctx, globals.DefaultControllerContextTimeout)
|
|
defer cancel()
|
|
|
|
issuerCopy := iss.DeepCopy()
|
|
defer func() {
|
|
if saveErr := c.updateIssuerStatus(ctx, iss, issuerCopy); saveErr != nil {
|
|
err = errors.NewAggregate([]error{saveErr, err})
|
|
}
|
|
}()
|
|
|
|
i, err := c.issuerFactory.IssuerFor(issuerCopy)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
err = i.Setup(ctx)
|
|
if err != nil {
|
|
s := messageErrorInitIssuer + err.Error()
|
|
log.Error(err, "error setting up issuer")
|
|
c.recorder.Event(issuerCopy, corev1.EventTypeWarning, errorInitIssuer, s)
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (c *controller) updateIssuerStatus(ctx context.Context, old, new *cmapi.ClusterIssuer) error {
|
|
if apiequality.Semantic.DeepEqual(old.Status, new.Status) {
|
|
return nil
|
|
}
|
|
if utilfeature.DefaultFeatureGate.Enabled(feature.ServerSideApply) {
|
|
return internalissuers.ApplyClusterIssuerStatus(ctx, c.cmClient, c.fieldManager, new)
|
|
} else {
|
|
_, err := c.cmClient.CertmanagerV1().ClusterIssuers().UpdateStatus(ctx, new, metav1.UpdateOptions{})
|
|
return err
|
|
}
|
|
}
|