mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-02-24 17:00:21 -05:00
3691defce7
* Reduce external dependencies of kubecmd package * Add kubecmd wrapper to constellation-lib * Update CLI code to use constellation-lib * Move kubecmd package to subpackage of constellation-lib * Initialise helm and kubecmd clients when kubeConfig is set --------- Signed-off-by: Daniel Weiße <dw@edgeless.systems>
90 lines
3.3 KiB
Go
90 lines
3.3 KiB
Go
/*
|
|
Copyright (c) Edgeless Systems GmbH
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
|
|
package constellation
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
|
|
"github.com/edgelesssys/constellation/v2/internal/attestation/variant"
|
|
"github.com/edgelesssys/constellation/v2/internal/config"
|
|
"github.com/edgelesssys/constellation/v2/internal/file"
|
|
"github.com/edgelesssys/constellation/v2/internal/semver"
|
|
"github.com/edgelesssys/constellation/v2/internal/versions"
|
|
apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
|
|
)
|
|
|
|
var errKubecmdNotInitialised = errors.New("kubernetes client not initialized")
|
|
|
|
// ExtendClusterConfigCertSANs extends the ClusterConfig stored under "kube-system/kubeadm-config" with the given SANs.
|
|
func (a *Applier) ExtendClusterConfigCertSANs(ctx context.Context, clusterEndpoint, customEndpoint string, additionalAPIServerCertSANs []string) error {
|
|
if a.kubecmdClient == nil {
|
|
return errKubecmdNotInitialised
|
|
}
|
|
|
|
sans := append([]string{clusterEndpoint, customEndpoint}, additionalAPIServerCertSANs...)
|
|
if err := a.kubecmdClient.ExtendClusterConfigCertSANs(ctx, sans); err != nil {
|
|
return fmt.Errorf("extending cert SANs: %w", err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// GetClusterAttestationConfig returns the attestation config currently set for the cluster.
|
|
func (a *Applier) GetClusterAttestationConfig(ctx context.Context, variant variant.Variant) (config.AttestationCfg, error) {
|
|
if a.kubecmdClient == nil {
|
|
return nil, errKubecmdNotInitialised
|
|
}
|
|
|
|
return a.kubecmdClient.GetClusterAttestationConfig(ctx, variant)
|
|
}
|
|
|
|
// ApplyJoinConfig creates or updates the Constellation cluster's join-config ConfigMap.
|
|
func (a *Applier) ApplyJoinConfig(ctx context.Context, newAttestConfig config.AttestationCfg, measurementSalt []byte) error {
|
|
if a.kubecmdClient == nil {
|
|
return errKubecmdNotInitialised
|
|
}
|
|
|
|
return a.kubecmdClient.ApplyJoinConfig(ctx, newAttestConfig, measurementSalt)
|
|
}
|
|
|
|
// UpgradeNodeImage upgrades the node image of the cluster to the given version.
|
|
func (a *Applier) UpgradeNodeImage(ctx context.Context, imageVersion semver.Semver, imageReference string, force bool) error {
|
|
if a.kubecmdClient == nil {
|
|
return errKubecmdNotInitialised
|
|
}
|
|
|
|
return a.kubecmdClient.UpgradeNodeImage(ctx, imageVersion, imageReference, force)
|
|
}
|
|
|
|
// UpgradeKubernetesVersion upgrades the Kubernetes version of the cluster to the given version.
|
|
func (a *Applier) UpgradeKubernetesVersion(ctx context.Context, kubernetesVersion versions.ValidK8sVersion, force bool) error {
|
|
if a.kubecmdClient == nil {
|
|
return errKubecmdNotInitialised
|
|
}
|
|
|
|
return a.kubecmdClient.UpgradeKubernetesVersion(ctx, kubernetesVersion, force)
|
|
}
|
|
|
|
// BackupCRDs backs up all CRDs to the upgrade workspace.
|
|
func (a *Applier) BackupCRDs(ctx context.Context, fileHandler file.Handler, upgradeDir string) ([]apiextensionsv1.CustomResourceDefinition, error) {
|
|
if a.kubecmdClient == nil {
|
|
return nil, errKubecmdNotInitialised
|
|
}
|
|
|
|
return a.kubecmdClient.BackupCRDs(ctx, fileHandler, upgradeDir)
|
|
}
|
|
|
|
// BackupCRs backs up all CRs to the upgrade workspace.
|
|
func (a *Applier) BackupCRs(ctx context.Context, fileHandler file.Handler, crds []apiextensionsv1.CustomResourceDefinition, upgradeDir string) error {
|
|
if a.kubecmdClient == nil {
|
|
return errKubecmdNotInitialised
|
|
}
|
|
|
|
return a.kubecmdClient.BackupCRs(ctx, fileHandler, crds, upgradeDir)
|
|
}
|