Compare commits
3 Commits
b9963dcb16
...
fac9297b90
Author | SHA1 | Date | |
---|---|---|---|
fac9297b90 | |||
e37526ce17 | |||
80801ed4b3 |
|
@ -4,6 +4,7 @@ use kube::{Resource, ResourceExt};
|
|||
|
||||
use crate::lldap::LldapConfig;
|
||||
|
||||
#[derive(Clone)]
|
||||
pub struct Context {
|
||||
pub client: kube::Client,
|
||||
pub lldap_config: LldapConfig,
|
||||
|
|
|
@ -42,6 +42,7 @@ fn check_graphql_errors<T>(response: GraphQlResponse<T>) -> Result<T> {
|
|||
.expect("Data should be valid if there are no error"))
|
||||
}
|
||||
|
||||
#[derive(Clone)]
|
||||
pub struct LldapConfig {
|
||||
username: String,
|
||||
password: String,
|
||||
|
|
48
src/main.rs
48
src/main.rs
|
@ -3,30 +3,47 @@ use std::time::Duration;
|
|||
|
||||
use futures::StreamExt;
|
||||
use k8s_openapi::api::core::v1::Secret;
|
||||
use kube::runtime::Controller;
|
||||
use kube::runtime::controller::Action;
|
||||
use kube::{Api, Client as KubeClient};
|
||||
use kube::runtime::controller::{self, Action};
|
||||
use kube::runtime::reflector::ObjectRef;
|
||||
use kube::runtime::{Controller, watcher};
|
||||
use kube::{Api, Client as KubeClient, Resource};
|
||||
use lldap_controller::context::Context;
|
||||
use lldap_controller::lldap::LldapConfig;
|
||||
use lldap_controller::resources::{self, ServiceUser, reconcile};
|
||||
use lldap_controller::resources::{self, Error, Group, ServiceUser, reconcile};
|
||||
use tracing::{debug, info, warn};
|
||||
use tracing_subscriber::layer::SubscriberExt;
|
||||
use tracing_subscriber::util::SubscriberInitExt;
|
||||
use tracing_subscriber::{EnvFilter, Registry};
|
||||
|
||||
fn error_policy(_obj: Arc<ServiceUser>, err: &resources::Error, _ctx: Arc<Context>) -> Action {
|
||||
fn error_policy<T>(_obj: Arc<T>, err: &resources::Error, _ctx: Arc<Context>) -> Action {
|
||||
warn!("error: {}", err);
|
||||
Action::requeue(Duration::from_secs(5))
|
||||
}
|
||||
|
||||
async fn log_status<T>(
|
||||
res: Result<(ObjectRef<T>, Action), controller::Error<Error, watcher::Error>>,
|
||||
) where
|
||||
T: Resource,
|
||||
{
|
||||
match res {
|
||||
Ok(obj) => debug!("reconciled {:?}", obj.0.name),
|
||||
Err(err) => warn!("reconcile failed: {}", err),
|
||||
}
|
||||
}
|
||||
|
||||
#[tokio::main]
|
||||
async fn main() -> anyhow::Result<()> {
|
||||
let logger = tracing_subscriber::fmt::layer().json();
|
||||
let env_filter = EnvFilter::try_from_default_env()
|
||||
.or_else(|_| EnvFilter::try_new("info"))
|
||||
.expect("Fallback should be valid");
|
||||
|
||||
if std::env::var("CARGO").is_ok() {
|
||||
let logger = tracing_subscriber::fmt::layer().compact();
|
||||
Registry::default().with(logger).with(env_filter).init();
|
||||
} else {
|
||||
let logger = tracing_subscriber::fmt::layer().json();
|
||||
Registry::default().with(logger).with(env_filter).init();
|
||||
}
|
||||
|
||||
info!("Starting controller");
|
||||
|
||||
|
@ -41,17 +58,20 @@ async fn main() -> anyhow::Result<()> {
|
|||
let service_users = Api::<ServiceUser>::all(client.clone());
|
||||
let secrets = Api::<Secret>::all(client.clone());
|
||||
|
||||
Controller::new(service_users.clone(), Default::default())
|
||||
let service_user_controller = Controller::new(service_users, Default::default())
|
||||
.owns(secrets, Default::default())
|
||||
.shutdown_on_signal()
|
||||
.run(reconcile, error_policy, Arc::new(data.clone()))
|
||||
.for_each(log_status);
|
||||
|
||||
let groups = Api::<Group>::all(client.clone());
|
||||
|
||||
let group_controller = Controller::new(groups, Default::default())
|
||||
.shutdown_on_signal()
|
||||
.run(reconcile, error_policy, Arc::new(data))
|
||||
.for_each(|res| async move {
|
||||
match res {
|
||||
Ok(obj) => debug!("reconciled {:?}", obj.0.name),
|
||||
Err(err) => warn!("reconcile failed: {}", err),
|
||||
}
|
||||
})
|
||||
.await;
|
||||
.for_each(log_status);
|
||||
|
||||
tokio::join!(service_user_controller, group_controller);
|
||||
|
||||
Ok(())
|
||||
}
|
||||
|
|
5
yaml/group.yaml
Normal file
5
yaml/group.yaml
Normal file
|
@ -0,0 +1,5 @@
|
|||
apiVersion: lldap.huizinga.dev/v1
|
||||
kind: Group
|
||||
metadata:
|
||||
name: test-group
|
||||
spec: {}
|
|
@ -1,6 +1,5 @@
|
|||
apiVersion: lldap.huizinga.dev/v1
|
||||
kind: ServiceUser
|
||||
metadata:
|
||||
name: authelia
|
||||
spec:
|
||||
passwordManager: false
|
||||
name: test-user
|
||||
spec: {}
|
Loading…
Reference in New Issue
Block a user