Skip to content

Commit

Permalink
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: add clusterlink-proxy deploy yaml file and remote-debug shell
Browse files Browse the repository at this point in the history
Signed-off-by: chengjin <chengjin_yewu@cmss.chinamobile.com>
JimDevil committed Jan 24, 2025
1 parent 4a350c5 commit a29937f
Showing 5 changed files with 348 additions and 91 deletions.
169 changes: 169 additions & 0 deletions deploy/clusterlink-proxy.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,169 @@
---
apiVersion: v1
kind: Service
metadata:
name: clusterlink-proxy
namespace: kosmos-system
spec:
ports:
- port: 443
name: tls
protocol: TCP
targetPort: 443
- name: pprof
port: 6060
protocol: TCP
targetPort: 6060
type: NodePort
selector:
apiserver: "true"
app: clusterlink-proxy
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: clusterlink-proxy
apiserver: "true"
name: clusterlink-proxy
namespace: kosmos-system
spec:
replicas: 1
selector:
matchLabels:
app: clusterlink-proxy
apiserver: "true"
template:
metadata:
labels:
app: clusterlink-proxy
apiserver: "true"
spec:
serviceAccountName: apiserver
containers:
- name: clusterlink-proxy
command:
- /bin/clusterlink-proxy
- --enable-pprof=true
image: ghcr.io/kosmos-io/clusterlink-proxy:__VERSION__
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 2
memory: "4Gi"
limits:
cpu: 2
memory: "4Gi"
livenessProbe:
failureThreshold: 3
httpGet:
path: /livez
port: 443
scheme: HTTPS
initialDelaySeconds: 15
periodSeconds: 15
successThreshold: 1
timeoutSeconds: 5
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
terminationGracePeriodSeconds: 30
---
apiVersion: apiregistration.k8s.io/v1
kind: APIService
metadata:
labels:
app: clusterlink-proxy
name: v1alpha1.proxy.kosmos.io
spec:
insecureSkipTLSVerify: true
group: proxy.kosmos.io
groupPriorityMinimum: 2000
service:
name: clusterlink-proxy
namespace: kosmos-system
port: 443
version: v1alpha1
versionPriority: 10
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: apiserver
namespace: kosmos-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: clusterlink-proxy-clusterrole
rules:
- apiGroups:
- "*"
resources:
- "*"
verbs:
- "*"
- nonResourceURLs:
- "*"
verbs:
- "*"
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: clusterlink-proxy-clusterrolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: clusterlink-proxy-clusterrole
subjects:
- kind: ServiceAccount
name: apiserver
namespace: kosmos-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: clusterlink-proxy-auth-reader
namespace: kube-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
name: apiserver
namespace: kosmos-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: kosmos-system:auth-delegator
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:auth-delegator
subjects:
- kind: ServiceAccount
name: apiserver
namespace: kosmos-system
---
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
name: clusterlink-proxy-hpa
namespace: kosmos-system
spec:
scaleTargetRef:
apiVersion: apps/v1
kind: Deployment
name: clusterlink-proxy
minReplicas: 1
maxReplicas: 10
metrics:
- type: Resource
resource:
name: memory
target:
type: Utilization
averageUtilization: 85
153 changes: 153 additions & 0 deletions deploy/crds/kosmos.io_resourcecaches.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,153 @@
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.14.0
name: resourcecaches.kosmos.io
spec:
group: kosmos.io
names:
kind: ResourceCache
listKind: ResourceCacheList
plural: resourcecaches
singular: resourcecache
scope: Namespaced
versions:
- name: v1alpha1
schema:
openAPIV3Schema:
description: ResourceCache represents the configuration of the cache resource
properties:
apiVersion:
description: |-
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
description: |-
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
spec:
description: ResourceCacheSpec defines the desired state of ResourceCache
properties:
resourceSelectors:
description:
ResourceSelectors specifies the resources type that should
be cached by cache system.
items:
description:
ResourceSelector specifies the resources type and its
scope.
properties:
apiVersion:
description:
APIVersion represents the API version of the target
resources.
type: string
kind:
description: Kind represents the kind of the target resources.
type: string
namespace:
description: |-
Namespace of the target resource.
Default is empty, which means all namespaces.
items:
type: string
type: array
required:
- apiVersion
- kind
type: object
type: array
required:
- resourceSelectors
type: object
status:
description: ResourceCacheStatus defines the observed state of ResourceCache
properties:
conditions:
description: Conditions contain the different condition statuses.
items:
description:
"Condition contains details for one aspect of the current
state of this API Resource.\n---\nThis struct is intended for
direct use as an array at the field path .status.conditions. For
example,\n\n\n\ttype FooStatus struct{\n\t // Represents the
observations of a foo's current state.\n\t // Known .status.conditions.type
are: \"Available\", \"Progressing\", and \"Degraded\"\n\t //
+patchMergeKey=type\n\t // +patchStrategy=merge\n\t // +listType=map\n\t
\ // +listMapKey=type\n\t Conditions []metav1.Condition `json:\"conditions,omitempty\"
patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t
\ // other fields\n\t}"
properties:
lastTransitionTime:
description: |-
lastTransitionTime is the last time the condition transitioned from one status to another.
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
description: |-
message is a human readable message indicating details about the transition.
This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
description: |-
observedGeneration represents the .metadata.generation that the condition was set based upon.
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
description: |-
reason contains a programmatic identifier indicating the reason for the condition's last transition.
Producers of specific condition types may define expected values and meanings for this field,
and whether the values are considered a guaranteed API.
The value should be a CamelCase string.
This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
type: string
status:
description: status of the condition, one of True, False, Unknown.
enum:
- "True"
- "False"
- Unknown
type: string
type:
description: |-
type of condition in CamelCase or in foo.example.com/CamelCase.
---
Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be
useful (see .node.status.conditions), the ability to deconflict is important.
The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
required:
- lastTransitionTime
- message
- reason
- status
- type
type: object
type: array
type: object
type: object
served: true
storage: true
subresources:
status: {}
88 changes: 0 additions & 88 deletions go.sum

Large diffs are not rendered by default.

5 changes: 5 additions & 0 deletions hack/proxy-remote-debug.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
# nocalhost remote debug shell for clusterlink/proxy
export G0111MODULE=on;
export GOPROXY='https://goproxy.cn,direct';
export GOSUMDB=off;
dlv --headless --log --listen :9009 --api-version 2 --accept-multiclient debug /home/nocalhost-dev/cmd/clusterlink/proxy/main.go -- --enable-pprof=true
24 changes: 21 additions & 3 deletions hack/update-codegen.sh
Original file line number Diff line number Diff line change
@@ -45,6 +45,13 @@ deepcopy-gen \
--output-package="pkg/apis/kosmos/v1alpha1,pkg/apis/config,pkg/apis/config/v1" \
--output-file-base=zz_generated.deepcopy

deepcopy-gen \
--go-header-file hack/boilerplate/boilerplate.go.txt \
--input-dirs="github.com/kosmos.io/kosmos/pkg/apis/proxy" \
--output-base="${REPO_ROOT}" \
--output-package="pkg/apis/proxy" \
--output-file-base=zz_generated.deepcopy

echo "Generating with register-gen"
GO111MODULE=on go install k8s.io/code-generator/cmd/register-gen
register-gen \
@@ -62,13 +69,19 @@ conversion-gen \
--output-base="${REPO_ROOT}" \
--output-package="github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1,pkg/apis/config/v1" \
--output-file-base=zz_generated.conversion
conversion-gen \
--go-header-file hack/boilerplate/boilerplate.go.txt \
--input-dirs="github.com/kosmos.io/kosmos/pkg/apis/proxy/v1alpha1" \
--output-base="${REPO_ROOT}" \
--output-package="github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1,pkg/apis/config/v1" \
--output-file-base=zz_generated.conversion

echo "Generating with client-gen"
GO111MODULE=on go install k8s.io/code-generator/cmd/client-gen
client-gen \
--go-header-file hack/boilerplate/boilerplate.go.txt \
--input-base="" \
--input=github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1,sigs.k8s.io/mcs-api/pkg/apis/v1alpha1 \
--input=github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1,sigs.k8s.io/mcs-api/pkg/apis/v1alpha1,github.com/kosmos.io/kosmos/pkg/apis/proxy/v1alpha1 \
--output-base="${REPO_ROOT}" \
--output-package=github.com/kosmos.io/kosmos/pkg/generated/clientset \
--clientset-name=versioned
@@ -89,12 +102,17 @@ lister-gen \
--input-dirs=github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1,sigs.k8s.io/mcs-api/pkg/apis/v1alpha1 \
--output-base="${REPO_ROOT}" \
--output-package=github.com/kosmos.io/kosmos/pkg/generated/listers
lister-gen \
--go-header-file hack/boilerplate/boilerplate.go.txt \
--input-dirs=github.com/kosmos.io/kosmos/pkg/apis/proxy/v1alpha1 \
--output-base="${REPO_ROOT}" \
--output-package=github.com/kosmos.io/kosmos/pkg/generated/listers

echo "Generating with informer-gen"
GO111MODULE=on go install k8s.io/code-generator/cmd/informer-gen
informer-gen \
--go-header-file hack/boilerplate/boilerplate.go.txt \
--input-dirs=github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1,sigs.k8s.io/mcs-api/pkg/apis/v1alpha1 \
--input-dirs=github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1,sigs.k8s.io/mcs-api/pkg/apis/v1alpha1,github.com/kosmos.io/kosmos/pkg/apis/proxy/v1alpha1 \
--versioned-clientset-package=github.com/kosmos.io/kosmos/pkg/generated/clientset/versioned \
--listers-package=github.com/kosmos.io/kosmos/pkg/generated/listers \
--output-base="${REPO_ROOT}" \
@@ -112,7 +130,7 @@ echo "Generating with openapi-gen"
GO111MODULE=on go install k8s.io/code-generator/cmd/openapi-gen
openapi-gen \
--go-header-file hack/boilerplate/boilerplate.go.txt \
--input-dirs "github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1" \
--input-dirs "github.com/kosmos.io/kosmos/pkg/apis/kosmos/v1alpha1,github.com/kosmos.io/kosmos/pkg/apis/proxy/v1alpha1" \
--input-dirs "k8s.io/apimachinery/pkg/apis/meta/v1,k8s.io/apimachinery/pkg/runtime,k8s.io/apimachinery/pkg/version" \
--output-base="${REPO_ROOT}" \
--output-package "github.com/kosmos.io/kosmos/pkg/generated/openapi" \

0 comments on commit a29937f

Please sign in to comment.