mirror of
https://github.com/woodpecker-ci/woodpecker.git
synced 2024-10-23 02:23:53 +00:00
b52b021acb
According to [the documentation](https://woodpecker-ci.org/docs/administration/backends/kubernetes#images-from-private-registries), per-organization and per-pipeline registries are currently unsupported for the Kubernetes backend. This patch implements this missing functionality by creating and deleting a matching secret for each pod with a matched registry, using the same name, labels, and annotations as the pod, and appending it to its `imagePullSecrets` list. This patch adds tests for the new functionality, and has been manually end-to-end-tested in KinD by using a private image hosted in the matching gitea instance. This will require updating the matching helm charts to add the create/delete permissions to the agent role, which **is already done**. close #2987
107 lines
2.7 KiB
Go
107 lines
2.7 KiB
Go
// Copyright 2023 Woodpecker Authors
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package utils
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/distribution/reference"
|
|
)
|
|
|
|
// trimImage returns the short image name without tag.
|
|
func trimImage(name string) string {
|
|
ref, err := reference.ParseAnyReference(name)
|
|
if err != nil {
|
|
return name
|
|
}
|
|
named, err := reference.ParseNamed(ref.String())
|
|
if err != nil {
|
|
return name
|
|
}
|
|
named = reference.TrimNamed(named)
|
|
return reference.FamiliarName(named)
|
|
}
|
|
|
|
// expandImage returns the fully qualified image name.
|
|
func expandImage(name string) string {
|
|
ref, err := reference.ParseAnyReference(name)
|
|
if err != nil {
|
|
return name
|
|
}
|
|
named, err := reference.ParseNamed(ref.String())
|
|
if err != nil {
|
|
return name
|
|
}
|
|
named = reference.TagNameOnly(named)
|
|
return named.String()
|
|
}
|
|
|
|
// MatchImage returns true if the image name matches
|
|
// an image in the list. Note the image tag is not used
|
|
// in the matching logic.
|
|
func MatchImage(from string, to ...string) bool {
|
|
from = trimImage(from)
|
|
for _, match := range to {
|
|
if from == trimImage(match) {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
// MatchImageDynamic check if image is in list based on list.
|
|
// If an list entry has a tag specified it only will match if both are the same, else the tag is ignored.
|
|
func MatchImageDynamic(from string, to ...string) bool {
|
|
fullFrom := expandImage(from)
|
|
trimFrom := trimImage(from)
|
|
for _, match := range to {
|
|
if imageHasTag(match) {
|
|
if fullFrom == expandImage(match) {
|
|
return true
|
|
}
|
|
} else {
|
|
if trimFrom == trimImage(match) {
|
|
return true
|
|
}
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func imageHasTag(name string) bool {
|
|
return strings.Contains(name, ":")
|
|
}
|
|
|
|
// ParseNamed parses an image as a reference to validate it then parses it as a named reference.
|
|
func ParseNamed(image string) (reference.Named, error) {
|
|
ref, err := reference.ParseAnyReference(image)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return reference.ParseNamed(ref.String())
|
|
}
|
|
|
|
// MatchHostname returns true if the image hostname
|
|
// matches the specified hostname.
|
|
func MatchHostname(image, hostname string) bool {
|
|
named, err := ParseNamed(image)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
if hostname == "index.docker.io" {
|
|
hostname = "docker.io"
|
|
}
|
|
return reference.Domain(named) == hostname
|
|
}
|