github.com/IBM-Blockchain/fabric-operator@v1.0.4/pkg/offering/k8s/orderer/override/ingress.go (about) 1 /* 2 * Copyright contributors to the Hyperledger Fabric Operator project 3 * 4 * SPDX-License-Identifier: Apache-2.0 5 * 6 * Licensed under the Apache License, Version 2.0 (the "License"); 7 * you may not use this file except in compliance with the License. 8 * You may obtain a copy of the License at: 9 * 10 * http://www.apache.org/licenses/LICENSE-2.0 11 * 12 * Unless required by applicable law or agreed to in writing, software 13 * distributed under the License is distributed on an "AS IS" BASIS, 14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 15 * See the License for the specific language governing permissions and 16 * limitations under the License. 17 */ 18 19 package override 20 21 import ( 22 current "github.com/IBM-Blockchain/fabric-operator/api/v1beta1" 23 "github.com/IBM-Blockchain/fabric-operator/pkg/manager/resources" 24 "github.com/IBM-Blockchain/fabric-operator/version" 25 networkingv1 "k8s.io/api/networking/v1" 26 v1 "k8s.io/apimachinery/pkg/apis/meta/v1" 27 ) 28 29 func (o *Override) Ingress(object v1.Object, ingress *networkingv1.Ingress, action resources.Action) error { 30 instance := object.(*current.IBPOrderer) 31 32 switch action { 33 case resources.Create: 34 return o.CreateIngress(instance, ingress) 35 case resources.Update: 36 return o.UpdateIngress(instance, ingress) 37 } 38 39 return nil 40 } 41 42 func (o *Override) CreateIngress(instance *current.IBPOrderer, ingress *networkingv1.Ingress) error { 43 return o.CommonIngress(instance, ingress) 44 } 45 46 func (o *Override) UpdateIngress(instance *current.IBPOrderer, ingress *networkingv1.Ingress) error { 47 return o.CommonIngress(instance, ingress) 48 } 49 50 func (o *Override) CommonIngress(instance *current.IBPOrderer, ingress *networkingv1.Ingress) error { 51 52 ingressClass := "nginx" 53 if instance.Spec.Ingress.Class != "" { 54 ingressClass = instance.Spec.Ingress.Class 55 } 56 ingress.ObjectMeta.Annotations["kubernetes.io/ingress.class"] = ingressClass 57 58 apihost := instance.Namespace + "-" + instance.Name + "-orderer" + "." + instance.Spec.Domain 59 operationshost := instance.Namespace + "-" + instance.Name + "-operations" + "." + instance.Spec.Domain 60 grpcwebhost := instance.Namespace + "-" + instance.Name + "-grpcweb" + "." + instance.Spec.Domain 61 62 pathType := networkingv1.PathTypeImplementationSpecific 63 ingress.Spec = networkingv1.IngressSpec{ 64 Rules: []networkingv1.IngressRule{ 65 networkingv1.IngressRule{ 66 Host: apihost, 67 IngressRuleValue: networkingv1.IngressRuleValue{ 68 HTTP: &networkingv1.HTTPIngressRuleValue{ 69 Paths: []networkingv1.HTTPIngressPath{ 70 networkingv1.HTTPIngressPath{ 71 Backend: networkingv1.IngressBackend{ 72 Service: &networkingv1.IngressServiceBackend{ 73 Name: instance.GetName(), 74 Port: networkingv1.ServiceBackendPort{ 75 Name: "orderer-grpc", 76 }, 77 }, 78 }, 79 Path: "/", 80 PathType: &pathType, 81 }, 82 }, 83 }, 84 }, 85 }, 86 networkingv1.IngressRule{ 87 Host: operationshost, 88 IngressRuleValue: networkingv1.IngressRuleValue{ 89 HTTP: &networkingv1.HTTPIngressRuleValue{ 90 Paths: []networkingv1.HTTPIngressPath{ 91 networkingv1.HTTPIngressPath{ 92 Backend: networkingv1.IngressBackend{ 93 Service: &networkingv1.IngressServiceBackend{ 94 Name: instance.GetName(), 95 Port: networkingv1.ServiceBackendPort{ 96 Name: "operations", 97 }, 98 }, 99 }, 100 Path: "/", 101 PathType: &pathType, 102 }, 103 }, 104 }, 105 }, 106 }, 107 networkingv1.IngressRule{ 108 Host: grpcwebhost, 109 IngressRuleValue: networkingv1.IngressRuleValue{ 110 HTTP: &networkingv1.HTTPIngressRuleValue{ 111 Paths: []networkingv1.HTTPIngressPath{ 112 networkingv1.HTTPIngressPath{ 113 Backend: networkingv1.IngressBackend{ 114 Service: &networkingv1.IngressServiceBackend{ 115 Name: instance.GetName(), 116 Port: networkingv1.ServiceBackendPort{ 117 Name: "grpcweb", 118 }, 119 }, 120 }, 121 Path: "/", 122 PathType: &pathType, 123 }, 124 }, 125 }, 126 }, 127 }, 128 }, 129 TLS: []networkingv1.IngressTLS{ 130 networkingv1.IngressTLS{ 131 Hosts: []string{apihost}, 132 }, 133 networkingv1.IngressTLS{ 134 Hosts: []string{operationshost}, 135 }, 136 networkingv1.IngressTLS{ 137 Hosts: []string{grpcwebhost}, 138 }, 139 }, 140 } 141 currentVer := version.String(instance.Spec.FabricVersion) 142 if currentVer.EqualWithoutTag(version.V2_4_1) || currentVer.GreaterThan(version.V2_4_1) { 143 adminhost := instance.Namespace + "-" + instance.Name + "-admin" + "." + instance.Spec.Domain 144 adminIngressRule := []networkingv1.IngressRule{ 145 networkingv1.IngressRule{ 146 Host: adminhost, 147 IngressRuleValue: networkingv1.IngressRuleValue{ 148 HTTP: &networkingv1.HTTPIngressRuleValue{ 149 Paths: []networkingv1.HTTPIngressPath{ 150 networkingv1.HTTPIngressPath{ 151 Backend: networkingv1.IngressBackend{ 152 Service: &networkingv1.IngressServiceBackend{ 153 Name: instance.GetName(), 154 Port: networkingv1.ServiceBackendPort{ 155 Name: "orderer-admin", 156 }, 157 }, 158 }, 159 Path: "/", 160 PathType: &pathType, 161 }, 162 }, 163 }, 164 }, 165 }, 166 } 167 168 admintls := []networkingv1.IngressTLS{ 169 networkingv1.IngressTLS{ 170 Hosts: []string{adminhost}, 171 }, 172 } 173 ingress.Spec.Rules = append(ingress.Spec.Rules, adminIngressRule...) 174 ingress.Spec.TLS = append(ingress.Spec.TLS, admintls...) 175 } 176 return nil 177 }