github.com/koding/terraform@v0.6.4-0.20170608090606-5d7e0339779d/builtin/providers/kubernetes/provider.go (about) 1 package kubernetes 2 3 import ( 4 "bytes" 5 "fmt" 6 "log" 7 "os" 8 9 "github.com/hashicorp/terraform/helper/schema" 10 "github.com/hashicorp/terraform/terraform" 11 "github.com/mitchellh/go-homedir" 12 restclient "k8s.io/client-go/rest" 13 "k8s.io/client-go/tools/clientcmd" 14 clientcmdapi "k8s.io/client-go/tools/clientcmd/api" 15 kubernetes "k8s.io/kubernetes/pkg/client/clientset_generated/clientset" 16 ) 17 18 func Provider() terraform.ResourceProvider { 19 return &schema.Provider{ 20 Schema: map[string]*schema.Schema{ 21 "host": { 22 Type: schema.TypeString, 23 Optional: true, 24 DefaultFunc: schema.EnvDefaultFunc("KUBE_HOST", ""), 25 Description: "The hostname (in form of URI) of Kubernetes master.", 26 }, 27 "username": { 28 Type: schema.TypeString, 29 Optional: true, 30 DefaultFunc: schema.EnvDefaultFunc("KUBE_USER", ""), 31 Description: "The username to use for HTTP basic authentication when accessing the Kubernetes master endpoint.", 32 }, 33 "password": { 34 Type: schema.TypeString, 35 Optional: true, 36 DefaultFunc: schema.EnvDefaultFunc("KUBE_PASSWORD", ""), 37 Description: "The password to use for HTTP basic authentication when accessing the Kubernetes master endpoint.", 38 }, 39 "insecure": { 40 Type: schema.TypeBool, 41 Optional: true, 42 DefaultFunc: schema.EnvDefaultFunc("KUBE_INSECURE", false), 43 Description: "Whether server should be accessed without verifying the TLS certificate.", 44 }, 45 "client_certificate": { 46 Type: schema.TypeString, 47 Optional: true, 48 DefaultFunc: schema.EnvDefaultFunc("KUBE_CLIENT_CERT_DATA", ""), 49 Description: "PEM-encoded client certificate for TLS authentication.", 50 }, 51 "client_key": { 52 Type: schema.TypeString, 53 Optional: true, 54 DefaultFunc: schema.EnvDefaultFunc("KUBE_CLIENT_KEY_DATA", ""), 55 Description: "PEM-encoded client certificate key for TLS authentication.", 56 }, 57 "cluster_ca_certificate": { 58 Type: schema.TypeString, 59 Optional: true, 60 DefaultFunc: schema.EnvDefaultFunc("KUBE_CLUSTER_CA_CERT_DATA", ""), 61 Description: "PEM-encoded root certificates bundle for TLS authentication.", 62 }, 63 "config_path": { 64 Type: schema.TypeString, 65 Optional: true, 66 DefaultFunc: schema.MultiEnvDefaultFunc( 67 []string{ 68 "KUBE_CONFIG", 69 "KUBECONFIG", 70 }, 71 "~/.kube/config"), 72 Description: "Path to the kube config file, defaults to ~/.kube/config", 73 }, 74 "config_context": { 75 Type: schema.TypeString, 76 Optional: true, 77 DefaultFunc: schema.EnvDefaultFunc("KUBE_CTX", ""), 78 }, 79 "config_context_auth_info": { 80 Type: schema.TypeString, 81 Optional: true, 82 DefaultFunc: schema.EnvDefaultFunc("KUBE_CTX_AUTH_INFO", ""), 83 Description: "", 84 }, 85 "config_context_cluster": { 86 Type: schema.TypeString, 87 Optional: true, 88 DefaultFunc: schema.EnvDefaultFunc("KUBE_CTX_CLUSTER", ""), 89 Description: "", 90 }, 91 }, 92 93 ResourcesMap: map[string]*schema.Resource{ 94 "kubernetes_config_map": resourceKubernetesConfigMap(), 95 "kubernetes_horizontal_pod_autoscaler": resourceKubernetesHorizontalPodAutoscaler(), 96 "kubernetes_limit_range": resourceKubernetesLimitRange(), 97 "kubernetes_namespace": resourceKubernetesNamespace(), 98 "kubernetes_persistent_volume": resourceKubernetesPersistentVolume(), 99 "kubernetes_persistent_volume_claim": resourceKubernetesPersistentVolumeClaim(), 100 "kubernetes_resource_quota": resourceKubernetesResourceQuota(), 101 "kubernetes_secret": resourceKubernetesSecret(), 102 "kubernetes_service": resourceKubernetesService(), 103 }, 104 ConfigureFunc: providerConfigure, 105 } 106 } 107 108 func providerConfigure(d *schema.ResourceData) (interface{}, error) { 109 // Config file loading 110 cfg, err := tryLoadingConfigFile(d) 111 if err != nil { 112 return nil, err 113 } 114 if cfg == nil { 115 cfg = &restclient.Config{} 116 } 117 118 // Overriding with static configuration 119 cfg.UserAgent = fmt.Sprintf("HashiCorp/1.0 Terraform/%s", terraform.VersionString()) 120 121 if v, ok := d.GetOk("host"); ok { 122 cfg.Host = v.(string) 123 } 124 if v, ok := d.GetOk("username"); ok { 125 cfg.Username = v.(string) 126 } 127 if v, ok := d.GetOk("password"); ok { 128 cfg.Password = v.(string) 129 } 130 if v, ok := d.GetOk("insecure"); ok { 131 cfg.Insecure = v.(bool) 132 } 133 if v, ok := d.GetOk("cluster_ca_certificate"); ok { 134 cfg.CAData = bytes.NewBufferString(v.(string)).Bytes() 135 } 136 if v, ok := d.GetOk("client_certificate"); ok { 137 cfg.CertData = bytes.NewBufferString(v.(string)).Bytes() 138 } 139 if v, ok := d.GetOk("client_key"); ok { 140 cfg.KeyData = bytes.NewBufferString(v.(string)).Bytes() 141 } 142 143 k, err := kubernetes.NewForConfig(cfg) 144 if err != nil { 145 return nil, fmt.Errorf("Failed to configure: %s", err) 146 } 147 148 return k, nil 149 } 150 151 func tryLoadingConfigFile(d *schema.ResourceData) (*restclient.Config, error) { 152 path, err := homedir.Expand(d.Get("config_path").(string)) 153 if err != nil { 154 return nil, err 155 } 156 157 loader := &clientcmd.ClientConfigLoadingRules{ 158 ExplicitPath: path, 159 } 160 161 overrides := &clientcmd.ConfigOverrides{} 162 ctxSuffix := "; default context" 163 164 ctx, ctxOk := d.GetOk("config_context") 165 authInfo, authInfoOk := d.GetOk("config_context_auth_info") 166 cluster, clusterOk := d.GetOk("config_context_cluster") 167 if ctxOk || authInfoOk || clusterOk { 168 ctxSuffix = "; overriden context" 169 if ctxOk { 170 overrides.CurrentContext = ctx.(string) 171 ctxSuffix += fmt.Sprintf("; config ctx: %s", overrides.CurrentContext) 172 log.Printf("[DEBUG] Using custom current context: %q", overrides.CurrentContext) 173 } 174 175 overrides.Context = clientcmdapi.Context{} 176 if authInfoOk { 177 overrides.Context.AuthInfo = authInfo.(string) 178 ctxSuffix += fmt.Sprintf("; auth_info: %s", overrides.Context.AuthInfo) 179 } 180 if clusterOk { 181 overrides.Context.Cluster = cluster.(string) 182 ctxSuffix += fmt.Sprintf("; cluster: %s", overrides.Context.Cluster) 183 } 184 log.Printf("[DEBUG] Using overidden context: %#v", overrides.Context) 185 } 186 187 cc := clientcmd.NewNonInteractiveDeferredLoadingClientConfig(loader, overrides) 188 cfg, err := cc.ClientConfig() 189 if err != nil { 190 if pathErr, ok := err.(*os.PathError); ok && os.IsNotExist(pathErr.Err) { 191 log.Printf("[INFO] Unable to load config file as it doesn't exist at %q", path) 192 return nil, nil 193 } 194 return nil, fmt.Errorf("Failed to load config (%s%s): %s", path, ctxSuffix, err) 195 } 196 197 log.Printf("[INFO] Successfully loaded config file (%s%s)", path, ctxSuffix) 198 return cfg, nil 199 }