1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
package cluster
import (
"context"
"encoding/json"
"fmt"
"time"
crcerrors "github.com/crc-org/crc/v2/pkg/crc/errors"
"github.com/crc-org/crc/v2/pkg/crc/logging"
"github.com/crc-org/crc/v2/pkg/crc/oc"
"github.com/pkg/errors"
k8scerts "k8s.io/api/certificates/v1beta1"
)
func WaitForOpenshiftResource(ctx context.Context, ocConfig oc.Config, resource string) error {
logging.Debugf("Waiting for availability of resource type '%s'", resource)
waitForAPIServer := func() error {
stdout, stderr, err := ocConfig.WithFailFast().RunOcCommand("get", resource)
if err != nil {
logging.Debug(stderr)
return &crcerrors.RetriableError{Err: err}
}
logging.Debug(stdout)
return nil
}
return crcerrors.Retry(ctx, 80*time.Second, waitForAPIServer, time.Second)
}
func deleteCSR(ctx context.Context, ocConfig oc.Config, expectedSignerName string) error {
csrs, err := getCSRList(ctx, ocConfig, expectedSignerName)
if err != nil {
return err
}
for _, csr := range csrs.Items {
logging.Debugf("Deleting csr %s (signerName: %s)", csr.ObjectMeta.Name, expectedSignerName)
_, stderr, err := ocConfig.RunOcCommand("delete", "csr", csr.ObjectMeta.Name)
if err != nil {
return errors.Wrapf(err, stderr, "Not able to delete csr (%v : %s)")
}
}
return nil
}
func getCSRList(ctx context.Context, ocConfig oc.Config, expectedSignerName string) (*k8scerts.CertificateSigningRequestList, error) {
var csrs k8scerts.CertificateSigningRequestList
if err := WaitForOpenshiftResource(ctx, ocConfig, "csr"); err != nil {
return nil, err
}
output, stderr, err := ocConfig.WithFailFast().RunOcCommand("get", "csr", "-ojson")
if err != nil {
return nil, fmt.Errorf("Failed to get all certificate signing requests: %v %s", err, stderr)
}
err = json.Unmarshal([]byte(output), &csrs)
if err != nil {
return nil, err
}
if expectedSignerName == "" {
return &csrs, nil
}
var filteredCsrs []k8scerts.CertificateSigningRequest
for _, csr := range csrs.Items {
var signerName string
if csr.Spec.SignerName != nil {
signerName = *csr.Spec.SignerName
}
if expectedSignerName != signerName {
continue
}
filteredCsrs = append(filteredCsrs, csr)
}
csrs.Items = filteredCsrs
return &csrs, nil
}
|
