| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343 |
- /*
- Copyright 2014 The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- package rest
- import (
- "fmt"
- "mime"
- "net/http"
- "net/url"
- "os"
- "strconv"
- "strings"
- "sync/atomic"
- "time"
- "github.com/munnerz/goautoneg"
- "k8s.io/apimachinery/pkg/runtime"
- "k8s.io/apimachinery/pkg/runtime/schema"
- "k8s.io/apimachinery/pkg/types"
- clientfeatures "k8s.io/client-go/features"
- "k8s.io/client-go/util/flowcontrol"
- )
- const (
- // Environment variables: Note that the duration should be long enough that the backoff
- // persists for some reasonable time (i.e. 120 seconds). The typical base might be "1".
- envBackoffBase = "KUBE_CLIENT_BACKOFF_BASE"
- envBackoffDuration = "KUBE_CLIENT_BACKOFF_DURATION"
- )
- // Interface captures the set of operations for generically interacting with Kubernetes REST apis.
- type Interface interface {
- GetRateLimiter() flowcontrol.RateLimiter
- Verb(verb string) *Request
- Post() *Request
- Put() *Request
- Patch(pt types.PatchType) *Request
- Get() *Request
- Delete() *Request
- APIVersion() schema.GroupVersion
- }
- // ClientContentConfig controls how RESTClient communicates with the server.
- //
- // TODO: ContentConfig will be updated to accept a Negotiator instead of a
- // NegotiatedSerializer and NegotiatedSerializer will be removed.
- type ClientContentConfig struct {
- // AcceptContentTypes specifies the types the client will accept and is optional.
- // If not set, ContentType will be used to define the Accept header
- AcceptContentTypes string
- // ContentType specifies the wire format used to communicate with the server.
- // This value will be set as the Accept header on requests made to the server if
- // AcceptContentTypes is not set, and as the default content type on any object
- // sent to the server. If not set, "application/json" is used.
- ContentType string
- // GroupVersion is the API version to talk to. Must be provided when initializing
- // a RESTClient directly. When initializing a Client, will be set with the default
- // code version. This is used as the default group version for VersionedParams.
- GroupVersion schema.GroupVersion
- // Negotiator is used for obtaining encoders and decoders for multiple
- // supported media types.
- Negotiator runtime.ClientNegotiator
- }
- // RESTClient imposes common Kubernetes API conventions on a set of resource paths.
- // The baseURL is expected to point to an HTTP or HTTPS path that is the parent
- // of one or more resources. The server should return a decodable API resource
- // object, or an api.Status object which contains information about the reason for
- // any failure.
- //
- // Most consumers should use client.New() to get a Kubernetes API client.
- type RESTClient struct {
- // base is the root URL for all invocations of the client
- base *url.URL
- // versionedAPIPath is a path segment connecting the base URL to the resource root
- versionedAPIPath string
- // content describes how a RESTClient encodes and decodes responses.
- content requestClientContentConfigProvider
- // creates BackoffManager that is passed to requests.
- createBackoffMgr func() BackoffManagerWithContext
- // rateLimiter is shared among all requests created by this client unless specifically
- // overridden.
- rateLimiter flowcontrol.RateLimiter
- // warningHandler is shared among all requests created by this client.
- // If not set, defaultWarningHandler is used.
- warningHandler WarningHandlerWithContext
- // Set specific behavior of the client. If not set http.DefaultClient will be used.
- Client *http.Client
- }
- // NewRESTClient creates a new RESTClient. This client performs generic REST functions
- // such as Get, Put, Post, and Delete on specified paths.
- func NewRESTClient(baseURL *url.URL, versionedAPIPath string, config ClientContentConfig, rateLimiter flowcontrol.RateLimiter, client *http.Client) (*RESTClient, error) {
- base := *baseURL
- if !strings.HasSuffix(base.Path, "/") {
- base.Path += "/"
- }
- base.RawQuery = ""
- base.Fragment = ""
- return &RESTClient{
- base: &base,
- versionedAPIPath: versionedAPIPath,
- content: requestClientContentConfigProvider{base: scrubCBORContentConfigIfDisabled(config)},
- createBackoffMgr: readExpBackoffConfig,
- rateLimiter: rateLimiter,
- Client: client,
- }, nil
- }
- func scrubCBORContentConfigIfDisabled(content ClientContentConfig) ClientContentConfig {
- if clientfeatures.FeatureGates().Enabled(clientfeatures.ClientsAllowCBOR) {
- content.Negotiator = clientNegotiatorWithCBORSequenceStreamDecoder{content.Negotiator}
- return content
- }
- if mediatype, _, err := mime.ParseMediaType(content.ContentType); err == nil && mediatype == "application/cbor" {
- content.ContentType = "application/json"
- }
- clauses := goautoneg.ParseAccept(content.AcceptContentTypes)
- scrubbed := false
- for i, clause := range clauses {
- if clause.Type == "application" && clause.SubType == "cbor" {
- scrubbed = true
- clauses[i].SubType = "json"
- }
- }
- if !scrubbed {
- // No application/cbor in AcceptContentTypes, nothing more to do.
- return content
- }
- parts := make([]string, 0, len(clauses))
- for _, clause := range clauses {
- // ParseAccept does not store the parameter "q" in Params.
- params := clause.Params
- if clause.Q < 1 { // omit q=1, it's the default
- if params == nil {
- params = make(map[string]string, 1)
- }
- params["q"] = strconv.FormatFloat(clause.Q, 'g', 3, 32)
- }
- parts = append(parts, mime.FormatMediaType(fmt.Sprintf("%s/%s", clause.Type, clause.SubType), params))
- }
- content.AcceptContentTypes = strings.Join(parts, ",")
- return content
- }
- // GetRateLimiter returns rate limiter for a given client, or nil if it's called on a nil client
- func (c *RESTClient) GetRateLimiter() flowcontrol.RateLimiter {
- if c == nil {
- return nil
- }
- return c.rateLimiter
- }
- // readExpBackoffConfig handles the internal logic of determining what the
- // backoff policy is. By default if no information is available, NoBackoff.
- // TODO Generalize this see #17727 .
- func readExpBackoffConfig() BackoffManagerWithContext {
- backoffBase := os.Getenv(envBackoffBase)
- backoffDuration := os.Getenv(envBackoffDuration)
- backoffBaseInt, errBase := strconv.ParseInt(backoffBase, 10, 64)
- backoffDurationInt, errDuration := strconv.ParseInt(backoffDuration, 10, 64)
- if errBase != nil || errDuration != nil {
- return &NoBackoff{}
- }
- return &URLBackoff{
- Backoff: flowcontrol.NewBackOff(
- time.Duration(backoffBaseInt)*time.Second,
- time.Duration(backoffDurationInt)*time.Second)}
- }
- // Verb begins a request with a verb (GET, POST, PUT, DELETE).
- //
- // Example usage of RESTClient's request building interface:
- // c, err := NewRESTClient(...)
- // if err != nil { ... }
- // resp, err := c.Verb("GET").
- //
- // Path("pods").
- // SelectorParam("labels", "area=staging").
- // Timeout(10*time.Second).
- // Do()
- //
- // if err != nil { ... }
- // list, ok := resp.(*api.PodList)
- func (c *RESTClient) Verb(verb string) *Request {
- return NewRequest(c).Verb(verb)
- }
- // Post begins a POST request. Short for c.Verb("POST").
- func (c *RESTClient) Post() *Request {
- return c.Verb("POST")
- }
- // Put begins a PUT request. Short for c.Verb("PUT").
- func (c *RESTClient) Put() *Request {
- return c.Verb("PUT")
- }
- // Patch begins a PATCH request. Short for c.Verb("Patch").
- func (c *RESTClient) Patch(pt types.PatchType) *Request {
- return c.Verb("PATCH").SetHeader("Content-Type", string(pt))
- }
- // Get begins a GET request. Short for c.Verb("GET").
- func (c *RESTClient) Get() *Request {
- return c.Verb("GET")
- }
- // Delete begins a DELETE request. Short for c.Verb("DELETE").
- func (c *RESTClient) Delete() *Request {
- return c.Verb("DELETE")
- }
- // APIVersion returns the APIVersion this RESTClient is expected to use.
- func (c *RESTClient) APIVersion() schema.GroupVersion {
- config, _ := c.content.GetClientContentConfig()
- return config.GroupVersion
- }
- // requestClientContentConfigProvider observes HTTP 415 (Unsupported Media Type) responses to detect
- // that the server does not understand CBOR. Once this has happened, future requests are forced to
- // use JSON so they can succeed. This is convenient for client users that want to prefer CBOR, but
- // also need to interoperate with older servers so requests do not permanently fail. The clients
- // will not default to using CBOR until at least all supported kube-apiservers have enable-CBOR
- // locked to true, so this path will be rarely taken. Additionally, all generated clients accessing
- // built-in kube resources are forced to protobuf, so those will not degrade to JSON.
- type requestClientContentConfigProvider struct {
- base ClientContentConfig
- // Becomes permanently true if a server responds with HTTP 415 (Unsupported Media Type) to a
- // request with "Content-Type" header containing the CBOR media type.
- sawUnsupportedMediaTypeForCBOR atomic.Bool
- }
- // GetClientContentConfig returns the ClientContentConfig that should be used for new requests by
- // this client and true if the request ContentType was selected by default.
- func (p *requestClientContentConfigProvider) GetClientContentConfig() (ClientContentConfig, bool) {
- config := p.base
- defaulted := config.ContentType == ""
- if defaulted {
- config.ContentType = "application/json"
- }
- if !clientfeatures.FeatureGates().Enabled(clientfeatures.ClientsAllowCBOR) {
- return config, defaulted
- }
- if defaulted && clientfeatures.FeatureGates().Enabled(clientfeatures.ClientsPreferCBOR) {
- config.ContentType = "application/cbor"
- }
- if sawUnsupportedMediaTypeForCBOR := p.sawUnsupportedMediaTypeForCBOR.Load(); !sawUnsupportedMediaTypeForCBOR {
- return config, defaulted
- }
- if mediaType, _, _ := mime.ParseMediaType(config.ContentType); mediaType != runtime.ContentTypeCBOR {
- return config, defaulted
- }
- // The effective ContentType is CBOR and the client has previously received an HTTP 415 in
- // response to a CBOR request. Override ContentType to JSON.
- config.ContentType = runtime.ContentTypeJSON
- return config, defaulted
- }
- // UnsupportedMediaType reports that the server has responded to a request with HTTP 415 Unsupported
- // Media Type.
- func (p *requestClientContentConfigProvider) UnsupportedMediaType(requestContentType string) {
- if !clientfeatures.FeatureGates().Enabled(clientfeatures.ClientsAllowCBOR) {
- return
- }
- // This could be extended to consider the Content-Encoding request header, the Accept and
- // Accept-Encoding response headers, the request method, and URI (as mentioned in
- // https://www.rfc-editor.org/rfc/rfc9110.html#section-15.5.16). The request Content-Type
- // header is sufficient to implement a blanket CBOR fallback mechanism.
- requestContentType, _, _ = mime.ParseMediaType(requestContentType)
- switch requestContentType {
- case runtime.ContentTypeCBOR, string(types.ApplyCBORPatchType):
- p.sawUnsupportedMediaTypeForCBOR.Store(true)
- }
- }
- // clientNegotiatorWithCBORSequenceStreamDecoder is a ClientNegotiator that delegates to another
- // ClientNegotiator to select the appropriate Encoder or Decoder for a given media type. As a
- // special case, it will resolve "application/cbor-seq" (a CBOR Sequence, the concatenation of zero
- // or more CBOR data items) as an alias for "application/cbor" (exactly one CBOR data item) when
- // selecting a stream decoder.
- type clientNegotiatorWithCBORSequenceStreamDecoder struct {
- negotiator runtime.ClientNegotiator
- }
- func (n clientNegotiatorWithCBORSequenceStreamDecoder) Encoder(contentType string, params map[string]string) (runtime.Encoder, error) {
- return n.negotiator.Encoder(contentType, params)
- }
- func (n clientNegotiatorWithCBORSequenceStreamDecoder) Decoder(contentType string, params map[string]string) (runtime.Decoder, error) {
- return n.negotiator.Decoder(contentType, params)
- }
- func (n clientNegotiatorWithCBORSequenceStreamDecoder) StreamDecoder(contentType string, params map[string]string) (runtime.Decoder, runtime.Serializer, runtime.Framer, error) {
- if !clientfeatures.FeatureGates().Enabled(clientfeatures.ClientsAllowCBOR) {
- return n.negotiator.StreamDecoder(contentType, params)
- }
- switch contentType {
- case runtime.ContentTypeCBORSequence:
- return n.negotiator.StreamDecoder(runtime.ContentTypeCBOR, params)
- case runtime.ContentTypeCBOR:
- // This media type is only appropriate for exactly one data item, not the zero or
- // more events of a watch stream.
- return nil, nil, nil, runtime.NegotiateError{ContentType: contentType, Stream: true}
- default:
- return n.negotiator.StreamDecoder(contentType, params)
- }
- }
|