Use ns/pod-name pattern for node id

Kyverno doesn't seem to work when escaping 2 env vars in the same string and leaves a / which behind messes with the env var substitution from kubernetes. Similarly `request.object.metadata.name` doesn't seem to be available when creating pods via a replication controller. Thus using both env vars and kyverno vars to achieve a node id pattern of: `namespace/pod_name`.
utilitywarehouse · Nov 28, 2023 · e4393ab · e4393ab
1 parent fe378bc
commit e4393ab
Showing 1 changed file with 22 additions and 10 deletions.
diff --git a/deploy/kustomize/kyverno/mutate/mutate-semaphore-xds-clients-env.yaml b/deploy/kustomize/kyverno/mutate/mutate-semaphore-xds-clients-env.yaml
@@ -31,24 +31,36 @@ spec:
                 valueFrom:
                   fieldRef:
                     fieldPath: metadata.name
-              - name: POD_NAMESPACE
-                valueFrom:
-                  fieldRef:
-                    fieldPath: metadata.namespace
               - name: GRPC_XDS_BOOTSTRAP_CONFIG
                 value: >-
-                  {"xds_servers": [{"server_uri": "semaphore-xds.sys-semaphore.svc.cluster.local:18000", "channel_creds": [{"type": "insecure"}], "server_features": ["xds_v3"]}], "node":{"id":"\$(POD_NAME)-\$(POD_NAMESPACE)", "Locality":{}}}
+                  {
+                    "xds_servers":
+                      [{
+                        "server_uri": "semaphore-xds.sys-semaphore.svc.cluster.local:18000",
+                        "channel_creds": [{"type": "insecure"}],
+                        "server_features": ["xds_v3"]}
+                      ],
+                        "node":{
+                          "id":"{{request.object.metadata.namespace}}/\$(POD_NAME)",
+                          "Locality":{}}
+                      }
           containers:
             - (name): "*"
               env:
               - name: POD_NAME
                 valueFrom:
                   fieldRef:
                     fieldPath: metadata.name
-              - name: POD_NAMESPACE
-                valueFrom:
-                  fieldRef:
-                    fieldPath: metadata.namespace
               - name: GRPC_XDS_BOOTSTRAP_CONFIG
                 value: >- 
-                  {"xds_servers": [{"server_uri": "semaphore-xds.sys-semaphore.svc.cluster.local:18000", "channel_creds": [{"type": "insecure"}], "server_features": ["xds_v3"]}], "node":{"id":"\$(POD_NAME)-\$(POD_NAMESPACE)", "locality":{}}}
+                  {
+                    "xds_servers":
+                      [{
+                        "server_uri": "semaphore-xds.sys-semaphore.svc.cluster.local:18000",
+                        "channel_creds": [{"type": "insecure"}],
+                        "server_features": ["xds_v3"]}
+                      ],
+                        "node":{
+                          "id":"{{request.object.metadata.namespace}}/\$(POD_NAME)",
+                          "Locality":{}}
+                      }