kubernetes的api操作和kubectl的源码剖析

谁借莪１个温暖的怀抱￠ 2022-11-01 04:23 3阅读 0赞

# 1、kubernetes的api文档的网址： #

### **[https://kubernetes.io/docs/concepts/overview/kubernetes-api/][https_kubernetes.io_docs_concepts_overview_kubernetes-api]** ###

# 2、kubernetes的go语言的包： #

### **[github.com/kubernetes/client-go][github.com_kubernetes_client-go]** ###

# **3、剖析k8s-client的源码，构造出自己的代码去掉k8s的api** #

package main
    
    import (
    	"context"
    	"k8s.io/apimachinery/pkg/apis/meta/internalversion/scheme"
    	"k8s.io/apimachinery/pkg/runtime/schema"
    	"k8s.io/client-go/rest"
    	"k8s.io/client-go/tools/clientcmd"
    	"log"
    )
    
    func main() {
    	config, err := clientcmd.BuildConfigFromFlags("", "kube-config")
    	if err != nil{
    		log.Fatal(err.Error())
    	}
    
    	var gv = schema.GroupVersion{}
    
    	config.GroupVersion = &gv
    	config.APIPath = "/apis"
    	config.NegotiatedSerializer = scheme.Codecs.WithoutConversion()
    
    	if config.UserAgent == "" {
    		config.UserAgent = rest.DefaultKubernetesUserAgent()
    	}
    
    	client, _ := rest.RESTClientFor(config)
    
    	result := client.Get().AbsPath("/api/v1/namespaces").Do(context.TODO())
    
    	dataBytes, _ := result.Raw()
    
    	log.Println(string(dataBytes))
    }

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70][]

指定api的路径就可以获取结果了！！！

{"kind":"NamespaceList","apiVersion":"v1","metadata":{"resourceVersion":"7301"},"items":[{"metadata":{"name":"default","uid":"35387dcd-7174-415a-a524-bc3029303f48","resourceVersion":"189","creationTimestamp":"2021-03-07T09:23:12Z","managedFields":[{"manager":"kube-apiserver","operation":"Update","apiVersion":"v1","time":"2021-03-07T09:23:12Z","fieldsType":"FieldsV1","fieldsV1":{"f:status":{"f:phase":{}}}}]},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}},{"metadata":{"name":"kube-node-lease","uid":"c23f0390-09b9-4468-ab94-81b542e68190","resourceVersion":"19","creationTimestamp":"2021-03-07T09:23:11Z","managedFields":[{"manager":"kube-apiserver","operation":"Update","apiVersion":"v1","time":"2021-03-07T09:23:11Z","fieldsType":"FieldsV1","fieldsV1":{"f:status":{"f:phase":{}}}}]},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}},{"metadata":{"name":"kube-public","uid":"fb3a0aae-281c-431c-b118-a5f31b3e3e28","resourceVersion":"15","creationTimestamp":"2021-03-07T09:23:11Z","managedFields":[{"manager":"kube-apiserver","operation":"Update","apiVersion":"v1","time":"2021-03-07T09:23:11Z","fieldsType":"FieldsV1","fieldsV1":{"f:status":{"f:phase":{}}}}]},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}},{"metadata":{"name":"kube-system","uid":"9d958544-6b62-494a-b2ba-e282fdbaab50","resourceVersion":"12","creationTimestamp":"2021-03-07T09:23:11Z","managedFields":[{"manager":"kube-apiserver","operation":"Update","apiVersion":"v1","time":"2021-03-07T09:23:11Z","fieldsType":"FieldsV1","fieldsV1":{"f:status":{"f:phase":{}}}}]},"spec":{"finalizers":["kubernetes"]},"status":{"phase":"Active"}}]}

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70 1][]、

查看k8s的api的命令：

kubectl api-resources

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70 2][]

# 4、kubectl的源码剖析 #

.kube/config的内容：

apiVersion: v1
    clusters:
    - cluster:
        certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM1ekNDQWMrZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJeE1ETXlOekF5TlRreE1sb1hEVE14TURNeU5UQXlOVGt4TWxvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTXNlCjNCalJuUUdNSHViMTlZTUFHLzl6eXErSHRPOENLT1hPbmlWUFZodnF1RjFDTUdVMWhwWTc0K3lTL203RW5tbEEKNnlEMG1xdXBMSEpPa0oybXYxL3Raa05OQkRhcGZFelZIVUlEcjV3SmFuZ2JKKytjMnFhcmZtQzdZVmU0d2ZRdwpxSm9leVVwUzJ4Tk5lZGgvNXMvMzNPVFhvWW1RblhpeGUwWGttOW1iMXZVNnZvWXRRd0ZVZFJQckl2clVmS2p6Ci9wT2hHOW1UUnRTdlM1THN5bzM2dFI0N3UvV1VmQXIzTlF0cWkwNU9MM0EzZWdIbkhVd05XK1hsU01OZDZwdmkKOWgrSFlXNU0yOE1wUFBwaG9JaUdjL3ppSlNWZTIwK2RsY1Bwc090R2tPNG16d0QwdWd5bXc5U0hYdTl2MzZ2Sgp5K0pLQXBrNGhaWVZaVW52V3RNQ0F3RUFBYU5DTUVBd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0hRWURWUjBPQkJZRUZMNXZWTEZ2WU1WanVhc2tVMlhUS1I2RTRkK3pNQTBHQ1NxR1NJYjMKRFFFQkN3VUFBNElCQVFBM2hvbjFVNWVTWGNXNStodThRWDljQW1YeUlsOGdPeXlXL2dVMy8wUFRBSmhVcEwxNApRem5DOWs0N3ZndWMvS003eXU4KzFYYmtHbUw1OFd3ZUl1WVRQRVpiYWN5NDBrY1J1eEhuVitzbnNzOWtIYWFTCm9Wc0VPMUIxam1OSGs3RUtPdm4yRktCMHNKVHBiMlhOVXU3ZkRIeEEwZHBZVHFpbU9mKzFKaVdDc00rRmVYWkMKVngrb2NHRGlleXRBL3JjWEo4RFAvVU9IaW0rTCtBMmxPL3UwOExQd21lZURKelpKUHcwSkVRRDlkbWcwTCtCLwpWZms0RUluWGpqeGp2aVhxYndjNkl1bTg3QlpreTFYcDNzSElFRnNnMUQ5dnpIa25sTlc4SHhISjVUeVlzZ3orCk5iMGVSbTVUZTk5SFFHdjV3Zm9pcmx3VFd1QzVVQmlZeW1iMgotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
        server: https://192.168.60.10:6443
      name: kubernetes
    contexts:
    - context:
        cluster: kubernetes
        user: kubernetes-admin
      name: kubernetes-admin@kubernetes
    current-context: kubernetes-admin@kubernetes
    kind: Config
    preferences: {}
    users:
    - name: kubernetes-admin
      user:
        client-certificate-data: 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
        client-key-data: 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

**从中可以获取certFile、keyFile、CA证书，里面的数据是base64加密的！！！**

kubectl的代码的https请求的构造：

package main
    
    import (
    	"crypto/tls"
    	"crypto/x509"
    	"fmt"
    	"io/ioutil"
    	"log"
    	"net/http"
    )
    
    func main() {
    	pool := x509.NewCertPool()
    	aCrt, err := ioutil.ReadFile("ca")
    	if err != nil {
    		fmt.Println("ReadFile err:", err)
    		return
    	}
    	pool.AppendCertsFromPEM(aCrt) //添加信任的证书,最好是服务端对应的根证书
    
    	cliCrt, err := tls.LoadX509KeyPair("cert.pem", "key.pem")
    	if err != nil {
    		fmt.Println("Loadx509keypair err:", err)
    		return
    	}
    
    	transport := &http.Transport{
    		TLSClientConfig: &tls.Config{
    			RootCAs:      pool,
    			Certificates: []tls.Certificate{cliCrt},
    			//InsecureSkipVerify: true, //跳过验证服务端证书
    		},
    	}
    	client := &http.Client{Transport: transport}
    	response, err := client.Get("https://192.168.60.10:6443/api/v1/namespaces") //此处必须使用域名或者host内的别名
    	if err != nil {
    		fmt.Println("Get error:", err)
    		return
    	}
    	defer response.Body.Close()
    	body, err := ioutil.ReadAll(response.Body)
    	log.Println(string(body))
    }

这样构造出来的就是获取的数据了！！！

结果如下：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70 3][]

[https_kubernetes.io_docs_concepts_overview_kubernetes-api]: https://kubernetes.io/docs/concepts/overview/kubernetes-api/
[github.com_kubernetes_client-go]: https://github.com/kubernetes/client-go
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70]: /images/20221024/aee29a3cd95a428c91899e3c88a22e07.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70 1]: /images/20221024/4e7a0c8fdff84bfdaac63dcf283cd351.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70 2]: /images/20221024/47ec6265d9fb4324ac5f8e8daa3cae19.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70 3]: /images/20221024/fa745658739b4e00b58888494a9770b9.png