add setup hook capabilities for rke2

Signed-off-by: Brian Downs <brian.downs@gmail.com>
This commit is contained in:
Brian Downs 2020-08-19 13:30:51 -07:00
parent 5859f83d05
commit a4b2953017
4 changed files with 9 additions and 0 deletions

View File

@ -1,6 +1,7 @@
package cmds
import (
"github.com/rancher/k3s/pkg/daemons/config"
"github.com/rancher/k3s/pkg/version"
"github.com/rancher/spur/cli"
"github.com/rancher/spur/cli/altsrc"
@ -54,6 +55,7 @@ type Server struct {
ClusterInit bool
ClusterReset bool
EncryptSecrets bool
SetupHooks []func(config.Control) error
}
var ServerConfig Server

View File

@ -193,6 +193,8 @@ func run(app *cli.Context, cfg *cmds.Server) error {
return errors.Wrap(err, "Invalid tls-min-version")
}
serverConfig.SetupHooks = append(serverConfig.SetupHooks, cfg.SetupHooks...)
// TLS config based on mozilla ssl-config generator
// https://ssl-config.mozilla.org/#server=golang&version=1.13.6&config=intermediate&guideline=5.4
// Need to disable the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 Cipher for TLS1.2

View File

@ -60,6 +60,10 @@ func StartServer(ctx context.Context, config *Config) error {
return errors.Wrap(err, "starting tls server")
}
for _, hook := range config.SetupHooks {
hook(config.ControlConfig)
}
ip := net2.ParseIP(config.ControlConfig.BindAddress)
if ip == nil {
hostIP, err := net.ChooseHostInterface()

View File

@ -10,4 +10,5 @@ type Config struct {
ControlConfig config.Control
Rootless bool
SupervisorPort int
SetupHooks []func(config.Control) error
}