flag.Parse()

logf.SetLogger(logf.ZapLogger(false))

entryLog := log.WithName("entrypoint")

// Setup a Manager

mgr, err := manager.New(config.GetConfigOrDie(), manager.Options{})

if err != nil {

entryLog.Error(err, "unable to set up overall controller manager")

os.Exit(1)

}

// Setup a new controller to Reconciler ReplicaSets

c, err := controller.New("foo-controller", mgr, controller.Options{

Reconciler: &reconcileReplicaSet{client: mgr.GetClient(), log: log.WithName("reconciler")},

})

if err != nil {

entryLog.Error(err, "unable to set up individual controller")

os.Exit(1)

}

// Watch ReplicaSets and enqueue ReplicaSet object key

if err := c.Watch(&source.Kind{Type: &appsv1.ReplicaSet{}}, &handler.EnqueueRequestForObject{}); err != nil {

entryLog.Error(err, "unable to watch ReplicaSets")

os.Exit(1)

}

// Watch Pods and enqueue owning ReplicaSet key

if err := c.Watch(&source.Kind{Type: &corev1.Pod{}},

&handler.EnqueueRequestForOwner{OwnerType: &appsv1.ReplicaSet{}, IsController: true}); err != nil {

entryLog.Error(err, "unable to watch Pods")

os.Exit(1)

}

// Setup webhooks

mutatingWebhook, err := builder.NewWebhookBuilder().

Name("mutating.k8s.io").

Type(types.WebhookTypeMutating).

Path("/mutating-pods").

Operations(admissionregistrationv1beta1.Create, admissionregistrationv1beta1.Update).

WithManager(mgr).

ForType(&corev1.Pod{}).

Build(&podAnnotator{client: mgr.GetClient(), decoder: mgr.GetAdmissionDecoder()})

if err != nil {

entryLog.Error(err, "unable to setup mutating webhook")

os.Exit(1)

}

validatingWebhook, err := builder.NewWebhookBuilder().

Name("validating.k8s.io").

Type(types.WebhookTypeValidating).

Path("/validating-pods").

Operations(admissionregistrationv1beta1.Create, admissionregistrationv1beta1.Update).

WithManager(mgr).

ForType(&corev1.Pod{}).

Build(&podValidator{client: mgr.GetClient(), decoder: mgr.GetAdmissionDecoder()})

if err != nil {

entryLog.Error(err, "unable to setup validating webhook")

os.Exit(1)

}

as, err := webhook.NewServer("foo-admission-server", mgr, webhook.ServerOptions{

Port: 443,

CertDir: "/tmp/cert",

KVMap: map[string]interface{}{"foo": "bar"},

BootstrapOptions: &webhook.BootstrapOptions{

Secret: &apitypes.NamespacedName{

Namespace: "default",

Name: "foo-admission-server-secret",

},

Service: &webhook.Service{

Namespace: "default",

Name: "foo-admission-server-service",

// Selectors should select the pods that runs this webhook server.

Selectors: map[string]string{

"app": "foo-admission-server",

},

},

},

})

if err != nil {

entryLog.Error(err, "unable to create a new webhook server")

os.Exit(1)

}

err = as.Register(mutatingWebhook, validatingWebhook)

if err != nil {

entryLog.Error(err, "unable to register webhooks in the admission server")

os.Exit(1)

}

if err := mgr.Start(signals.SetupSignalHandler()); err != nil {

entryLog.Error(err, "unable to run manager")

os.Exit(1)

}