helm源码分析之dependency update

缺乏、安全感 2023-03-03 11:24 68阅读 0赞

#  欢迎关注我的公众号： #

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAaHhwamF2YTE_size_8_color_FFFFFF_t_70_g_se_x_16][]

目前刚开始写一个月，一共写了18篇原创文章，文章目录如下：

[istio多集群探秘，部署了50次多集群后我得出的结论][istio_50]

[istio多集群链路追踪，附实操视频][istio]

[istio防故障利器，你知道几个,istio新手不要读，太难！][istio_istio]

[istio业务权限控制，原来可以这么玩][istio 1]

[istio实现非侵入压缩，微服务之间如何实现压缩][istio 2]

[不懂envoyfilter也敢说精通istio系列-http-rbac-不要只会用AuthorizationPolicy配置权限][envoyfilter_istio_-http-rbac-_AuthorizationPolicy]

[不懂envoyfilter也敢说精通istio系列-02-http-corsFilter-不要只会vs][envoyfilter_istio_-02-http-corsFilter-_vs]

[不懂envoyfilter也敢说精通istio系列-03-http-csrf filter-再也不用再代码里写csrf逻辑了][envoyfilter_istio_-03-http-csrf filter-_csrf]

[不懂envoyfilter也敢说精通istio系列http-jwt\_authn-不要只会RequestAuthorization][envoyfilter_istio_http-jwt_authn-_RequestAuthorization]

[不懂envoyfilter也敢说精通istio系列-05-fault-filter-故障注入不止是vs][envoyfilter_istio_-05-fault-filter-_vs]

[不懂envoyfilter也敢说精通istio系列-06-http-match-配置路由不只是vs][envoyfilter_istio_-06-http-match-_vs]

[不懂envoyfilter也敢说精通istio系列-07-负载均衡配置不止是dr][envoyfilter_istio_-07-_dr]

[不懂envoyfilter也敢说精通istio系列-08-连接池和断路器][envoyfilter_istio_-08-]

[不懂envoyfilter也敢说精通istio系列-09-http-route filter][envoyfilter_istio_-09-http-route filter]

[不懂envoyfilter也敢说精通istio系列-network filter-redis proxy][envoyfilter_istio_-network filter-redis proxy]

[不懂envoyfilter也敢说精通istio系列-network filter-HttpConnectionManager][envoyfilter_istio_-network filter-HttpConnectionManager]

[不懂envoyfilter也敢说精通istio系列-ratelimit-istio ratelimit完全手册][envoyfilter_istio_-ratelimit-istio ratelimit]

\------------------------------------------------------------------------------------------------------------

func newDependencyUpdateCmd(out io.Writer) *cobra.Command {//创建dependecny update命令
    	client := action.NewDependency()//初始化结构体
    
    	cmd := &cobra.Command{//创建cobra命令
    		Use:     "update CHART",
    		Aliases: []string{"up"},
    		Short:   "update charts/ based on the contents of Chart.yaml",
    		Long:    dependencyUpDesc,
    		Args:    require.MaximumNArgs(1),
    		RunE: func(cmd *cobra.Command, args []string) error {
    			chartpath := "."//设置chartpath为当前目录
    			if len(args) > 0 {//如果参数大于0个，设置chart目录为第一个参数
    				chartpath = filepath.Clean(args[0])
    			}
    			man := &downloader.Manager{//构造manager
    				Out:              out,
    				ChartPath:        chartpath,
    				Keyring:          client.Keyring,
    				SkipUpdate:       client.SkipRefresh,
    				Getters:          getter.All(settings),
    				RepositoryConfig: settings.RepositoryConfig,
    				RepositoryCache:  settings.RepositoryCache,
    				Debug:            settings.Debug,
    			}
    			if client.Verify {//判断是否verify
    				man.Verify = downloader.VerifyAlways
    			}
    			return man.Update()//执行更新
    		},
    	}
    
    	f := cmd.Flags()
    	f.BoolVar(&client.Verify, "verify", false, "verify the packages against signatures")//verify选项
    	f.StringVar(&client.Keyring, "keyring", defaultKeyring(), "keyring containing public keys")//keyring选项
    	f.BoolVar(&client.SkipRefresh, "skip-refresh", false, "do not refresh the local repository cache")//skip-refresh选项
    
    	return cmd
    }

func (m *Manager) Update() error {//执行更新
    	c, err := m.loadChartDir()//加载chart
    	if err != nil {
    		return err
    	}
    
    	// If no dependencies are found, we consider this a successful
    	// completion.
    	req := c.Metadata.Dependencies//获取chart的依赖
    	if req == nil {
    		return nil
    	}
    
    	// Check that all of the repos we're dependent on actually exist and
    	// the repo index names.
    	repoNames, err := m.resolveRepoNames(req)//解析仓库名称
    	if err != nil {
    		return err
    	}
    
    	// For each repo in the file, update the cached copy of that repo
    	if !m.SkipUpdate {//如果不跳过update
    		if err := m.UpdateRepositories(); err != nil {//更新仓库
    			return err
    		}
    	}
    
    	// Now we need to find out which version of a chart best satisfies the
    	// dependencies in the Chart.yaml
    	lock, err := m.resolve(req, repoNames)//解析依赖版本
    	if err != nil {
    		return err
    	}
    
    	// Now we need to fetch every package here into charts/
    	if err := m.downloadAll(lock.Dependencies); err != nil {//下载依赖
    		return err
    	}
    
    	// downloadAll might overwrite dependency version, recalculate lock digest
    	newDigest, err := resolver.HashReq(req, lock.Dependencies)//计算依赖hash
    	if err != nil {
    		return err
    	}
    	lock.Digest = newDigest//设置hash
    
    	// If the lock file hasn't changed, don't write a new one.
    	oldLock := c.Lock
    	if oldLock != nil && oldLock.Digest == lock.Digest {//如果新旧hash相同则直接返回
    		return nil
    	}
    
    	// Finally, we need to write the lockfile.
    	return writeLock(m.ChartPath, lock, c.Metadata.APIVersion == chart.APIVersionV1)//写依赖lock文件
    }

//写依赖lock文件
    func writeLock(chartpath string, lock *chart.Lock, legacyLockfile bool) error {
    	data, err := yaml.Marshal(lock)//把lock文件内容转成yaml
    	if err != nil {
    		return err
    	}
    	lockfileName := "Chart.lock"//设置lock文件名称
    	if legacyLockfile {//如果是老版本，设置lock文件名称
    		lockfileName = "requirements.lock"
    	}
    	dest := filepath.Join(chartpath, lockfileName)//获取完成文件名称
    	return ioutil.WriteFile(dest, data, 0644)//写数据到文件
    }

[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAaHhwamF2YTE_size_8_color_FFFFFF_t_70_g_se_x_16]: /images/20230208/1d8c441d83ff4555b52635c38b319047.png
[istio_50]: https://mp.weixin.qq.com/s/_OPMjmWCDSTlmbAxytg33A
[istio]: https://mp.weixin.qq.com/s/kjvtno_UzJAGr1joxm3tvw
[istio_istio]: https://mp.weixin.qq.com/s/e2-p_NY31Mc5y07S4Bb1JQ
[istio 1]: https://mp.weixin.qq.com/s/iTV0SCQLhSOTYncp3PxoHQ
[istio 2]: https://mp.weixin.qq.com/s/eINlrT242RlAwfuZu1_PcA
[envoyfilter_istio_-http-rbac-_AuthorizationPolicy]: https://mp.weixin.qq.com/s/Q-yTGBNqkjOov49LTXPrPA
[envoyfilter_istio_-02-http-corsFilter-_vs]: https://mp.weixin.qq.com/s/bFMdrT7OKSqoWv8pDXOIqQ
[envoyfilter_istio_-03-http-csrf filter-_csrf]: https://mp.weixin.qq.com/s/dlG9phV-kMMxs4UPzuRNYg
[envoyfilter_istio_http-jwt_authn-_RequestAuthorization]: https://mp.weixin.qq.com/s/IfrJ-FdLYsdhPkDrcO_YXA
[envoyfilter_istio_-05-fault-filter-_vs]: https://mp.weixin.qq.com/s/a4gDXqD8uswgglMwkUph2Q
[envoyfilter_istio_-06-http-match-_vs]: https://mp.weixin.qq.com/s/TpS3DHdcaJiPivIS_jsIGw
[envoyfilter_istio_-07-_dr]: https://mp.weixin.qq.com/s/k-zJm7n7OOKg6MotQJYPAA
[envoyfilter_istio_-08-]: https://mp.weixin.qq.com/s/n_bJ3saNeTtXRprIymhwzg
[envoyfilter_istio_-09-http-route filter]: https://mp.weixin.qq.com/s/JAeZr0BMVQxIrB3S_7Ru0A
[envoyfilter_istio_-network filter-redis proxy]: https://mp.weixin.qq.com/s/B9IPTI8F3q42nVkqbQRlPw
[envoyfilter_istio_-network filter-HttpConnectionManager]: https://mp.weixin.qq.com/s/W3OPQWkCVvuHGS49cTNhlg
[envoyfilter_istio_-ratelimit-istio ratelimit]: https://mp.weixin.qq.com/s/KgiDsELNol27mgZvDbFsqw