Wire feature gates in oauth-apiserver

Author: bertinatto

pkg/operator/starter.go

@@ -410,13 +410,19 @@ func prepareOauthAPIServerOperator(
 	}
 	migrator := migrators.NewKubeStorageVersionMigrator(authOperatorInput.migrationClient, informerFactories.migrationInformer.Migration().V1alpha1(), authOperatorInput.kubeClient.Discovery())
 
+	featureGates, err := authOperatorInput.featureGateAccessor(ctx, authOperatorInput, informerFactories)
+	if err != nil {
+		return nil, nil, err
+	}
+
 	authAPIServerWorkload := workload.NewOAuthAPIServerWorkload(
 		authOperatorInput.authenticationOperatorClient,
 		workloadcontroller.CountNodesFuncWrapper(informerFactories.kubeInformersForNamespaces.InformersFor("").Core().V1().Nodes().Lister()),
 		workloadcontroller.EnsureAtMostOnePodPerNode,
 		"openshift-oauth-apiserver",
 		os.Getenv("IMAGE_OAUTH_APISERVER"),
 		os.Getenv("OPERATOR_IMAGE"),
+		featureGates,
 		authOperatorInput.kubeClient,
 		versionRecorder)
 

pkg/operator/workload/sync_openshift_oauth_apiserver.go

@@ -5,6 +5,7 @@ import (
 	"encoding/json"
 	"fmt"
 	"regexp"
+	"sort"
 	"strconv"
 	"strings"
 
@@ -13,11 +14,14 @@ import (
 	appsv1 "k8s.io/api/apps/v1"
 	"k8s.io/apimachinery/pkg/util/sets"
 	"k8s.io/client-go/kubernetes"
+	"k8s.io/component-base/featuregate"
 	"k8s.io/klog/v2"
 
+	configv1 "github.com/openshift/api/config/v1"
 	operatorv1 "github.com/openshift/api/operator/v1"
 	"github.com/openshift/library-go/pkg/controller/factory"
 	libgoetcd "github.com/openshift/library-go/pkg/operator/configobserver/etcd"
+	"github.com/openshift/library-go/pkg/operator/configobserver/featuregates"
 	"github.com/openshift/library-go/pkg/operator/events"
 	"github.com/openshift/library-go/pkg/operator/resource/resourceapply"
 	"github.com/openshift/library-go/pkg/operator/resource/resourcehash"
@@ -51,6 +55,8 @@ type OAuthAPIServerWorkload struct {
 	operatorImagePullSpec     string
 	kubeClient                kubernetes.Interface
 	versionRecorder           status.VersionGetter
+
+	featureGates featuregates.FeatureGate
 }
 
 // NewOAuthAPIServerWorkload creates new OAuthAPIServerWorkload struct
@@ -61,6 +67,7 @@ func NewOAuthAPIServerWorkload(
 	targetNamespace string,
 	targetImagePullSpec string,
 	operatorImagePullSpec string,
+	featureGates featuregates.FeatureGate,
 	kubeClient kubernetes.Interface,
 	versionRecorder status.VersionGetter,
 ) *OAuthAPIServerWorkload {
@@ -71,6 +78,7 @@ func NewOAuthAPIServerWorkload(
 		targetNamespace:           targetNamespace,
 		targetImagePullSpec:       targetImagePullSpec,
 		operatorImagePullSpec:     operatorImagePullSpec,
+		featureGates:              featureGates,
 		kubeClient:                kubeClient,
 		versionRecorder:           versionRecorder,
 	}
@@ -157,6 +165,11 @@ func (c *OAuthAPIServerWorkload) syncDeployment(ctx context.Context, operatorSpe
 	// log level verbosity is taken from the spec always
 	args["v"] = []string{loglevelToKlog(operatorSpec.LogLevel)}
 
+	// Set feature gates
+	if features := getCBORFeatureGates(c.featureGates); len(features) > 0 {
+		args["feature-gates"] = []string{strings.Join(features, ",")}
+	}
+
 	// use string replacer for simple things
 	r := strings.NewReplacer(
 		"${IMAGE}", c.targetImagePullSpec,
@@ -287,3 +300,48 @@ func GetAPIServerArgumentsRaw(authOperatorSpec operatorv1.OperatorSpec) (map[str
 
 	return cfgUnstructured.APIServerArguments, nil
 }
+
+func getFeatureGates(featureGates featuregates.FeatureGate) []string {
+	if featureGates == nil {
+		return nil
+	}
+	// Filter out OCP-specific feature gates
+	filteredFeatures := []string{}
+	known := featuregate.NewFeatureGate().GetAll()
+	for _, feature := range featureGates.KnownFeatures() {
+		_, ok := known[featuregate.Feature(feature)]
+		if !ok {
+			continue
+		}
+		filteredFeatures = append(filteredFeatures, string(feature))
+	}
+	sort.Strings(filteredFeatures)
+
+	// Format feature gates and set flags
+	formatedFeatures := []string{}
+	for _, featureGate := range filteredFeatures {
+		fgName := configv1.FeatureGateName(featureGate)
+		if featureGates.Enabled(fgName) {
+			formatedFeatures = append(formatedFeatures, fmt.Sprintf("%s=true", featureGate))
+		} else {
+			formatedFeatures = append(formatedFeatures, fmt.Sprintf("%s=false", featureGate))
+		}
+	}
+
+	return formatedFeatures
+}
+
+func getCBORFeatureGates(featureGates featuregates.FeatureGate) []string {
+	if featureGates == nil {
+		return nil
+	}
+	features := []string{}
+	cborFeatures := []string{"CBORServingAndStorage", "ClientsAllowCBOR", "ClientsPreferCBOR"}
+	for _, name := range cborFeatures {
+		if featureGates.Enabled(configv1.FeatureGateName(name)) {
+			features = append(features, fmt.Sprintf("%s=true", name))
+		}
+	}
+	sort.Strings(features)
+	return features
+}