forked from RedHatInsights/edge-api
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Content guards for Pulp (RedHatInsights#2652)
- Loading branch information
Showing
15 changed files
with
22,415 additions
and
12,600 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,163 @@ | ||
| package pulp | ||
|
|
||
| import ( | ||
| "context" | ||
| "errors" | ||
| "fmt" | ||
|
|
||
| "github.com/google/uuid" | ||
| "github.com/redhatinsights/edge-api/pkg/ptr" | ||
| "github.com/sirupsen/logrus" | ||
| ) | ||
|
|
||
| func compositeGuardName(orgID string) string { | ||
| return "EDGE_COMP_ORGID=" + orgID | ||
| } | ||
|
|
||
| // CompositeGuardCreate creates a new composite guard with the given orgID, headerHref, and rbacHref. | ||
| func (ps *PulpService) CompositeGuardCreate(ctx context.Context, orgID, headerHref, rbacHref string) (*CompositeContentGuardResponse, error) { | ||
| req := ContentguardsCoreCompositeCreateJSONRequestBody{ | ||
| Name: compositeGuardName(orgID), | ||
| Guards: ptr.To([]string{headerHref, rbacHref}), | ||
| Description: ptr.To("EDGE"), | ||
| } | ||
| resp, err := ps.cwr.ContentguardsCoreCompositeCreateWithResponse(ctx, ps.dom, req, addAuthenticationHeader) | ||
|
|
||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| if resp.JSON201 == nil { | ||
| return nil, fmt.Errorf("unexpected response: %d, body: %s", resp.StatusCode(), string(resp.Body)) | ||
| } | ||
|
|
||
| return resp.JSON201, nil | ||
| } | ||
|
|
||
| // CompositeGuardRead returns the composite guard with the given ID. | ||
| func (ps *PulpService) CompositeGuardRead(ctx context.Context, id uuid.UUID) (*CompositeContentGuardResponse, error) { | ||
| req := ContentguardsCoreCompositeReadParams{} | ||
| resp, err := ps.cwr.ContentguardsCoreCompositeReadWithResponse(ctx, ps.dom, id, &req, addAuthenticationHeader) | ||
|
|
||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| if resp.JSON200 == nil { | ||
| return nil, fmt.Errorf("unexpected response: %d, body: %s", resp.StatusCode(), string(resp.Body)) | ||
| } | ||
|
|
||
| return resp.JSON200, nil | ||
| } | ||
|
|
||
| // CompositeGuardReadByOrgID returns the composite guard for the given orgID. | ||
| func (ps *PulpService) CompositeGuardReadByOrgID(ctx context.Context, orgID string) (*CompositeContentGuardResponse, error) { | ||
| hgl, err := ps.CompositeGuardList(ctx, orgID) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| if len(hgl) == 0 { | ||
| return nil, fmt.Errorf("composite guard not found for orgID %s: %w", orgID, ErrRecordNotFound) | ||
| } | ||
|
|
||
| id := ScanUUID(hgl[0].PulpHref) | ||
| return ps.CompositeGuardRead(ctx, id) | ||
| } | ||
|
|
||
| // CompositeGuardEnsure ensures that the composite guard is created and returns it. The method is idempotent. | ||
| func (ps *PulpService) CompositeGuardEnsure(ctx context.Context, orgID, headerHref, rbacHref string) (*CompositeContentGuardResponse, error) { | ||
| cg, err := ps.CompositeGuardReadByOrgID(ctx, compositeGuardName(orgID)) | ||
| // nolint: gocritic | ||
| if errors.Is(err, ErrRecordNotFound) { | ||
| cg, err = ps.CompositeGuardCreate(ctx, orgID, headerHref, rbacHref) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| return cg, nil | ||
| } else if err != nil { | ||
| return nil, err | ||
| } else if cg == nil { | ||
| return nil, fmt.Errorf("unexpected nil guard") | ||
| } | ||
|
|
||
| gs := ptr.FromOrEmpty(cg.Guards) | ||
| if !(len(gs) == 2 && (gs[0] != headerHref && gs[1] != rbacHref) || (gs[1] != headerHref && gs[0] != rbacHref)) { | ||
| logrus.WithContext(ctx).Warnf("unexpected Composite Content Guard: %v, deleting it", gs) | ||
| err = ps.CompositeGuardDelete(ctx, ScanUUID(cg.PulpHref)) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| cg, err = ps.CompositeGuardCreate(ctx, orgID, headerHref, rbacHref) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| } | ||
| return cg, nil | ||
| } | ||
|
|
||
| // ContentGuardEnsure ensures that the header and RBAC guards are created and returns the composite guard. If it finds | ||
| // that the composite guard is not created or the guards are not the same as the ones provided, it will delete it | ||
| // and recreate it. This method is idempotent and will not create the guards if they already exist. | ||
| func (ps *PulpService) ContentGuardEnsure(ctx context.Context, orgID string) (*CompositeContentGuardResponse, error) { | ||
| hcg, err := ps.HeaderGuardEnsure(ctx, orgID) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| rcg, err := ps.RbacGuardEnsure(ctx) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| ccg, err := ps.CompositeGuardEnsure(ctx, orgID, *hcg.PulpHref, *rcg.PulpHref) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| return ccg, nil | ||
| } | ||
|
|
||
| // CompositeGuardDelete deletes the composite guard with the given ID. | ||
| func (ps *PulpService) CompositeGuardDelete(ctx context.Context, id uuid.UUID) error { | ||
| resp, err := ps.cwr.ContentguardsCoreCompositeDelete(ctx, ps.dom, id, addAuthenticationHeader) | ||
|
|
||
| if err != nil { | ||
| return err | ||
| } | ||
| resp.Body.Close() | ||
|
|
||
| if resp.StatusCode != 204 { | ||
| return fmt.Errorf("unexpected response: %d", resp.StatusCode) | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| // CompositeGuardList returns a list of composite guards with the given name filter. | ||
| func (ps *PulpService) CompositeGuardList(ctx context.Context, nameFilter string) ([]CompositeContentGuardResponse, error) { | ||
| req := ContentguardsCoreCompositeListParams{ | ||
| Limit: &DefaultPageSize, | ||
| } | ||
| if nameFilter != "" { | ||
| req.Name = &nameFilter | ||
| } | ||
|
|
||
| resp, err := ps.cwr.ContentguardsCoreCompositeListWithResponse(ctx, ps.dom, &req, addAuthenticationHeader) | ||
|
|
||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| if resp.JSON200 == nil { | ||
| return nil, fmt.Errorf("unexpected response: %d, body: %s", resp.StatusCode(), string(resp.Body)) | ||
| } | ||
|
|
||
| if resp.JSON200.Count > DefaultPageSize { | ||
| return nil, fmt.Errorf("default page size too small: %d", resp.JSON200.Count) | ||
| } | ||
|
|
||
| return resp.JSON200.Results, nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.