krokrepository_controller.go

/*
Copyright 2022.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package controllers

import (
	"context"
	"fmt"
	"net/url"
	"path"
	"time"

	"github.com/krok-o/operator/pkg/providers"
	corev1 "k8s.io/api/core/v1"
	apierrors "k8s.io/apimachinery/pkg/api/errors"
	"k8s.io/apimachinery/pkg/runtime"
	"k8s.io/apimachinery/pkg/types"
	"k8s.io/klog/v2"
	"sigs.k8s.io/cluster-api/util/patch"
	ctrl "sigs.k8s.io/controller-runtime"
	"sigs.k8s.io/controller-runtime/pkg/client"
	"sigs.k8s.io/controller-runtime/pkg/log"

	"github.com/krok-o/operator/api/v1alpha1"
)

// KrokRepositoryReconciler reconciles a KrokRepository object
type KrokRepositoryReconciler struct {
	client.Client
	Scheme *runtime.Scheme

	HookBase          string
	HookProtocol      string
	PlatformProviders map[string]providers.Platform
}

//+kubebuilder:rbac:groups=delivery.krok.app,resources=krokrepositories,verbs=get;list;watch;create;update;patch;delete
//+kubebuilder:rbac:groups=delivery.krok.app,resources=krokrepositories/status,verbs=get;update;patch
//+kubebuilder:rbac:groups=delivery.krok.app,resources=krokrepositories/finalizers,verbs=update

// Reconcile is part of the main kubernetes reconciliation loop which aims to
// move the current state of the cluster closer to the desired state.
// For more details, check Reconcile and its Result here:
// - https://pkg.go.dev/sigs.k8s.io/controller-runtime@v0.13.0/pkg/reconcile
func (r *KrokRepositoryReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
	log := log.FromContext(ctx).WithName("krok-operator")
	log.V(4).Info("starting reconcile loop")
	repository := &v1alpha1.KrokRepository{}
	if err := r.Client.Get(ctx, req.NamespacedName, repository); err != nil {
		if apierrors.IsNotFound(err) {
			// Object not found, return.  Created objects are automatically garbage collected.
			// For additional cleanup logic use finalizers.
			return ctrl.Result{}, nil
		}

		// Error reading the object - requeue the request.
		return ctrl.Result{}, fmt.Errorf("failed to get source object: %w", err)
	}
	log = log.WithValues("repository", klog.KObj(repository))

	log.V(4).Info("found repository")
	if repository.Status.UniqueURL != "" {
		// TODO: Think about what happens when the hook needs to be re-created because the subscribed events changed.
		log.Info("skipping repository as it was already reconciled")
		return ctrl.Result{}, nil
	}

	// Initialize the patch helper.
	// This has to be initialized before updating the status.
	patchHelper, err := patch.NewHelper(repository, r.Client)
	if err != nil {
		return ctrl.Result{
			RequeueAfter: 1 * time.Minute,
		}, fmt.Errorf("failed to create patch helper: %w", err)
	}

	// Generate unique callback URL.
	u, err := r.generateUniqueCallBackURL(repository)
	if err != nil {
		return ctrl.Result{
			RequeueAfter: 1 * time.Minute,
		}, fmt.Errorf("unique URL generation failed: %w", err)
	}
	log.Info("setting status unique URL", "url", u)

	repository.Status = v1alpha1.KrokRepositoryStatus{
		UniqueURL: u,
	}

	// Find the auth authSecret
	authSecret := &corev1.Secret{}
	if err := r.Client.Get(ctx, types.NamespacedName{
		Name:      repository.Spec.AuthSecretRef.Name,
		Namespace: repository.Spec.AuthSecretRef.Namespace,
	}, authSecret); err != nil {
		// Error reading the object - requeue the request.
		return ctrl.Result{
			RequeueAfter: 1 * time.Minute,
		}, fmt.Errorf("failed to find associated authSecret object: %w", err)
	}

	// Find the platform secret
	providerSecret := &corev1.Secret{}
	if err := r.Client.Get(ctx, types.NamespacedName{
		Name:      repository.Spec.ProviderTokenSecretRef.Name,
		Namespace: repository.Spec.ProviderTokenSecretRef.Namespace,
	}, providerSecret); err != nil {
		// Error reading the object - requeue the request.
		return ctrl.Result{
			RequeueAfter: 1 * time.Minute,
		}, fmt.Errorf("failed to find associated provider object: %w", err)
	}

	log.V(4).Info("found secrets", "authSecret", klog.KObj(authSecret), "providerSecret", klog.KObj(providerSecret))

	platformProvider, ok := r.PlatformProviders[repository.Spec.Platform]
	if !ok {
		return ctrl.Result{}, fmt.Errorf("platform not support %q", repository.Spec.Platform)
	}

	token, ok := providerSecret.Data["token"]
	if !ok {
		return ctrl.Result{}, fmt.Errorf("failed to find 'token' in the provider secret")
	}

	secret, ok := authSecret.Data["secret"]
	if !ok {
		return ctrl.Result{}, fmt.Errorf("failed to find 'secret' in the auth secret")
	}

	if err := platformProvider.CreateHook(ctx, repository, string(token), string(secret)); err != nil {
		return ctrl.Result{
			RequeueAfter: 5 * time.Minute,
		}, fmt.Errorf("failed to create hook for repository: %w", err)
	}

	// Patch the source object.
	if err := patchHelper.Patch(ctx, repository); err != nil {
		return ctrl.Result{
			RequeueAfter: 1 * time.Minute,
		}, fmt.Errorf("failed to patch repository object: %w", err)
	}
	log.V(4).Info("patch successful")
	// Create Hook
	return ctrl.Result{}, nil
}

// generateUniqueCallBackURL takes a repository and generates a unique URL based on the ID and Type of the repo
// and the configured Krok hostname.
func (r *KrokRepositoryReconciler) generateUniqueCallBackURL(repo *v1alpha1.KrokRepository) (string, error) {
	u, err := url.Parse(fmt.Sprintf("%s://%s", r.HookProtocol, r.HookBase))
	if err != nil {
		return "", fmt.Errorf("failed to generate unique URL for repository: %w", err)
	}
	u.Path = path.Join(u.Path, "hooks", repo.Name, repo.Spec.Platform, "callback")
	return u.String(), nil
}

// SetupWithManager sets up the controller with the Manager.
func (r *KrokRepositoryReconciler) SetupWithManager(mgr ctrl.Manager) error {
	return ctrl.NewControllerManagedBy(mgr).
		For(&v1alpha1.KrokRepository{}).
		Complete(r)
}