vaultserver.go

/*
Copyright AppsCode Inc. and Contributors

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package util

import (
	"context"
	"encoding/json"
	"fmt"

	api "kubevault.dev/apimachinery/apis/kubevault/v1alpha2"
	cs "kubevault.dev/apimachinery/client/clientset/versioned/typed/kubevault/v1alpha2"

	jsonpatch "github.com/evanphx/json-patch"
	"github.com/pkg/errors"
	kerr "k8s.io/apimachinery/pkg/api/errors"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	"k8s.io/apimachinery/pkg/types"
	"k8s.io/apimachinery/pkg/util/wait"
	"k8s.io/klog/v2"
	kutil "kmodules.xyz/client-go"
)

func CreateOrPatchVaultServer(
	ctx context.Context,
	c cs.KubevaultV1alpha2Interface,
	meta metav1.ObjectMeta,
	transform func(alert *api.VaultServer) *api.VaultServer,
	opts metav1.PatchOptions,
) (*api.VaultServer, kutil.VerbType, error) {
	cur, err := c.VaultServers(meta.Namespace).Get(ctx, meta.Name, metav1.GetOptions{})
	if kerr.IsNotFound(err) {
		klog.V(3).Infof("Creating VaultServer %s/%s.", meta.Namespace, meta.Name)
		out, err := c.VaultServers(meta.Namespace).Create(ctx, transform(&api.VaultServer{
			TypeMeta: metav1.TypeMeta{
				Kind:       api.ResourceKindVaultServer,
				APIVersion: api.SchemeGroupVersion.String(),
			},
			ObjectMeta: meta,
		}), metav1.CreateOptions{
			DryRun:       opts.DryRun,
			FieldManager: opts.FieldManager,
		})
		return out, kutil.VerbCreated, err
	} else if err != nil {
		return nil, kutil.VerbUnchanged, err
	}
	return PatchVaultServer(ctx, c, cur, transform, opts)
}

func PatchVaultServer(
	ctx context.Context,
	c cs.KubevaultV1alpha2Interface,
	cur *api.VaultServer,
	transform func(*api.VaultServer) *api.VaultServer,
	opts metav1.PatchOptions,
) (*api.VaultServer, kutil.VerbType, error) {
	return PatchVaultServerObject(ctx, c, cur, transform(cur.DeepCopy()), opts)
}

func PatchVaultServerObject(
	ctx context.Context,
	c cs.KubevaultV1alpha2Interface,
	cur, mod *api.VaultServer,
	opts metav1.PatchOptions,
) (*api.VaultServer, kutil.VerbType, error) {
	curJson, err := json.Marshal(cur)
	if err != nil {
		return nil, kutil.VerbUnchanged, err
	}

	modJson, err := json.Marshal(mod)
	if err != nil {
		return nil, kutil.VerbUnchanged, err
	}

	patch, err := jsonpatch.CreateMergePatch(curJson, modJson)
	if err != nil {
		return nil, kutil.VerbUnchanged, err
	}
	if len(patch) == 0 || string(patch) == "{}" {
		return cur, kutil.VerbUnchanged, nil
	}
	klog.V(3).Infof("Patching VaultServer %s/%s with %s.", cur.Namespace, cur.Name, string(patch))
	out, err := c.VaultServers(cur.Namespace).Patch(ctx, cur.Name, types.MergePatchType, patch, opts)
	return out, kutil.VerbPatched, err
}

func TryUpdateVaultServer(
	ctx context.Context,
	c cs.KubevaultV1alpha2Interface,
	meta metav1.ObjectMeta,
	transform func(*api.VaultServer) *api.VaultServer,
	opts metav1.UpdateOptions,
) (result *api.VaultServer, err error) {
	attempt := 0
	err = wait.PollImmediate(kutil.RetryInterval, kutil.RetryTimeout, func() (bool, error) {
		attempt++
		cur, e2 := c.VaultServers(meta.Namespace).Get(ctx, meta.Name, metav1.GetOptions{})
		if kerr.IsNotFound(e2) {
			return false, e2
		} else if e2 == nil {
			result, e2 = c.VaultServers(cur.Namespace).Update(ctx, transform(cur.DeepCopy()), opts)
			return e2 == nil, nil
		}
		klog.Errorf("Attempt %d failed to update VaultServer %s/%s due to %v.", attempt, cur.Namespace, cur.Name, e2)
		return false, nil
	})

	if err != nil {
		err = errors.Errorf("failed to update VaultServer %s/%s after %d attempts due to %v", meta.Namespace, meta.Name, attempt, err)
	}
	return
}

func UpdateVaultServerStatus(
	ctx context.Context,
	c cs.KubevaultV1alpha2Interface,
	meta metav1.ObjectMeta,
	transform func(*api.VaultServerStatus) *api.VaultServerStatus,
	opts metav1.UpdateOptions,
) (result *api.VaultServer, err error) {
	apply := func(x *api.VaultServer) *api.VaultServer {
		out := &api.VaultServer{
			TypeMeta:   x.TypeMeta,
			ObjectMeta: x.ObjectMeta,
			Spec:       x.Spec,
			Status:     *transform(x.Status.DeepCopy()),
		}
		return out
	}

	attempt := 0
	cur, err := c.VaultServers(meta.Namespace).Get(ctx, meta.Name, metav1.GetOptions{})
	if err != nil {
		return nil, err
	}
	err = wait.PollImmediate(kutil.RetryInterval, kutil.RetryTimeout, func() (bool, error) {
		attempt++
		var e2 error
		result, e2 = c.VaultServers(meta.Namespace).UpdateStatus(ctx, apply(cur), opts)
		if kerr.IsConflict(e2) {
			latest, e3 := c.VaultServers(meta.Namespace).Get(ctx, meta.Name, metav1.GetOptions{})
			switch {
			case e3 == nil:
				cur = latest
				return false, nil
			case kutil.IsRequestRetryable(e3):
				return false, nil
			default:
				return false, e3
			}
		} else if err != nil && !kutil.IsRequestRetryable(e2) {
			return false, e2
		}
		return e2 == nil, nil
	})

	if err != nil {
		err = fmt.Errorf("failed to update status of VaultServer %s/%s after %d attempts due to %v", meta.Namespace, meta.Name, attempt, err)
	}
	return
}