cli: install cilium in cli instead of bootstrapper (#2146)

* add wait and restartDS

* cilium working (tested on azure + gcp)

* clean helm code from bootstrapper

* fixup! clean helm code from bootstrapper

* fixup! clean helm code from bootstrapper

* fixup! clean helm code from bootstrapper

* add patchnode for gcp

* fix gcp

* patch node inside bootstrapper

* apply renaming of client

* fixup! apply renaming of client

* otto feedback

cli/internal/helm/install.go

@@ -0,0 +1,160 @@
+/*
+Copyright (c) Edgeless Systems GmbH
+
+SPDX-License-Identifier: AGPL-3.0-only
+*/
+
+package helm
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"strings"
+	"time"
+
+	"github.com/edgelesssys/constellation/v2/internal/constants"
+	"github.com/edgelesssys/constellation/v2/internal/retry"
+	"helm.sh/helm/v3/pkg/action"
+	"helm.sh/helm/v3/pkg/chart"
+	"helm.sh/helm/v3/pkg/chart/loader"
+	"helm.sh/helm/v3/pkg/cli"
+	"k8s.io/apimachinery/pkg/util/wait"
+)
+
+const (
+	// timeout is the maximum time given to the helm Installer.
+	timeout = 10 * time.Minute
+	// maximumRetryAttempts is the maximum number of attempts to retry a helm install.
+	maximumRetryAttempts = 3
+)
+
+type debugLog interface {
+	Debugf(format string, args ...any)
+	Sync()
+}
+
+// Installer is a wrapper for a helm install action.
+type Installer struct {
+	*action.Install
+	log debugLog
+}
+
+// NewInstaller creates a new Installer with the given logger.
+func NewInstaller(kubeconfig string, logger debugLog) (*Installer, error) {
+	settings := cli.New()
+	settings.KubeConfig = kubeconfig
+
+	actionConfig := &action.Configuration{}
+	if err := actionConfig.Init(settings.RESTClientGetter(), constants.HelmNamespace,
+		"secret", logger.Debugf); err != nil {
+		return nil, err
+	}
+
+	action := action.NewInstall(actionConfig)
+	action.Namespace = constants.HelmNamespace
+	action.Timeout = timeout
+
+	return &Installer{
+		Install: action,
+		log:     logger,
+	}, nil
+}
+
+// InstallChart is the generic install function for helm charts.
+func (h *Installer) InstallChart(ctx context.Context, release Release) error {
+	return h.InstallChartWithValues(ctx, release, nil)
+}
+
+// InstallChartWithValues is the generic install function for helm charts with custom values.
+func (h *Installer) InstallChartWithValues(ctx context.Context, release Release, extraValues map[string]any) error {
+	mergedVals := mergeMaps(release.Values, extraValues)
+	h.ReleaseName = release.ReleaseName
+	if err := h.SetWaitMode(release.WaitMode); err != nil {
+		return err
+	}
+	return h.install(ctx, release.Chart, mergedVals)
+}
+
+// install tries to install the given chart and aborts after ~5 tries.
+// The function will wait 30 seconds before retrying a failed installation attempt.
+// After 3 tries, the retrier will be canceled and the function returns with an error.
+func (h *Installer) install(ctx context.Context, chartRaw []byte, values map[string]any) error {
+	var retries int
+	retriable := func(err error) bool {
+		// abort after maximumRetryAttempts tries.
+		if retries >= maximumRetryAttempts {
+			return false
+		}
+		retries++
+		// only retry if atomic is set
+		// otherwise helm doesn't uninstall
+		// the release on failure
+		if !h.Atomic {
+			return false
+		}
+		// check if error is retriable
+		return wait.Interrupted(err) ||
+			strings.Contains(err.Error(), "connection refused")
+	}
+
+	reader := bytes.NewReader(chartRaw)
+	chart, err := loader.LoadArchive(reader)
+	if err != nil {
+		return fmt.Errorf("helm load archive: %w", err)
+	}
+
+	doer := installDoer{
+		h,
+		chart,
+		values,
+		h.log,
+	}
+	retrier := retry.NewIntervalRetrier(doer, 30*time.Second, retriable)
+
+	retryLoopStartTime := time.Now()
+	if err := retrier.Do(ctx); err != nil {
+		return fmt.Errorf("helm install: %w", err)
+	}
+	retryLoopFinishDuration := time.Since(retryLoopStartTime)
+	h.log.Debugf("Helm chart %q installation finished after %s", chart.Name(), retryLoopFinishDuration)
+
+	return nil
+}
+
+// SetWaitMode sets the wait mode of the installer.
+func (h *Installer) SetWaitMode(waitMode WaitMode) error {
+	switch waitMode {
+	case WaitModeNone:
+		h.Wait = false
+		h.Atomic = false
+	case WaitModeWait:
+		h.Wait = true
+		h.Atomic = false
+	case WaitModeAtomic:
+		h.Wait = true
+		h.Atomic = true
+	default:
+		return fmt.Errorf("unknown wait mode %q", waitMode)
+	}
+	return nil
+}
+
+// installDoer is a help struct to enable retrying helm's install action.
+type installDoer struct {
+	Installer *Installer
+	chart     *chart.Chart
+	values    map[string]any
+	log       debugLog
+}
+
+// Do logs which chart is installed and tries to install it.
+func (i installDoer) Do(ctx context.Context) error {
+	i.log.Debugf("Trying to install Helm chart %s", i.chart.Name())
+	if _, err := i.Installer.RunWithContext(ctx, i.chart, i.values); err != nil {
+		i.log.Debugf("Helm chart installation % failed: %v", i.chart.Name(), err)
+		return err
+	}
+
+	return nil
+}