mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-29 09:26:17 -05:00
d1ace13713
* Remove `--config` and `--master-secret` falgs * Add `--workspace` flag * In CLI, only work on files with paths created from `cli/internal/cmd` * Properly print values for GCP on IAM create when not directly updating the config --------- Signed-off-by: Daniel Weiße <dw@edgeless.systems>
152 lines
4.0 KiB
Go
152 lines
4.0 KiB
Go
/*
|
|
Copyright (c) Edgeless Systems GmbH
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
|
|
package helm
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/edgelesssys/constellation/v2/internal/constants"
|
|
"github.com/edgelesssys/constellation/v2/internal/retry"
|
|
"helm.sh/helm/v3/pkg/action"
|
|
"helm.sh/helm/v3/pkg/chart"
|
|
"helm.sh/helm/v3/pkg/cli"
|
|
"k8s.io/apimachinery/pkg/util/wait"
|
|
)
|
|
|
|
const (
|
|
// timeout is the maximum time given to the helm Installer.
|
|
timeout = 10 * time.Minute
|
|
// maximumRetryAttempts is the maximum number of attempts to retry a helm install.
|
|
maximumRetryAttempts = 3
|
|
)
|
|
|
|
type debugLog interface {
|
|
Debugf(format string, args ...any)
|
|
Sync()
|
|
}
|
|
|
|
// Installer is a wrapper for a helm install action.
|
|
type Installer struct {
|
|
*action.Install
|
|
log debugLog
|
|
}
|
|
|
|
// NewInstaller creates a new Installer with the given logger.
|
|
func NewInstaller(kubeconfig string, logger debugLog) (*Installer, error) {
|
|
settings := cli.New()
|
|
settings.KubeConfig = kubeconfig
|
|
|
|
actionConfig := &action.Configuration{}
|
|
if err := actionConfig.Init(settings.RESTClientGetter(), constants.HelmNamespace,
|
|
"secret", logger.Debugf); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
action := action.NewInstall(actionConfig)
|
|
action.Namespace = constants.HelmNamespace
|
|
action.Timeout = timeout
|
|
|
|
return &Installer{
|
|
Install: action,
|
|
log: logger,
|
|
}, nil
|
|
}
|
|
|
|
// InstallChart is the generic install function for helm charts.
|
|
func (h *Installer) InstallChart(ctx context.Context, release Release) error {
|
|
return h.InstallChartWithValues(ctx, release, nil)
|
|
}
|
|
|
|
// InstallChartWithValues is the generic install function for helm charts with custom values.
|
|
func (h *Installer) InstallChartWithValues(ctx context.Context, release Release, extraValues map[string]any) error {
|
|
mergedVals := mergeMaps(release.Values, extraValues)
|
|
h.ReleaseName = release.ReleaseName
|
|
if err := h.SetWaitMode(release.WaitMode); err != nil {
|
|
return err
|
|
}
|
|
return h.install(ctx, release.Chart, mergedVals)
|
|
}
|
|
|
|
// install tries to install the given chart and aborts after ~5 tries.
|
|
// The function will wait 30 seconds before retrying a failed installation attempt.
|
|
// After 3 tries, the retrier will be canceled and the function returns with an error.
|
|
func (h *Installer) install(ctx context.Context, chart *chart.Chart, values map[string]any) error {
|
|
var retries int
|
|
retriable := func(err error) bool {
|
|
// abort after maximumRetryAttempts tries.
|
|
if retries >= maximumRetryAttempts {
|
|
return false
|
|
}
|
|
retries++
|
|
// only retry if atomic is set
|
|
// otherwise helm doesn't uninstall
|
|
// the release on failure
|
|
if !h.Atomic {
|
|
return false
|
|
}
|
|
// check if error is retriable
|
|
return wait.Interrupted(err) ||
|
|
strings.Contains(err.Error(), "connection refused")
|
|
}
|
|
doer := installDoer{
|
|
h,
|
|
chart,
|
|
values,
|
|
h.log,
|
|
}
|
|
retrier := retry.NewIntervalRetrier(doer, 30*time.Second, retriable)
|
|
|
|
retryLoopStartTime := time.Now()
|
|
if err := retrier.Do(ctx); err != nil {
|
|
return fmt.Errorf("helm install: %w", err)
|
|
}
|
|
retryLoopFinishDuration := time.Since(retryLoopStartTime)
|
|
h.log.Debugf("Helm chart %q installation finished after %s", chart.Name(), retryLoopFinishDuration)
|
|
|
|
return nil
|
|
}
|
|
|
|
// SetWaitMode sets the wait mode of the installer.
|
|
func (h *Installer) SetWaitMode(waitMode WaitMode) error {
|
|
switch waitMode {
|
|
case WaitModeNone:
|
|
h.Wait = false
|
|
h.Atomic = false
|
|
case WaitModeWait:
|
|
h.Wait = true
|
|
h.Atomic = false
|
|
case WaitModeAtomic:
|
|
h.Wait = true
|
|
h.Atomic = true
|
|
default:
|
|
return fmt.Errorf("unknown wait mode %q", waitMode)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// installDoer is a help struct to enable retrying helm's install action.
|
|
type installDoer struct {
|
|
Installer *Installer
|
|
chart *chart.Chart
|
|
values map[string]any
|
|
log debugLog
|
|
}
|
|
|
|
// Do logs which chart is installed and tries to install it.
|
|
func (i installDoer) Do(ctx context.Context) error {
|
|
i.log.Debugf("Trying to install Helm chart %s", i.chart.Name())
|
|
if _, err := i.Installer.RunWithContext(ctx, i.chart, i.values); err != nil {
|
|
i.log.Debugf("Helm chart installation %s failed: %v", i.chart.Name(), err)
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|