mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-12 09:24:24 -05:00
0a911806d1
* Move IAM migration client to cloudcmd package * Move Terraform Cluster upgrade client to cloudcmd package * Use hcl for creating Terraform IAM variables files * Unify terraform upgrade code * Rename some cloudcmd files for better clarity --------- Signed-off-by: Daniel Weiße <dw@edgeless.systems>
88 lines
3.1 KiB
Go
88 lines
3.1 KiB
Go
/*
|
|
Copyright (c) Edgeless Systems GmbH
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
|
|
package cloudcmd
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"io"
|
|
"path/filepath"
|
|
"strings"
|
|
|
|
"github.com/edgelesssys/constellation/v2/cli/internal/terraform"
|
|
"github.com/edgelesssys/constellation/v2/internal/cloud/cloudprovider"
|
|
"github.com/edgelesssys/constellation/v2/internal/constants"
|
|
"github.com/edgelesssys/constellation/v2/internal/file"
|
|
)
|
|
|
|
// ClusterUpgrader is responsible for performing Terraform migrations on cluster upgrades.
|
|
type ClusterUpgrader struct {
|
|
tf tfClusterUpgradeClient
|
|
policyPatcher policyPatcher
|
|
fileHandler file.Handler
|
|
existingWorkspace string
|
|
upgradeWorkspace string
|
|
logLevel terraform.LogLevel
|
|
}
|
|
|
|
// NewClusterUpgrader initializes and returns a new ClusterUpgrader.
|
|
// existingWorkspace is the directory holding the existing Terraform resources.
|
|
// upgradeWorkspace is the directory to use for holding temporary files and resources required to apply the upgrade.
|
|
func NewClusterUpgrader(ctx context.Context, existingWorkspace, upgradeWorkspace string,
|
|
logLevel terraform.LogLevel, fileHandler file.Handler,
|
|
) (*ClusterUpgrader, error) {
|
|
tfClient, err := terraform.New(ctx, filepath.Join(upgradeWorkspace, constants.TerraformUpgradeWorkingDir))
|
|
if err != nil {
|
|
return nil, fmt.Errorf("setting up terraform client: %w", err)
|
|
}
|
|
|
|
return &ClusterUpgrader{
|
|
tf: tfClient,
|
|
policyPatcher: NewAzurePolicyPatcher(),
|
|
fileHandler: fileHandler,
|
|
existingWorkspace: existingWorkspace,
|
|
upgradeWorkspace: upgradeWorkspace,
|
|
logLevel: logLevel,
|
|
}, nil
|
|
}
|
|
|
|
// PlanClusterUpgrade prepares the upgrade workspace and plans the possible Terraform migrations for Constellation's cluster resources (Loadbalancers, VMs, networks etc.).
|
|
// In case of possible migrations, the diff is written to outWriter and this function returns true.
|
|
func (u *ClusterUpgrader) PlanClusterUpgrade(ctx context.Context, outWriter io.Writer, vars terraform.Variables, csp cloudprovider.Provider,
|
|
) (bool, error) {
|
|
return planUpgrade(
|
|
ctx, u.tf, u.fileHandler, outWriter, u.logLevel, vars,
|
|
filepath.Join("terraform", strings.ToLower(csp.String())),
|
|
u.existingWorkspace,
|
|
filepath.Join(u.upgradeWorkspace, constants.TerraformUpgradeBackupDir),
|
|
)
|
|
}
|
|
|
|
// ApplyClusterUpgrade applies the Terraform migrations planned by PlanClusterUpgrade.
|
|
// On success, the workspace of the Upgrader replaces the existing Terraform workspace.
|
|
func (u *ClusterUpgrader) ApplyClusterUpgrade(ctx context.Context, csp cloudprovider.Provider) (terraform.ApplyOutput, error) {
|
|
tfOutput, err := u.tf.ApplyCluster(ctx, csp, u.logLevel)
|
|
if err != nil {
|
|
return tfOutput, fmt.Errorf("terraform apply: %w", err)
|
|
}
|
|
if tfOutput.Azure != nil {
|
|
if err := u.policyPatcher.Patch(ctx, tfOutput.Azure.AttestationURL); err != nil {
|
|
return tfOutput, fmt.Errorf("patching policies: %w", err)
|
|
}
|
|
}
|
|
|
|
if err := moveUpgradeToCurrent(
|
|
u.fileHandler,
|
|
u.existingWorkspace,
|
|
filepath.Join(u.upgradeWorkspace, constants.TerraformUpgradeWorkingDir),
|
|
); err != nil {
|
|
return tfOutput, fmt.Errorf("promoting upgrade workspace to current workspace: %w", err)
|
|
}
|
|
|
|
return tfOutput, nil
|
|
}
|