1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
package compose
import (
"context"
"strings"
apierrors "k8s.io/apimachinery/pkg/api/errors"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/runtime/schema"
commonv1 "github.com/johnandersen777/socialweb-computer-kcp/api/common/v1alpha1"
"github.com/johnandersen777/socialweb-computer-kcp/api/v1alpha1"
"github.com/johnandersen777/socialweb-computer-kcp/internal/bus"
"github.com/johnandersen777/socialweb-computer-kcp/internal/contract/atprotorepo"
"github.com/johnandersen777/socialweb-computer-kcp/internal/controllers/runtime/kube"
)
func (c *Composer) ApplyRepo(ctx context.Context, r Root, ws, name, backendKind string, backendGVR schema.GroupVersionResource, backend any) error {
return c.applyRepo(ctx, r, ws, name, backendKind, backendGVR, backend, nil)
}
func (c *Composer) applyRepo(ctx context.Context, r Root, ws, name, backendKind string, backendGVR schema.GroupVersionResource, backend any,
labels map[string]string) error {
if err := c.ApplyTyped(ctx, r, ws, backendGVR, v1alpha1.GroupVersion.String(), backendKind, backend); err != nil {
return err
}
repo := &v1alpha1.AtprotoRepo{ObjectMeta: metav1.ObjectMeta{Name: name, Labels: labels},
Spec: v1alpha1.AtprotoRepoSpec{BackendRef: commonv1.ObjectRef{Group: v1alpha1.GroupName, Kind: backendKind, Name: name}}}
return c.ApplyTyped(ctx, r, ws, v1alpha1.AtprotoRepoGVR, v1alpha1.GroupVersion.String(), KindAtprotoRepo, repo)
}
type LocalAccount struct {
DID string
Handle string
SessionID string
PLC bool
}
func localAccountNames(acct LocalAccount) (repo, account, session string) {
return atprotorepo.RepoName(acct.DID), ObjectName("account", acct.Handle), ObjectName("session", acct.Handle)
}
func LocalAccountLinks(ws string, acct LocalAccount) []Link {
if strings.TrimSpace(acct.DID) == "" {
return nil
}
pdsTarget := AppRef(ComponentKindPds, PdsComponent, ws)
name, accountName, sessionName := localAccountNames(acct)
localRef := AppRef(KindLocalRepo, name, ws)
links := []Link{RepoBackendLink(AppRef(KindAtprotoRepo, name, ws), localRef), LocalRepoLink(localRef, pdsTarget, acct.DID),
AccountStatusLink(AppRef("PdsAccount", accountName, ws), pdsTarget, acct.DID)}
if acct.SessionID != "" {
links = append(links, SessionStatusLink(AppRef("AtprotoSession", sessionName, ws), pdsTarget, acct.DID))
}
return links
}
func (c *Composer) PruneLocalAccounts(ctx context.Context, r Root, ws string, keep LocalAccount) error {
ws = workspaceOr(ws, r.Workspace)
keepRepo, keepAccount, keepSession, keepPLC := "", "", "", ""
if strings.TrimSpace(keep.DID) != "" {
keepRepo, keepAccount, keepSession = localAccountNames(keep)
keepPLC = ObjectName("plc", keep.DID)
}
selector := func(kind string) string { return OwnerLabel + "=" + r.Owner() + "," + ComponentLabel + "=" + kind }
repos, err := c.Client(ws, v1alpha1.LocalRepoGVR)
if err != nil {
return err
}
items, err := kube.List[metav1.PartialObjectMetadata](ctx, repos, metav1.ListOptions{LabelSelector: selector(KindLocalRepo)})
if err != nil && !apierrors.IsNotFound(err) && !apierrors.IsForbidden(err) {
return err
}
abstract := map[string]bool{}
for i := range items {
if items[i].Name != keepRepo {
abstract[items[i].Name] = true
}
}
if len(abstract) > 0 {
ri, err := c.Client(ws, v1alpha1.AtprotoRepoGVR)
if err != nil {
return err
}
for name := range abstract {
if err := ri.Delete(ctx, name, metav1.DeleteOptions{}); err != nil && !apierrors.IsNotFound(err) {
return err
}
}
}
for _, p := range []struct {
gvr schema.GroupVersionResource
kind string
keep string
}{
{v1alpha1.LocalRepoGVR, KindLocalRepo, keepRepo},
{v1alpha1.PdsAccountGVR, "PdsAccount", keepAccount},
{v1alpha1.AtprotoSessionGVR, "AtprotoSession", keepSession},
{v1alpha1.PlcIdentityGVR, "PlcIdentity", keepPLC},
} {
if err := c.Prune(ctx, ws, p.gvr, selector(p.kind), map[string]bool{p.keep: p.keep != ""}); err != nil {
return err
}
}
return nil
}
func (c *Composer) ApplyLocalAccount(ctx context.Context, r Root, ws string, acct LocalAccount) error {
if strings.TrimSpace(acct.DID) == "" {
return nil
}
if err := c.PruneLocalAccounts(ctx, r, ws, acct); err != nil {
return err
}
pdsRef := commonv1.ObjectRef{Kind: ComponentKindPds, Name: PdsComponent}
name, accountName, sessionName := localAccountNames(acct)
local := &v1alpha1.LocalRepo{ObjectMeta: metav1.ObjectMeta{Name: name}, Spec: v1alpha1.LocalRepoSpec{DID: acct.DID, PdsRef: pdsRef}}
if err := c.ApplyRepo(ctx, r, ws, name, KindLocalRepo, v1alpha1.LocalRepoGVR, local); err != nil {
return err
}
account := &v1alpha1.PdsAccount{ObjectMeta: metav1.ObjectMeta{Name: accountName},
Spec: v1alpha1.PdsAccountSpec{DID: acct.DID, Handle: acct.Handle, PdsRef: pdsRef}}
if err := c.ApplyTyped(ctx, r, ws, v1alpha1.PdsAccountGVR, v1alpha1.GroupVersion.String(), "PdsAccount", account); err != nil {
return err
}
if acct.PLC {
plc := &v1alpha1.PlcIdentity{ObjectMeta: metav1.ObjectMeta{Name: ObjectName("plc", acct.DID)}, Spec: v1alpha1.PlcIdentitySpec{DID: acct.DID}}
if err := c.ApplyTyped(ctx, r, ws, v1alpha1.PlcIdentityGVR, v1alpha1.GroupVersion.String(), "PlcIdentity", plc); err != nil {
return err
}
}
if acct.SessionID == "" {
return nil
}
session := &v1alpha1.AtprotoSession{ObjectMeta: metav1.ObjectMeta{Name: sessionName},
Spec: v1alpha1.AtprotoSessionSpec{DID: acct.DID, AccountRef: commonv1.LocalObjectRef{Name: accountName}, PdsRef: pdsRef, SessionID: acct.SessionID}}
return c.ApplyTyped(ctx, r, ws, v1alpha1.AtprotoSessionGVR, v1alpha1.GroupVersion.String(), "AtprotoSession", session)
}
func (c *Composer) ApplyRelayStatus(ctx context.Context, r Root, relayName string) error {
relayName = strings.TrimPrefix(strings.TrimSpace(relayName), ComponentKindRelay+"/")
if relayName == "" {
return nil
}
name := ObjectName("relay", relayName)
obj := &v1alpha1.RelayStatus{ObjectMeta: metav1.ObjectMeta{Name: name},
Spec: v1alpha1.RelayStatusSpec{RelayRef: commonv1.ObjectRef{Kind: ComponentKindRelay, Name: relayName}}}
if err := c.ApplyTyped(ctx, r, r.Workspace, v1alpha1.RelayStatusGVR, v1alpha1.GroupVersion.String(), "RelayStatus", obj); err != nil {
return err
}
return c.ApplyLinks(ctx, r, "relay-status", []Link{RefLink(AppRef("RelayStatus", name, r.Workspace),
AppRef(ComponentKindRelay, relayName, r.Workspace), Cap(bus.CapabilityXRPC, "_health"))})
}
func (c *Composer) ApplyVaultCredential(ctx context.Context, r Root, server, mount, path string) error {
server = strings.TrimSpace(server)
mount = strings.Trim(strings.TrimSpace(mount), "/")
path = strings.Trim(strings.TrimSpace(path), "/")
if server == "" || mount == "" || path == "" {
return nil
}
obj := &v1alpha1.VaultCredential{ObjectMeta: metav1.ObjectMeta{Name: ObjectName("credential", server+"-"+path)},
Spec: v1alpha1.VaultCredentialSpec{SecretRef: commonv1.SecretRef{Vault: v1alpha1.VaultServerRef(server), Mount: mount, Path: path}}}
return c.ApplyTyped(ctx, r, r.Workspace, v1alpha1.VaultCredentialGVR, v1alpha1.GroupVersion.String(), "VaultCredential", obj)
}
