[Backport release-1.8] Feat: add check prometheus metrics workflowStepDefinition (#5776)

* add metrics

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>

add check metrics

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>
(cherry picked from commit 18bb9ed998)

* add check-metrics definition example

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>

rename example

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>
(cherry picked from commit 0da4e8fad9)

* small fix

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>
(cherry picked from commit 55b5e96d8d)

* fix lint

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>
(cherry picked from commit 2c81264577)

* add default metrics

Signed-off-by: 楚岳 <wangyike.wyk@alibaba-inc.com>
(cherry picked from commit b440f75fd5)

---------

Co-authored-by: 楚岳 <wangyike.wyk@alibaba-inc.com>

.github/CODEOWNERS

@@ -26,9 +26,6 @@ vela-templates/                     @Somefive @barnettZQG @wonderflow @FogDong
 # Owner of vela CLI
 references/cli/                     @Somefive @zzxwill @StevenLeiZhang @charlie0129 @chivalryq
 
-# Owner of vela APIServer
-pkg/apiserver/                     @barnettZQG @yangsoon @FogDong
-
 # Owner of vela addon framework
 pkg/addon/                         @wangyikewxgm @wonderflow @charlie0129
 

.github/workflows/apiserver-test.yml

@@ -1,199 +0,0 @@
-name: VelaUX APIServer Test
-
-on:
-  push:
-    branches:
-      - master
-      - release-*
-      - apiserver
-    tags:
-      - v*
-  workflow_dispatch: { }
-  pull_request:
-    branches:
-      - master
-      - release-*
-      - apiserver
-
-env:
-  # Common versions
-  GO_VERSION: '1.19'
-
-permissions:
-  contents: read
-
-jobs:
-
-  detect-noop:
-    runs-on: ubuntu-20.04
-    outputs:
-      noop: ${{ steps.noop.outputs.should_skip }}
-    steps:
-      - name: Detect No-op Changes
-        id: noop
-        uses: fkirc/skip-duplicate-actions@12aca0a884f6137d619d6a8a09fcc3406ced5281
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          paths_ignore: '["**.md", "**.mdx", "**.png", "**.jpg"]'
-          do_not_skip: '["workflow_dispatch", "schedule", "push"]'
-        continue-on-error: true
-
-  apiserver-unit-tests:
-    runs-on: ubuntu-20.04
-    needs: detect-noop
-    if: needs.detect-noop.outputs.noop != 'true'
-
-    steps:
-      - name: Set up Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
-        with:
-          go-version: ${{ env.GO_VERSION }}
-        id: go
-
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
-        with:
-          submodules: true
-
-      - name: Cache Go Dependencies
-        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812
-        with:
-          path: .work/pkg
-          key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
-          restore-keys: ${{ runner.os }}-pkg-
-
-      - name: Install ginkgo
-        run: |
-          sudo sed -i 's/azure\.//' /etc/apt/sources.list
-          sudo apt-get update
-          sudo apt-get install -y golang-ginkgo-dev
-
-      - name: Start MongoDB
-        uses: supercharge/mongodb-github-action@538a4d2a1041920c47630172445cb688592d6e51 # 1.8.0
-        with:
-          mongodb-version: '5.0'
-
-        # TODO need update action version to resolve node 12 deprecated.
-      - name: install Kubebuilder
-        uses: RyanSiu1995/kubebuilder-action@ff52bff1bae252239223476e5ab0d71d6ba02343
-        with:
-          version: 3.1.0
-          kubebuilderOnly: false
-          kubernetesVersion: v1.21.2
-
-      - name: Run api server unit test
-        run: make unit-test-apiserver
-
-      - name: Upload coverage report
-        uses: codecov/codecov-action@d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          file: ./coverage.txt
-          flags: apiserver-unittests
-          name: codecov-umbrella
-
-  apiserver-e2e-tests:
-    runs-on: aliyun
-    needs: [ detect-noop ]
-    if: needs.detect-noop.outputs.noop != 'true'
-    strategy:
-      matrix:
-        k8s-version: ["v1.20","v1.24"]
-    concurrency:
-      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.k8s-version }}
-      cancel-in-progress: true
-
-    steps:
-      - name: Set up Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
-        with:
-          go-version: ${{ env.GO_VERSION }}
-        id: go
-
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
-        with:
-          submodules: true
-
-      - name: Get dependencies
-        run: |
-          go get -v -t -d ./...
-
-      - name: Tear down K3d if exist
-        run: |
-          k3d cluster delete || true
-          k3d cluster delete worker || true
-
-      - name: Calculate K3d args
-        run: |
-          EGRESS_ARG=""
-          if [[ "${{ matrix.k8s-version }}" == v1.24 ]]; then
-            EGRESS_ARG="--k3s-arg --egress-selector-mode=disabled@server:0"
-          fi
-          echo "EGRESS_ARG=${EGRESS_ARG}" >> $GITHUB_ENV 
-
-      - name: Setup K3d (Hub)
-        uses: nolar/setup-k3d-k3s@293b8e5822a20bc0d5bcdd4826f1a665e72aba96
-        with:
-          version: ${{ matrix.k8s-version }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          k3d-args: ${{ env.EGRESS_ARG }}
-
-
-      - name: Setup K3d (Worker)
-        uses: nolar/setup-k3d-k3s@293b8e5822a20bc0d5bcdd4826f1a665e72aba96
-        with:
-          version: ${{ matrix.k8s-version }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          k3d-name: worker
-          k3d-args: --kubeconfig-update-default=false --network=k3d-k3s-default ${{ env.EGRESS_ARG }}
-
-
-      - name: Kind Cluster (Worker)
-        run: |
-          internal_ip=$(docker network inspect k3d-k3s-default|jq ".[0].Containers"| jq -r '.[]| select(.Name=="k3d-worker-server-0")|.IPv4Address' | cut -d/ -f1)
-          k3d kubeconfig get worker > /tmp/worker.client.kubeconfig
-          cp /tmp/worker.client.kubeconfig /tmp/worker.kubeconfig
-          sed -i "s/0.0.0.0:[0-9]\+/$internal_ip:6443/"  /tmp/worker.kubeconfig
-
-      - name: Load image to k3d cluster
-        run: make image-load
-
-      - name: Cleanup for e2e tests
-        run: |
-          make vela-cli
-          make e2e-cleanup
-          make e2e-setup-core
-          bin/vela addon enable fluxcd
-          bin/vela addon enable vela-workflow --override-definitions
-          timeout 600s bash -c -- 'while true; do kubectl get ns flux-system; if [ $? -eq 0 ] ; then break; else sleep 5; fi;done'
-          kubectl wait --for=condition=Ready pod -l app.kubernetes.io/name=vela-core,app.kubernetes.io/instance=kubevela -n vela-system --timeout=600s
-          kubectl wait --for=condition=Ready pod -l app=source-controller -n flux-system --timeout=600s
-          kubectl wait --for=condition=Ready pod -l app=helm-controller -n flux-system --timeout=600s
-          kubectl wait --for=condition=Ready pod -l app.kubernetes.io/name=vela-workflow -n vela-system --timeout=600s
-
-      - name: Run api server e2e test
-        run: |
-          export ALIYUN_ACCESS_KEY_ID=${{ secrets.ALIYUN_ACCESS_KEY_ID }}
-          export ALIYUN_ACCESS_KEY_SECRET=${{ secrets.ALIYUN_ACCESS_KEY_SECRET }}
-          export GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
-          make e2e-apiserver-test
-
-      - name: Stop kubevela, get profile
-        run: |
-          make end-e2e-core-shards
-
-      - name: Upload coverage report
-        uses: codecov/codecov-action@d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          files: /tmp/e2e-profile.out, /tmp/e2e_apiserver_test.out
-          flags: apiserver-e2etests
-          name: codecov-umbrella
-
-      - name: Clean e2e profile
-        run: rm /tmp/e2e-profile.out
-
-      - name: Cleanup image
-        if: ${{ always() }}
-        run: make image-cleanup

.github/workflows/back-port.yml

@@ -17,12 +17,12 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           fetch-depth: 0
 
       - name: Open Backport PR
-        uses: zeebe-io/backport-action@2ee900dc92632adf994f8e437b6d16840fd61f58
+        uses: zeebe-io/backport-action@a759fd2d7d3314c9bb57d97a0350a12e878d3c7a
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           github_workspace: ${{ github.workspace }}

.github/workflows/chart.yml

@@ -31,7 +31,7 @@ jobs:
       VELA_ROLLOUT_HELM_CHART_NAME: vela-rollout
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
       - name: Get git revision
         id: vars
         shell: bash

.github/workflows/codeql-analysis.yml

@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@959cbb7472c4d4ad70cdfe6f4976053fe48ab394 # v2.1.37

.github/workflows/commit-lint.yml

@@ -15,7 +15,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: thehanimo/pr-title-checker@v1.3.5
+      - uses: thehanimo/pr-title-checker@v1.3.7
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           pass_on_octokit_error: true

.github/workflows/core-api-test.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Set up Go 1.19
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         env:
           GO_VERSION: '1.19'
         with:
@@ -25,7 +25,7 @@ jobs:
         id: go
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
 
       - name: Get the version
         id: get_version

.github/workflows/definition-lint.yml

@@ -23,12 +23,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           submodules: true
 

.github/workflows/e2e-multicluster-test.yml

@@ -52,10 +52,10 @@ jobs:
 
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
 
       - name: Setup Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 

.github/workflows/e2e-rollout-test.yml

@@ -52,10 +52,10 @@ jobs:
 
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
 
       - name: Setup Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 

.github/workflows/e2e-test.yml

@@ -52,10 +52,10 @@ jobs:
 
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
 
       - name: Setup Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 

.github/workflows/go.yml

@@ -44,12 +44,12 @@ jobs:
 
     steps:
       - name: Setup Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           submodules: true
 
@@ -69,12 +69,12 @@ jobs:
 
     steps:
       - name: Setup Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           submodules: true
 
@@ -94,12 +94,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           submodules: true
 
       - name: Setup Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 
@@ -109,7 +109,7 @@ jobs:
           node-version: '14'
 
       - name: Cache Go Dependencies
-        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
         with:
           path: .work/pkg
           key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -133,17 +133,17 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           submodules: true
 
       - name: Setup Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 
       - name: Cache Go Dependencies
-        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
         with:
           path: .work/pkg
           key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -164,13 +164,13 @@ jobs:
     if: needs.detect-noop.outputs.noop != 'true'
     steps:
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           submodules: true
       - name: Set up QEMU
         uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 # v2.1.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8c0edbc76e98fa90f69d9a2c020dcb50019dc325 # v2.2.1
+        uses: docker/setup-buildx-action@f03ac48505955848960e80bbb68046aa35c7b9e7 # v2.4.1
       - name: Build Test for vela core
         uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 # v4.0.0
         with:
@@ -178,39 +178,19 @@ jobs:
           file: Dockerfile
           platforms: linux/amd64,linux/arm64
 
-  check-apiserver-image-build:
-    runs-on: ubuntu-latest
-    needs: detect-noop
-    if: needs.detect-noop.outputs.noop != 'true'
-    steps:
-      - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
-        with:
-          submodules: true
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 # v2.1.0
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8c0edbc76e98fa90f69d9a2c020dcb50019dc325 # v2.2.1
-      - name: Build Test for apiserver
-        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 # v4.0.0
-        with:
-          context: .
-          file: Dockerfile.apiserver
-          platforms: linux/amd64,linux/arm64
-
   check-cli-image-build:
     runs-on: ubuntu-latest
     needs: detect-noop
     if: needs.detect-noop.outputs.noop != 'true'
     steps:
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           submodules: true
       - name: Set up QEMU
         uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 # v2.1.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8c0edbc76e98fa90f69d9a2c020dcb50019dc325 # v2.2.1
+        uses: docker/setup-buildx-action@f03ac48505955848960e80bbb68046aa35c7b9e7 # v2.4.1
       - name: Build Test for CLI
         uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 # v4.0.0
         with:

.github/workflows/issue-commands.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout Actions
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           repository: "oam-dev/kubevela-github-actions"
           path: ./actions
@@ -72,11 +72,11 @@ jobs:
             })
             console.log("Added '" + label + "' label.")
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           fetch-depth: 0
       - name: Open Backport PR
-        uses: zeebe-io/backport-action@2ee900dc92632adf994f8e437b6d16840fd61f58
+        uses: zeebe-io/backport-action@a759fd2d7d3314c9bb57d97a0350a12e878d3c7a
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           github_workspace: ${{ github.workspace }}

.github/workflows/license.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Check for unapproved licenses
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:

.github/workflows/registry.yml

@@ -20,7 +20,7 @@ jobs:
       packages: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
       - name: Get the version
         id: get_version
         run: |
@@ -53,7 +53,7 @@ jobs:
           username: ${{ secrets.ACR_USERNAME }}
           password: ${{ secrets.ACR_PASSWORD }}
       - uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 # v2.1.0
-      - uses: docker/setup-buildx-action@8c0edbc76e98fa90f69d9a2c020dcb50019dc325 # v2.2.1
+      - uses: docker/setup-buildx-action@f03ac48505955848960e80bbb68046aa35c7b9e7 # v2.4.1
         with:
           driver-opts: image=moby/buildkit:master
 
@@ -100,7 +100,7 @@ jobs:
       packages: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
       - name: Get the version
         id: get_version
         run: |
@@ -133,29 +133,10 @@ jobs:
           username: ${{ secrets.ACR_USERNAME }}
           password: ${{ secrets.ACR_PASSWORD }}
       - uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 # v2.1.0
-      - uses: docker/setup-buildx-action@8c0edbc76e98fa90f69d9a2c020dcb50019dc325 # v2.2.1
+      - uses: docker/setup-buildx-action@f03ac48505955848960e80bbb68046aa35c7b9e7 # v2.4.1
         with:
           driver-opts: image=moby/buildkit:master
 
-      - uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 # v4.0.0
-        name: Build & Pushing vela-apiserver for Dockerhub, GHCR and ACR
-        with:
-          context: .
-          file: Dockerfile.apiserver
-          labels: |-
-            org.opencontainers.image.source=https://github.com/${{ github.repository }}
-            org.opencontainers.image.revision=${{ github.sha }}
-          platforms: linux/amd64,linux/arm64
-          push: ${{ github.event_name != 'pull_request' }}
-          build-args: |
-            GITVERSION=git-${{ steps.vars.outputs.git_revision }}
-            VERSION=${{ steps.get_version.outputs.VERSION }}
-            GOPROXY=https://proxy.golang.org
-          tags: |-
-            docker.io/oamdev/vela-apiserver:${{ steps.get_version.outputs.VERSION }}
-            ghcr.io/${{ github.repository_owner }}/oamdev/vela-apiserver:${{ steps.get_version.outputs.VERSION }}
-            ${{ secrets.ACR_DOMAIN }}/oamdev/vela-apiserver:${{ steps.get_version.outputs.VERSION }}
-
       - uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 # v4.0.0
         name: Build & Pushing runtime rollout Dockerhub, GHCR and ACR
         with:
@@ -182,7 +163,7 @@ jobs:
       CAPABILITY_ENDPOINT: oss-cn-beijing.aliyuncs.com
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
       - name: Install ossutil
         run: wget http://gosspublic.alicdn.com/ossutil/1.7.0/ossutil64 && chmod +x ossutil64 && mv ossutil64 ossutil
       - name: Configure Alibaba Cloud OSSUTIL

.github/workflows/release.yml

@@ -30,12 +30,12 @@ jobs:
     name: goreleaser
     steps:
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           fetch-depth: 0
       - run: git fetch --force --tags
       - name: Set up Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: 1.19
           cache: true
@@ -83,11 +83,11 @@ jobs:
     name: upload-sha256sums
     steps:
       - name: Checkout
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
       - name: Update kubectl plugin version in krew-index
         uses: rajatjindal/krew-release-bot@92da038bbf995803124a8e50ebd438b2f37bbbb0 # v0.0.43
       - name: Update Homebrew formula
-        uses: dawidd6/action-homebrew-bump-formula@02e79d9da43d79efa846d73695b6052cbbdbf48a # v3.8.3
+        uses: dawidd6/action-homebrew-bump-formula@e9b43cd30eec6ea80777e7e22e1526beb1675c18 # v3.9.0
         with:
           token: ${{ secrets.HOMEBREW_TOKEN }}
           formula: kubevela

.github/workflows/scorecards.yml

@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           persist-credentials: false
 

.github/workflows/sdk-test.yml

@@ -0,0 +1,51 @@
+name: SDK Test
+
+on:
+  push:
+    tags:
+      - v*
+  workflow_dispatch: {}
+  pull_request:
+    paths:
+      - "vela-templates/definitions/**"
+      - "pkg/definition/gen_sdk/**"
+    branches:
+      - master
+      - release-*
+
+permissions:
+  contents: read
+
+env:
+  # Common versions
+  GO_VERSION: '1.19'
+  GOLANGCI_VERSION: 'v1.49'
+
+jobs:
+  sdk-tests:
+    runs-on: ubuntu-20.04
+    steps:
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+
+      - name: Setup Go
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
+        with:
+          go-version: ${{ env.GO_VERSION }}
+
+      - name: Install Go tools
+        run: |
+          make goimports
+          make golangci
+
+      - name: Build CLI
+        run: make vela-cli
+
+      - name: Build SDK
+        run: bin/vela def gen-api -f vela-templates/definitions/internal/ -o ./kubevela-go-sdk --package=github.com/kubevela-contrib/kubevela-go-sdk --init
+
+      - name: Validate SDK
+        run: |
+          cd kubevela-go-sdk
+          go mod tidy
+          golangci-lint run --timeout 5m -e "exported:" -e "dot-imports" ./...

.github/workflows/sync-api.yml

@@ -18,12 +18,12 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Set up Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
 
       - name: Get the version
         id: get_version

.github/workflows/sync-sdk.yaml

@@ -0,0 +1,52 @@
+name: Sync SDK
+
+on:
+  push:
+    paths:
+      - vela-templates/definitions/internal/**
+      - pkg/definition/gen_sdk/**
+      - .github/workflows/sync-sdk.yaml
+    tags:
+      - "v*"
+    branches:
+      - master
+      - release-*
+permissions:
+  contents: read
+
+env:
+  GO_VERSION: '1.19'
+
+jobs:
+  sync_sdk:
+    runs-on: ubuntu-20.04
+    steps:
+      - name: Set up Go
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
+        with:
+          go-version: ${{ env.GO_VERSION }}
+
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+
+      - name: Get the version
+        id: get_version
+        run: echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
+
+      - name: Get dependencies
+        run: |
+          go get -v -t -d ./...
+
+      - name: Install Go tools
+        run: |
+          make goimports
+          
+      - name: Build CLI
+        run: make vela-cli
+
+      - name: Sync SDK to kubevela/kubevela-go-sdk
+        run: bash ./hack/sdk/sync.sh
+        env:
+          SSH_DEPLOY_KEY: ${{ secrets.GO_SDK_DEPLOY_KEY }}
+          VERSION: ${{ steps.get_version.outputs.VERSION }}
+          COMMIT_ID: ${{ github.sha }}

.github/workflows/trivy-scan.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
 
       - name: Build Vela Core image from Dockerfile
         run: |

.github/workflows/unit-test.yml

@@ -43,17 +43,17 @@ jobs:
 
     steps:
       - name: Set up Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9
         with:
           go-version: ${{ env.GO_VERSION }}
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
         with:
           submodules: true
 
       - name: Cache Go Dependencies
-        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
         with:
           path: .work/pkg
           key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}

Dockerfile

@@ -34,7 +34,7 @@ RUN GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} \
 # You can replace distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
 # Overwrite `BASE_IMAGE` by passing `--build-arg=BASE_IMAGE=gcr.io/distroless/static:nonroot`
-FROM ${BASE_IMAGE:-alpine@sha256:f271e74b17ced29b915d351685fd4644785c6d1559dd1f2d4189a5e851ef753a}
+FROM ${BASE_IMAGE:-alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501}
 # This is required by daemon connecting with cri
 RUN apk add --no-cache ca-certificates bash expat
 

Dockerfile.apiserver

@@ -1,48 +0,0 @@
-ARG BASE_IMAGE
-# Build the manager binary
-FROM --platform=${BUILDPLATFORM:-linux/amd64} golang:1.19-alpine@sha256:2381c1e5f8350a901597d633b2e517775eeac7a6682be39225a93b22cfd0f8bb as builder
-ARG GOPROXY
-ENV GOPROXY=${GOPROXY:-https://goproxy.cn}
-WORKDIR /workspace
-# Copy the Go Modules manifests
-COPY go.mod go.mod
-COPY go.sum go.sum
-# cache deps before building and copying source so that we don't need to re-download as much
-# and so that source changes don't invalidate our downloaded layer
-RUN go mod download
-
-# Copy the go source for building apiserver
-COPY cmd/apiserver/ cmd/apiserver/
-COPY apis/ apis/
-COPY pkg/ pkg/
-COPY version/ version/
-COPY references/ references/
-
-# Build
-ARG TARGETARCH
-ARG VERSION
-ARG GITVERSION
-
-RUN GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} \
-    go build -a -ldflags "-s -w -X github.com/oam-dev/kubevela/version.VelaVersion=${VERSION:-undefined} -X github.com/oam-dev/kubevela/version.GitRevision=${GITVERSION:-undefined}" \
-    -o apiserver-${TARGETARCH} cmd/apiserver/main.go
-
-# Use alpine as base image due to the discussion in issue #1448
-# You can replace distroless as minimal base image to package the manager binary
-# Refer to https://github.com/GoogleContainerTools/distroless for more details
-# Overwrite `BASE_IMAGE` by passing `--build-arg=BASE_IMAGE=gcr.io/distroless/static:nonroot`
-
-FROM ${BASE_IMAGE:-alpine:3.15@sha256:cf34c62ee8eb3fe8aa24c1fab45d7e9d12768d945c3f5a6fd6a63d901e898479}
-# This is required by daemon connecting with cri
-RUN apk add --no-cache ca-certificates bash expat
-
-WORKDIR /
-
-ARG TARGETARCH
-COPY --from=builder /workspace/apiserver-${TARGETARCH} /usr/local/bin/apiserver
-
-COPY entrypoint.sh /usr/local/bin/
-
-ENTRYPOINT ["entrypoint.sh"]
-
-CMD ["apiserver"]

Dockerfile.e2e

@@ -13,7 +13,6 @@ RUN go mod download
 # Copy the go source
 COPY cmd/core/main.go main.go
 COPY cmd/core/main_e2e_test.go main_e2e_test.go
-COPY cmd/apiserver/main.go cmd/apiserver/main.go
 COPY cmd/ cmd/
 COPY apis/ apis/
 COPY pkg/ pkg/
@@ -29,10 +28,6 @@ RUN  apk add gcc musl-dev libc-dev ;\
     GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} \
     go test -c -o manager-${TARGETARCH}  -cover -covermode=atomic -coverpkg ./... .
 
-RUN GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} \
-    go build -a -ldflags "-s -w -X github.com/oam-dev/kubevela/version.VelaVersion=${VERSION:-undefined} -X github.com/oam-dev/kubevela/version.GitRevision=${GITVERSION:-undefined}" \
-    -o apiserver-${TARGETARCH} cmd/apiserver/main.go
-
 # Use alpine as base image due to the discussion in issue #1448
 # You can replace distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
@@ -46,7 +41,6 @@ WORKDIR /
 
 ARG TARGETARCH
 COPY --from=builder /workspace/manager-${TARGETARCH} /usr/local/bin/manager
-COPY --from=builder /workspace/apiserver-${TARGETARCH} /usr/local/bin/apiserver
 
 COPY entrypoint.sh /usr/local/bin/
 

Makefile

@@ -18,8 +18,6 @@ test-cli-gen:
 unit-test-core:
 	go test -coverprofile=coverage.txt $(shell go list ./pkg/... ./cmd/... ./apis/... | grep -v apiserver | grep -v applicationconfiguration)
 	go test $(shell go list ./references/... | grep -v apiserver)
-unit-test-apiserver:
-	go test -gcflags=all=-l -coverprofile=coverage.txt $(shell go list ./pkg/... ./cmd/...  | grep -E 'apiserver|velaql')
 
 # Build vela cli binary
 build: vela-cli kubectl-vela
@@ -68,9 +66,6 @@ check-diff: reviewable
 docker-push:
 	docker push $(VELA_CORE_IMAGE)
 
-build-swagger:
-	go run ./cmd/apiserver/main.go build-swagger ./docs/apidoc/swagger.json
-
 
 
 image-cleanup:
@@ -105,10 +100,9 @@ image-load-runtime-cluster:
 core-test:
 	go test ./pkg/... -coverprofile cover.out
 
-# Build vela core manager and apiserver binary
+# Build vela core manager binary
 manager:
 	$(GOBUILD_ENV) go build -o bin/manager -a -ldflags $(LDFLAGS) ./cmd/core/main.go
-	$(GOBUILD_ENV) go build -o bin/apiserver -a -ldflags $(LDFLAGS) ./cmd/apiserver/main.go
 
 vela-runtime-rollout-manager:
 	$(GOBUILD_ENV) go build -o ./runtime/rollout/bin/manager -a -ldflags $(LDFLAGS) ./runtime/rollout/cmd/main.go

README.md

@@ -18,6 +18,7 @@
 [![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/4602/badge)](https://bestpractices.coreinfrastructure.org/projects/4602)
 ![E2E status](https://github.com/kubevela/kubevela/workflows/E2E%20Test/badge.svg)
 [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/kubevela/kubevela/badge)](https://api.securityscorecards.dev/projects/github.com/kubevela/kubevela)
+[![](https://img.shields.io/badge/KubeVela-Check%20Your%20Contribution-orange)](https://opensource.alibaba.com/contribution_leaderboard/details?projectValue=kubevela)
 
 ## Introduction
 

apis/core.oam.dev/v1beta1/applicationrevision_types.go

@@ -45,13 +45,13 @@ type ApplicationRevisionCompressibleFields struct {
 	Application Application `json:"application"`
 
 	// ComponentDefinitions records the snapshot of the componentDefinitions related with the created/modified Application
-	ComponentDefinitions map[string]ComponentDefinition `json:"componentDefinitions,omitempty"`
+	ComponentDefinitions map[string]*ComponentDefinition `json:"componentDefinitions,omitempty"`
 
 	// WorkloadDefinitions records the snapshot of the workloadDefinitions related with the created/modified Application
 	WorkloadDefinitions map[string]WorkloadDefinition `json:"workloadDefinitions,omitempty"`
 
 	// TraitDefinitions records the snapshot of the traitDefinitions related with the created/modified Application
-	TraitDefinitions map[string]TraitDefinition `json:"traitDefinitions,omitempty"`
+	TraitDefinitions map[string]*TraitDefinition `json:"traitDefinitions,omitempty"`
 
 	// ScopeDefinitions records the snapshot of the scopeDefinitions related with the created/modified Application
 	ScopeDefinitions map[string]ScopeDefinition `json:"scopeDefinitions,omitempty"`
@@ -60,7 +60,7 @@ type ApplicationRevisionCompressibleFields struct {
 	PolicyDefinitions map[string]PolicyDefinition `json:"policyDefinitions,omitempty"`
 
 	// WorkflowStepDefinitions records the snapshot of the WorkflowStepDefinitions related with the created/modified Application
-	WorkflowStepDefinitions map[string]WorkflowStepDefinition `json:"workflowStepDefinitions,omitempty"`
+	WorkflowStepDefinitions map[string]*WorkflowStepDefinition `json:"workflowStepDefinitions,omitempty"`
 
 	// ScopeGVK records the apiVersion to GVK mapping
 	ScopeGVK map[string]metav1.GroupVersionKind `json:"scopeGVK,omitempty"`

apis/core.oam.dev/v1beta1/applicationrevision_types_test.go

@@ -32,18 +32,18 @@ func TestApplicationRevisionCompression(t *testing.T) {
 	// Fill data
 	spec := &ApplicationRevisionSpec{}
 	spec.Application = Application{Spec: ApplicationSpec{Components: []common.ApplicationComponent{{Name: "test-name"}}}}
-	spec.ComponentDefinitions = make(map[string]ComponentDefinition)
-	spec.ComponentDefinitions["def"] = ComponentDefinition{Spec: ComponentDefinitionSpec{PodSpecPath: "path"}}
+	spec.ComponentDefinitions = make(map[string]*ComponentDefinition)
+	spec.ComponentDefinitions["def"] = &ComponentDefinition{Spec: ComponentDefinitionSpec{PodSpecPath: "path"}}
 	spec.WorkloadDefinitions = make(map[string]WorkloadDefinition)
 	spec.WorkloadDefinitions["def"] = WorkloadDefinition{Spec: WorkloadDefinitionSpec{Reference: common.DefinitionReference{Name: "testdef"}}}
-	spec.TraitDefinitions = make(map[string]TraitDefinition)
-	spec.TraitDefinitions["def"] = TraitDefinition{Spec: TraitDefinitionSpec{ControlPlaneOnly: true}}
+	spec.TraitDefinitions = make(map[string]*TraitDefinition)
+	spec.TraitDefinitions["def"] = &TraitDefinition{Spec: TraitDefinitionSpec{ControlPlaneOnly: true}}
 	spec.ScopeDefinitions = make(map[string]ScopeDefinition)
 	spec.ScopeDefinitions["def"] = ScopeDefinition{Spec: ScopeDefinitionSpec{AllowComponentOverlap: true}}
 	spec.PolicyDefinitions = make(map[string]PolicyDefinition)
 	spec.PolicyDefinitions["def"] = PolicyDefinition{Spec: PolicyDefinitionSpec{ManageHealthCheck: true}}
-	spec.WorkflowStepDefinitions = make(map[string]WorkflowStepDefinition)
-	spec.WorkflowStepDefinitions["def"] = WorkflowStepDefinition{Spec: WorkflowStepDefinitionSpec{Reference: common.DefinitionReference{Name: "testname"}}}
+	spec.WorkflowStepDefinitions = make(map[string]*WorkflowStepDefinition)
+	spec.WorkflowStepDefinitions["def"] = &WorkflowStepDefinition{Spec: WorkflowStepDefinitionSpec{Reference: common.DefinitionReference{Name: "testname"}}}
 	spec.ReferredObjects = []common.ReferredObject{{RawExtension: runtime.RawExtension{Raw: []byte("123")}}}
 
 	testAppRev := &ApplicationRevision{Spec: *spec}

apis/core.oam.dev/v1beta1/zz_generated.deepcopy.go

@@ -142,9 +142,17 @@ func (in *ApplicationRevisionCompressibleFields) DeepCopyInto(out *ApplicationRe
 	in.Application.DeepCopyInto(&out.Application)
 	if in.ComponentDefinitions != nil {
 		in, out := &in.ComponentDefinitions, &out.ComponentDefinitions
-		*out = make(map[string]ComponentDefinition, len(*in))
+		*out = make(map[string]*ComponentDefinition, len(*in))
 		for key, val := range *in {
-			(*out)[key] = *val.DeepCopy()
+			var outVal *ComponentDefinition
+			if val == nil {
+				(*out)[key] = nil
+			} else {
+				in, out := &val, &outVal
+				*out = new(ComponentDefinition)
+				(*in).DeepCopyInto(*out)
+			}
+			(*out)[key] = outVal
 		}
 	}
 	if in.WorkloadDefinitions != nil {
@@ -156,9 +164,17 @@ func (in *ApplicationRevisionCompressibleFields) DeepCopyInto(out *ApplicationRe
 	}
 	if in.TraitDefinitions != nil {
 		in, out := &in.TraitDefinitions, &out.TraitDefinitions
-		*out = make(map[string]TraitDefinition, len(*in))
+		*out = make(map[string]*TraitDefinition, len(*in))
 		for key, val := range *in {
-			(*out)[key] = *val.DeepCopy()
+			var outVal *TraitDefinition
+			if val == nil {
+				(*out)[key] = nil
+			} else {
+				in, out := &val, &outVal
+				*out = new(TraitDefinition)
+				(*in).DeepCopyInto(*out)
+			}
+			(*out)[key] = outVal
 		}
 	}
 	if in.ScopeDefinitions != nil {
@@ -177,9 +193,17 @@ func (in *ApplicationRevisionCompressibleFields) DeepCopyInto(out *ApplicationRe
 	}
 	if in.WorkflowStepDefinitions != nil {
 		in, out := &in.WorkflowStepDefinitions, &out.WorkflowStepDefinitions
-		*out = make(map[string]WorkflowStepDefinition, len(*in))
+		*out = make(map[string]*WorkflowStepDefinition, len(*in))
 		for key, val := range *in {
-			(*out)[key] = *val.DeepCopy()
+			var outVal *WorkflowStepDefinition
+			if val == nil {
+				(*out)[key] = nil
+			} else {
+				in, out := &val, &outVal
+				*out = new(WorkflowStepDefinition)
+				(*in).DeepCopyInto(*out)
+			}
+			(*out)[key] = outVal
 		}
 	}
 	if in.ScopeGVK != nil {

apis/types/types.go

@@ -186,3 +186,17 @@ const (
 	// VelaCoreConfig is to mark application, config and its secret or Terraform provider lelong to a KubeVela config
 	VelaCoreConfig = "velacore-config"
 )
+
+const (
+	// LabelSourceOfTruth describes the source of this app
+	LabelSourceOfTruth = "app.oam.dev/source-of-truth"
+
+	// FromCR means the data source of truth is from k8s CR
+	FromCR = "from-k8s-resource"
+	// FromUX means the data source of truth is from velaux data store
+	FromUX = "from-velaux"
+	// FromInner means the data source of truth is from KubeVela inner usage
+	// the configuration that don't want to be synced
+	// the addon application should be synced, but set to readonly mode
+	FromInner = "from-inner-system"
+)

charts/vela-core/README.md

@@ -80,46 +80,50 @@ helm install --create-namespace -n vela-system kubevela kubevela/vela-core --wai
 
 ### KubeVela controller optimization parameters
 
-| Name                                              | Description                                                                                                                                                                                                                      | Value   |
-| ------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- |
-| `optimize.cachedGvks`                             | Optimize types of resources to be cached.                                                                                                                                                                                        | `""`    |
-| `optimize.resourceTrackerListOp`                  | Optimize ResourceTracker List Op by adding index.                                                                                                                                                                                | `true`  |
-| `optimize.controllerReconcileLoopReduction`       | Optimize ApplicationController reconcile by reducing the number of loops to reconcile application.                                                                                                                               | `false` |
-| `optimize.markWithProb`                           | Optimize ResourceTracker GC by only run mark with probability. Side effect: outdated ResourceTracker might not be able to be removed immediately.                                                                                | `0.1`   |
-| `optimize.disableComponentRevision`               | Optimize componentRevision by disabling the creation and gc                                                                                                                                                                      | `true`  |
-| `optimize.disableApplicationRevision`             | Optimize ApplicationRevision by disabling the creation and gc.                                                                                                                                                                   | `false` |
-| `optimize.disableWorkflowRecorder`                | Optimize workflow recorder by disabling the creation and gc.                                                                                                                                                                     | `false` |
-| `optimize.enableInMemoryWorkflowContext`          | Optimize workflow by use in-memory context.                                                                                                                                                                                      | `false` |
-| `optimize.disableResourceApplyDoubleCheck`        | Optimize workflow by ignoring resource double check after apply.                                                                                                                                                                 | `false` |
-| `optimize.enableResourceTrackerDeleteOnlyTrigger` | Optimize resourcetracker by only trigger reconcile when resourcetracker is deleted.                                                                                                                                              | `true`  |
-| `featureGates.enableLegacyComponentRevision`      | if disabled, only component with rollout trait will create component revisions                                                                                                                                                   | `false` |
-| `featureGates.gzipResourceTracker`                | compress ResourceTracker using gzip (good) before being stored. This is reduces network throughput when dealing with huge ResourceTrackers.                                                                                      | `false` |
-| `featureGates.zstdResourceTracker`                | compress ResourceTracker using zstd (fast and good) before being stored. This is reduces network throughput when dealing with huge ResourceTrackers. Note that zstd will be prioritized if you enable other compression options. | `true`  |
-| `featureGates.applyOnce`                          | if enabled, the apply-once feature will be applied to all applications, no state-keep and no resource data storage in ResourceTracker                                                                                            | `false` |
-| `featureGates.multiStageComponentApply`           | if enabled, the multiStageComponentApply feature will be combined with the stage field in TraitDefinition to complete the multi-stage apply.                                                                                     | `false` |
-| `featureGates.gzipApplicationRevision`            | compress apprev using gzip (good) before being stored. This is reduces network throughput when dealing with huge apprevs.                                                                                                        | `false` |
-| `featureGates.zstdApplicationRevision`            | compress apprev using zstd (fast and good) before being stored. This is reduces network throughput when dealing with huge apprevs. Note that zstd will be prioritized if you enable other compression options.                   | `true`  |
-| `featureGates.preDispatchDryRun`                  | enable dryrun before dispatching resources. Enable this flag can help prevent unsuccessful dispatch resources entering resourcetracker and improve the user experiences of gc but at the cost of increasing network requests.    | `true`  |
-| `featureGates.validateComponentWhenSharding`      | enable component validation in webhook when sharding mode enabled                                                                                                                                                                | `false` |
-| `featureGates.disableWebhookAutoSchedule`         | disable auto schedule for application mutating webhook when sharding enabled                                                                                                                                                     | `false` |
+| Name                                                         | Description                                                                                                                                                                                                                      | Value   |
+| ------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- |
+| `optimize.cachedGvks`                                        | Optimize types of resources to be cached.                                                                                                                                                                                        | `""`    |
+| `optimize.markWithProb`                                      | Optimize ResourceTracker GC by only run mark with probability. Side effect: outdated ResourceTracker might not be able to be removed immediately.                                                                                | `0.1`   |
+| `optimize.disableComponentRevision`                          | Optimize componentRevision by disabling the creation and gc                                                                                                                                                                      | `true`  |
+| `optimize.disableApplicationRevision`                        | Optimize ApplicationRevision by disabling the creation and gc.                                                                                                                                                                   | `false` |
+| `optimize.enableInMemoryWorkflowContext`                     | Optimize workflow by use in-memory context.                                                                                                                                                                                      | `false` |
+| `optimize.disableResourceApplyDoubleCheck`                   | Optimize workflow by ignoring resource double check after apply.                                                                                                                                                                 | `false` |
+| `optimize.enableResourceTrackerDeleteOnlyTrigger`            | Optimize resourcetracker by only trigger reconcile when resourcetracker is deleted.                                                                                                                                              | `true`  |
+| `featureGates.enableLegacyComponentRevision`                 | if disabled, only component with rollout trait will create component revisions                                                                                                                                                   | `false` |
+| `featureGates.gzipResourceTracker`                           | compress ResourceTracker using gzip (good) before being stored. This is reduces network throughput when dealing with huge ResourceTrackers.                                                                                      | `false` |
+| `featureGates.zstdResourceTracker`                           | compress ResourceTracker using zstd (fast and good) before being stored. This is reduces network throughput when dealing with huge ResourceTrackers. Note that zstd will be prioritized if you enable other compression options. | `true`  |
+| `featureGates.applyOnce`                                     | if enabled, the apply-once feature will be applied to all applications, no state-keep and no resource data storage in ResourceTracker                                                                                            | `false` |
+| `featureGates.multiStageComponentApply`                      | if enabled, the multiStageComponentApply feature will be combined with the stage field in TraitDefinition to complete the multi-stage apply.                                                                                     | `true`  |
+| `featureGates.gzipApplicationRevision`                       | compress apprev using gzip (good) before being stored. This is reduces network throughput when dealing with huge apprevs.                                                                                                        | `false` |
+| `featureGates.zstdApplicationRevision`                       | compress apprev using zstd (fast and good) before being stored. This is reduces network throughput when dealing with huge apprevs. Note that zstd will be prioritized if you enable other compression options.                   | `true`  |
+| `featureGates.preDispatchDryRun`                             | enable dryrun before dispatching resources. Enable this flag can help prevent unsuccessful dispatch resources entering resourcetracker and improve the user experiences of gc but at the cost of increasing network requests.    | `true`  |
+| `featureGates.validateComponentWhenSharding`                 | enable component validation in webhook when sharding mode enabled                                                                                                                                                                | `false` |
+| `featureGates.disableWebhookAutoSchedule`                    | disable auto schedule for application mutating webhook when sharding enabled                                                                                                                                                     | `false` |
+| `featureGates.disableBootstrapClusterInfo`                   | disable the cluster info bootstrap at the starting of the controller                                                                                                                                                             | `false` |
+| `featureGates.informerCacheFilterUnnecessaryFields`          | filter unnecessary fields for informer cache                                                                                                                                                                                     | `true`  |
+| `featureGates.sharedDefinitionStorageForApplicationRevision` | use definition cache to reduce duplicated definition storage for application revision, must be used with InformerCacheFilterUnnecessaryFields                                                                                    | `true`  |
+| `featureGates.disableWorkflowContextConfigMapCache`          | disable the workflow context's configmap informer cache                                                                                                                                                                          | `true`  |
 
 
 ### MultiCluster parameters
 
-| Name                                                        | Description                                     | Value                            |
-| ----------------------------------------------------------- | ----------------------------------------------- | -------------------------------- |
-| `multicluster.enabled`                                      | Whether to enable multi-cluster                 | `true`                           |
-| `multicluster.metrics.enabled`                              | Whether to enable multi-cluster metrics collect | `false`                          |
-| `multicluster.clusterGateway.replicaCount`                  | ClusterGateway replica count                    | `1`                              |
-| `multicluster.clusterGateway.port`                          | ClusterGateway port                             | `9443`                           |
-| `multicluster.clusterGateway.image.repository`              | ClusterGateway image repository                 | `oamdev/cluster-gateway`         |
-| `multicluster.clusterGateway.image.tag`                     | ClusterGateway image tag                        | `v1.7.0`                         |
-| `multicluster.clusterGateway.image.pullPolicy`              | ClusterGateway image pull policy                | `IfNotPresent`                   |
-| `multicluster.clusterGateway.resources.limits.cpu`          | ClusterGateway cpu limit                        | `100m`                           |
-| `multicluster.clusterGateway.resources.limits.memory`       | ClusterGateway memory limit                     | `200Mi`                          |
-| `multicluster.clusterGateway.secureTLS.enabled`             | Whether to enable secure TLS                    | `true`                           |
-| `multicluster.clusterGateway.secureTLS.certPath`            | Path to the certificate file                    | `/etc/k8s-cluster-gateway-certs` |
-| `multicluster.clusterGateway.secureTLS.certManager.enabled` | Whether to enable cert-manager                  | `false`                          |
+| Name                                                        | Description                                                                                 | Value                            |
+| ----------------------------------------------------------- | ------------------------------------------------------------------------------------------- | -------------------------------- |
+| `multicluster.enabled`                                      | Whether to enable multi-cluster                                                             | `true`                           |
+| `multicluster.metrics.enabled`                              | Whether to enable multi-cluster metrics collect                                             | `false`                          |
+| `multicluster.clusterGateway.direct`                        | controller will connect to ClusterGateway directly instead of going to Kubernetes APIServer | `true`                           |
+| `multicluster.clusterGateway.replicaCount`                  | ClusterGateway replica count                                                                | `1`                              |
+| `multicluster.clusterGateway.port`                          | ClusterGateway port                                                                         | `9443`                           |
+| `multicluster.clusterGateway.image.repository`              | ClusterGateway image repository                                                             | `oamdev/cluster-gateway`         |
+| `multicluster.clusterGateway.image.tag`                     | ClusterGateway image tag                                                                    | `v1.8.0`                         |
+| `multicluster.clusterGateway.image.pullPolicy`              | ClusterGateway image pull policy                                                            | `IfNotPresent`                   |
+| `multicluster.clusterGateway.resources.requests.cpu`        | ClusterGateway cpu request                                                                  | `50m`                            |
+| `multicluster.clusterGateway.resources.requests.memory`     | ClusterGateway memory request                                                               | `20Mi`                           |
+| `multicluster.clusterGateway.resources.limits.cpu`          | ClusterGateway cpu limit                                                                    | `500m`                           |
+| `multicluster.clusterGateway.resources.limits.memory`       | ClusterGateway memory limit                                                                 | `200Mi`                          |
+| `multicluster.clusterGateway.secureTLS.enabled`             | Whether to enable secure TLS                                                                | `true`                           |
+| `multicluster.clusterGateway.secureTLS.certPath`            | Path to the certificate file                                                                | `/etc/k8s-cluster-gateway-certs` |
+| `multicluster.clusterGateway.secureTLS.certManager.enabled` | Whether to enable cert-manager                                                              | `false`                          |
 
 
 ### Test parameters
@@ -149,8 +153,8 @@ helm install --create-namespace -n vela-system kubevela kubevela/vela-core --wai
 | `logDebug`                    | Enable debug logs for development purpose                                                                                                                          | `false`              |
 | `logFilePath`                 | If non-empty, write log files in this path                                                                                                                         | `""`                 |
 | `logFileMaxSize`              | Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited.                                         | `1024`               |
-| `kubeClient.qps`              | The qps for reconcile clients, default is 100                                                                                                                      | `100`                |
-| `kubeClient.burst`            | The burst for reconcile clients, default is 200                                                                                                                    | `200`                |
+| `kubeClient.qps`              | The qps for reconcile clients                                                                                                                                      | `400`                |
+| `kubeClient.burst`            | The burst for reconcile clients                                                                                                                                    | `600`                |
 | `authentication.enabled`      | Enable authentication for application                                                                                                                              | `false`              |
 | `authentication.withUser`     | Application authentication will impersonate as the request User                                                                                                    | `true`               |
 | `authentication.defaultUser`  | Application authentication will impersonate as the User if no user provided in Application                                                                         | `kubevela:vela-core` |

charts/vela-core/crds/core.oam.dev_envbindings.yaml

@@ -1,319 +0,0 @@
-
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.6.2
-  name: envbindings.core.oam.dev
-spec:
-  group: core.oam.dev
-  names:
-    categories:
-    - oam
-    kind: EnvBinding
-    listKind: EnvBindingList
-    plural: envbindings
-    shortNames:
-    - envbind
-    singular: envbinding
-  scope: Namespaced
-  versions:
-  - additionalPrinterColumns:
-    - jsonPath: .spec.engine
-      name: ENGINE
-      type: string
-    - jsonPath: .status.phase
-      name: PHASE
-      type: string
-    - jsonPath: .metadata.creationTimestamp
-      name: AGE
-      type: date
-    name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        description: EnvBinding is the Schema for the EnvBinding API
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: A EnvBindingSpec defines the desired state of a EnvBinding.
-            properties:
-              appTemplate:
-                description: AppTemplate indicates the application template.
-                type: object
-                x-kubernetes-embedded-resource: true
-                x-kubernetes-preserve-unknown-fields: true
-              engine:
-                description: ClusterManagementEngine represents a multi-cluster management
-                  solution
-                type: string
-              envs:
-                items:
-                  description: EnvConfig is the configuration for different environments.
-                  properties:
-                    name:
-                      type: string
-                    patch:
-                      description: EnvPatch specify the parameter configuration for
-                        different environments
-                      properties:
-                        components:
-                          items:
-                            description: ApplicationComponent describe the component
-                              of application
-                            properties:
-                              dependsOn:
-                                items:
-                                  type: string
-                                type: array
-                              externalRevision:
-                                description: ExternalRevision specified the component
-                                  revisionName
-                                type: string
-                              inputs:
-                                description: StepInputs defines variable input of
-                                  WorkflowStep
-                                items:
-                                  properties:
-                                    from:
-                                      type: string
-                                    parameterKey:
-                                      type: string
-                                  required:
-                                  - from
-                                  - parameterKey
-                                  type: object
-                                type: array
-                              name:
-                                type: string
-                              outputs:
-                                description: StepOutputs defines output variable of
-                                  WorkflowStep
-                                items:
-                                  properties:
-                                    name:
-                                      type: string
-                                    valueFrom:
-                                      type: string
-                                  required:
-                                  - name
-                                  - valueFrom
-                                  type: object
-                                type: array
-                              properties:
-                                type: object
-                                x-kubernetes-preserve-unknown-fields: true
-                              scopes:
-                                additionalProperties:
-                                  type: string
-                                description: scopes in ApplicationComponent defines
-                                  the component-level scopes the format is <scope-type:scope-instance-name>
-                                  pairs, the key represents type of `ScopeDefinition`
-                                  while the value represent the name of scope instance.
-                                type: object
-                                x-kubernetes-preserve-unknown-fields: true
-                              traits:
-                                description: Traits define the trait of one component,
-                                  the type must be array to keep the order.
-                                items:
-                                  description: ApplicationTrait defines the trait
-                                    of application
-                                  properties:
-                                    properties:
-                                      type: object
-                                      x-kubernetes-preserve-unknown-fields: true
-                                    type:
-                                      type: string
-                                  required:
-                                  - type
-                                  type: object
-                                type: array
-                              type:
-                                type: string
-                            required:
-                            - name
-                            - type
-                            type: object
-                          type: array
-                      required:
-                      - components
-                      type: object
-                    placement:
-                      description: EnvPlacement defines the placement rules for an
-                        app.
-                      properties:
-                        clusterSelector:
-                          description: ClusterSelector defines the rules to select
-                            a Cluster resource. Either name or labels is needed.
-                          properties:
-                            labels:
-                              additionalProperties:
-                                type: string
-                              description: Labels defines the label selector to select
-                                the cluster.
-                              type: object
-                            name:
-                              description: Name is the name of the cluster.
-                              type: string
-                          type: object
-                        namespaceSelector:
-                          description: NamespaceSelector defines the rules to select
-                            a Namespace resource. Either name or labels is needed.
-                          properties:
-                            labels:
-                              additionalProperties:
-                                type: string
-                              description: Labels defines the label selector to select
-                                the namespace.
-                              type: object
-                            name:
-                              description: Name is the name of the namespace.
-                              type: string
-                          type: object
-                      type: object
-                    selector:
-                      description: EnvSelector defines which components should this
-                        env contains
-                      properties:
-                        components:
-                          items:
-                            type: string
-                          type: array
-                      type: object
-                  required:
-                  - name
-                  - patch
-                  type: object
-                type: array
-              outputResourcesTo:
-                description: OutputResourcesTo specifies the namespace and name of
-                  a ConfigMap which store the resources rendered after differentiated
-                  configuration
-                properties:
-                  name:
-                    description: Name of the secret.
-                    type: string
-                  namespace:
-                    description: Namespace of the secret.
-                    type: string
-                required:
-                - name
-                type: object
-            required:
-            - appTemplate
-            - envs
-            type: object
-          status:
-            description: A EnvBindingStatus is the status of EnvBinding
-            properties:
-              clusterDecisions:
-                items:
-                  description: ClusterDecision recorded the mapping of environment
-                    and cluster
-                  properties:
-                    cluster:
-                      type: string
-                    env:
-                      type: string
-                    namespace:
-                      type: string
-                  required:
-                  - env
-                  type: object
-                type: array
-              conditions:
-                description: Conditions of the resource.
-                items:
-                  description: A Condition that may apply to a resource.
-                  properties:
-                    lastTransitionTime:
-                      description: LastTransitionTime is the last time this condition
-                        transitioned from one status to another.
-                      format: date-time
-                      type: string
-                    message:
-                      description: A Message containing details about this condition's
-                        last transition from one status to another, if any.
-                      type: string
-                    reason:
-                      description: A Reason for this condition's last transition from
-                        one status to another.
-                      type: string
-                    status:
-                      description: Status of this condition; is it currently True,
-                        False, or Unknown?
-                      type: string
-                    type:
-                      description: Type of this condition. At most one of each condition
-                        type may apply to a resource at any point in time.
-                      type: string
-                  required:
-                  - lastTransitionTime
-                  - reason
-                  - status
-                  - type
-                  type: object
-                type: array
-              phase:
-                description: EnvBindingPhase is a label for the condition of a EnvBinding
-                  at the current time
-                type: string
-              resourceTracker:
-                description: ResourceTracker record the status of the ResourceTracker
-                properties:
-                  apiVersion:
-                    description: API version of the referent.
-                    type: string
-                  fieldPath:
-                    description: 'If referring to a piece of an object instead of
-                      an entire object, this string should contain a valid JSON/Go
-                      field access statement, such as desiredState.manifest.containers[2].
-                      For example, if the object reference is to a container within
-                      a pod, this would take on a value like: "spec.containers{name}"
-                      (where "name" refers to the name of the container that triggered
-                      the event) or if no container name is specified "spec.containers[2]"
-                      (container with index 2 in this pod). This syntax is chosen
-                      only to have some well-defined way of referencing a part of
-                      an object. TODO: this design is not final and this field is
-                      subject to change in the future.'
-                    type: string
-                  kind:
-                    description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-                    type: string
-                  name:
-                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                    type: string
-                  namespace:
-                    description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
-                    type: string
-                  resourceVersion:
-                    description: 'Specific resourceVersion to which this reference
-                      is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
-                    type: string
-                  uid:
-                    description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
-                    type: string
-                type: object
-            type: object
-        type: object
-    served: true
-    storage: true
-    subresources:
-      status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []

charts/vela-core/templates/defwithtemplate/check-metrics.yaml

@@ -0,0 +1,59 @@
+# Code generated by KubeVela templates. DO NOT EDIT. Please edit the original cue file.
+# Definition source cue file: vela-templates/definitions/internal/check-metrics.cue
+apiVersion: core.oam.dev/v1beta1
+kind: WorkflowStepDefinition
+metadata:
+  annotations:
+    custom.definition.oam.dev/category: Application Delivery
+    definition.oam.dev/description: Verify application's metrics
+  labels:
+    custom.definition.oam.dev/catalog: Delivery
+  name: check-metrics
+  namespace: {{ include "systemDefinitionNamespace" . }}
+spec:
+  schematic:
+    cue:
+      template: |
+        import (
+        	"vela/op"
+        )
+
+        check: op.#PromCheck & {
+        	query:          parameter.query
+        	metricEndpoint: parameter.metricEndpoint
+        	condition:      parameter.condition
+        	stepID:         context.stepSessionID
+        	duration:       parameter.duration
+        	failDuration:   parameter.failDuration
+        }
+
+        fail: op.#Steps & {
+        	if check.failed != _|_ {
+        		if check.failed == true {
+        			breakWorkflow: op.#Fail & {
+        				message: check.message
+        			}
+        		}
+        	}
+        }
+
+        wait: op.#ConditionalWait & {
+        	continue: check.result
+        	if check.message != _|_ {
+        		message: check.message
+        	}
+        }
+
+        parameter: {
+        	// +usage=Query is a raw prometheus query to perform
+        	query: string
+        	// +usage=The HTTP address and port of the prometheus server
+        	metricEndpoint?: "http://prometheus-server.o11y-system.svc:9090" | string
+        	// +usage=Condition is an expression which determines if a measurement is considered successful. eg: >=0.95
+        	condition: string
+        	// +usage=Duration defines the duration of time required for this step to be considered successful.
+        	duration?: *"5m" | string
+        	// +usage=FailDuration is the duration of time that, if the check fails, will result in the step being marked as failed.
+        	failDuration?: *"2m" | string
+        }
+

charts/vela-core/templates/defwithtemplate/expose.yaml

@@ -44,6 +44,7 @@ spec:
         	// +usage=Specify what kind of Service you want. options: "ClusterIP","NodePort","LoadBalancer","ExternalName"
         	type: *"ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName"
         }
+  stage: PostDispatch
   status:
     customStatus: |-
       message: *"" | string

charts/vela-core/templates/defwithtemplate/gateway.yaml

@@ -113,19 +113,20 @@ spec:
       }
       if context.outputs.ingress.status.loadBalancer.ingress != _|_ {
       	let igs = context.outputs.ingress.status.loadBalancer.ingress
+      	let host = context.outputs.ingress.spec.rules[0].host
         if igs[0].ip != _|_ {
-        	if igs[0].host != _|_ {
+        	if host != _|_ {
       	    message: "Visiting URL: " + context.outputs.ingress.spec.rules[0].host + ", IP: " + igs[0].ip
         	}
-        	if igs[0].host == _|_ {
+        	if host == _|_ {
       	    message: "Host not specified, visit the cluster or load balancer in front of the cluster with IP: " + igs[0].ip
         	}
         }
         if igs[0].ip == _|_ {
-        	if igs[0].host != _|_ {
+        	if host != _|_ {
       		  message: "Visiting URL: " + context.outputs.ingress.spec.rules[0].host
       		}
-        	if igs[0].host != _|_ {
+        	if host != _|_ {
       	    message: "Host not specified, visit the cluster or load balancer in front of the cluster"
       		}
         }

charts/vela-core/templates/defwithtemplate/resource.yaml

@@ -17,49 +17,56 @@ spec:
   schematic:
     cue:
       template: |
-        patch: spec: template: spec: containers: [...{
-        	resources: {
-        		if parameter.cpu != _|_ && parameter.memory != _|_ && parameter.requests == _|_ && parameter.limits == _|_ {
-        			requests: {
-        				cpu:    parameter.cpu
-        				memory: parameter.memory
+        patch: spec: template: spec: {
+        	// +patchKey=name
+        	containers: [{
+        		resources: {
+        			if parameter.cpu != _|_ if parameter.memory != _|_ if parameter.requests == _|_ if parameter.limits == _|_ {
+        				// +patchStrategy=retainKeys
+        				requests: {
+        					cpu:    parameter.cpu
+        					memory: parameter.memory
+        				}
+        				// +patchStrategy=retainKeys
+        				limits: {
+        					cpu:    parameter.cpu
+        					memory: parameter.memory
+        				}
         			}
-        			limits: {
-        				cpu:    parameter.cpu
-        				memory: parameter.memory
-        			}
-        		}
 
-        		if parameter.requests != _|_ {
-        			requests: {
-        				cpu:    parameter.requests.cpu
-        				memory: parameter.requests.memory
+        			if parameter.requests != _|_ {
+        				// +patchStrategy=retainKeys
+        				requests: {
+        					cpu:    parameter.requests.cpu
+        					memory: parameter.requests.memory
+        				}
+        			}
+        			if parameter.limits != _|_ {
+        				// +patchStrategy=retainKeys
+        				limits: {
+        					cpu:    parameter.limits.cpu
+        					memory: parameter.limits.memory
+        				}
         			}
         		}
-        		if parameter.limits != _|_ {
-        			limits: {
-        				cpu:    parameter.limits.cpu
-        				memory: parameter.limits.memory
-        			}
-        		}
-        	}
-        }]
+        	}]
+        }
         parameter: {
         	// +usage=Specify the amount of cpu for requests and limits
-        	cpu?: *1 | number
+        	cpu?: *1 | number | string
         	// +usage=Specify the amount of memory for requests and limits
         	memory?: *"2048Mi" | =~"^([1-9][0-9]{0,63})(E|P|T|G|M|K|Ei|Pi|Ti|Gi|Mi|Ki)$"
         	// +usage=Specify the resources in requests
         	requests?: {
         		// +usage=Specify the amount of cpu for requests
-        		cpu: *1 | number
+        		cpu: *1 | number | string
         		// +usage=Specify the amount of memory for requests
         		memory: *"2048Mi" | =~"^([1-9][0-9]{0,63})(E|P|T|G|M|K|Ei|Pi|Ti|Gi|Mi|Ki)$"
         	}
         	// +usage=Specify the resources in limits
         	limits?: {
         		// +usage=Specify the amount of cpu for limits
-        		cpu: *1 | number
+        		cpu: *1 | number | string
         		// +usage=Specify the amount of memory for limits
         		memory: *"2048Mi" | =~"^([1-9][0-9]{0,63})(E|P|T|G|M|K|Ei|Pi|Ti|Gi|Mi|Ki)$"
         	}

charts/vela-core/templates/defwithtemplate/storage.yaml

@@ -323,7 +323,7 @@ spec:
         			envName:   string
         			secretKey: string
         		}]
-        		mountPath?:  string
+        		mountPath:   string
         		subPath?:    string
         		defaultMode: *420 | int
         		readOnly:    *false | bool

charts/vela-core/templates/defwithtemplate/suspend.yaml

@@ -12,8 +12,22 @@ spec:
   schematic:
     cue:
       template: |
+        import (
+        	"vela/op"
+        )
+
+        suspend: op.#Suspend & {
+        	if parameter.duration != _|_ {
+        		duration: parameter.duration
+        	}
+        	if parameter.message != _|_ {
+        		message: parameter.message
+        	}
+        }
         parameter: {
         	// +usage=Specify the wait duration time to resume workflow such as "30s", "1min" or "2m15s"
         	duration?: string
+        	// +usage=The suspend message to show
+        	message?: string
         }
 

charts/vela-core/templates/kubevela-controller.yaml

@@ -48,6 +48,9 @@ rules:
   - apiGroups: ["flowcontrol.apiserver.k8s.io"]
     resources: ["prioritylevelconfigurations", "flowschemas"]
     verbs: ["get", "list", "watch"]
+  - apiGroups: ["authentication.k8s.io"]
+    resources: ["tokenreviews"]
+    verbs: ["*"]
   - apiGroups: ["authorization.k8s.io"]
     resources: ["subjectaccessreviews"]
     verbs: ["*"]
@@ -247,12 +250,6 @@ spec:
             {{ if ne .Values.optimize.cachedGvks "" }}
             - "--optimize-cached-gvks={{ .Values.optimize.cachedGvks }}"
             {{ end }}
-            {{ if not .Values.optimize.resourceTrackerListOp }}
-            - "--optimize-resource-tracker-list-op=false"
-            {{ end }}
-            {{ if .Values.optimize.controllerReconcileLoopReduction }}
-            - "--optimize-controller-reconcile-loop-reduction"
-            {{ end }}
             {{ if .Values.optimize.markWithProb }}
             - "--optimize-mark-with-prob={{ .Values.optimize.markWithProb }}"
             {{ end }}
@@ -262,9 +259,6 @@ spec:
             {{ if .Values.optimize.disableApplicationRevision }}
             - "--optimize-disable-application-revision"
             {{ end }}
-            {{ if .Values.optimize.disableWorkflowRecorder }}
-            - "--optimize-disable-workflow-recorder"
-            {{ end }}
             {{ if .Values.optimize.enableInMemoryWorkflowContext }}
             - "--optimize-enable-in-memory-workflow-context"
             {{ end }}
@@ -284,6 +278,12 @@ spec:
             - "--oam-spec-ver={{ .Values.OAMSpecVer }}"
             {{ if .Values.multicluster.enabled }}
             - "--enable-cluster-gateway"
+            {{ if .Values.multicluster.clusterGateway.direct }}
+            - "--cluster-gateway-url={{ .Release.Name }}-cluster-gateway-service:9443"
+            {{ if .Values.multicluster.clusterGateway.secureTLS.enabled }}
+            - "--cluster-gateway-ca-file=/cluster-gateway-tls-cert/ca"
+            {{ end }}
+            {{ end }}
             {{ end }}
             {{ if .Values.multicluster.metrics.enabled }}
             - "--enable-cluster-metrics"
@@ -305,6 +305,10 @@ spec:
             - "--feature-gates=GzipApplicationRevision={{- .Values.featureGates.gzipApplicationRevision | toString -}}"
             - "--feature-gates=ZstdApplicationRevision={{- .Values.featureGates.zstdApplicationRevision | toString -}}"
             - "--feature-gates=PreDispatchDryRun={{- .Values.featureGates.preDispatchDryRun | toString -}}"
+            - "--feature-gates=DisableBootstrapClusterInfo={{- .Values.featureGates.disableBootstrapClusterInfo | toString -}}"
+            - "--feature-gates=InformerCacheFilterUnnecessaryFields={{- .Values.featureGates.informerCacheFilterUnnecessaryFields | toString -}}"
+            - "--feature-gates=SharedDefinitionStorageForApplicationRevision={{- .Values.featureGates.sharedDefinitionStorageForApplicationRevision | toString -}}"
+            - "--feature-gates=DisableWorkflowContextConfigMapCache={{- .Values.featureGates.disableWorkflowContextConfigMapCache | toString -}}"
             {{ if .Values.authentication.enabled }}
             {{ if .Values.authentication.withUser }}
             - "--authentication-with-user"
@@ -346,6 +350,11 @@ spec:
             - mountPath: {{ .Values.admissionWebhooks.certificate.mountPath }}
               name: tls-cert-vol
               readOnly: true
+          {{ if and .Values.multicluster.clusterGateway.secureTLS.enabled .Values.multicluster.clusterGateway.direct }}
+            - mountPath: /cluster-gateway-tls-cert
+              name: tls-cert-vol-cg
+              readOnly: true
+          {{ end }}
           {{ end }}
       {{ if .Values.admissionWebhooks.enabled }}
       volumes:
@@ -353,6 +362,12 @@ spec:
           secret:
             defaultMode: 420
             secretName: {{ template "kubevela.fullname" . }}-admission
+      {{ if and .Values.multicluster.clusterGateway.secureTLS.enabled .Values.multicluster.clusterGateway.direct }}
+        - name: tls-cert-vol-cg
+          secret:
+            defaultMode: 420
+            secretName: {{ template "kubevela.fullname" . }}-cluster-gateway-tls-v2
+      {{ end }}
       {{ end }}
       {{- with .Values.nodeSelector }}
       nodeSelector:

charts/vela-core/values.yaml

@@ -85,23 +85,17 @@ healthCheck:
 
 ## @section KubeVela controller optimization parameters
 ##@param optimize.cachedGvks Optimize types of resources to be cached.
-##@param optimize.resourceTrackerListOp Optimize ResourceTracker List Op by adding index.
-##@param optimize.controllerReconcileLoopReduction Optimize ApplicationController reconcile by reducing the number of loops to reconcile application.
 ##@param optimize.markWithProb Optimize ResourceTracker GC by only run mark with probability. Side effect: outdated ResourceTracker might not be able to be removed immediately.
 ##@param optimize.disableComponentRevision Optimize componentRevision by disabling the creation and gc
 ##@param optimize.disableApplicationRevision Optimize ApplicationRevision by disabling the creation and gc.
-##@param optimize.disableWorkflowRecorder Optimize workflow recorder by disabling the creation and gc.
 ##@param optimize.enableInMemoryWorkflowContext Optimize workflow by use in-memory context.
 ##@param optimize.disableResourceApplyDoubleCheck Optimize workflow by ignoring resource double check after apply.
 ##@param optimize.enableResourceTrackerDeleteOnlyTrigger Optimize resourcetracker by only trigger reconcile when resourcetracker is deleted.
 optimize:
   cachedGvks: ""
-  resourceTrackerListOp: true
-  controllerReconcileLoopReduction: false
   markWithProb: 0.1
   disableComponentRevision: true
   disableApplicationRevision: false
-  disableWorkflowRecorder: false
   enableInMemoryWorkflowContext: false
   disableResourceApplyDoubleCheck: false
   enableResourceTrackerDeleteOnlyTrigger: true
@@ -116,28 +110,39 @@ optimize:
 ##@param featureGates.preDispatchDryRun enable dryrun before dispatching resources. Enable this flag can help prevent unsuccessful dispatch resources entering resourcetracker and improve the user experiences of gc but at the cost of increasing network requests.
 ##@param featureGates.validateComponentWhenSharding enable component validation in webhook when sharding mode enabled
 ##@param featureGates.disableWebhookAutoSchedule disable auto schedule for application mutating webhook when sharding enabled
+##@param featureGates.disableBootstrapClusterInfo disable the cluster info bootstrap at the starting of the controller
+##@param featureGates.informerCacheFilterUnnecessaryFields filter unnecessary fields for informer cache
+##@param featureGates.sharedDefinitionStorageForApplicationRevision use definition cache to reduce duplicated definition storage for application revision, must be used with InformerCacheFilterUnnecessaryFields
+##@param featureGates.disableWorkflowContextConfigMapCache disable the workflow context's configmap informer cache
 ##@param
 featureGates:
   enableLegacyComponentRevision: false
   gzipResourceTracker: false
   zstdResourceTracker: true
   applyOnce: false
-  multiStageComponentApply: false
+  multiStageComponentApply: true
   gzipApplicationRevision: false
   zstdApplicationRevision: true
   preDispatchDryRun: true
   validateComponentWhenSharding: false
   disableWebhookAutoSchedule: false
+  disableBootstrapClusterInfo: false
+  informerCacheFilterUnnecessaryFields: true
+  sharedDefinitionStorageForApplicationRevision: true
+  disableWorkflowContextConfigMapCache: true
 
 ## @section MultiCluster parameters
 
 ## @param multicluster.enabled Whether to enable multi-cluster
 ## @param multicluster.metrics.enabled Whether to enable multi-cluster metrics collect
+## @param multicluster.clusterGateway.direct controller will connect to ClusterGateway directly instead of going to Kubernetes APIServer
 ## @param multicluster.clusterGateway.replicaCount ClusterGateway replica count
 ## @param multicluster.clusterGateway.port ClusterGateway port
 ## @param multicluster.clusterGateway.image.repository ClusterGateway image repository
 ## @param multicluster.clusterGateway.image.tag ClusterGateway image tag
 ## @param multicluster.clusterGateway.image.pullPolicy ClusterGateway image pull policy
+## @param multicluster.clusterGateway.resources.requests.cpu ClusterGateway cpu request
+## @param multicluster.clusterGateway.resources.requests.memory ClusterGateway memory request
 ## @param multicluster.clusterGateway.resources.limits.cpu ClusterGateway cpu limit
 ## @param multicluster.clusterGateway.resources.limits.memory ClusterGateway memory limit
 ## @param multicluster.clusterGateway.secureTLS.enabled Whether to enable secure TLS
@@ -148,15 +153,19 @@ multicluster:
   metrics:
     enabled: false
   clusterGateway:
+    direct: true
     replicaCount: 1
     port: 9443
     image:
       repository: oamdev/cluster-gateway
-      tag: v1.7.0
+      tag: v1.8.0
       pullPolicy: IfNotPresent
     resources:
+      requests:
+        cpu: 50m
+        memory: 20Mi
       limits:
-        cpu: 100m
+        cpu: 500m
         memory: 200Mi
     secureTLS:
       enabled: true
@@ -257,11 +266,11 @@ admissionWebhooks:
     enabled: false
     revisionHistoryLimit: 3
 
-## @param kubeClient.qps The qps for reconcile clients, default is 100
-## @param kubeClient.burst The burst for reconcile clients, default is 200
+## @param kubeClient.qps The qps for reconcile clients
+## @param kubeClient.burst The burst for reconcile clients
 kubeClient:
-  qps: 100
-  burst: 200
+  qps: 400
+  burst: 600
 
 ## @param authentication.enabled Enable authentication for application
 ## @param authentication.withUser Application authentication will impersonate as the request User

charts/vela-minimal/README.md

@@ -65,7 +65,6 @@ helm install --create-namespace -n vela-system kubevela kubevela/vela-minimal --
 | `controllerArgs.reSyncPeriod` | The period for resync the applications                                                        | `5m`                 |
 | `OAMSpecVer`                  | OAMSpecVer is the oam spec version controller want to setup                                   | `minimal`            |
 | `disableCaps`                 | Disable capability                                                                            | `envbinding,rollout` |
-| `applyOnceOnly`               | Valid applyOnceOnly values: true/false/on/off/force                                           | `off`                |
 | `dependCheckWait`             | dependCheckWait is the time to wait for ApplicationConfiguration's dependent-resource ready   | `30s`                |
 
 
@@ -97,20 +96,29 @@ helm install --create-namespace -n vela-system kubevela kubevela/vela-minimal --
 | `healthCheck.port`          | KubeVela health check port           | `9440`             |
 
 
+### KubeVela controller optimization parameters
+
+| Name                     | Description                                                                                                                           | Value   |
+| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------- | ------- |
+| `featureGates.applyOnce` | if enabled, the apply-once feature will be applied to all applications, no state-keep and no resource data storage in ResourceTracker | `false` |
+
+
 ### MultiCluster parameters
 
-| Name                                                  | Description                      | Value                            |
-| ----------------------------------------------------- | -------------------------------- | -------------------------------- |
-| `multicluster.enabled`                                | Whether to enable multi-cluster  | `true`                           |
-| `multicluster.clusterGateway.replicaCount`            | ClusterGateway replica count     | `1`                              |
-| `multicluster.clusterGateway.port`                    | ClusterGateway port              | `9443`                           |
-| `multicluster.clusterGateway.image.repository`        | ClusterGateway image repository  | `oamdev/cluster-gateway`         |
-| `multicluster.clusterGateway.image.tag`               | ClusterGateway image tag         | `v1.7.0`                         |
-| `multicluster.clusterGateway.image.pullPolicy`        | ClusterGateway image pull policy | `IfNotPresent`                   |
-| `multicluster.clusterGateway.resources.limits.cpu`    | ClusterGateway cpu limit         | `100m`                           |
-| `multicluster.clusterGateway.resources.limits.memory` | ClusterGateway memory limit      | `200Mi`                          |
-| `multicluster.clusterGateway.secureTLS.enabled`       | Whether to enable secure TLS     | `true`                           |
-| `multicluster.clusterGateway.secureTLS.certPath`      | Path to the certificate file     | `/etc/k8s-cluster-gateway-certs` |
+| Name                                                    | Description                      | Value                            |
+| ------------------------------------------------------- | -------------------------------- | -------------------------------- |
+| `multicluster.enabled`                                  | Whether to enable multi-cluster  | `true`                           |
+| `multicluster.clusterGateway.replicaCount`              | ClusterGateway replica count     | `1`                              |
+| `multicluster.clusterGateway.port`                      | ClusterGateway port              | `9443`                           |
+| `multicluster.clusterGateway.image.repository`          | ClusterGateway image repository  | `oamdev/cluster-gateway`         |
+| `multicluster.clusterGateway.image.tag`                 | ClusterGateway image tag         | `v1.8.0-alpha.3`                 |
+| `multicluster.clusterGateway.image.pullPolicy`          | ClusterGateway image pull policy | `IfNotPresent`                   |
+| `multicluster.clusterGateway.resources.requests.cpu`    | ClusterGateway cpu request       | `50m`                            |
+| `multicluster.clusterGateway.resources.requests.memory` | ClusterGateway memory request    | `20Mi`                           |
+| `multicluster.clusterGateway.resources.limits.cpu`      | ClusterGateway cpu limit         | `500m`                           |
+| `multicluster.clusterGateway.resources.limits.memory`   | ClusterGateway memory limit      | `200Mi`                          |
+| `multicluster.clusterGateway.secureTLS.enabled`         | Whether to enable secure TLS     | `true`                           |
+| `multicluster.clusterGateway.secureTLS.certPath`        | Path to the certificate file     | `/etc/k8s-cluster-gateway-certs` |
 
 
 ### Test parameters

charts/vela-minimal/templates/defwithtemplate/check-metrics.yaml

@@ -0,0 +1,59 @@
+# Code generated by KubeVela templates. DO NOT EDIT. Please edit the original cue file.
+# Definition source cue file: vela-templates/definitions/internal/check-metrics.cue
+apiVersion: core.oam.dev/v1beta1
+kind: WorkflowStepDefinition
+metadata:
+  annotations:
+    custom.definition.oam.dev/category: Application Delivery
+    definition.oam.dev/description: Verify application's metrics
+  labels:
+    custom.definition.oam.dev/catalog: Delivery
+  name: check-metrics
+  namespace: {{ include "systemDefinitionNamespace" . }}
+spec:
+  schematic:
+    cue:
+      template: |
+        import (
+        	"vela/op"
+        )
+
+        check: op.#PromCheck & {
+        	query:          parameter.query
+        	metricEndpoint: parameter.metricEndpoint
+        	condition:      parameter.condition
+        	stepID:         context.stepSessionID
+        	duration:       parameter.duration
+        	failDuration:   parameter.failDuration
+        }
+
+        fail: op.#Steps & {
+        	if check.failed != _|_ {
+        		if check.failed == true {
+        			breakWorkflow: op.#Fail & {
+        				message: check.message
+        			}
+        		}
+        	}
+        }
+
+        wait: op.#ConditionalWait & {
+        	continue: check.result
+        	if check.message != _|_ {
+        		message: check.message
+        	}
+        }
+
+        parameter: {
+        	// +usage=Query is a raw prometheus query to perform
+        	query: string
+        	// +usage=The HTTP address and port of the prometheus server
+        	metricEndpoint?: "http://prometheus-server.o11y-system.svc:9090" | string
+        	// +usage=Condition is an expression which determines if a measurement is considered successful. eg: >=0.95
+        	condition: string
+        	// +usage=Duration defines the duration of time required for this step to be considered successful.
+        	duration?: *"5m" | string
+        	// +usage=FailDuration is the duration of time that, if the check fails, will result in the step being marked as failed.
+        	failDuration?: *"2m" | string
+        }
+

charts/vela-minimal/templates/defwithtemplate/expose.yaml

@@ -44,6 +44,7 @@ spec:
         	// +usage=Specify what kind of Service you want. options: "ClusterIP","NodePort","LoadBalancer","ExternalName"
         	type: *"ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName"
         }
+  stage: PostDispatch
   status:
     customStatus: |-
       message: *"" | string

charts/vela-minimal/templates/defwithtemplate/gateway.yaml

@@ -113,19 +113,20 @@ spec:
       }
       if context.outputs.ingress.status.loadBalancer.ingress != _|_ {
       	let igs = context.outputs.ingress.status.loadBalancer.ingress
+      	let host = context.outputs.ingress.spec.rules[0].host
         if igs[0].ip != _|_ {
-        	if igs[0].host != _|_ {
+        	if host != _|_ {
       	    message: "Visiting URL: " + context.outputs.ingress.spec.rules[0].host + ", IP: " + igs[0].ip
         	}
-        	if igs[0].host == _|_ {
+        	if host == _|_ {
       	    message: "Host not specified, visit the cluster or load balancer in front of the cluster with IP: " + igs[0].ip
         	}
         }
         if igs[0].ip == _|_ {
-        	if igs[0].host != _|_ {
+        	if host != _|_ {
       		  message: "Visiting URL: " + context.outputs.ingress.spec.rules[0].host
       		}
-        	if igs[0].host != _|_ {
+        	if host != _|_ {
       	    message: "Host not specified, visit the cluster or load balancer in front of the cluster"
       		}
         }

charts/vela-minimal/templates/defwithtemplate/resource.yaml

@@ -17,49 +17,56 @@ spec:
   schematic:
     cue:
       template: |
-        patch: spec: template: spec: containers: [...{
-        	resources: {
-        		if parameter.cpu != _|_ && parameter.memory != _|_ && parameter.requests == _|_ && parameter.limits == _|_ {
-        			requests: {
-        				cpu:    parameter.cpu
-        				memory: parameter.memory
+        patch: spec: template: spec: {
+        	// +patchKey=name
+        	containers: [{
+        		resources: {
+        			if parameter.cpu != _|_ if parameter.memory != _|_ if parameter.requests == _|_ if parameter.limits == _|_ {
+        				// +patchStrategy=retainKeys
+        				requests: {
+        					cpu:    parameter.cpu
+        					memory: parameter.memory
+        				}
+        				// +patchStrategy=retainKeys
+        				limits: {
+        					cpu:    parameter.cpu
+        					memory: parameter.memory
+        				}
         			}
-        			limits: {
-        				cpu:    parameter.cpu
-        				memory: parameter.memory
-        			}
-        		}
 
-        		if parameter.requests != _|_ {
-        			requests: {
-        				cpu:    parameter.requests.cpu
-        				memory: parameter.requests.memory
+        			if parameter.requests != _|_ {
+        				// +patchStrategy=retainKeys
+        				requests: {
+        					cpu:    parameter.requests.cpu
+        					memory: parameter.requests.memory
+        				}
+        			}
+        			if parameter.limits != _|_ {
+        				// +patchStrategy=retainKeys
+        				limits: {
+        					cpu:    parameter.limits.cpu
+        					memory: parameter.limits.memory
+        				}
         			}
         		}
-        		if parameter.limits != _|_ {
-        			limits: {
-        				cpu:    parameter.limits.cpu
-        				memory: parameter.limits.memory
-        			}
-        		}
-        	}
-        }]
+        	}]
+        }
         parameter: {
         	// +usage=Specify the amount of cpu for requests and limits
-        	cpu?: *1 | number
+        	cpu?: *1 | number | string
         	// +usage=Specify the amount of memory for requests and limits
         	memory?: *"2048Mi" | =~"^([1-9][0-9]{0,63})(E|P|T|G|M|K|Ei|Pi|Ti|Gi|Mi|Ki)$"
         	// +usage=Specify the resources in requests
         	requests?: {
         		// +usage=Specify the amount of cpu for requests
-        		cpu: *1 | number
+        		cpu: *1 | number | string
         		// +usage=Specify the amount of memory for requests
         		memory: *"2048Mi" | =~"^([1-9][0-9]{0,63})(E|P|T|G|M|K|Ei|Pi|Ti|Gi|Mi|Ki)$"
         	}
         	// +usage=Specify the resources in limits
         	limits?: {
         		// +usage=Specify the amount of cpu for limits
-        		cpu: *1 | number
+        		cpu: *1 | number | string
         		// +usage=Specify the amount of memory for limits
         		memory: *"2048Mi" | =~"^([1-9][0-9]{0,63})(E|P|T|G|M|K|Ei|Pi|Ti|Gi|Mi|Ki)$"
         	}

charts/vela-minimal/templates/defwithtemplate/storage.yaml

@@ -323,7 +323,7 @@ spec:
         			envName:   string
         			secretKey: string
         		}]
-        		mountPath?:  string
+        		mountPath:   string
         		subPath?:    string
         		defaultMode: *420 | int
         		readOnly:    *false | bool

charts/vela-minimal/templates/defwithtemplate/suspend.yaml

@@ -12,8 +12,22 @@ spec:
   schematic:
     cue:
       template: |
+        import (
+        	"vela/op"
+        )
+
+        suspend: op.#Suspend & {
+        	if parameter.duration != _|_ {
+        		duration: parameter.duration
+        	}
+        	if parameter.message != _|_ {
+        		message: parameter.message
+        	}
+        }
         parameter: {
         	// +usage=Specify the wait duration time to resume workflow such as "30s", "1min" or "2m15s"
         	duration?: string
+        	// +usage=The suspend message to show
+        	message?: string
         }
 

charts/vela-minimal/templates/kubevela-controller.yaml

@@ -166,10 +166,8 @@ spec:
             - "--use-webhook=true"
             - "--webhook-port={{ .Values.webhookService.port }}"
             - "--webhook-cert-dir={{ .Values.admissionWebhooks.certificate.mountPath }}"
-            - "--autogen-workload-definition={{ .Values.admissionWebhooks.autoGenWorkloadDefinition }}"
             {{ end }}
             - "--health-addr=:{{ .Values.healthCheck.port }}"
-            - "--apply-once-only={{ .Values.applyOnceOnly }}"
             {{ if ne .Values.disableCaps "" }}
             - "--disable-caps={{ .Values.disableCaps }}"
             {{ end }}
@@ -188,6 +186,7 @@ spec:
             - "--max-workflow-step-error-retry-times={{ .Values.workflow.step.errorRetryTimes }}"
             - "--feature-gates=EnableSuspendOnFailure={{- .Values.workflow.enableSuspendOnFailure | toString -}}"
             - "--feature-gates=AuthenticateApplication={{- .Values.authentication.enabled | toString -}}"
+            - "--feature-gates=ApplyOnce={{- .Values.featureGates.applyOnce | toString -}}"
             {{ if .Values.authentication.enabled }}
             {{ if .Values.authentication.withUser }}
             - "--authentication-with-user"

charts/vela-minimal/values.yaml

@@ -26,9 +26,6 @@ OAMSpecVer: "minimal"
 ## @param disableCaps Disable capability
 disableCaps: "envbinding,rollout"
 
-## @param applyOnceOnly Valid applyOnceOnly values: true/false/on/off/force
-applyOnceOnly: "off"
-
 ## @param dependCheckWait dependCheckWait is the time to wait for ApplicationConfiguration's dependent-resource ready
 dependCheckWait: 30s
 
@@ -86,6 +83,11 @@ webhookService:
 healthCheck:
   port: 9440
 
+## @section KubeVela controller optimization parameters
+
+##@param featureGates.applyOnce if enabled, the apply-once feature will be applied to all applications, no state-keep and no resource data storage in ResourceTracker
+featureGates:
+  applyOnce: false
 
 ## @section MultiCluster parameters
 
@@ -95,6 +97,8 @@ healthCheck:
 ## @param multicluster.clusterGateway.image.repository ClusterGateway image repository
 ## @param multicluster.clusterGateway.image.tag ClusterGateway image tag
 ## @param multicluster.clusterGateway.image.pullPolicy ClusterGateway image pull policy
+## @param multicluster.clusterGateway.resources.requests.cpu ClusterGateway cpu request
+## @param multicluster.clusterGateway.resources.requests.memory ClusterGateway memory request
 ## @param multicluster.clusterGateway.resources.limits.cpu ClusterGateway cpu limit
 ## @param multicluster.clusterGateway.resources.limits.memory ClusterGateway memory limit
 ## @param multicluster.clusterGateway.secureTLS.enabled Whether to enable secure TLS
@@ -106,11 +110,14 @@ multicluster:
     port: 9443
     image:
       repository: oamdev/cluster-gateway
-      tag: v1.7.0
+      tag: v1.8.0-alpha.3
       pullPolicy: IfNotPresent
     resources:
+      requests:
+        cpu: 50m
+        memory: 20Mi
       limits:
-        cpu: 100m
+        cpu: 500m
         memory: 200Mi
     secureTLS:
       enabled: true

cmd/apiserver/app/options/options.go

@@ -1,51 +0,0 @@
-/*
-Copyright 2022 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package options
-
-import (
-	"flag"
-
-	cliflag "k8s.io/component-base/cli/flag"
-	"k8s.io/klog/v2"
-
-	"github.com/oam-dev/kubevela/pkg/apiserver/config"
-	"github.com/oam-dev/kubevela/pkg/features"
-)
-
-// ServerRunOptions contains everything necessary to create and run api server
-type ServerRunOptions struct {
-	GenericServerRunOptions *config.Config
-}
-
-// NewServerRunOptions creates a new ServerRunOptions object with default parameters
-func NewServerRunOptions() *ServerRunOptions {
-	s := &ServerRunOptions{
-		GenericServerRunOptions: config.NewConfig(),
-	}
-	return s
-}
-
-// Flags returns the complete NamedFlagSets
-func (s *ServerRunOptions) Flags() (fss cliflag.NamedFlagSets) {
-	fs := fss.FlagSet("generic")
-	s.GenericServerRunOptions.AddFlags(fs, s.GenericServerRunOptions)
-	features.APIServerMutableFeatureGate.AddFlag(fss.FlagSet("featuregate"))
-	local := flag.NewFlagSet("klog", flag.ExitOnError)
-	klog.InitFlags(local)
-	fs.AddGoFlagSet(local)
-	return fss
-}

cmd/apiserver/app/server.go

@@ -1,151 +0,0 @@
-/*
-Copyright 2022 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package app
-
-import (
-	"context"
-	"encoding/json"
-	"fmt"
-	"os"
-	"os/signal"
-	"syscall"
-
-	restfulspec "github.com/emicklei/go-restful-openapi/v2"
-	"github.com/fatih/color"
-	"github.com/go-openapi/spec"
-	"github.com/spf13/cobra"
-	"k8s.io/klog/v2"
-
-	"github.com/oam-dev/kubevela/cmd/apiserver/app/options"
-	"github.com/oam-dev/kubevela/pkg/apiserver"
-	"github.com/oam-dev/kubevela/pkg/utils"
-	"github.com/oam-dev/kubevela/version"
-)
-
-// NewAPIServerCommand creates a *cobra.Command object with default parameters
-func NewAPIServerCommand() *cobra.Command {
-	s := options.NewServerRunOptions()
-	cmd := &cobra.Command{
-		Use: "apiserver",
-		Long: `The KubeVela API server validates and configures data for the API objects. 
-The API Server services REST operations and provides the frontend to the
-cluster's shared state through which all other components interact.`,
-		RunE: func(cmd *cobra.Command, args []string) error {
-			if err := s.Validate(); err != nil {
-				return err
-			}
-			return Run(s)
-		},
-		SilenceUsage: true,
-	}
-
-	fs := cmd.Flags()
-	namedFlagSets := s.Flags()
-	for _, set := range namedFlagSets.FlagSets {
-		fs.AddFlagSet(set)
-	}
-
-	buildSwaggerCmd := &cobra.Command{
-		Use:   "build-swagger",
-		Short: "Build swagger documentation of KubeVela apiserver",
-		RunE: func(cmd *cobra.Command, args []string) error {
-			name := "docs/apidoc/latest-swagger.json"
-			if len(args) > 0 {
-				name = args[0]
-			}
-			func() {
-				swagger, err := buildSwagger(s)
-				if err != nil {
-					klog.Fatal(err.Error())
-				}
-				outData, err := json.MarshalIndent(swagger, "", "\t")
-				if err != nil {
-					klog.Fatal(err.Error())
-				}
-				swaggerFile, err := os.OpenFile(name, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0600)
-				if err != nil {
-					klog.Fatal(err.Error())
-				}
-				defer func() {
-					if err := swaggerFile.Close(); err != nil {
-						klog.Errorf("close swagger file failure %s", err.Error())
-					}
-				}()
-				_, err = swaggerFile.Write(outData)
-				if err != nil {
-					klog.Fatal(err.Error())
-				}
-				fmt.Println("build swagger config file success")
-			}()
-			return nil
-		},
-	}
-
-	cmd.AddCommand(buildSwaggerCmd)
-
-	return cmd
-}
-
-// Run runs the specified APIServer. This should never exit.
-func Run(s *options.ServerRunOptions) error {
-	// The server is not terminal, there is no color default.
-	// Force set to false, this is useful for the dry-run API.
-	color.NoColor = false
-
-	errChan := make(chan error)
-	ctx, cancel := context.WithCancel(context.Background())
-	defer cancel()
-
-	if s.GenericServerRunOptions.PprofAddr != "" {
-		go utils.EnablePprof(s.GenericServerRunOptions.PprofAddr, errChan)
-	}
-
-	go func() {
-		if err := run(ctx, s, errChan); err != nil {
-			errChan <- fmt.Errorf("failed to run apiserver: %w", err)
-		}
-	}()
-	var term = make(chan os.Signal, 1)
-	signal.Notify(term, os.Interrupt, syscall.SIGTERM)
-
-	select {
-	case <-term:
-		klog.Infof("Received SIGTERM, exiting gracefully...")
-	case err := <-errChan:
-		klog.Errorf("Received an error: %s, exiting gracefully...", err.Error())
-		return err
-	}
-	klog.Infof("See you next time!")
-	return nil
-}
-
-func run(ctx context.Context, s *options.ServerRunOptions, errChan chan error) error {
-	klog.Infof("KubeVela information: version: %v, gitRevision: %v", version.VelaVersion, version.GitRevision)
-
-	server := apiserver.New(*s.GenericServerRunOptions)
-
-	return server.Run(ctx, errChan)
-}
-
-func buildSwagger(s *options.ServerRunOptions) (*spec.Swagger, error) {
-	server := apiserver.New(*s.GenericServerRunOptions)
-	config, err := server.BuildRestfulConfig()
-	if err != nil {
-		return nil, err
-	}
-	return restfulspec.BuildSwagger(*config), nil
-}

cmd/core/app/hooks/pre_start_hook.go

@@ -22,6 +22,7 @@ import (
 	"time"
 
 	"github.com/kubevela/pkg/util/compression"
+	"github.com/kubevela/pkg/util/k8s"
 	"github.com/kubevela/pkg/util/singleton"
 	"k8s.io/apiserver/pkg/util/feature"
 	"k8s.io/klog/v2"
@@ -55,7 +56,7 @@ func (in *SystemCRDValidationHook) Run(ctx context.Context) error {
 		feature.DefaultMutableFeatureGate.Enabled(features.GzipApplicationRevision) {
 		appRev := &v1beta1.ApplicationRevision{}
 		appRev.Name = fmt.Sprintf("core.pre-check.%d", time.Now().UnixNano())
-		appRev.Namespace = types.DefaultKubeVelaNS
+		appRev.Namespace = k8s.GetRuntimeNamespace()
 		key := client.ObjectKeyFromObject(appRev)
 		appRev.SetLabels(map[string]string{oam.LabelPreCheck: types.VelaCoreName})
 		appRev.Spec.Application.Name = appRev.Name

cmd/core/app/server.go

@@ -44,6 +44,7 @@ import (
 	"github.com/oam-dev/kubevela/cmd/core/app/hooks"
 	"github.com/oam-dev/kubevela/cmd/core/app/options"
 	"github.com/oam-dev/kubevela/pkg/auth"
+	"github.com/oam-dev/kubevela/pkg/cache"
 	standardcontroller "github.com/oam-dev/kubevela/pkg/controller"
 	commonconfig "github.com/oam-dev/kubevela/pkg/controller/common"
 	oamv1alpha2 "github.com/oam-dev/kubevela/pkg/controller/core.oam.dev/v1alpha2"
@@ -159,8 +160,9 @@ func run(ctx context.Context, s *options.CoreOptions) error {
 		// of controller-runtime. Additionally, set this value will affect not only application
 		// controller but also all other controllers like definition controller. Therefore, for
 		// functionalities like state-keep, they should be invented in other ways.
-		NewClient: velaclient.DefaultNewControllerClient,
-		NewCache:  sharding.BuildCache(scheme, &v1beta1.Application{}, &v1beta1.ApplicationRevision{}, &v1beta1.ResourceTracker{}),
+		NewClient:             velaclient.DefaultNewControllerClient,
+		NewCache:              cache.BuildCache(ctx, scheme, &v1beta1.Application{}, &v1beta1.ApplicationRevision{}, &v1beta1.ResourceTracker{}),
+		ClientDisableCacheFor: cache.NewResourcesToDisableCache(),
 	})
 	if err != nil {
 		klog.ErrorS(err, "Unable to create a controller manager")

design/vela-cli/sdk_generating.md

@@ -96,10 +96,10 @@ This command requires `docker` in PATH as we'll run openapi-generator in docker.
 
 ```shell
 # Initialize the SDK, generate API from all definitions, 
-vela def gen-api --init -f /path/to/def/dir -o /path/to/sdk --lang go
+vela def gen-api --init -f /path/to/def/dir -o /path/to/sdk --language go
 
 # Incrementally generate API from definitions
-vela def gen-api -f /path/to/def/dir -o /path/to/sdk --lang go
+vela def gen-api -f /path/to/def/dir -o /path/to/sdk --language go
 ```
 
 ## Future work

docs/examples/core-definitions/trait/storage.yaml

@@ -18,7 +18,7 @@ spec:
                 mountPath: /test/mount/pvc
               - name: test1
                 mountPath: /test/mount2/pvc
-                subPath: /sub
+                subPath: sub
             configMap:
               - name: test1
                 mountPath: /test/mount/cm

go.mod

@@ -8,93 +8,82 @@ require (
 	github.com/FogDong/uitable v0.0.5
 	github.com/Masterminds/semver/v3 v3.1.1
 	github.com/Netflix/go-expect v0.0.0-20180615182759-c93bf25de8e8
-	github.com/agiledragon/gomonkey/v2 v2.4.0
 	github.com/alibabacloud-go/cs-20151215/v3 v3.0.32
 	github.com/alibabacloud-go/darabonba-openapi/v2 v2.0.4
-	github.com/alibabacloud-go/tea v1.1.19
+	github.com/alibabacloud-go/tea v1.1.20
 	github.com/aryann/difflib v0.0.0-20210328193216-ff5ff6dc229b
-	github.com/barnettZQG/inject v0.0.1
 	github.com/bluele/gcache v0.0.2
 	github.com/bmizerany/assert v0.0.0-20160611221934-b7ed37b82869
 	github.com/briandowns/spinner v1.11.1
 	github.com/chartmuseum/helm-push v0.10.2
 	github.com/cloudtty/cloudtty v0.2.0
 	github.com/containerd/containerd v1.6.18
-	github.com/coreos/go-oidc v2.2.1+incompatible
 	github.com/coreos/prometheus-operator v0.41.1
-	github.com/crossplane/crossplane-runtime v0.14.1-0.20210722005935-0b469fcc77cd
+	github.com/crossplane/crossplane-runtime v0.16.1
 	github.com/cue-exp/kubevelafix v0.0.0-20220922150317-aead819d979d
 	github.com/davecgh/go-spew v1.1.1
 	github.com/deckarep/golang-set v1.8.0
-	github.com/emicklei/go-restful-openapi/v2 v2.9.1
-	github.com/emicklei/go-restful/v3 v3.8.0
+	github.com/emicklei/go-restful/v3 v3.10.2 // indirect
 	github.com/evanphx/json-patch v5.6.0+incompatible
 	github.com/evanphx/json-patch/v5 v5.6.0 // indirect
 	github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
-	github.com/facebookgo/structtag v0.0.0-20150214074306-217e25fb9691 // indirect
 	github.com/fatih/camelcase v1.0.0 // indirect
 	github.com/fatih/color v1.13.0
 	github.com/felixge/httpsnoop v1.0.1 // indirect
 	github.com/fluxcd/helm-controller/api v0.21.0
 	github.com/fluxcd/source-controller/api v0.24.4
 	github.com/form3tech-oss/jwt-go v3.2.3+incompatible
-	github.com/gdamore/tcell/v2 v2.4.1-0.20210905002822-f057f0a857a1
+	github.com/gdamore/tcell/v2 v2.6.0
 	github.com/gertd/go-pluralize v0.2.1
 	github.com/getkin/kin-openapi v0.94.0
-	github.com/ghodss/yaml v1.0.0
-	github.com/go-git/go-git/v5 v5.5.1
+	github.com/ghodss/yaml v1.0.0 // indirect
+	github.com/go-git/go-git/v5 v5.6.1
 	github.com/go-logr/logr v1.2.3
-	github.com/go-openapi/spec v0.20.4
-	github.com/go-playground/validator/v10 v10.9.0
 	github.com/go-resty/resty/v2 v2.7.0
 	github.com/golang/mock v1.6.0
 	github.com/google/go-cmp v0.5.9
-	github.com/google/go-containerregistry v0.13.0
 	github.com/google/go-github/v32 v32.1.0
-	github.com/google/uuid v1.3.0
-	github.com/gorilla/websocket v1.5.0
+	github.com/google/uuid v1.3.0 // indirect
+	github.com/gorilla/websocket v1.5.0 // indirect
 	github.com/gosuri/uitable v0.0.4
 	github.com/hashicorp/go-version v1.6.0
-	github.com/hashicorp/hcl/v2 v2.12.0
+	github.com/hashicorp/hcl/v2 v2.16.2
 	github.com/hinshun/vt10x v0.0.0-20180616224451-1954e6464174
 	github.com/imdario/mergo v0.3.13
-	github.com/koding/websocketproxy v0.0.0-20181220232114-7ed82d81a28c
-	github.com/kubevela/pkg v0.0.0-20230206074514-7c05c32743e8
+	github.com/kubevela/pkg v0.0.0-20230316114047-e2b41b377bac
 	github.com/kubevela/prism v1.7.0-alpha.1
-	github.com/kubevela/workflow v0.4.1-0.20230215100259-edc78492f107
+	github.com/kubevela/workflow v0.5.0
 	github.com/kyokomi/emoji v2.2.4+incompatible
 	github.com/mitchellh/hashstructure/v2 v2.0.2
-	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/oam-dev/cluster-gateway v1.7.0-alpha.1
 	github.com/oam-dev/cluster-register v1.0.4-0.20220928064144-5f76a9d7ca8c
 	github.com/oam-dev/terraform-config-inspect v0.0.0-20210418082552-fc72d929aa28
 	github.com/oam-dev/terraform-controller v0.7.10
 	github.com/olekukonko/tablewriter v0.0.5
 	github.com/onsi/ginkgo v1.16.5
-	github.com/onsi/ginkgo/v2 v2.8.0
-	github.com/onsi/gomega v1.25.0
+	github.com/onsi/ginkgo/v2 v2.8.3
+	github.com/onsi/gomega v1.27.0
 	github.com/openkruise/kruise-api v1.3.0
 	github.com/pkg/errors v0.9.1
-	github.com/prometheus/client_golang v1.12.2
-	github.com/prometheus/client_model v0.2.0
+	github.com/prometheus/client_golang v1.14.0
+	github.com/prometheus/client_model v0.3.0
 	github.com/rivo/tview v0.0.0-20221128165837-db36428c92d9
-	github.com/robfig/cron/v3 v3.0.1
 	github.com/rogpeppe/go-internal v1.9.0
 	github.com/sirupsen/logrus v1.9.0
-	github.com/spf13/cobra v1.6.0
+	github.com/spf13/cobra v1.6.1
 	github.com/spf13/pflag v1.0.5
-	github.com/stretchr/testify v1.8.1
-	github.com/tidwall/gjson v1.9.3
+	github.com/stretchr/testify v1.8.2
+	github.com/tidwall/gjson v1.14.4
 	github.com/wercker/stern v0.0.0-20190705090245-4fa46dd6987f
 	github.com/wonderflow/cert-manager-api v1.0.4-0.20210304051430-e08aa76f6c5f
 	github.com/xanzy/go-gitlab v0.80.0
-	github.com/xlab/treeprint v1.1.0
-	go.mongodb.org/mongo-driver v1.11.1
+	github.com/xlab/treeprint v1.2.0
 	go.uber.org/zap v1.21.0 // indirect
-	golang.org/x/crypto v0.4.0
-	golang.org/x/oauth2 v0.3.0
-	golang.org/x/term v0.4.0
-	golang.org/x/text v0.6.0
+	golang.org/x/crypto v0.6.0
+	golang.org/x/oauth2 v0.6.0
+	golang.org/x/term v0.6.0
+	golang.org/x/text v0.8.0
 	gomodules.xyz/jsonpatch/v2 v2.2.0
 	gopkg.in/yaml.v3 v3.0.1
 	gotest.tools v2.2.0+incompatible
@@ -113,7 +102,7 @@ require (
 	k8s.io/kubectl v0.25.3
 	k8s.io/metrics v0.25.3
 	k8s.io/utils v0.0.0-20220728103510-ee6ede2d64ed
-	open-cluster-management.io/api v0.7.0
+	open-cluster-management.io/api v0.10.0
 	sigs.k8s.io/controller-runtime v0.12.3
 	sigs.k8s.io/controller-tools v0.9.2
 	sigs.k8s.io/gateway-api v0.4.3
@@ -124,6 +113,7 @@ require (
 require (
 	github.com/dave/jennifer v1.6.0
 	github.com/ettle/strcase v0.1.1
+	golang.org/x/tools v0.6.0
 )
 
 require (
@@ -143,10 +133,10 @@ require (
 	github.com/Masterminds/squirrel v1.5.3 // indirect
 	github.com/Microsoft/go-winio v0.6.0 // indirect
 	github.com/NYTimes/gziphandler v1.1.1 // indirect
-	github.com/ProtonMail/go-crypto v0.0.0-20221026131551-cf6655e29de4 // indirect
+	github.com/ProtonMail/go-crypto v0.0.0-20230217124315-7d5c6f04bbb8 // indirect
 	github.com/PuerkitoBio/purell v1.1.1 // indirect
 	github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 // indirect
-	github.com/acomagu/bufpipe v1.0.3 // indirect
+	github.com/acomagu/bufpipe v1.0.4 // indirect
 	github.com/agext/levenshtein v1.2.3 // indirect
 	github.com/alessio/shellescape v1.4.1 // indirect
 	github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.4 // indirect
@@ -190,15 +180,14 @@ require (
 	github.com/gdamore/encoding v1.0.0 // indirect
 	github.com/go-errors/errors v1.0.1 // indirect
 	github.com/go-git/gcfg v1.5.0 // indirect
-	github.com/go-git/go-billy/v5 v5.3.1 // indirect
+	github.com/go-git/go-billy/v5 v5.4.1 // indirect
 	github.com/go-gorp/gorp/v3 v3.0.2 // indirect
 	github.com/go-logr/zapr v1.2.3 // indirect
 	github.com/go-openapi/jsonpointer v0.19.5 // indirect
 	github.com/go-openapi/jsonreference v0.19.6 // indirect
 	github.com/go-openapi/swag v0.19.15 // indirect
-	github.com/go-playground/locales v0.14.0 // indirect
-	github.com/go-playground/universal-translator v0.18.0 // indirect
 	github.com/go-stack/stack v1.8.1 // indirect
+	github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0 // indirect
 	github.com/gobuffalo/flect v0.2.5 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
@@ -206,11 +195,11 @@ require (
 	github.com/golang/glog v1.0.0 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.2 // indirect
-	github.com/golang/snappy v0.0.3 // indirect
 	github.com/google/btree v1.0.1 // indirect
 	github.com/google/gnostic v0.5.7-v3refs // indirect
 	github.com/google/go-querystring v1.1.0 // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
+	github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38 // indirect
 	github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
 	github.com/gorilla/mux v1.8.0 // indirect
@@ -232,18 +221,16 @@ require (
 	github.com/kr/text v0.2.0 // indirect
 	github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect
 	github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect
-	github.com/leodido/go-urn v1.2.1 // indirect
 	github.com/lib/pq v1.10.6 // indirect
 	github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
 	github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
 	github.com/mailru/easyjson v0.7.6 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.17 // indirect
-	github.com/mattn/go-runewidth v0.0.13 // indirect
+	github.com/mattn/go-runewidth v0.0.14 // indirect
 	github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
 	github.com/mgutz/ansi v0.0.0-20170206155736-9520e82c474b // indirect
 	github.com/mitchellh/copystructure v1.2.0 // indirect
-	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/mitchellh/go-wordwrap v1.0.1 // indirect
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
 	github.com/moby/locker v1.0.1 // indirect
@@ -251,7 +238,6 @@ require (
 	github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
-	github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe // indirect
 	github.com/morikuni/aec v1.0.0 // indirect
 	github.com/mpvl/unique v0.0.0-20150818121801-cbe035fff7de // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
@@ -261,13 +247,13 @@ require (
 	github.com/opencontainers/image-spec v1.1.0-rc2 // indirect
 	github.com/openshift/library-go v0.0.0-20221111030555-73ed40c0a938 // indirect
 	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
-	github.com/pjbgf/sha1cd v0.2.3 // indirect
+	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/pquerna/cachecontrol v0.1.0 // indirect
-	github.com/prometheus/common v0.32.1 // indirect
-	github.com/prometheus/procfs v0.7.3 // indirect
+	github.com/prometheus/common v0.37.0 // indirect
+	github.com/prometheus/procfs v0.8.0 // indirect
 	github.com/protocolbuffers/txtpbfmt v0.0.0-20220428173112-74888fd59c2b // indirect
-	github.com/rivo/uniseg v0.4.2 // indirect
+	github.com/rivo/uniseg v0.4.3 // indirect
+	github.com/robfig/cron/v3 v3.0.1 // indirect
 	github.com/rubenv/sql-migrate v1.1.2 // indirect
 	github.com/russross/blackfriday v1.6.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
@@ -279,14 +265,10 @@ require (
 	github.com/tidwall/match v1.1.1 // indirect
 	github.com/tidwall/pretty v1.2.0 // indirect
 	github.com/tjfoc/gmsm v1.3.2 // indirect
-	github.com/xdg-go/pbkdf2 v1.0.0 // indirect
-	github.com/xdg-go/scram v1.1.1 // indirect
-	github.com/xdg-go/stringprep v1.0.3 // indirect
 	github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f // indirect
 	github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
 	github.com/xeipuuv/gojsonschema v1.2.0 // indirect
-	github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d // indirect
-	github.com/zclconf/go-cty v1.10.0 // indirect
+	github.com/zclconf/go-cty v1.12.1 // indirect
 	go.etcd.io/etcd/api/v3 v3.5.4 // indirect
 	go.etcd.io/etcd/client/pkg/v3 v3.5.4 // indirect
 	go.etcd.io/etcd/client/v3 v3.5.4 // indirect
@@ -304,12 +286,11 @@ require (
 	go.starlark.net v0.0.0-20200306205701-8dd3e2ee1dd5 // indirect
 	go.uber.org/atomic v1.9.0 // indirect
 	go.uber.org/multierr v1.7.0 // indirect
-	golang.org/x/mod v0.7.0 // indirect
-	golang.org/x/net v0.5.0 // indirect
+	golang.org/x/mod v0.8.0 // indirect
+	golang.org/x/net v0.8.0 // indirect
 	golang.org/x/sync v0.1.0 // indirect
-	golang.org/x/sys v0.4.0 // indirect
+	golang.org/x/sys v0.6.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
-	golang.org/x/tools v0.5.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/grpc v1.48.0 // indirect
 	google.golang.org/protobuf v1.28.1 // indirect
@@ -318,7 +299,6 @@ require (
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/natefinch/lumberjack.v2 v2.0.0 // indirect
-	gopkg.in/square/go-jose.v2 v2.5.1 // indirect
 	gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	istio.io/api v0.0.0-20220512212136-561ffec82582 // indirect

go.sum

@@ -112,8 +112,8 @@ github.com/Netflix/go-expect v0.0.0-20180615182759-c93bf25de8e8 h1:xzYJEypr/85nB
 github.com/Netflix/go-expect v0.0.0-20180615182759-c93bf25de8e8/go.mod h1:oX5x61PbNXchhh0oikYAH+4Pcfw5LKv21+Jnpr6r6Pc=
 github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
 github.com/OneOfOne/xxhash v1.2.6/go.mod h1:eZbhyaAYD41SGSSsnmcpxVoRiQ/MPUTjUdIIOT9Um7Q=
-github.com/ProtonMail/go-crypto v0.0.0-20221026131551-cf6655e29de4 h1:ra2OtmuW0AE5csawV4YXMNGNQQXvLRps3z2Z59OPO+I=
-github.com/ProtonMail/go-crypto v0.0.0-20221026131551-cf6655e29de4/go.mod h1:UBYPn8k0D56RtnR8RFQMjmh4KrZzWJ5o7Z9SYjossQ8=
+github.com/ProtonMail/go-crypto v0.0.0-20230217124315-7d5c6f04bbb8 h1:wPbRQzjjwFc0ih8puEVAOFGELsn1zoIIYdxvML7mDxA=
+github.com/ProtonMail/go-crypto v0.0.0-20230217124315-7d5c6f04bbb8/go.mod h1:I0gYDMZ6Z5GRU7l58bNFSkPTFN6Yl12dsUlAZ8xy98g=
 github.com/PuerkitoBio/purell v1.0.0/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/purell v1.1.0/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/purell v1.1.1 h1:WEQqlqaGbrPkxLJWfBwQmfEAE1Z7ONdDLqrN38tNFfI=
@@ -125,15 +125,14 @@ github.com/Shopify/logrus-bugsnag v0.0.0-20171204204709-577dee27f20d h1:UrqY+r/O
 github.com/Shopify/sarama v1.19.0/go.mod h1:FVkBWblsNy7DGZRfXLU0O9RCGt5g3g3yEuWXgklEdEo=
 github.com/Shopify/toxiproxy v2.1.4+incompatible/go.mod h1:OXgGpZ6Cli1/URJOF1DMxUHB2q5Ap20/P/eIdh4G0pI=
 github.com/VividCortex/gohistogram v1.0.0/go.mod h1:Pf5mBqqDxYaXu3hDrrU+w6nw50o/4+TcAqDqk/vUH7g=
-github.com/acomagu/bufpipe v1.0.3 h1:fxAGrHZTgQ9w5QqVItgzwj235/uYZYgbXitB+dLupOk=
-github.com/acomagu/bufpipe v1.0.3/go.mod h1:mxdxdup/WdsKVreO5GpW4+M/1CE2sMG4jeGJ2sYmHc4=
+github.com/acomagu/bufpipe v1.0.4 h1:e3H4WUzM3npvo5uv95QuJM3cQspFNtFBzvJ2oNjKIDQ=
+github.com/acomagu/bufpipe v1.0.4/go.mod h1:mxdxdup/WdsKVreO5GpW4+M/1CE2sMG4jeGJ2sYmHc4=
 github.com/afex/hystrix-go v0.0.0-20180502004556-fa1af6a1f4f5/go.mod h1:SkGFH1ia65gfNATL8TAiHDNxPzPdmEL5uirI2Uyuz6c=
 github.com/agext/levenshtein v1.2.1/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki2W0IB5558=
 github.com/agext/levenshtein v1.2.2/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki2W0IB5558=
 github.com/agext/levenshtein v1.2.3 h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo=
 github.com/agext/levenshtein v1.2.3/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki2W0IB5558=
 github.com/agiledragon/gomonkey/v2 v2.4.0 h1:YDQJYiSQ8o78dCMXehU1E4F/Kh4jPX+MV+/iK/yfL7s=
-github.com/agiledragon/gomonkey/v2 v2.4.0/go.mod h1:ap1AmDzcVOAz1YpeJ3TCzIgstoaWLA6jbbgxfB4w2iY=
 github.com/agnivade/levenshtein v1.0.1/go.mod h1:CURSv5d9Uaml+FovSIICkLbAUZ9S4RqaHDIsdSBg7lM=
 github.com/ahmetb/gen-crd-api-reference-docs v0.3.0/go.mod h1:TdjdkYhlOifCQWPs1UdTma97kQQMozf5h26hTuG70u8=
 github.com/ajstarks/svgo v0.0.0-20180226025133-644b8db467af/go.mod h1:K08gAheRH3/J6wwsYMMT4xOr94bZjxIelGM0+d/wbFw=
@@ -163,8 +162,9 @@ github.com/alibabacloud-go/tea v1.1.0/go.mod h1:IkGyUSX4Ba1V+k4pCtJUc6jDpZLFph9Q
 github.com/alibabacloud-go/tea v1.1.7/go.mod h1:/tmnEaQMyb4Ky1/5D+SE1BAsa5zj/KeGOFfwYm3N/p4=
 github.com/alibabacloud-go/tea v1.1.8/go.mod h1:/tmnEaQMyb4Ky1/5D+SE1BAsa5zj/KeGOFfwYm3N/p4=
 github.com/alibabacloud-go/tea v1.1.17/go.mod h1:nXxjm6CIFkBhwW4FQkNrolwbfon8Svy6cujmKFUq98A=
-github.com/alibabacloud-go/tea v1.1.19 h1:Xroq0M+pr0mC834Djj3Fl4ZA8+GGoA0i7aWse1vmgf4=
 github.com/alibabacloud-go/tea v1.1.19/go.mod h1:nXxjm6CIFkBhwW4FQkNrolwbfon8Svy6cujmKFUq98A=
+github.com/alibabacloud-go/tea v1.1.20 h1:wFK4xEbvGYMtzTyHhIju9D7ecWxvSUdoLO6y4vDLFik=
+github.com/alibabacloud-go/tea v1.1.20/go.mod h1:nXxjm6CIFkBhwW4FQkNrolwbfon8Svy6cujmKFUq98A=
 github.com/alibabacloud-go/tea-utils v1.3.1/go.mod h1:EI/o33aBfj3hETm4RLiAxF/ThQdSngxrpF8rKUDJjPE=
 github.com/alibabacloud-go/tea-utils v1.4.5 h1:h0/6Xd2f3bPE4XHTvkpjwxowIwRCJAJOqY6Eq8f3zfA=
 github.com/alibabacloud-go/tea-utils v1.4.5/go.mod h1:KNcT0oXlZZxOXINnZBs6YvgOd5aYp9U67G+E3R8fcQw=
@@ -208,15 +208,12 @@ github.com/asaskevich/govalidator v0.0.0-20200108200545-475eaeb16496/go.mod h1:o
 github.com/asaskevich/govalidator v0.0.0-20200428143746-21a406dcc535 h1:4daAzAu0S6Vi7/lbWECcX0j45yZReDZ56BQsrVBOEEY=
 github.com/asaskevich/govalidator v0.0.0-20200428143746-21a406dcc535/go.mod h1:oGkLhpf+kjZl6xBf758TQhh5XrAeiJv/7FRz/2spLIg=
 github.com/aws/aws-lambda-go v1.13.3/go.mod h1:4UKl9IzQMoD+QF79YdCuzCwp8VbmG4VAQwij/eHl5CU=
-github.com/aws/aws-sdk-go v1.15.78/go.mod h1:E3/ieXAlvM0XWO57iftYVDLLvQ824smPP3ATZkfNZeM=
 github.com/aws/aws-sdk-go v1.25.48/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
 github.com/aws/aws-sdk-go v1.27.0/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
 github.com/aws/aws-sdk-go v1.30.12/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZveU8YkpAk0=
 github.com/aws/aws-sdk-go v1.31.9/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZveU8YkpAk0=
 github.com/aws/aws-sdk-go-v2 v0.18.0/go.mod h1:JWVYvqSMppoMJC0x5wdwiImzgXTI9FuZwxzkQq9wy+g=
 github.com/baiyubin/aliyun-sts-go-sdk v0.0.0-20180326062324-cfa1a18b161f/go.mod h1:AuiFmCCPBSrqvVMvuqFuk0qogytodnVFVSN5CeJB8Gc=
-github.com/barnettZQG/inject v0.0.1 h1:VjJHLxvl47FynKZEC3rpMZJYsNZmvP0Eaxucl9LqiwI=
-github.com/barnettZQG/inject v0.0.1/go.mod h1:o83X2SlEKFliJx6UHai8bzFj+5isdBfOZsl6nQ2nT3M=
 github.com/benbjohnson/clock v1.0.3/go.mod h1:bGMdMPoPVvcYyt1gHDf4J2KE153Yf9BuiUKYMaxlTDM=
 github.com/benbjohnson/clock v1.1.0 h1:Q92kusRqC1XV2MjkWETPvjJVqKetz1OzxZB7mHJLju8=
 github.com/benbjohnson/clock v1.1.0/go.mod h1:J11/hYXuz8f4ySSvYwY0FKfm+ezbsZBKZxNJlLklBHA=
@@ -224,7 +221,6 @@ github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24
 github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
-github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d/go.mod h1:6QX/PXZ00z/TKoufEY6K/a0k6AhaJrQKdFe6OfVXsa4=
 github.com/bgentry/speakeasy v0.1.0/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
 github.com/bketelsen/crypt v0.0.3-0.20200106085610-5cbc8cc4026c/go.mod h1:MKsuJmJgSg28kpZDP6UIiPt0e0Oz0kqKNGyRaWEPv84=
 github.com/bketelsen/crypt v0.0.4/go.mod h1:aI6NrJ0pMGgvZKL1iVgXLnfIFJtfV+bKCoqOes/6LfM=
@@ -267,7 +263,6 @@ github.com/chai2010/gettext-go v1.0.2 h1:1Lwwip6Q2QGsAdl/ZKPCwTe9fe0CjlUbqj5bFNS
 github.com/chai2010/gettext-go v1.0.2/go.mod h1:y+wnP2cHYaVj19NZhYKAwEMH2CI1gNHeQQ+5AjwawxA=
 github.com/chartmuseum/helm-push v0.10.2 h1:vuzgu+j+2yKOpPtfF4ksD7RC9Y7wAwrHNpiWDnzAZzM=
 github.com/chartmuseum/helm-push v0.10.2/go.mod h1:s6xTICU31jKdLkOXS+GgaR61E+oU4h8TWb1yZcHq8OE=
-github.com/cheggaaa/pb v1.0.27/go.mod h1:pQciLPpbU0oxA0h+VJYYLxO+XeDQb5pZijXscXHm81s=
 github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
 github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
 github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
@@ -300,16 +295,11 @@ github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd/go.mod h1:sE
 github.com/containerd/cgroups v1.0.4 h1:jN/mbWBEaz+T1pi5OFtnkQ+8qnmEbAr1Oo1FRm5B0dA=
 github.com/containerd/containerd v1.6.18 h1:qZbsLvmyu+Vlty0/Ex5xc0z2YtKpIsb5n45mAMI+2Ns=
 github.com/containerd/containerd v1.6.18/go.mod h1:1RdCUu95+gc2v9t3IL+zIlpClSmew7/0YS8O5eQZrOw=
-github.com/containerd/stargz-snapshotter/estargz v0.12.1 h1:+7nYmHJb0tEkcRaAW+MHqoKaJYZmkikupxCqVtmPuY0=
-github.com/coreos/bbolt v1.3.1-coreos.6/go.mod h1:iRUV2dpdMOn7Bo10OQBFzIJO9kkE559Wcmn+qkEiiKk=
 github.com/coreos/bbolt v1.3.2/go.mod h1:iRUV2dpdMOn7Bo10OQBFzIJO9kkE559Wcmn+qkEiiKk=
 github.com/coreos/etcd v3.3.10+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
 github.com/coreos/etcd v3.3.13+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
-github.com/coreos/etcd v3.3.15+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
 github.com/coreos/go-etcd v2.0.0+incompatible/go.mod h1:Jez6KQU2B/sWsbdaef3ED8NzMklzPG4d5KIOhIy30Tk=
 github.com/coreos/go-oidc v2.1.0+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHoZ1nMCKZlZ9V6mm3/LKc=
-github.com/coreos/go-oidc v2.2.1+incompatible h1:mh48q/BqXqgjVHpy2ZY7WnWAbenxRjsz9N1i1YxjHAk=
-github.com/coreos/go-oidc v2.2.1+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHoZ1nMCKZlZ9V6mm3/LKc=
 github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
 github.com/coreos/go-semver v0.3.0 h1:wkHLiw0WNATZnSG7epLsujiMCgPAc9xhjJ4tgnAxmfM=
 github.com/coreos/go-semver v0.3.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
@@ -332,8 +322,8 @@ github.com/creack/pty v1.1.7/go.mod h1:lj5s0c3V2DBrqTV7llrYr5NG6My20zk30Fl46Y7Do
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/creack/pty v1.1.11 h1:07n33Z8lZxZ2qwegKbObQohDhXDQxiMMz1NOUGYlesw=
 github.com/creack/pty v1.1.11/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
-github.com/crossplane/crossplane-runtime v0.14.1-0.20210722005935-0b469fcc77cd h1:2ZdR/HyjXFIo6KxmM08jBLeiJs7GRdGmb6qPKQANGvI=
-github.com/crossplane/crossplane-runtime v0.14.1-0.20210722005935-0b469fcc77cd/go.mod h1:0sB8XOV2zy1GdZvSMY0/5QzKQJUiNSek08wbAYHJbws=
+github.com/crossplane/crossplane-runtime v0.16.1 h1:fWdLXeqIilyix8Zv2V4Z8rTqZ5EWHfLnXP4shc71I5o=
+github.com/crossplane/crossplane-runtime v0.16.1/go.mod h1:IPT3HTsovwmbw3i+SdsOyaC3r3b7TW+otBMmZsHLnSU=
 github.com/cue-exp/kubevelafix v0.0.0-20220922150317-aead819d979d h1:VNJA1nSKA8Xna5wjUIMItHlWmEej8Bb9fZ3vCNtIAX0=
 github.com/cue-exp/kubevelafix v0.0.0-20220922150317-aead819d979d/go.mod h1:SyTryzw/zYJIogw3H2IRcYdV5gsSoVMJiKGElcQK09I=
 github.com/cyphar/filepath-securejoin v0.2.3 h1:YX6ebbZCZP7VkM3scTTokDgBL2TY741X51MTk3ycuNI=
@@ -390,11 +380,8 @@ github.com/elazarl/goproxy v0.0.0-20180725130230-947c36da3153 h1:yUdfgN0XgIJw7fo
 github.com/elazarl/goproxy v0.0.0-20180725130230-947c36da3153/go.mod h1:/Zj4wYkgs4iZTTu3o/KG3Itv/qCCa8VVMlb3i9OVuzc=
 github.com/emicklei/go-restful v0.0.0-20170410110728-ff4f55a20633/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
 github.com/emicklei/go-restful v2.9.5+incompatible/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
-github.com/emicklei/go-restful-openapi/v2 v2.9.1 h1:Of8B1rXdG81il5TTiSY+9Qrh7pYOr8aLdynHIpvo7fM=
-github.com/emicklei/go-restful-openapi/v2 v2.9.1/go.mod h1:VKNgZyYviM1hnyrjD9RDzP2RuE94xTXxV+u6MGN4v4k=
-github.com/emicklei/go-restful/v3 v3.7.3/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
-github.com/emicklei/go-restful/v3 v3.8.0 h1:eCZ8ulSerjdAiaNpF7GxXIE7ZCMo1moN1qX+S609eVw=
-github.com/emicklei/go-restful/v3 v3.8.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
+github.com/emicklei/go-restful/v3 v3.10.2 h1:hIovbnmBTLjHXkqEBUz3HGpXZdM7ZrE9fJIZIqlJLqE=
+github.com/emicklei/go-restful/v3 v3.10.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
 github.com/emicklei/proto v1.10.0 h1:pDGyFRVV5RvV+nkBK9iy3q67FBy9Xa7vwrOTE+g5aGw=
 github.com/emicklei/proto v1.10.0/go.mod h1:rn1FgRS/FANiZdD2djyH7TMA9jdRDcYQ9IEN9yvjX0A=
 github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc=
@@ -425,11 +412,6 @@ github.com/evanphx/json-patch/v5 v5.6.0 h1:b91NhWfaz02IuVxO9faSllyAtNXHMPkC5J8sJ
 github.com/evanphx/json-patch/v5 v5.6.0/go.mod h1:G79N1coSVB93tBe7j6PhzjmR3/2VvlbKOFpnXhI9Bw4=
 github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d h1:105gxyaGwCFad8crR9dcMQWvV9Hvulu6hwUh4tWPJnM=
 github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d/go.mod h1:ZZMPRZwes7CROmyNKgQzC3XPs6L/G2EJLHddWejkmf4=
-github.com/facebookgo/ensure v0.0.0-20200202191622-63f1cf65ac4c h1:8ISkoahWXwZR41ois5lSJBSVw4D0OV19Ht/JSTzvSv0=
-github.com/facebookgo/stack v0.0.0-20160209184415-751773369052 h1:JWuenKqqX8nojtoVVWjGfOF9635RETekkoH6Cc9SX0A=
-github.com/facebookgo/structtag v0.0.0-20150214074306-217e25fb9691 h1:KnnwHN59Jxec0htA2pe/i0/WI9vxXLQifdhBrP3lqcQ=
-github.com/facebookgo/structtag v0.0.0-20150214074306-217e25fb9691/go.mod h1:sKLL1iua/0etWfo/nPCmyz+v2XDMXy+Ho53W7RAuZNY=
-github.com/facebookgo/subset v0.0.0-20200203212716-c811ad88dec4 h1:7HZCaLC5+BZpmbhCOZJ293Lz68O7PYrF2EzeiFMwCLk=
 github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb/go.mod h1:bH6Xx7IW64qjjJq8M2u4dxNaBiDfKK+z/3eGDpXEQhc=
 github.com/fatih/camelcase v1.0.0 h1:hxNvNX/xYBp0ovncs8WyWZrOrpBNub/JfaMvbURyft8=
 github.com/fatih/camelcase v1.0.0/go.mod h1:yN2Sb0lFhZJUdVvtELVWefmrXpuZESvPmqwoZc+/fpc=
@@ -468,8 +450,8 @@ github.com/fvbommel/sortorder v1.0.1 h1:dSnXLt4mJYH25uDDGa3biZNQsozaUWDSWeKJ0qqF
 github.com/fvbommel/sortorder v1.0.1/go.mod h1:uk88iVf1ovNn1iLfgUVU2F9o5eO30ui720w+kxuqRs0=
 github.com/gdamore/encoding v1.0.0 h1:+7OoQ1Bc6eTm5niUzBa0Ctsh6JbMW6Ra+YNuAtDBdko=
 github.com/gdamore/encoding v1.0.0/go.mod h1:alR0ol34c49FCSBLjhosxzcPHQbf2trDkoo5dl+VrEg=
-github.com/gdamore/tcell/v2 v2.4.1-0.20210905002822-f057f0a857a1 h1:QqwPZCwh/k1uYqq6uXSb9TRDhTkfQbO80v8zhnIe5zM=
-github.com/gdamore/tcell/v2 v2.4.1-0.20210905002822-f057f0a857a1/go.mod h1:Az6Jt+M5idSED2YPGtwnfJV0kXohgdCBPmHGSYc1r04=
+github.com/gdamore/tcell/v2 v2.6.0 h1:OKbluoP9VYmJwZwq/iLb4BxwKcwGthaa1YNBJIyCySg=
+github.com/gdamore/tcell/v2 v2.6.0/go.mod h1:be9omFATkdr0D9qewWW3d+MEvl5dha+Etb5y65J2H8Y=
 github.com/gertd/go-pluralize v0.2.1 h1:M3uASbVjMnTsPb0PNqg+E/24Vwigyo/tvyMTtAlLgiA=
 github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkHVpZvoOp8zk=
 github.com/getkin/kin-openapi v0.76.0/go.mod h1:660oXbgy5JFMKreazJaQTw7o+X00qeSyhcnluiMv+Xg=
@@ -489,12 +471,13 @@ github.com/go-errors/errors v1.0.1 h1:LUHzmkK3GUKUrL/1gfBUxAHzcev3apQlezX/+O7ma6
 github.com/go-errors/errors v1.0.1/go.mod h1:f4zRHt4oKfwPJE5k8C9vpYG+aDHdBFUsgrm6/TyX73Q=
 github.com/go-git/gcfg v1.5.0 h1:Q5ViNfGF8zFgyJWPqYwA7qGFoMTEiBmdlkcfRmpIMa4=
 github.com/go-git/gcfg v1.5.0/go.mod h1:5m20vg6GwYabIxaOonVkTdrILxQMpEShl1xiMF4ua+E=
-github.com/go-git/go-billy/v5 v5.3.1 h1:CPiOUAzKtMRvolEKw+bG1PLRpT7D3LIs3/3ey4Aiu34=
 github.com/go-git/go-billy/v5 v5.3.1/go.mod h1:pmpqyWchKfYfrkb/UVH4otLvyi/5gJlGI4Hb3ZqZ3W0=
+github.com/go-git/go-billy/v5 v5.4.1 h1:Uwp5tDRkPr+l/TnbHOQzp+tmJfLceOlbVucgpTz8ix4=
+github.com/go-git/go-billy/v5 v5.4.1/go.mod h1:vjbugF6Fz7JIflbVpl1hJsGjSHNltrSw45YK/ukIvQg=
 github.com/go-git/go-git-fixtures/v4 v4.3.1 h1:y5z6dd3qi8Hl+stezc8p3JxDkoTRqMAlKnXHuzrfjTQ=
 github.com/go-git/go-git-fixtures/v4 v4.3.1/go.mod h1:8LHG1a3SRW71ettAD/jW13h8c6AqjVSeL11RAdgaqpo=
-github.com/go-git/go-git/v5 v5.5.1 h1:5vtv2TB5PM/gPM+EvsHJ16hJh4uAkdGcKilcwY7FYwo=
-github.com/go-git/go-git/v5 v5.5.1/go.mod h1:uz5PQ3d0gz7mSgzZhSJToM6ALPaKCdSnl58/Xb5hzr8=
+github.com/go-git/go-git/v5 v5.6.1 h1:q4ZRqQl4pR/ZJHc1L5CFjGA1a10u76aV1iC+nh+bHsk=
+github.com/go-git/go-git/v5 v5.6.1/go.mod h1:mvyoL6Unz0PiTQrGQfSfiLFhBH1c1e84ylC2MDs4ee8=
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-gorp/gorp/v3 v3.0.2 h1:ULqJXIekoqMx29FI5ekXXFoH1dT2Vc8UhnRzBg+Emz4=
@@ -503,9 +486,11 @@ github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2
 github.com/go-kit/kit v0.9.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-kit/kit v0.10.0/go.mod h1:xUsJbQ/Fp4kEt7AFgCuvyX4a71u8h9jB8tj/ORgOZ7o=
 github.com/go-kit/log v0.1.0/go.mod h1:zbhenjAZHb184qTLMA9ZjW7ThYL0H2mk7Q6pNt4vbaY=
+github.com/go-kit/log v0.2.0/go.mod h1:NwTd00d/i8cPZ3xOwwiv2PO5MOcx78fFErGNcVmBjv0=
 github.com/go-logfmt/logfmt v0.3.0/go.mod h1:Qt1PoO58o5twSAckw1HlFXLmHsOX5/0LbT9GBnD5lWE=
 github.com/go-logfmt/logfmt v0.4.0/go.mod h1:3RMwSq7FuexP4Kalkev3ejPJsZTpXXBr9+V4qmtdjCk=
 github.com/go-logfmt/logfmt v0.5.0/go.mod h1:wCYkCAKZfumFQihp8CzCvQ3paCTfi41vtzG1KdI/P7A=
+github.com/go-logfmt/logfmt v0.5.1/go.mod h1:WYhtIu8zTZfxdn5+rREduYbwxfcBr/Vr6KEVveWlfTs=
 github.com/go-logr/logr v0.1.0/go.mod h1:ixOQHD9gLJUVQQ2ZOR7zLEifBX6tGkNJF4QyIY7sIas=
 github.com/go-logr/logr v0.2.0/go.mod h1:z6/tIYblkpsD+a4lm/fGIIU9mZ+XfAiaFtq7xTgseGU=
 github.com/go-logr/logr v0.4.0/go.mod h1:z6/tIYblkpsD+a4lm/fGIIU9mZ+XfAiaFtq7xTgseGU=
@@ -570,8 +555,6 @@ github.com/go-openapi/spec v0.19.3/go.mod h1:FpwSN1ksY1eteniUU7X0N/BgJ7a4WvBFVA8
 github.com/go-openapi/spec v0.19.5/go.mod h1:Hm2Jr4jv8G1ciIAo+frC/Ft+rR2kQDh8JHKHb3gWUSk=
 github.com/go-openapi/spec v0.19.6/go.mod h1:Hm2Jr4jv8G1ciIAo+frC/Ft+rR2kQDh8JHKHb3gWUSk=
 github.com/go-openapi/spec v0.19.7/go.mod h1:Hm2Jr4jv8G1ciIAo+frC/Ft+rR2kQDh8JHKHb3gWUSk=
-github.com/go-openapi/spec v0.20.4 h1:O8hJrt0UMnhHcluhIdUgCLRWyM2x7QkBXRvOs7m+O1M=
-github.com/go-openapi/spec v0.20.4/go.mod h1:faYFR1CvsJZ0mNsmsphTMSoRrNV3TEDoAM7FOEWeq8I=
 github.com/go-openapi/strfmt v0.17.0/go.mod h1:P82hnJI0CXkErkXi8IKjPbNBM6lV6+5pLP5l494TcyU=
 github.com/go-openapi/strfmt v0.17.2/go.mod h1:P82hnJI0CXkErkXi8IKjPbNBM6lV6+5pLP5l494TcyU=
 github.com/go-openapi/strfmt v0.18.0/go.mod h1:P82hnJI0CXkErkXi8IKjPbNBM6lV6+5pLP5l494TcyU=
@@ -597,14 +580,6 @@ github.com/go-openapi/validate v0.19.2/go.mod h1:1tRCw7m3jtI8eNWEEliiAqUIcBztB2K
 github.com/go-openapi/validate v0.19.3/go.mod h1:90Vh6jjkTn+OT1Eefm0ZixWNFjhtOH7vS9k0lo6zwJo=
 github.com/go-openapi/validate v0.19.5/go.mod h1:8DJv2CVJQ6kGNpFW6eV9N3JviE1C85nY1c2z52x1Gk4=
 github.com/go-openapi/validate v0.19.8/go.mod h1:8DJv2CVJQ6kGNpFW6eV9N3JviE1C85nY1c2z52x1Gk4=
-github.com/go-playground/assert/v2 v2.0.1 h1:MsBgLAaY856+nPRTKrp3/OZK38U/wa0CcBYNjji3q3A=
-github.com/go-playground/assert/v2 v2.0.1/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=
-github.com/go-playground/locales v0.14.0 h1:u50s323jtVGugKlcYeyzC0etD1HifMjqmJqb8WugfUU=
-github.com/go-playground/locales v0.14.0/go.mod h1:sawfccIbzZTqEDETgFXqTho0QybSa7l++s0DH+LDiLs=
-github.com/go-playground/universal-translator v0.18.0 h1:82dyy6p4OuJq4/CByFNOn/jYrnRPArHwAcmLoJZxyho=
-github.com/go-playground/universal-translator v0.18.0/go.mod h1:UvRDBj+xPUEGrFYl+lu/H90nyDXpg0fqeB/AQUGNTVA=
-github.com/go-playground/validator/v10 v10.9.0 h1:NgTtmN58D0m8+UuxtYmGztBJB7VnPgjj221I1QHci2A=
-github.com/go-playground/validator/v10 v10.9.0/go.mod h1:74x4gJWsvQexRdW8Pn3dXSGrTK4nAUsbPlLADvpJkos=
 github.com/go-resty/resty/v2 v2.7.0 h1:me+K9p3uhSmXtrBZ4k9jcEAfJmuC8IivWHwaLZwPrFY=
 github.com/go-resty/resty/v2 v2.7.0/go.mod h1:9PWDzw47qPphMRFfhsyk0NnSgvluHcljSMVIq3w7q0I=
 github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
@@ -615,6 +590,7 @@ github.com/go-sql-driver/mysql v1.6.0/go.mod h1:DCzpHaOWr8IXmIStZouvnhqoel9Qv2LB
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/go-stack/stack v1.8.1 h1:ntEHSVwIt7PNXNpgPmVfMrNhLtgjlmnZha2kOpuRiDw=
 github.com/go-stack/stack v1.8.1/go.mod h1:dcoOX6HbPZSZptuspn9bctJ+N/CnF5gGygcUP3XYfe4=
+github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0 h1:p104kn46Q8WdvHunIJ9dAyjPVtrBPhSr3KT2yUst43I=
 github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0/go.mod h1:fyg7847qk6SyHyPtNmDHnmrv/HOrqktSC+C9fM+CJOE=
 github.com/go-test/deep v1.0.3/go.mod h1:wGDj63lr65AM2AQyKZd/NYHGb0R+1RLqB8NKt3aSFNA=
 github.com/go-test/deep v1.0.7 h1:/VSMRlnY/JSyqxQUzQLKVMAskpY/NZKFA5j2P+0pP2M=
@@ -626,7 +602,6 @@ github.com/gobuffalo/envy v1.7.0/go.mod h1:n7DRkBerg/aorDM8kbduw5dN3oXGswK5liaSC
 github.com/gobuffalo/flect v0.1.0/go.mod h1:d2ehjJqGOH/Kjqcoz+F7jHTBbmDb38yXA598Hb50EGs=
 github.com/gobuffalo/flect v0.1.1/go.mod h1:8JCgGVbRjJhVgD6399mQr4fx5rRfGKVzFjbj6RE/9UI=
 github.com/gobuffalo/flect v0.1.3/go.mod h1:8JCgGVbRjJhVgD6399mQr4fx5rRfGKVzFjbj6RE/9UI=
-github.com/gobuffalo/flect v0.1.5/go.mod h1:W3K3X9ksuZfir8f/LrfVtWmCDQFfayuylOJ7sz/Fj80=
 github.com/gobuffalo/flect v0.2.3/go.mod h1:vmkQwuZYhN5Pc4ljYQZzP+1sq+NEkK+lh20jmEmX3jc=
 github.com/gobuffalo/flect v0.2.5 h1:H6vvsv2an0lalEaCDRThvtBfmg44W/QHXBCYUXf/6S4=
 github.com/gobuffalo/flect v0.2.5/go.mod h1:1ZyCLIbg0YD7sDkzvFdPoOydPtD8y9JQnrOROolUcM8=
@@ -693,7 +668,7 @@ github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5y
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
-github.com/golang/protobuf v1.3.4/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
+github.com/golang/protobuf v1.3.5/go.mod h1:6O5/vntMXwX2lRkT1hjjk0nAC1IDOTvTlVgjlRvqsdk=
 github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
 github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
 github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
@@ -708,7 +683,6 @@ github.com/golang/protobuf v1.5.2 h1:ROPKBNFfQgOUMifHyP+KYbvpjbdoFNs+aK7DXlji0Tw
 github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
 github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/golang/snappy v0.0.1/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
-github.com/golang/snappy v0.0.3 h1:fHPg5GQYlCeLIPB9BZqMVR5nR9A+IM5zcgeTdjMYmLA=
 github.com/golang/snappy v0.0.3/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/gomodule/redigo v1.8.2 h1:H5XSIre1MB5NbPYFp+i1NBbb5qN1W8Y8YAQoAYbkm8k=
 github.com/google/btree v0.0.0-20160524151835-7d79101e329e/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
@@ -732,8 +706,6 @@ github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.7/go.mod h1:n+brtR0CgQNWTVd5ZUFpTBC8YFBDLK/h/bpaJ8/DtOE=
 github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
 github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-containerregistry v0.13.0 h1:y1C7Z3e149OJbOPDBxLYR8ITPz8dTKqQwjErKVHJC8k=
-github.com/google/go-containerregistry v0.13.0/go.mod h1:J9FQ+eSS4a1aC2GNZxvNpbWhgp0487v+cgiilB4FqDo=
 github.com/google/go-github/v32 v32.1.0 h1:GWkQOdXqviCPx7Q7Fj+KyPoGm4SwHRh8rheoPhd27II=
 github.com/google/go-github/v32 v32.1.0/go.mod h1:rIEpZD9CTDQwDK9GDrtMTycQNA4JU3qBsCizh3q2WCI=
 github.com/google/go-querystring v1.0.0/go.mod h1:odCYkC5MyYFN7vkCjXpyrEuKhc/BUO6wN/zVPAxq5ck=
@@ -749,6 +721,8 @@ github.com/google/martian/v3 v3.2.1/go.mod h1:oBOf6HBosgwRXnUGWUB05QECsc6uvmMiJ3
 github.com/google/pprof v0.0.0-20190723021845-34ac40c74b70/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc=
 github.com/google/pprof v0.0.0-20200417002340-c6e0a841f49a/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
 github.com/google/pprof v0.0.0-20200507031123-427632fa3b1c/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
+github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38 h1:yAJXTCF9TqKcTiHJAE8dj7HMvPfh66eeA2JYW7eFpSE=
+github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
 github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 h1:SJ+NtwL6QaZ21U+IrK7d0gGgpjGGvd2kz+FzTHVzdqI=
 github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2/go.mod h1:Tv1PlzqC9t8wNnpPdctvtSUOPUUg4SHeE6vR1Ir2hmg=
@@ -799,7 +773,6 @@ github.com/gregjones/httpcache v0.0.0-20170728041850-787624de3eb7/go.mod h1:Fecb
 github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
 github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA=
 github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
-github.com/grpc-ecosystem/go-grpc-middleware v0.0.0-20190222133341-cfaf5686ec79/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
 github.com/grpc-ecosystem/go-grpc-middleware v1.0.0/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
 github.com/grpc-ecosystem/go-grpc-middleware v1.0.1-0.20190118093823-f849b5445de4/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
 github.com/grpc-ecosystem/go-grpc-middleware v1.1.0/go.mod h1:f5nM7jw/oeRSadq3xCzHAvxcr8HZnzsqU6ILg/0NiiE=
@@ -807,7 +780,6 @@ github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaW
 github.com/grpc-ecosystem/go-grpc-middleware v1.3.0/go.mod h1:z0ButlSOZa5vEBq9m2m2hlwIgKw+rp3sdCBRoJY+30Y=
 github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho=
 github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk=
-github.com/grpc-ecosystem/grpc-gateway v1.3.0/go.mod h1:RSKVYQBd5MCa4OVpNdGskqpgL2+G+NZTnrVHpWWfpdw=
 github.com/grpc-ecosystem/grpc-gateway v1.9.0/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY=
 github.com/grpc-ecosystem/grpc-gateway v1.9.4/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY=
 github.com/grpc-ecosystem/grpc-gateway v1.9.5/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY=
@@ -827,11 +799,10 @@ github.com/hashicorp/go-cleanhttp v0.5.0/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtng
 github.com/hashicorp/go-cleanhttp v0.5.1/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtngrth3wmdIIUrZ80=
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
 github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
-github.com/hashicorp/go-getter v1.4.0/go.mod h1:7qxyCd8rBfcShwsvxgIguu4KbS3l8bUCwg2Umn7RjeY=
 github.com/hashicorp/go-hclog v0.9.2/go.mod h1:5CU+agLiy3J7N7QjHK5d05KxGsuXiQLrjA0H7acj2lQ=
 github.com/hashicorp/go-hclog v0.12.0/go.mod h1:whpDNt7SSdeAju8AWKIWsul05p54N/39EeqMAyrmvFQ=
-github.com/hashicorp/go-hclog v0.12.2 h1:F1fdYblUEsxKiailtkhCCG2g4bipEgaHiDc8vffNpD4=
 github.com/hashicorp/go-hclog v0.12.2/go.mod h1:whpDNt7SSdeAju8AWKIWsul05p54N/39EeqMAyrmvFQ=
+github.com/hashicorp/go-hclog v0.16.2 h1:K4ev2ib4LdQETX5cSZBG0DVLk1jwGqSPXBjdah3veNs=
 github.com/hashicorp/go-immutable-radix v1.0.0/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
 github.com/hashicorp/go-immutable-radix v1.1.0/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
 github.com/hashicorp/go-immutable-radix v1.2.0/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
@@ -844,13 +815,11 @@ github.com/hashicorp/go-retryablehttp v0.7.1/go.mod h1:vAew36LZh98gCBJNLH42IQ1ER
 github.com/hashicorp/go-rootcerts v1.0.0/go.mod h1:K6zTfqpRlCUIjkwsN4Z+hiSfzSTQa6eBIzfwKfwNnHU=
 github.com/hashicorp/go-rootcerts v1.0.1/go.mod h1:pqUvnprVnM5bf7AOirdbb01K4ccR319Vf4pU3K5EGc8=
 github.com/hashicorp/go-rootcerts v1.0.2/go.mod h1:pqUvnprVnM5bf7AOirdbb01K4ccR319Vf4pU3K5EGc8=
-github.com/hashicorp/go-safetemp v1.0.0/go.mod h1:oaerMy3BhqiTbVye6QuFhFtIceqFoDHxNAB65b+Rj1I=
 github.com/hashicorp/go-sockaddr v1.0.0/go.mod h1:7Xibr9yA9JjQq1JpNB2Vw7kxv8xerXegt+ozgdvDeDU=
 github.com/hashicorp/go-sockaddr v1.0.2/go.mod h1:rB4wwRAUzs07qva3c5SdrY/NEtAUjGlgmH/UkBUC97A=
 github.com/hashicorp/go-syslog v1.0.0/go.mod h1:qPfqrKkXGihmCqbJM2mZgkZGvKG1dFdvsLplgctolz4=
 github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
 github.com/hashicorp/go-uuid v1.0.1/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
-github.com/hashicorp/go-version v1.1.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
 github.com/hashicorp/go-version v1.2.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
 github.com/hashicorp/go-version v1.6.0 h1:feTTfFNnjP967rlCxM/I9g701jU+RN74YKx2mOkIeek=
 github.com/hashicorp/go-version v1.6.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
@@ -863,8 +832,8 @@ github.com/hashicorp/hcl v0.0.0-20170504190234-a4b07c25de5f/go.mod h1:oZtUIOe8dh
 github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=
 github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
 github.com/hashicorp/hcl/v2 v2.0.0/go.mod h1:oVVDG71tEinNGYCxinCYadcmKU9bglqW9pV3txagJ90=
-github.com/hashicorp/hcl/v2 v2.12.0 h1:PsYxySWpMD4KPaoJLnsHwtK5Qptvj/4Q6s0t4sUxZf4=
-github.com/hashicorp/hcl/v2 v2.12.0/go.mod h1:FwWsfWEjyV/CMj8s/gqAuiviY72rJ1/oayI9WftqcKg=
+github.com/hashicorp/hcl/v2 v2.16.2 h1:mpkHZh/Tv+xet3sy3F9Ld4FyI2tUpWe9x3XtPx9f1a0=
+github.com/hashicorp/hcl/v2 v2.16.2/go.mod h1:JRmR89jycNkrrqnMmvPDMd56n1rQJ2Q6KocSLCMCXng=
 github.com/hashicorp/logutils v1.0.0/go.mod h1:QIAnNjmIWmVIIkWDTG1z5v++HQmx9WQRO+LraFDTW64=
 github.com/hashicorp/mdns v1.0.0/go.mod h1:tL+uN++7HEJ6SQLQ2/p+z2pH24WQKWjBPkE0mNTz8vQ=
 github.com/hashicorp/mdns v1.0.1/go.mod h1:4gW7WsVCke5TE7EPeYliwHlRUyBtfCwuFwuMg2DmyNY=
@@ -883,6 +852,7 @@ github.com/huandu/xstrings v1.3.2 h1:L18LIDzqlW6xN2rEkpdV8+oL/IXWJ1APd+vsdYy4Wdw
 github.com/huandu/xstrings v1.3.2/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq4ovT0aE=
 github.com/hudl/fargo v1.3.0/go.mod h1:y3CKSmjA+wD2gak7sUSXTAoopbhU08POFhmITJgmKTg=
 github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
+github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
 github.com/imdario/mergo v0.3.5/go.mod h1:2EnlNZ0deacrJVfApfmtdGgDfMuh/nq6Ok1EcJh5FfA=
 github.com/imdario/mergo v0.3.6/go.mod h1:2EnlNZ0deacrJVfApfmtdGgDfMuh/nq6Ok1EcJh5FfA=
 github.com/imdario/mergo v0.3.11/go.mod h1:jmQim1M+e3UYxmgPu/WyfjB3N3VflVyUjjjwH0dnCYA=
@@ -907,7 +877,6 @@ github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i
 github.com/jessevdk/go-flags v0.0.0-20180331124232-1c38ed7ad0cc/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
 github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
 github.com/jessevdk/go-flags v1.5.0/go.mod h1:Fw0T6WPc1dYxT4mKEZRfG5kJhaTDP9pj1c2EWnYs/m4=
-github.com/jmespath/go-jmespath v0.0.0-20160202185014-0b12d6b521d8/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
 github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
 github.com/jmespath/go-jmespath v0.3.0/go.mod h1:9QtRXoHjLGCJ5IBSaohpXITPlowMeeYCZ7fLUTSywik=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
@@ -923,6 +892,7 @@ github.com/jonboulle/clockwork v0.2.2 h1:UOGuzwb1PwsrDAObMuhUnj0p5ULPj8V/xJ7Kx9q
 github.com/jonboulle/clockwork v0.2.2/go.mod h1:Pkfl5aHPm1nk2H9h0bjmnJD/BcgbGXUBGnn1kMkgxc8=
 github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
 github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
+github.com/jpillora/backoff v1.0.0 h1:uvFg412JmmHBHw7iwprIxkPMI+sGQ4kzOWsMeHnm2EA=
 github.com/jpillora/backoff v1.0.0/go.mod h1:J/6gKK9jxlEcS3zixgDgUAsiuZ7yrSoa/FX5e0EB2j4=
 github.com/json-iterator/go v0.0.0-20180612202835-f2b4162afba3/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
 github.com/json-iterator/go v0.0.0-20180701071628-ab8a2e0c74be/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
@@ -956,14 +926,11 @@ github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.4.0/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A=
 github.com/klauspost/compress v1.9.5/go.mod h1:RyIbtBH6LamlWaDj8nUwkbUhJ87Yi3uG0guNDohfE1A=
-github.com/klauspost/compress v1.13.6/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk=
 github.com/klauspost/compress v1.15.12 h1:YClS/PImqYbn+UILDnqxQCZ3RehC9N318SU3kElDUEM=
 github.com/klauspost/compress v1.15.12/go.mod h1:QPwzmACJjUTFsnSHH934V6woptycfrDDJnH7hvFVbGM=
 github.com/klauspost/cpuid v0.0.0-20170728055534-ae7887de9fa5/go.mod h1:Pj4uuM528wm8OyEC2QMXAi2YiTZ96dNQPGgoMS4s3ek=
 github.com/klauspost/crc32 v0.0.0-20161016154125-cb6bfca970f6/go.mod h1:+ZoRqAPRLkC4NPOvfYeR5KNOrY6TD+/sAC3HXPZgDYg=
 github.com/klauspost/pgzip v1.0.2-0.20170402124221-0bf5dcad4ada/go.mod h1:Ch1tH69qFZu15pkjo5kYi6mth2Zzwzt50oCQKQE9RUs=
-github.com/koding/websocketproxy v0.0.0-20181220232114-7ed82d81a28c h1:N7A4JCA2G+j5fuFxCsJqjFU/sZe0mj8H0sSoSwbaikw=
-github.com/koding/websocketproxy v0.0.0-20181220232114-7ed82d81a28c/go.mod h1:Nn5wlyECw3iJrzi0AhIWg+AJUb4PlRQVW4/3XHH1LZA=
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.2/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.3/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
@@ -983,12 +950,12 @@ github.com/kr/pty v1.1.8/go.mod h1:O1sed60cT9XZ5uDucP5qwvh+TE3NnUj51EiZO/lmSfw=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/kubevela/pkg v0.0.0-20230206074514-7c05c32743e8 h1:jWkEQVVovRqONGoJ+WHzDlsvJQEkmTMvcer40UbsEXw=
-github.com/kubevela/pkg v0.0.0-20230206074514-7c05c32743e8/go.mod h1:zJTitvYbj1Vg4l4FvqjDRJEjufT6GRKs8m+fY3V9d3E=
+github.com/kubevela/pkg v0.0.0-20230316114047-e2b41b377bac h1:TLQchMx+BRTnHyebDpOWF2RpF2eTczFBtJro3/H9vwI=
+github.com/kubevela/pkg v0.0.0-20230316114047-e2b41b377bac/go.mod h1:GilLxt+9L4sU2tLeZAGHga8wiYmjjfPX/Q6JkyuuXSM=
 github.com/kubevela/prism v1.7.0-alpha.1 h1:oeZFn1Oy6gxSSFzMTfsWjLOCKaaooMVm1JGNK4j4Mlo=
 github.com/kubevela/prism v1.7.0-alpha.1/go.mod h1:AJSDfdA+RkRSnWx3xEcogbmOTpX+l7RSIwqVHxwUtaI=
-github.com/kubevela/workflow v0.4.1-0.20230215100259-edc78492f107 h1:KaNaPokvPAOiwJy8qx2ilLu7dXznATK7N+LE+2yv8aY=
-github.com/kubevela/workflow v0.4.1-0.20230215100259-edc78492f107/go.mod h1:U94Hz5rlHPAatN+Birhumly26zjAguMumdhrYk+e5mo=
+github.com/kubevela/workflow v0.5.0 h1:1C3v8q7xuNQRww/pD/uu2ywTX0xOG0jb+rQsM1sjhwU=
+github.com/kubevela/workflow v0.5.0/go.mod h1:l1zZpJEJmI/ieI3vM3TTGOfZSPFDl5Ax7MWfbR6It98=
 github.com/kylelemons/godebug v0.0.0-20160406211939-eadb3ce320cb/go.mod h1:B69LEHPfb2qLo0BaaOLcbitczOKLWTsrBG9LczfCD4k=
 github.com/kylelemons/godebug v0.0.0-20170820004349-d65d576e9348/go.mod h1:B69LEHPfb2qLo0BaaOLcbitczOKLWTsrBG9LczfCD4k=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
@@ -1000,8 +967,6 @@ github.com/lann/builder v0.0.0-20180802200727-47ae307949d0/go.mod h1:dXGbAdH5GtB
 github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 h1:P6pPBnrTSX3DEVR4fDembhRWSsG5rVo6hYhAB/ADZrk=
 github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0/go.mod h1:vmVJ0l/dxyfGW6FmdpVm2joNMFikkuWg0EoCKLGUMNw=
 github.com/leanovate/gopter v0.2.4/go.mod h1:gNcbPWNEWRe4lm+bycKqxUYoH5uoVje5SkOJ3uoLer8=
-github.com/leodido/go-urn v1.2.1 h1:BqpAaACuzVSgi/VLzGZIobT2z4v53pjosyNd9Yv6n/w=
-github.com/leodido/go-urn v1.2.1/go.mod h1:zt4jvISO2HfUBqxjfIshjdMTYS56ZS/qv49ictyFfxY=
 github.com/lib/pq v1.0.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.2.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.10.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
@@ -1068,8 +1033,8 @@ github.com/mattn/go-runewidth v0.0.3/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzp
 github.com/mattn/go-runewidth v0.0.4/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU=
 github.com/mattn/go-runewidth v0.0.6/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI=
 github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI=
-github.com/mattn/go-runewidth v0.0.13 h1:lTGmDsbAYt5DmK6OnoV7EuIF1wEIFAcxld6ypU4OSgU=
-github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
+github.com/mattn/go-runewidth v0.0.14 h1:+xnbZSEeDbOIg5/mE6JF0w6n9duR1l3/WmbinWVwUuU=
+github.com/mattn/go-runewidth v0.0.14/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
 github.com/mattn/go-sqlite3 v1.11.0/go.mod h1:FPy6KqzDD04eiIsT53CuJW3U88zkxoIYsOqkbpncsNc=
 github.com/mattn/go-sqlite3 v1.14.6/go.mod h1:NyWgC/yNuGj7Q9rpYnZvas74GogHl5/Z4A/KQRfk6bU=
 github.com/mattn/go-sqlite3 v1.14.8 h1:gDp86IdQsN/xWjIEmr9MF6o9mpksUgh0fu+9ByFxzIU=
@@ -1094,7 +1059,6 @@ github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa1
 github.com/mitchellh/copystructure v1.2.0/go.mod h1:qLl+cE2AmVv+CoeAwDPye/v+N2HKCj9FbZEVFJRxO9s=
 github.com/mitchellh/go-homedir v0.0.0-20161203194507-b8bc1bf76747/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
-github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-testing-interface v1.0.0/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI=
 github.com/mitchellh/go-wordwrap v0.0.0-20150314170334-ad45545899c7/go.mod h1:ZXFpozHsX6DPmq2I0TCekCxypsnAUbP2oI0UX1GXzOo=
@@ -1113,6 +1077,7 @@ github.com/mitchellh/mapstructure v1.4.1/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RR
 github.com/mitchellh/reflectwalk v1.0.0/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
 github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ=
 github.com/mitchellh/reflectwalk v1.0.2/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
+github.com/mmcloughlin/avo v0.5.0/go.mod h1:ChHFdoV7ql95Wi7vuq2YT1bwCJqiWdZrQ1im3VujLYM=
 github.com/moby/locker v1.0.1 h1:fOXqR41zeveg4fFODix+1Ch4mj/gT0NE1XJbp/epuBg=
 github.com/moby/locker v1.0.1/go.mod h1:S7SDdo5zpBK84bzzVlKr2V0hz+7x9hWbYC/kq7oQppc=
 github.com/moby/moby v20.10.20+incompatible h1:x7tLy/H63mylLX/1d75N8NCuYcXBqJAzATrMXHie5+I=
@@ -1134,7 +1099,6 @@ github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9G
 github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 h1:n6/2gBQ3RWajuToeY6ZtZTIKv2v7ThUy5KKusIT0yc0=
 github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00/go.mod h1:Pm3mSP3c5uWn86xMLZ5Sa7JB9GsEZySvHYXCTK4E9q4=
-github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe h1:iruDEfMl2E6fbMZ9s0scYfZQ84/6SPL6zC8ACM2oIL0=
 github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe/go.mod h1:wL8QJuTMNUDYhXwkmfOly8iTdp5TEcJFWZD2D7SIkUc=
 github.com/morikuni/aec v1.0.0 h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A=
 github.com/morikuni/aec v1.0.0/go.mod h1:BbKIizmSmc5MMPqRYbxO4ZU0S0+P200+tUnFx7PXmsc=
@@ -1147,6 +1111,7 @@ github.com/munnerz/goautoneg v0.0.0-20120707110453-a547fc61f48d/go.mod h1:+n7T8m
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
+github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f h1:KUppIJq7/+SVif2QVs3tOP0zanoHgBEVAwHxUSIzRqU=
 github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus=
 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+o7JKHSa8/e818NopupXU1YMK5fe1lsApnBw=
@@ -1196,8 +1161,8 @@ github.com/onsi/ginkgo v1.16.2/go.mod h1:CObGmKUOKaSC0RjmoAK7tKyn4Azo5P2IWuoMnvw
 github.com/onsi/ginkgo v1.16.4/go.mod h1:dX+/inL/fNMqNlz0e9LfyB9TswhZpCVdJM/Z6Vvnwo0=
 github.com/onsi/ginkgo v1.16.5 h1:8xi0RTUf59SOSfEtZMvwTvXYMzG4gV23XVHOZiXNtnE=
 github.com/onsi/ginkgo v1.16.5/go.mod h1:+E8gABHa3K6zRBolWtd+ROzc/U5bkGt0FwiG042wbpU=
-github.com/onsi/ginkgo/v2 v2.8.0 h1:pAM+oBNPrpXRs+E/8spkeGx9QgekbRVyr74EUvRVOUI=
-github.com/onsi/ginkgo/v2 v2.8.0/go.mod h1:6JsQiECmxCa3V5st74AL/AmsV482EDdVrGaVW6z3oYU=
+github.com/onsi/ginkgo/v2 v2.8.3 h1:RpbK1G8nWPNaCVFBWsOGnEQQGgASi6b8fxcWBvDYjxQ=
+github.com/onsi/ginkgo/v2 v2.8.3/go.mod h1:6OaUA8BCi0aZfmzYT/q9AacwTzDpNbxILUT+TlBq6MY=
 github.com/onsi/gomega v0.0.0-20170829124025-dcabb60a477c/go.mod h1:C1qb7wdrVGGVU+Z6iS04AVkA3Q65CEZX59MT0QO5uiA=
 github.com/onsi/gomega v0.0.0-20190113212917-5533ce8a0da3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
 github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
@@ -1210,8 +1175,8 @@ github.com/onsi/gomega v1.13.0/go.mod h1:lRk9szgn8TxENtWd0Tp4c3wjlRfMTMH27I+3Je4
 github.com/onsi/gomega v1.14.0/go.mod h1:cIuvLEne0aoVhAgh/O6ac0Op8WWw9H6eYCriF+tEHG0=
 github.com/onsi/gomega v1.15.0/go.mod h1:cIuvLEne0aoVhAgh/O6ac0Op8WWw9H6eYCriF+tEHG0=
 github.com/onsi/gomega v1.17.0/go.mod h1:HnhC7FXeEQY45zxNK3PPoIUhzk/80Xly9PcubAlGdZY=
-github.com/onsi/gomega v1.25.0 h1:Vw7br2PCDYijJHSfBOWhov+8cAnUf8MfMaIOV323l6Y=
-github.com/onsi/gomega v1.25.0/go.mod h1:r+zV744Re+DiYCIPRlYOTxn0YkOLcAnW8k1xXdMPGhM=
+github.com/onsi/gomega v1.27.0 h1:QLidEla4bXUuZVFa4KX6JHCsuGgbi85LC/pCHrt/O08=
+github.com/onsi/gomega v1.27.0/go.mod h1:i189pavgK95OSIipFBa74gC2V4qrQuvjuyGEr3GmbXA=
 github.com/op/go-logging v0.0.0-20160315200505-970db520ece7/go.mod h1:HzydrMdWErDVzsI23lYNej1Htcns9BCg93Dk0bBINWk=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
@@ -1254,8 +1219,8 @@ github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5 h1:Ii+DKncOVM8Cu1H
 github.com/philhofer/fwd v1.0.0/go.mod h1:gk3iGcWd9+svBvR0sR+KPcfE+RNWozjowpeBVG3ZVNU=
 github.com/pierrec/lz4 v1.0.2-0.20190131084431-473cd7ce01a1/go.mod h1:3/3N9NVKO0jef7pBehbT1qWhCMrIgbYNnFAZCqQ5LRc=
 github.com/pierrec/lz4 v2.0.5+incompatible/go.mod h1:pdkljMzZIN41W+lC3N2tnIh5sFi+IEE17M5jbnwPHcY=
-github.com/pjbgf/sha1cd v0.2.3 h1:uKQP/7QOzNtKYH7UTohZLcjF5/55EnTw0jO/Ru4jZwI=
-github.com/pjbgf/sha1cd v0.2.3/go.mod h1:HOK9QrgzdHpbc2Kzip0Q1yi3M2MFGPADtR6HjG65m5M=
+github.com/pjbgf/sha1cd v0.3.0 h1:4D5XXmUUBUl/xQ6IjCkEAbqXskkq/4O7LmGn0AqMDs4=
+github.com/pjbgf/sha1cd v0.3.0/go.mod h1:nZ1rrWOcGJ5uZgEEVL1VUM9iRQiZvWdbZjkKyFzPPsI=
 github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
@@ -1272,8 +1237,6 @@ github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndr
 github.com/poy/onpar v0.0.0-20190519213022-ee068f8ea4d1 h1:oL4IBbcqwhhNWh31bjOX8C/OCy0zs9906d/VUru+bqg=
 github.com/poy/onpar v0.0.0-20190519213022-ee068f8ea4d1/go.mod h1:nSbFQvMj97ZyhFRSJYtut+msi4sOY6zJDGCdSc+/rZU=
 github.com/pquerna/cachecontrol v0.0.0-20171018203845-0dec1b30a021/go.mod h1:prYjPmNq4d1NPVmpShWobRqXY3q7Vp+80DqgxxUrUIA=
-github.com/pquerna/cachecontrol v0.1.0 h1:yJMy84ti9h/+OEWa752kBTKv4XC30OtVVHYv/8cTqKc=
-github.com/pquerna/cachecontrol v0.1.0/go.mod h1:NrUG3Z7Rdu85UNR3vm7SOsl1nFIeSiQnrHV5K9mBcUI=
 github.com/prometheus-community/prom-label-proxy v0.1.1-0.20200616110844-0fbfa11fa8f3/go.mod h1:XdjyZg7LCbCC5FADHtpgNp6kQ0W9beXVGfmcvndMj5Y=
 github.com/prometheus/alertmanager v0.18.0/go.mod h1:WcxHBl40VSPuOaqWae6l6HpnEOVRIycEJ7i9iYkadEE=
 github.com/prometheus/alertmanager v0.20.0/go.mod h1:9g2i48FAyZW6BtbsnvHtMHQXl2aVtrORKwKVCQ+nbrg=
@@ -1292,15 +1255,18 @@ github.com/prometheus/client_golang v1.6.0/go.mod h1:ZLOG9ck3JLRdB5MgO8f+lLTe83A
 github.com/prometheus/client_golang v1.7.1/go.mod h1:PY5Wy2awLA44sXw4AOSfFBetzPP4j5+D6mVACh+pe2M=
 github.com/prometheus/client_golang v1.11.0/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
 github.com/prometheus/client_golang v1.11.1/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
-github.com/prometheus/client_golang v1.12.2 h1:51L9cDoUHVrXx4zWYlcLQIZ+d+VXHgqnYKkIuq4g/34=
+github.com/prometheus/client_golang v1.12.1/go.mod h1:3Z9XVyYiZYEO+YQWt3RD2R3jrbd179Rt297l4aS6nDY=
 github.com/prometheus/client_golang v1.12.2/go.mod h1:3Z9XVyYiZYEO+YQWt3RD2R3jrbd179Rt297l4aS6nDY=
+github.com/prometheus/client_golang v1.14.0 h1:nJdhIvne2eSX/XRAFV9PcvFFRbrjbcTUj0VP62TMhnw=
+github.com/prometheus/client_golang v1.14.0/go.mod h1:8vpkKitgIVNcqrRBWh1C4TIUQgYNtG/XQE4E/Zae36Y=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.1.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
-github.com/prometheus/client_model v0.2.0 h1:uq5h0d+GuxiXLJLNABMgp2qUWDPiLvgCzz2dUR+/W/M=
 github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/prometheus/client_model v0.3.0 h1:UBgGFHqYdG/TPFD1B1ogZywDqEkwp3fBMvqdiQ7Xew4=
+github.com/prometheus/client_model v0.3.0/go.mod h1:LDGWKZIo7rky3hgvBe+caln+Dr3dPggB5dvjtD7w9+w=
 github.com/prometheus/common v0.0.0-20181113130724-41aa239b4cce/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
 github.com/prometheus/common v0.0.0-20181126121408-4724e9255275/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
 github.com/prometheus/common v0.2.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
@@ -1311,8 +1277,9 @@ github.com/prometheus/common v0.7.0/go.mod h1:DjGbpBbp5NYNiECxcL/VnbXCCaQpKd3tt2
 github.com/prometheus/common v0.9.1/go.mod h1:yhUN8i9wzaXS3w1O07YhxHEBxD+W35wd8bs7vj7HSQ4=
 github.com/prometheus/common v0.10.0/go.mod h1:Tlit/dnDKsSWFlCLTWaA1cyBgKHSMdTB80sz/V91rCo=
 github.com/prometheus/common v0.26.0/go.mod h1:M7rCNAaPfAosfx8veZJCuw84e35h3Cfd9VFqTh1DIvc=
-github.com/prometheus/common v0.32.1 h1:hWIdL3N2HoUx3B8j3YN9mWor0qhY/NlEKZEaXxuIRh4=
 github.com/prometheus/common v0.32.1/go.mod h1:vu+V0TpY+O6vW9J44gczi3Ap/oXXR10b+M/gUGO4Hls=
+github.com/prometheus/common v0.37.0 h1:ccBbHCgIiT9uSoFY0vX8H3zsNR5eLt17/RQLUvn8pXE=
+github.com/prometheus/common v0.37.0/go.mod h1:phzohg0JFMnBEFGxTDbfu3QyL5GI8gTQJFhYO5B3mfA=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
 github.com/prometheus/procfs v0.0.0-20181204211112-1dc9a6cbc91a/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
 github.com/prometheus/procfs v0.0.0-20190117184657-bf6a532e95b1/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
@@ -1327,8 +1294,9 @@ github.com/prometheus/procfs v0.0.11/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4
 github.com/prometheus/procfs v0.1.3/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4OA4YeYWdaU=
 github.com/prometheus/procfs v0.2.0/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4OA4YeYWdaU=
 github.com/prometheus/procfs v0.6.0/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
-github.com/prometheus/procfs v0.7.3 h1:4jVXhlkAyzOScmCkXBTOLRLTz8EeU+eyjrwB/EPq0VU=
 github.com/prometheus/procfs v0.7.3/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
+github.com/prometheus/procfs v0.8.0 h1:ODq8ZFEaYeCaZOJlZZdJA2AbQR98dSHSM1KW/You5mo=
+github.com/prometheus/procfs v0.8.0/go.mod h1:z7EfXMXOkbkqb9IINtpCn86r/to3BnA0uaxHdg830/4=
 github.com/prometheus/prometheus v0.0.0-20180315085919-58e2a31db8de/go.mod h1:oAIUtOny2rjMX0OWN5vPR5/q/twIROJvdqnQKDdil/s=
 github.com/prometheus/prometheus v1.8.2-0.20200110114423-1e64d757f711/go.mod h1:7U90zPoLkWjEIQcy/rweQla82OCTUzxVHE51G3OhJbI=
 github.com/prometheus/prometheus v1.8.2-0.20200507164740-ecee9c8abfd1/go.mod h1:S5n0C6tSgdnwWshBUceRx5G1OsjLv/EeZ9t3wIfEtsY=
@@ -1337,13 +1305,12 @@ github.com/prometheus/tsdb v0.7.1/go.mod h1:qhTCs0VvXwvX/y3TZrWD7rabWM+ijKTux40T
 github.com/protocolbuffers/txtpbfmt v0.0.0-20220428173112-74888fd59c2b h1:zd/2RNzIRkoGGMjE+YIsZ85CnDIz672JK2F3Zl4vux4=
 github.com/protocolbuffers/txtpbfmt v0.0.0-20220428173112-74888fd59c2b/go.mod h1:KjY0wibdYKc4DYkerHSbguaf3JeIPGhNJBp2BNiFH78=
 github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
-github.com/remyoudompheng/bigfft v0.0.0-20170806203942-52369c62f446/go.mod h1:uYEyJGbgTkfkS4+E/PavXkNJcbFIpEtjt2B0KDQ5+9M=
 github.com/retailnext/hllpp v1.0.1-0.20180308014038-101a6d2f8b52/go.mod h1:RDpi1RftBQPUCDRw6SmxeaREsAaRKnOclghuzp/WRzc=
 github.com/rivo/tview v0.0.0-20221128165837-db36428c92d9 h1:ccTgRxA37ypj3q8zB8G4k3xGPfBbIaMwrf3Yw6k50NY=
 github.com/rivo/tview v0.0.0-20221128165837-db36428c92d9/go.mod h1:YX2wUZOcJGOIycErz2s9KvDaP0jnWwRCirQMPLPpQ+Y=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
-github.com/rivo/uniseg v0.4.2 h1:YwD0ulJSJytLpiaWua0sBDusfsCZohxjxzVTYjwxfV8=
-github.com/rivo/uniseg v0.4.2/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
+github.com/rivo/uniseg v0.4.3 h1:utMvzDsuh3suAEnhH0RdHmoPbU648o6CvXxTx4SBMOw=
+github.com/rivo/uniseg v0.4.3/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
 github.com/robfig/cron/v3 v3.0.1 h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs=
 github.com/robfig/cron/v3 v3.0.1/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro=
 github.com/rogpeppe/fastuuid v0.0.0-20150106093220-6724a57986af/go.mod h1:XWv6SoW27p1b0cqNHllgS5HIMJraePCO15w5zCzIWYg=
@@ -1401,7 +1368,6 @@ github.com/smartystreets/assertions v1.0.1/go.mod h1:kHHU4qYBaI3q23Pp3VPrmWhuIUr
 github.com/smartystreets/assertions v1.1.0/go.mod h1:tcbTF8ujkAEcZ8TElKY+i30BzYlVhC/LOxJk7iOWnoo=
 github.com/smartystreets/goconvey v0.0.0-20190330032615-68dc04aab96a/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
-github.com/soheilhy/cmux v0.1.3/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
 github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
 github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js=
 github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0=
@@ -1424,8 +1390,8 @@ github.com/spf13/cobra v1.1.1/go.mod h1:WnodtKOvamDL/PwE2M4iKs8aMDBZ5Q5klgD3qfVJ
 github.com/spf13/cobra v1.1.3/go.mod h1:pGADOWyqRD/YMrPZigI/zbliZ2wVD/23d+is3pSWzOo=
 github.com/spf13/cobra v1.2.1/go.mod h1:ExllRjgxM/piMAM+3tAZvg8fsklGAf3tPfi+i8t68Nk=
 github.com/spf13/cobra v1.4.0/go.mod h1:Wo4iy3BUC+X2Fybo0PDqwJIv3dNRiZLHQymsfxlB84g=
-github.com/spf13/cobra v1.6.0 h1:42a0n6jwCot1pUmomAp4T7DeMD+20LFv4Q54pxLf2LI=
-github.com/spf13/cobra v1.6.0/go.mod h1:IOw/AERYS7UzyrGinqmz6HLUo219MORXGxhbaJUqzrY=
+github.com/spf13/cobra v1.6.1 h1:o94oiPyS4KD1mPy2fmcYYHHfCxLqYjJOhGsCHFZtEzA=
+github.com/spf13/cobra v1.6.1/go.mod h1:IOw/AERYS7UzyrGinqmz6HLUo219MORXGxhbaJUqzrY=
 github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
 github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=
 github.com/spf13/pflag v0.0.0-20170130214245-9ff6c6923cff/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
@@ -1458,12 +1424,12 @@ github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
-github.com/stretchr/testify v1.8.1 h1:w7B6lhMri9wdJUVmEZPGGhZzrYTPvgJArz7wNPgYKsk=
-github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+github.com/stretchr/testify v1.8.2 h1:+h33VjcLVPDHtOdpUCuF+7gSuG3yGIftsP1YvFihtJ8=
+github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
 github.com/subosito/gotenv v1.2.0/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw=
 github.com/thanos-io/thanos v0.11.0/go.mod h1:N/Yes7J68KqvmY+xM6J5CJqEvWIvKSR5sqGtmuD6wDc=
-github.com/tidwall/gjson v1.9.3 h1:hqzS9wAHMO+KVBBkLxYdkEeeFHuqr95GfClRLKlgK0E=
-github.com/tidwall/gjson v1.9.3/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk=
+github.com/tidwall/gjson v1.14.4 h1:uo0p8EbA09J7RQaflQ1aBRffTR7xedD2bcIVSYxLnkM=
+github.com/tidwall/gjson v1.14.4/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk=
 github.com/tidwall/match v1.1.1 h1:+Ho715JplO36QYgwN9PGYNhgZvoUSc9X2c80KVTi+GA=
 github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JTxsfmM=
 github.com/tidwall/pretty v1.0.0/go.mod h1:XNkn88O1ChpSDQmQeStsy+sBenx6DDtFZJxhVysOjyk=
@@ -1482,14 +1448,10 @@ github.com/uber/jaeger-client-go v2.23.0+incompatible/go.mod h1:WVhlPFC8FDjOFMMW
 github.com/uber/jaeger-client-go v2.23.1+incompatible/go.mod h1:WVhlPFC8FDjOFMMWRy2pZqQJSXxYSwNYOkTr/Z6d3Kk=
 github.com/uber/jaeger-lib v2.2.0+incompatible/go.mod h1:ComeNDZlWwrWnDv8aPp0Ba6+uUTzImX/AauajbLI56U=
 github.com/ugorji/go/codec v0.0.0-20181204163529-d75b2dcb6bc8/go.mod h1:VFNgLljTbGfSG7qAOspJ7OScBnGdDN/yBr0sguwnwf0=
-github.com/ulikunitz/xz v0.5.5/go.mod h1:2bypXElzHzzJZwzH67Y6wb67pO62Rzfn7BSiF4ABRW8=
 github.com/urfave/cli v1.20.0/go.mod h1:70zkFmudgCuE/ngEzBv17Jvp/497gISqfk5gWijbERA=
 github.com/urfave/cli v1.22.1/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0=
-github.com/vbatts/tar-split v0.11.2 h1:Via6XqJr0hceW4wff3QRzD5gAk/tatMw/4ZA7cTlIME=
 github.com/vektah/gqlparser v1.1.2/go.mod h1:1ycwN7Ij5njmMkPPAOaRFY4rET2Enx7IkVv3vaXspKw=
 github.com/vmihailenco/msgpack v3.3.3+incompatible/go.mod h1:fy3FlTQTDXWkZ7Bh6AcGMlsjHatGryHQYUTf1ShIgkk=
-github.com/vmihailenco/msgpack/v4 v4.3.12/go.mod h1:gborTTJjAo/GWTqqRjrLCn9pgNN+NXzzngzBKDPIqw4=
-github.com/vmihailenco/tagparser v0.1.1/go.mod h1:OeAg3pn3UbLjkWt+rN9oFYB6u/cQgqMEUPoW2WPyhdI=
 github.com/willf/bitset v1.1.3/go.mod h1:RjeCKbqT1RxIR/KWY6phxZiaY1IyutSBfGjNPySAYV4=
 github.com/wonderflow/cert-manager-api v1.0.4-0.20210304051430-e08aa76f6c5f h1:DAWUgvjpY7r474gC2ZWkWCJaaJLnTq1r1kF9KGckJV0=
 github.com/wonderflow/cert-manager-api v1.0.4-0.20210304051430-e08aa76f6c5f/go.mod h1:1Se7MSg11/eNYlo4fWv6vOM55/jTBMOzg2DN1kVFiSc=
@@ -1497,12 +1459,6 @@ github.com/xanzy/go-gitlab v0.80.0 h1:2d6RwUrI3ZC2Xh9urnqiiHCLzWNndrGtje3yByZubd
 github.com/xanzy/go-gitlab v0.80.0/go.mod h1:DlByVTSXhPsJMYL6+cm8e8fTJjeBmhrXdC/yvkKKt6M=
 github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM=
 github.com/xanzy/ssh-agent v0.3.3/go.mod h1:6dzNDKs0J9rVPHPhaGCukekBHKqfl+L3KghI1Bc68Uw=
-github.com/xdg-go/pbkdf2 v1.0.0 h1:Su7DPu48wXMwC3bs7MCNG+z4FhcyEuz5dlvchbq0B0c=
-github.com/xdg-go/pbkdf2 v1.0.0/go.mod h1:jrpuAogTd400dnrH08LKmI/xc1MbPOebTwRqcT5RDeI=
-github.com/xdg-go/scram v1.1.1 h1:VOMT+81stJgXW3CpHyqHN3AXDYIMsx56mEFrB37Mb/E=
-github.com/xdg-go/scram v1.1.1/go.mod h1:RaEWvsqvNKKvBPvcKeFjrG2cJqOkHTiyTpzz23ni57g=
-github.com/xdg-go/stringprep v1.0.3 h1:kdwGpVNwPFtjs98xCGkHjQtGKh86rDcRZN17QEMCOIs=
-github.com/xdg-go/stringprep v1.0.3/go.mod h1:W3f5j4i+9rC0kuIEJL0ky1VpHXQU3ocBgklLGvcBnW8=
 github.com/xdg/scram v0.0.0-20180814205039-7eeb5667e42c/go.mod h1:lB8K/P019DLNhemzwFU4jHLhdvlE6uDZjXFejJXr49I=
 github.com/xdg/stringprep v0.0.0-20180714160509-73f8eece6fdc/go.mod h1:Jhud4/sHMO4oL310DaZAKk9ZaJ08SJfe+sJh0HrGL1Y=
 github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f h1:J9EGpcZtP0E/raorCMxlFGSTBrsSlaDGf3jU/qvAE2c=
@@ -1511,15 +1467,12 @@ github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 h1:EzJWgHo
 github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ=
 github.com/xeipuuv/gojsonschema v1.2.0 h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74=
 github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQluxsYJ78Id3Y=
-github.com/xiang90/probing v0.0.0-20160813154853-07dd2e8dfe18/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU=
 github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2 h1:eY9dn8+vbi4tKz5Qo6v2eYzo7kUS51QINcR5jNpbZS8=
 github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU=
 github.com/xlab/treeprint v0.0.0-20180616005107-d6fb6747feb6/go.mod h1:ce1O1j6UtZfjr22oyGxGLbauSBp2YVXpARAosm7dHBg=
-github.com/xlab/treeprint v1.1.0 h1:G/1DjNkPpfZCFt9CSh6b5/nY4VimlbHF3Rh4obvtzDk=
-github.com/xlab/treeprint v1.1.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0=
+github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=
+github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0=
 github.com/xordataexchange/crypt v0.0.3-0.20170626215501-b2862e3d0a77/go.mod h1:aYKd//L2LvnjZzWKhF00oedf4jCCReLcmhLdhm1A27Q=
-github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d h1:splanxYIlg+5LfHAM6xpdFEAYOk8iySO56hMFq6uLyA=
-github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d/go.mod h1:rHwXgn7JulP+udvsHwJoVG1YGAP6VLg4y9I5dyZdqmA=
 github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.1.30/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
@@ -1531,11 +1484,8 @@ github.com/yvasiyarov/go-metrics v0.0.0-20140926110328-57bccd1ccd43 h1:+lm10QQTN
 github.com/yvasiyarov/gorelic v0.0.0-20141212073537-a9bba5b9ab50 h1:hlE8//ciYMztlGpl/VA+Zm1AcTPHYkHJPbHqE6WJUXE=
 github.com/yvasiyarov/newrelic_platform_go v0.0.0-20140908184405-b21fdbd4370f h1:ERexzlUfuTvpE74urLSbIQW0Z/6hF9t8U4NsJLaioAY=
 github.com/zclconf/go-cty v1.1.0/go.mod h1:xnAOWiHeOqg2nWS62VtQ7pbOu17FtxJNW8RLEih+O3s=
-github.com/zclconf/go-cty v1.2.0/go.mod h1:hOPWgoHbaTUnI5k4D2ld+GRpFJSCe6bCM7m1q/N4PQ8=
-github.com/zclconf/go-cty v1.8.0/go.mod h1:vVKLxnk3puL4qRAv72AO+W99LUD4da90g3uUAzyuvAk=
-github.com/zclconf/go-cty v1.10.0 h1:mp9ZXQeIcN8kAwuqorjH+Q+njbJKjLrvB2yIh4q7U+0=
-github.com/zclconf/go-cty v1.10.0/go.mod h1:vVKLxnk3puL4qRAv72AO+W99LUD4da90g3uUAzyuvAk=
-github.com/zclconf/go-cty-debug v0.0.0-20191215020915-b22d67c1ba0b/go.mod h1:ZRKQfBXbGkpdV6QMzT3rU1kSTAnfu1dO8dPKjYprgj8=
+github.com/zclconf/go-cty v1.12.1 h1:PcupnljUm9EIvbgSHQnHhUr3fO6oFmkOrvs2BAFNXXY=
+github.com/zclconf/go-cty v1.12.1/go.mod h1:s9IfD1LK5ccNMSWCVFCE2rJfHiZgi7JijgeWIMfhLvA=
 github.com/ziutek/mymysql v1.5.4 h1:GB0qdRGsTwQSBVYuVShFBKaXSnSnYYC2d9knnE1LHFs=
 github.com/ziutek/mymysql v1.5.4/go.mod h1:LMSpPZ6DbqWFxNCHW77HeMg9I646SAhApZ/wKdgO/C0=
 go.elastic.co/apm v1.5.0/go.mod h1:OdB9sPtM6Vt7oz3VXt7+KR96i9li74qrxBGHTQygFvk=
@@ -1572,8 +1522,6 @@ go.mongodb.org/mongo-driver v1.1.1/go.mod h1:u7ryQJ+DOzQmeO7zB6MHyr8jkEQvC8vH7qL
 go.mongodb.org/mongo-driver v1.1.2/go.mod h1:u7ryQJ+DOzQmeO7zB6MHyr8jkEQvC8vH7qLUO4lqsUM=
 go.mongodb.org/mongo-driver v1.3.0/go.mod h1:MSWZXKOynuguX+JSvwP8i+58jYCXxbia8HS3gZBapIE=
 go.mongodb.org/mongo-driver v1.3.2/go.mod h1:MSWZXKOynuguX+JSvwP8i+58jYCXxbia8HS3gZBapIE=
-go.mongodb.org/mongo-driver v1.11.1 h1:QP0znIRTuL0jf1oBQoAoM0C6ZJfBK4kx0Uumtv1A7w8=
-go.mongodb.org/mongo-driver v1.11.1/go.mod h1:s7p5vEtfbeR1gYi6pnj3c3/urpbLv2T5Sfd6Rp2HBB8=
 go.opencensus.io v0.20.1/go.mod h1:6WKK9ahsWS3RSO+PY9ZHZUfv2irvY6gN279GOPZjmmk=
 go.opencensus.io v0.20.2/go.mod h1:6WKK9ahsWS3RSO+PY9ZHZUfv2irvY6gN279GOPZjmmk=
 go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU=
@@ -1609,7 +1557,6 @@ go.opentelemetry.io/proto/otlp v0.7.0 h1:rwOQPCuKAKmwGKq2aVNnYIibI6wnV7EvzgfTCzc
 go.opentelemetry.io/proto/otlp v0.7.0/go.mod h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI=
 go.starlark.net v0.0.0-20200306205701-8dd3e2ee1dd5 h1:+FNtrFTmVw0YZGpBGX56XDee331t6JAXeK2bcyhLOOc=
 go.starlark.net v0.0.0-20200306205701-8dd3e2ee1dd5/go.mod h1:nmDLcffg48OtT/PSW0Hg7FvpRQsQh5OSqIylirxKC7o=
-go.uber.org/atomic v0.0.0-20181018215023-8dc6146f7569/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
 go.uber.org/atomic v1.3.2/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
 go.uber.org/atomic v1.4.0/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
 go.uber.org/atomic v1.5.0/go.mod h1:sABNBOSYdrvTF6hTgEIbc7YasKWGhgEQZyfxyTvoXHQ=
@@ -1621,14 +1568,12 @@ go.uber.org/automaxprocs v1.2.0/go.mod h1:YfO3fm683kQpzETxlTGZhGIVmXAhaw3gxeBADb
 go.uber.org/goleak v1.1.10/go.mod h1:8a7PlsEVH3e/a/GLqe5IIrQx6GzcnRmZEufDUTk4A7A=
 go.uber.org/goleak v1.1.11/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
 go.uber.org/goleak v1.2.0 h1:xqgm/S+aQvhWFTtR0XK3Jvg7z8kGV8P4X14IzwN3Eqk=
-go.uber.org/multierr v0.0.0-20180122172545-ddea229ff1df/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
 go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
 go.uber.org/multierr v1.3.0/go.mod h1:VgVr7evmIr6uPjLBxg28wmKNXyqE9akIJ5XnfpiKl+4=
 go.uber.org/multierr v1.6.0/go.mod h1:cdWPpRnG4AhwMwsgIHip0KRBQjJy5kYEpYjJxpXp9iU=
 go.uber.org/multierr v1.7.0 h1:zaiO/rmgFjbmCXdSYJWQcdvOCsthmdaHfr3Gm2Kx4Ec=
 go.uber.org/multierr v1.7.0/go.mod h1:7EAYxJLBy9rStEaz58O2t4Uvip6FSURkq8/ppBp95ak=
 go.uber.org/tools v0.0.0-20190618225709-2cfd321de3ee/go.mod h1:vJERXedbb3MVM5f9Ejo0C68/HhF8uaILCdgjnY+goOA=
-go.uber.org/zap v0.0.0-20180814183419-67bc79d13d15/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q=
 go.uber.org/zap v1.9.1/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q=
 go.uber.org/zap v1.10.0/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q=
 go.uber.org/zap v1.13.0/go.mod h1:zwrFLgMcdUuIBviXEYEH1YKNaOBnKXsx2IPda5bBwHM=
@@ -1637,6 +1582,7 @@ go.uber.org/zap v1.18.1/go.mod h1:xg/QME4nWcxGxrpdeYfq7UvYrLh66cuVKdrbD1XF/NI=
 go.uber.org/zap v1.19.0/go.mod h1:xg/QME4nWcxGxrpdeYfq7UvYrLh66cuVKdrbD1XF/NI=
 go.uber.org/zap v1.21.0 h1:WefMeulhovoZ2sYXz7st6K0sLj7bBhpiFaud4r4zST8=
 go.uber.org/zap v1.21.0/go.mod h1:wjWOCqI0f2ZZrJF/UufIOkiC8ii6tm1iqIsLo76RfJw=
+golang.org/x/arch v0.1.0/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20181025213731-e84da0312774/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20181029021203-45a5f77698d3/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
@@ -1671,7 +1617,6 @@ golang.org/x/crypto v0.0.0-20201002170205-7f63de1d35b0/go.mod h1:LzIPMQfyMNhhGPh
 golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
 golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
 golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211108221036-ceb1ce70b4fa/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
@@ -1679,15 +1624,14 @@ golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0
 golang.org/x/crypto v0.0.0-20220525230936-793ad666bf5e/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220826181053-bd7e27e6170d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
-golang.org/x/crypto v0.4.0 h1:UVQgzMY87xqpKNgb+kDsll2Igd33HszWHFLmpaRMq/8=
-golang.org/x/crypto v0.4.0/go.mod h1:3quD/ATkf6oY+rnes5c3ExXTbLc8mueNue5/DoinL80=
+golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw=
+golang.org/x/crypto v0.6.0 h1:qfktjS5LUO+fFKeJXZ+ikTRijMmljikvG68fpMMruSc=
+golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
 golang.org/x/exp v0.0.0-20180321215751-8460e604b9de/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20180807140117-3d87b88a115f/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190125153040-c74c464bbbf2/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
-golang.org/x/exp v0.0.0-20190312203227-4b39c73a6495/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
 golang.org/x/exp v0.0.0-20191030013958-a1ab85dbe136/go.mod h1:JXzH8nQsPlswgeRAPE3MuO9GYsAcnJvJ4vnMwN/5qkY=
 golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
@@ -1714,8 +1658,9 @@ golang.org/x/mod v0.3.1-0.20200828183125-ce943fd02449/go.mod h1:s0Qsj1ACt9ePp/hM
 golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
-golang.org/x/mod v0.7.0 h1:LapD9S96VoQRhi/GrNTqeBJFrUjs5UHCAtTlgwA5oZA=
-golang.org/x/mod v0.7.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
+golang.org/x/mod v0.6.0/go.mod h1:4mET923SAdbXp2ki8ey+zGs1SLqsuM2Y0uvdZR/fUNI=
+golang.org/x/mod v0.8.0 h1:LUYupSeNrTNCGzR/hVBk2NHZO4hXcVaW1k4Qx7rjPx8=
+golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/net v0.0.0-20170114055629-f2499483f923/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180811021610-c39426892332/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -1741,7 +1686,6 @@ golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLL
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190628185345-da137c7871d7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190724013045-ca1201d0de80/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20190812203447-cdfb69ac37fc/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190813141303-74dc4d7220e7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190827160401-ba9fcec4b297/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190923162816-aa69164e4478/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
@@ -1752,7 +1696,6 @@ golang.org/x/net v0.0.0-20191126235420-ef20fe5d7933/go.mod h1:z5CRVTTTmAJ677TzLL
 golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200202094626-16171245cfb2/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20200301022130-244492dfa37a/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
 golang.org/x/net v0.0.0-20200421231249-e086a090c8fd/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
 golang.org/x/net v0.0.0-20200506145744-7e3656a0809f/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
@@ -1777,11 +1720,15 @@ golang.org/x/net v0.0.0-20210825183410-e898025ed96a/go.mod h1:9nx3DQGgdP8bBQD5qx
 golang.org/x/net v0.0.0-20211029224645-99673261e6eb/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20211209124913-491a49abca63/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
+golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
+golang.org/x/net v0.0.0-20220225172249-27dd8689420f/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.0.0-20220826154423-83b083e8dc8b/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk=
-golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
-golang.org/x/net v0.5.0 h1:GyT4nK/YDHSqa1c4753ouYCDajOYKTja9Xb/OHtgvSw=
-golang.org/x/net v0.5.0/go.mod h1:DivGGAXEgPSlEBzxGzZI+ZLohi+xUj054jfeKui00ws=
+golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco=
+golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
+golang.org/x/net v0.7.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
+golang.org/x/net v0.8.0 h1:Zrh2ngAOFYneWTAIAPethzeaQLuHwhuBkuV6ZiRnUaQ=
+golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190402181905-9f3314589c9a/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -1795,8 +1742,9 @@ golang.org/x/oauth2 v0.0.0-20210514164344-f6687ab2804c/go.mod h1:KelEdhl1UZF7XfJ
 golang.org/x/oauth2 v0.0.0-20210805134026-6f1e6394065a/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
 golang.org/x/oauth2 v0.0.0-20210819190943-2bc19b11175f/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
 golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
-golang.org/x/oauth2 v0.3.0 h1:6l90koy8/LaBLmLu8jpHeHexzMwEita0zFfYlggy2F8=
-golang.org/x/oauth2 v0.3.0/go.mod h1:rQrIauxkUhJ6CuwEXwymO2/eh4xz2ZWF1nBkcxS+tGk=
+golang.org/x/oauth2 v0.0.0-20220223155221-ee480838109b/go.mod h1:DAh4E804XQdzx2j+YRIaUnCqCV2RuMz24cGBJ5QYIrc=
+golang.org/x/oauth2 v0.6.0 h1:Lh8GPgSKBfWSwFvtuWOfeI3aAAnbXTSutYxJiOJFgIw=
+golang.org/x/oauth2 v0.6.0/go.mod h1:ycmewcwgD4Rpr3eZJLSB4Kyyljb3qDh40vJ8STE5HKw=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -1907,6 +1855,7 @@ golang.org/x/sys v0.0.0-20210823070655-63515b42dcdf/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20210831042530-f4d43177bf5e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211007075335-d3039528d8ac/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211210111614-af8b64212486/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220412211240-33da011f77ad/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -1915,19 +1864,21 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220825204002-c680a09ffe64/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.4.0 h1:Zr2JFtRQNX3BCZ8YtxRE9hNJYC8J6I1MVbMg6owUp18=
-golang.org/x/sys v0.4.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0 h1:MVltZSvRTcU2ljQOhs94SXPftV6DCNnZViHeQps87pQ=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
-golang.org/x/term v0.0.0-20201210144234-2321bbc49cbf/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210220032956-6a3ed077a48d/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.0.0-20220722155259-a9ba230a4035/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
-golang.org/x/term v0.4.0 h1:O7UWfv5+A2qiuulQk30kVinPoMtoIPeVaKLEgLpVkvg=
-golang.org/x/term v0.4.0/go.mod h1:9P2UbLfCdcvo3p/nzKvsmas4TnlujnuoV9hGgYzW1lQ=
+golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
+golang.org/x/term v0.6.0 h1:clScbb1cHjoCkyRbWwBEUZ5H/tIFu5TAXIqaZD0Gcjw=
+golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
 golang.org/x/text v0.0.0-20160726164857-2910a502d2bf/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180805044716-cb6730876b98/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -1939,11 +1890,11 @@ golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.6.0 h1:3XmdazWV+ubf7QgHSTWeykHOci5oeekaGJBLkrkaw4k=
-golang.org/x/text v0.6.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/text v0.8.0 h1:57P1ETyNKtuIjB4SRd15iJxuhj8Gc416Y78H3qgMh68=
+golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/time v0.0.0-20161028155119-f51c12702a4d/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20180412165947-fbb02b2291d2/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
-golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20200416051211-89c76fbcd5d1/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -2017,8 +1968,9 @@ golang.org/x/tools v0.1.2/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.7/go.mod h1:LGqMHiF4EqQNHR1JncWGqT5BVaXmza+X+BDGol+dOxo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.5.0 h1:+bSpV5HIeWkuvgaMfI3UmKRThoTA5ODJTUd8T17NO+4=
-golang.org/x/tools v0.5.0/go.mod h1:N+Kgy78s5I24c24dU8OfWNEotWjutIs8SnJvn5IDq+k=
+golang.org/x/tools v0.2.0/go.mod h1:y4OqIKeOV/fWJetJ8bXPU1sEVniLMIyDAZWeHdV+NTA=
+golang.org/x/tools v0.6.0 h1:BOw41kyTf3PuCW1pVQf8+Cyg8pMlkYB1oo9iJ6D/lKM=
+golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -2028,11 +1980,9 @@ gomodules.xyz/jsonpatch/v2 v2.2.0 h1:4pT439QV83L+G9FkcCriY6EkpcK6r6bK+A5FBUMI7qY
 gomodules.xyz/jsonpatch/v2 v2.2.0/go.mod h1:WXp+iVDkoLQqPudfQ9GBlwB2eZ5DKOnjQZCYdOS8GPY=
 gonum.org/v1/gonum v0.0.0-20180816165407-929014505bf4/go.mod h1:Y+Yx5eoAFn32cQvJDxZx5Dpnq+c3wtXuadVZAcxbbBo=
 gonum.org/v1/gonum v0.0.0-20181121035319-3f7ecaa7e8ca/go.mod h1:Y+Yx5eoAFn32cQvJDxZx5Dpnq+c3wtXuadVZAcxbbBo=
-gonum.org/v1/gonum v0.0.0-20190331200053-3d26580ed485/go.mod h1:2ltnJ7xHfj0zHS40VVPYEAAMTa3ZGguvHGBSJeRWqE0=
 gonum.org/v1/gonum v0.6.0/go.mod h1:9mxDZsDKxgMAuccQkewq682L+0eCu4dCN2yonUJTCLU=
 gonum.org/v1/netlib v0.0.0-20181029234149-ec6d1f5cefe6/go.mod h1:wa6Ws7BG/ESfp6dHfk7C6KdzKA7wR7u/rKwOGE66zvw=
 gonum.org/v1/netlib v0.0.0-20190313105609-8cb42192e0e0/go.mod h1:wa6Ws7BG/ESfp6dHfk7C6KdzKA7wR7u/rKwOGE66zvw=
-gonum.org/v1/netlib v0.0.0-20190331212654-76723241ea4e/go.mod h1:kS+toOQn6AQKjmKJ7gzohV1XkqsFehRA2FbsbkopSuQ=
 gonum.org/v1/plot v0.0.0-20190515093506-e2840ee46a6b/go.mod h1:Wt8AAjI+ypCyYX3nZBvf6cAIx93T+c/OS2HFAYskSZc=
 google.golang.org/api v0.3.1/go.mod h1:6wY9I6uQWHQ8EM57III9mq/AjF+i8G65rmVagqKMtkk=
 google.golang.org/api v0.7.0/go.mod h1:WtwebWUNSVBH/HAw79HIFXZNqEvBhG+Ra+ax0hx3E3M=
@@ -2151,7 +2101,6 @@ gopkg.in/check.v1 v1.0.0-20200902074654-038fdea0a05b/go.mod h1:Co6ibVJAznAaIkqp8
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/cheggaaa/pb.v1 v1.0.25/go.mod h1:V/YB90LKu/1FcN3WVnfiiE5oMCibMjukxqG/qStrOgw=
-gopkg.in/cheggaaa/pb.v1 v1.0.27/go.mod h1:V/YB90LKu/1FcN3WVnfiiE5oMCibMjukxqG/qStrOgw=
 gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
 gopkg.in/fsnotify/fsnotify.v1 v1.4.7/go.mod h1:Fyux9zXlo4rWoMSIzpn9fDAYjalPqJ/K1qJ27s+7ltE=
@@ -2172,8 +2121,6 @@ gopkg.in/natefinch/lumberjack.v2 v2.0.0 h1:1Lc07Kr7qY4U2YPouBjpCLxpiyxIVoxqXgkXL
 gopkg.in/natefinch/lumberjack.v2 v2.0.0/go.mod h1:l0ndWWf7gzL7RNwBG7wST/UCcT4T24xpD6X8LsfU/+k=
 gopkg.in/resty.v1 v1.12.0/go.mod h1:mDo4pnntr5jdWRML875a/NmxYqAlA73dVijT2AXvQQo=
 gopkg.in/square/go-jose.v2 v2.2.2/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI=
-gopkg.in/square/go-jose.v2 v2.5.1 h1:7odma5RETjNHWJnR32wx8t+Io4djHE1PqxCFx3iiZ2w=
-gopkg.in/square/go-jose.v2 v2.5.1/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
 gopkg.in/warnings.v0 v0.1.2 h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME=
@@ -2189,7 +2136,6 @@ gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
-gopkg.in/yaml.v3 v3.0.0-20190905181640-827449938966/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20200603094226-e3079894b1e8/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
@@ -2219,7 +2165,6 @@ istio.io/gogo-genproto v0.0.0-20211208193508-5ab4acc9eb1e h1:z2WI3y55w0K3c6hmarc
 istio.io/gogo-genproto v0.0.0-20211208193508-5ab4acc9eb1e/go.mod h1:vJDAniIqryf/z///fgZqVPKJ7N2lBk7Gg8DCTB7oCfU=
 k8s.io/api v0.0.0-20190620084959-7cf5895f2711/go.mod h1:TBhBqb1AWbBQbW3XRusr7n7E4v2+5ZY8r8sAMnyFC5A=
 k8s.io/api v0.0.0-20190813020757-36bff7324fb7/go.mod h1:3Iy+myeAORNCLgjd/Xu9ebwN7Vh59Bw0vh9jhoX+V58=
-k8s.io/api v0.0.0-20190918155943-95b840bb6a1f/go.mod h1:uWuOHnjmNrtQomJrvEBg0c0HRNyQ+8KTEERVsK0PW48=
 k8s.io/api v0.0.0-20191115095533-47f6de673b26/go.mod h1:iA/8arsvelvo4IDqIhX4IbjTEKBGgvsf2OraTuRtLFU=
 k8s.io/api v0.0.0-20191122220107-b5267f2975e0/go.mod h1:vYpRfxYkMrmPPSesoHEkGNHxNKTk96REAwqm/inQbs0=
 k8s.io/api v0.17.5/go.mod h1:0zV5/ungglgy2Rlm3QK8fbxkXVs+BSJWpJP/+8gUVLY=
@@ -2237,7 +2182,6 @@ k8s.io/api v0.23.0/go.mod h1:8wmDdLBHBNxtOIytwLstXt5E9PddnZb0GaMcqsvDBpg=
 k8s.io/api v0.23.1/go.mod h1:WfXnOnwSqNtG62Y1CdjoMxh7r7u9QXGCkA1u0na2jgo=
 k8s.io/api v0.25.3 h1:Q1v5UFfYe87vi5H7NU0p4RXC26PPMT8KOpr1TLQbCMQ=
 k8s.io/api v0.25.3/go.mod h1:o42gKscFrEVjHdQnyRenACrMtbuJsVdP+WVjqejfzmI=
-k8s.io/apiextensions-apiserver v0.0.0-20190918161926-8f644eb6e783/go.mod h1:xvae1SZB3E17UpV59AWc271W/Ph25N+bjPyR63X6tPY=
 k8s.io/apiextensions-apiserver v0.18.2/go.mod h1:q3faSnRGmYimiocj6cHQ1I3WpLqmDgJFlKL37fC4ZvY=
 k8s.io/apiextensions-apiserver v0.18.6/go.mod h1:lv89S7fUysXjLZO7ke783xOwVTm6lKizADfvUM/SS/M=
 k8s.io/apiextensions-apiserver v0.21.2/go.mod h1:+Axoz5/l3AYpGLlhJDfcVQzCerVYq3K3CvDMvw6X1RA=
@@ -2248,7 +2192,6 @@ k8s.io/apiextensions-apiserver v0.25.2 h1:8uOQX17RE7XL02ngtnh3TgifY7EhekpK+/piwz
 k8s.io/apiextensions-apiserver v0.25.2/go.mod h1:iRwwRDlWPfaHhuBfQ0WMa5skdQfrE18QXJaJvIDLvE8=
 k8s.io/apimachinery v0.0.0-20190612205821-1799e75a0719/go.mod h1:I4A+glKBHiTgiEjQiCCQfCAIcIMFGt291SmsvcrFzJA=
 k8s.io/apimachinery v0.0.0-20190809020650-423f5d784010/go.mod h1:Waf/xTS2FGRrgXCkO5FP3XxTOWh0qLf2QhL1qFZZ/R8=
-k8s.io/apimachinery v0.0.0-20190913080033-27d36303b655/go.mod h1:nL6pwRT8NgfF8TT68DBI8uEePRt89cSvoXUVqbkWHq4=
 k8s.io/apimachinery v0.0.0-20191115015347-3c7067801da2/go.mod h1:dXFS2zaQR8fyzuvRdJDHw2Aerij/yVGJSre0bZQSVJA=
 k8s.io/apimachinery v0.0.0-20191121175448-79c2a76c473a/go.mod h1:b9qmWdKlLuU9EBh+06BtLcSf/Mu89rWL33naRxs1uZg=
 k8s.io/apimachinery v0.17.5/go.mod h1:ioIo1G/a+uONV7Tv+ZmCbMG1/a3kVw5YcDdncd8ugQ0=
@@ -2266,7 +2209,6 @@ k8s.io/apimachinery v0.23.0/go.mod h1:fFCTTBKvKcwTPFzjlcxp91uPFZr+JA0FubU4fLzzFY
 k8s.io/apimachinery v0.23.1/go.mod h1:SADt2Kl8/sttJ62RRsi9MIV4o8f5S3coArm0Iu3fBno=
 k8s.io/apimachinery v0.25.3 h1:7o9ium4uyUOM76t6aunP0nZuex7gDf8VGwkR5RcJnQc=
 k8s.io/apimachinery v0.25.3/go.mod h1:jaF9C/iPNM1FuLl7Zuy5b9v+n35HGSh6AQ4HYRkCqwo=
-k8s.io/apiserver v0.0.0-20190918160949-bfa5e2e684ad/go.mod h1:XPCXEwhjaFN29a8NldXA901ElnKeKLrLtREO9ZhFyhg=
 k8s.io/apiserver v0.0.0-20191122221311-9d521947b1e1/go.mod h1:RbsZY5zzBIWnz4KbctZsTVjwIuOpTp4Z8oCgFHN4kZQ=
 k8s.io/apiserver v0.18.2/go.mod h1:Xbh066NqrZO8cbsoenCwyDJ1OSi8Ag8I2lezeHxzwzw=
 k8s.io/apiserver v0.18.6/go.mod h1:Zt2XvTHuaZjBz6EFYzpp+X4hTmgWGy8AthNVnTdm3Wg=
@@ -2279,7 +2221,6 @@ k8s.io/apiserver v0.25.3/go.mod h1:9bT47iM2fzRuhICJpM/RcQR9sqDDfZ7Yw60h0p3JW08=
 k8s.io/cli-runtime v0.25.3 h1:Zs7P7l7db/5J+KDePOVtDlArAa9pZXaDinGWGZl0aM8=
 k8s.io/cli-runtime v0.25.3/go.mod h1:InHHsjkyW5hQsILJGpGjeruiDZT/R0OkROQgD6GzxO4=
 k8s.io/client-go v0.0.0-20190620085101-78d2af792bab/go.mod h1:E95RaSlHr79aHaX0aGSwcPNfygDiPKOVXdmivCIZT0k=
-k8s.io/client-go v0.0.0-20190918160344-1fbdaa4c8d90/go.mod h1:J69/JveO6XESwVgG53q3Uz5OSfgsv4uxpScmmyYOOlk=
 k8s.io/client-go v0.0.0-20191122220542-ed16ecbdf3a0/go.mod h1:tyxNgOmR/Xi39HrlQ/9LQgiHJgBvmY7gp95o5GpBA4o=
 k8s.io/client-go v0.17.5/go.mod h1:S8uZpBpjJJdEH/fEyxcqg7Rn0P5jH+ilkgBHjriSmNo=
 k8s.io/client-go v0.18.2/go.mod h1:Xcm5wVGXX9HAA2JJ2sSBUn3tCJ+4SVlCbl2MNNv+CIU=
@@ -2295,7 +2236,6 @@ k8s.io/client-go v0.22.6/go.mod h1:TffU4AV2idZGeP+g3kdFZP+oHVHWPL1JYFySOALriw0=
 k8s.io/client-go v0.23.1/go.mod h1:6QSI8fEuqD4zgFK0xbdwfB/PthBsIxCJMa3s17WlcO0=
 k8s.io/client-go v0.25.3 h1:oB4Dyl8d6UbfDHD8Bv8evKylzs3BXzzufLiO27xuPs0=
 k8s.io/client-go v0.25.3/go.mod h1:t39LPczAIMwycjcXkVc+CB+PZV69jQuNx4um5ORDjQA=
-k8s.io/code-generator v0.0.0-20190912054826-cd179ad6a269/go.mod h1:V5BD6M4CyaN5m+VthcclXWsVcT1Hu+glwa1bi3MIsyE=
 k8s.io/code-generator v0.18.2/go.mod h1:+UHX5rSbxmR8kzS+FAv7um6dtYrZokQvjHpDSYRVkTc=
 k8s.io/code-generator v0.18.6/go.mod h1:TgNEVx9hCyPGpdtCWA34olQYLkh3ok9ar7XfSsr8b6c=
 k8s.io/code-generator v0.20.0/go.mod h1:UsqdF+VX4PU2g46NC2JRs4gc+IfrctnwHb76RNbWHJg=
@@ -2305,7 +2245,6 @@ k8s.io/code-generator v0.21.3/go.mod h1:K3y0Bv9Cz2cOW2vXUrNZlFbflhuPvuadW6JdnN6g
 k8s.io/code-generator v0.22.0/go.mod h1:eV77Y09IopzeXOJzndrDyCI88UBok2h6WxAlBwpxa+o=
 k8s.io/code-generator v0.22.2/go.mod h1:eV77Y09IopzeXOJzndrDyCI88UBok2h6WxAlBwpxa+o=
 k8s.io/code-generator v0.22.6/go.mod h1:iOZwYADSgFPNGWfqHFfg1V0TNJnl1t0WyZluQp4baqU=
-k8s.io/component-base v0.0.0-20190918160511-547f6c5d7090/go.mod h1:933PBGtQFJky3TEwYx4aEPZ4IxqhWh3R6DCmzqIn1hA=
 k8s.io/component-base v0.0.0-20191122220729-2684fb322cb9/go.mod h1:NFuUusy/X4Tk21m21tcNUihnmp4OI7lXU7/xA+rYXkc=
 k8s.io/component-base v0.18.2/go.mod h1:kqLlMuhJNHQ9lz8Z7V5bxUUtjFZnrypArGl58gmDfUM=
 k8s.io/component-base v0.18.6/go.mod h1:knSVsibPR5K6EW2XOjEHik6sdU5nCvKMrzMt2D4In14=
@@ -2316,7 +2255,6 @@ k8s.io/component-base v0.22.6/go.mod h1:ngHLefY4J5fq2fApNdbWyj4yh0lvw36do4aAjNN8
 k8s.io/component-base v0.25.3 h1:UrsxciGdrCY03ULT1h/S/gXFCOPnLhUVwSyx+hM/zq4=
 k8s.io/component-base v0.25.3/go.mod h1:WYoS8L+IlTZgU7rhAl5Ctpw0WdMxDfCC5dkxcEFa/TI=
 k8s.io/gengo v0.0.0-20190128074634-0689ccc1d7d6/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=
-k8s.io/gengo v0.0.0-20190822140433-26a664648505/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=
 k8s.io/gengo v0.0.0-20200114144118-36b2048a9120/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=
 k8s.io/gengo v0.0.0-20200413195148-3a45101e95ac/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=
 k8s.io/gengo v0.0.0-20201113003025-83324d819ded/go.mod h1:FiNAH4ZV3gBg2Kwh89tzAEV2be7d5xI0vBa/VySYy3E=
@@ -2345,7 +2283,6 @@ k8s.io/kube-aggregator v0.25.3 h1:eOG9S4GPICAXWIFeQDHjnhqYaYPpgLIC1NunJu9pZCs=
 k8s.io/kube-aggregator v0.25.3/go.mod h1:w87nqmzJMf7S73FRYcnexqfYW0AFiLJiCkvVCwM3feE=
 k8s.io/kube-openapi v0.0.0-20190228160746-b3a7cee44a30/go.mod h1:BXM9ceUBTj2QnfH2MK1odQs778ajze1RxcmP6S8RVVc=
 k8s.io/kube-openapi v0.0.0-20190709113604-33be087ad058/go.mod h1:nfDlWeOsu3pUf4yWGL+ERqohP4YsZcBJXWMK+gkzOA4=
-k8s.io/kube-openapi v0.0.0-20190816220812-743ec37842bf/go.mod h1:1TqjTSzOxsLGIKfj0lK8EeCP7K1iUG65v09OM0/WG5E=
 k8s.io/kube-openapi v0.0.0-20191107075043-30be4d16710a/go.mod h1:1TqjTSzOxsLGIKfj0lK8EeCP7K1iUG65v09OM0/WG5E=
 k8s.io/kube-openapi v0.0.0-20200121204235-bf4fb3bd569c/go.mod h1:GRQhZsXIAJ1xR0C9bd8UpWHZ5plfAS9fzPjJuQ6JL3E=
 k8s.io/kube-openapi v0.0.0-20200316234421-82d701f24f9d/go.mod h1:F+5wygcW0wmRTnM3cOgIqGivxkwSWIWT5YdsDbeAOaU=
@@ -2362,7 +2299,6 @@ k8s.io/kubectl v0.25.3/go.mod h1:glU7PiVj/R6Ud4A9FJdTcJjyzOtCJyc0eO7Mrbh3jlI=
 k8s.io/metrics v0.25.3 h1:fp5RuALkbwI3UbKITdNYu6sa3LF4JPANR/ofq3oe+Fg=
 k8s.io/metrics v0.25.3/go.mod h1:5j5FKJb8RHsb3Q2PLsD/p1mLiA1fTrl+a62Les+KDhc=
 k8s.io/utils v0.0.0-20190221042446-c2654d5206da/go.mod h1:8k8uAuAQ0rXslZKaEWd0c3oVhZz7sSzSiPnVZayjIX0=
-k8s.io/utils v0.0.0-20190801114015-581e00157fb1/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 k8s.io/utils v0.0.0-20191114184206-e782cd3c129f/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 k8s.io/utils v0.0.0-20191114200735-6ca3b61696b6/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 k8s.io/utils v0.0.0-20200324210504-a9aa75ae1b89/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
@@ -2377,14 +2313,9 @@ k8s.io/utils v0.0.0-20210820185131-d34e5cb4466e/go.mod h1:jPW/WVKK9YHAvNhRxK0md/
 k8s.io/utils v0.0.0-20210930125809-cb0fa318a74b/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
 k8s.io/utils v0.0.0-20220728103510-ee6ede2d64ed h1:jAne/RjBTyawwAy0utX5eqigAwz/lQhTmy+Hr/Cpue4=
 k8s.io/utils v0.0.0-20220728103510-ee6ede2d64ed/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
-modernc.org/cc v1.0.0/go.mod h1:1Sk4//wdnYJiUIxnW8ddKpaOJCF37yAdqYnkxUpaYxw=
-modernc.org/golex v1.0.0/go.mod h1:b/QX9oBD/LhixY6NDh+IdGv17hgB+51fET1i2kPSmvk=
-modernc.org/mathutil v1.0.0/go.mod h1:wU0vUrJsVWBZ4P6e7xtFJEhFSNsfRLJ8H458uRjg03k=
-modernc.org/strutil v1.0.0/go.mod h1:lstksw84oURvj9y3tn8lGvRxyRC1S2+g5uuIzNfIOBs=
-modernc.org/xc v1.0.0/go.mod h1:mRNCo0bvLjGhHO9WsyuKVU4q0ceiDDDoEeWDJHrNx8I=
 open-cluster-management.io/api v0.0.0-20210610125115-f57c747b84aa/go.mod h1:9qiA5h/8kvPQnJEOlAPHVjRO9a1jCmDhGzvgMBvXEaE=
-open-cluster-management.io/api v0.7.0 h1:Xt1tRCwt+wrhtCOEQ6g+7sFvIkMjffWnn5PSUSoKJcc=
-open-cluster-management.io/api v0.7.0/go.mod h1:Wg7YOcVNxsNDj2G8ViWTD/utCfb9cZc9MpNb4fKlXSs=
+open-cluster-management.io/api v0.10.0 h1:B6/nwKO7cXDuKV5uJLjF/JUuPuiKsep08gfmAAWaKKc=
+open-cluster-management.io/api v0.10.0/go.mod h1:6BB/Y6r3hXlPjpJgDwIs6Ubxyx/kXXOg6D9Cntg1I9E=
 oras.land/oras-go v1.2.0 h1:yoKosVIbsPoFMqAIFHTnrmOuafHal+J/r+I5bdbVWu4=
 oras.land/oras-go v1.2.0/go.mod h1:pFNs7oHp2dYsYMSS82HaX5l4mpnGO7hbpPN6EWH2ltc=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
@@ -2401,7 +2332,6 @@ sigs.k8s.io/controller-runtime v0.9.6/go.mod h1:q6PpkM5vqQubEKUKOM6qr06oXGzOBcCb
 sigs.k8s.io/controller-runtime v0.10.3/go.mod h1:CQp8eyUQZ/Q7PJvnIrB6/hgfTC1kBkGylwsLgOQi1WY=
 sigs.k8s.io/controller-runtime v0.12.3 h1:FCM8xeY/FI8hoAfh/V4XbbYMY20gElh9yh+A98usMio=
 sigs.k8s.io/controller-runtime v0.12.3/go.mod h1:qKsk4WE6zW2Hfj0G4v10EnNB2jMG1C+NTb8h+DwCoU0=
-sigs.k8s.io/controller-tools v0.2.4/go.mod h1:m/ztfQNocGYBgTTCmFdnK94uVvgxeZeE3LtJvd/jIzA=
 sigs.k8s.io/controller-tools v0.6.2/go.mod h1:oaeGpjXn6+ZSEIQkUe/+3I40PNiDYp9aeawbt3xTgJ8=
 sigs.k8s.io/controller-tools v0.9.2 h1:AkTE3QAdz9LS4iD3EJvHyYxBkg/g9fTbgiYsrcsFCcM=
 sigs.k8s.io/controller-tools v0.9.2/go.mod h1:NUkn8FTV3Sad3wWpSK7dt/145qfuQ8CKJV6j4jHC5rM=
@@ -2417,7 +2347,6 @@ sigs.k8s.io/kustomize/api v0.12.1/go.mod h1:y3JUhimkZkR6sbLNwfJHxvo1TCLwuwm14sCY
 sigs.k8s.io/kustomize/kyaml v0.13.9 h1:Qz53EAaFFANyNgyOEJbT/yoIHygK40/ZcvU3rgry2Tk=
 sigs.k8s.io/kustomize/kyaml v0.13.9/go.mod h1:QsRbD0/KcU+wdk0/L0fIp2KLnohkVzs6fQ85/nOXac4=
 sigs.k8s.io/structured-merge-diff v0.0.0-20190525122527-15d366b2352e/go.mod h1:wWxsB5ozmmv/SG7nM11ayaAW51xMvak/t1r0CSlcokI=
-sigs.k8s.io/structured-merge-diff v0.0.0-20190817042607-6149e4549fca/go.mod h1:IIgPezJWb76P0hotTxzDbWsMYB8APh18qZnxkomBpxA=
 sigs.k8s.io/structured-merge-diff v1.0.1-0.20191108220359-b1b620dd3f06/go.mod h1:/ULNhyfzRopfcjskuui0cTITekDduZ7ycKN3oUT9R18=
 sigs.k8s.io/structured-merge-diff/v2 v2.0.1/go.mod h1:Wb7vfKAodbKgf6tn1Kl0VvGj7mRH6DGaRcixXEJXTsE=
 sigs.k8s.io/structured-merge-diff/v3 v3.0.0-20200116222232-67a7b8c61874/go.mod h1:PlARxl6Hbt/+BC80dRLi1qAmnMqwqDg62YvvVkZjemw=

hack/apis/sync.sh

@@ -87,14 +87,25 @@ syncRepo() {
     echo "push to kubevela-core-api"
     if git diff --quiet
     then
-      echo "nothing need to push, finished!"
+      echo "no changes, skip pushing commit"
     else
       git add .
       git commit -m "align with kubevela-$VERSION from commit $COMMIT_ID"
-      git tag "$VERSION"
       git push origin main
-      git push origin "$VERSION"
     fi
+
+    # push new tag anyway
+    # Only tags if VERSION starts with refs/tags/, remove the prefix and push it
+    if [[ "$VERSION" == refs/tags/* ]]; then
+        VERSION=${VERSION#refs/tags/}
+    else
+      echo "VERSION $VERSION is not a tag, skip pushing tag"
+      return
+    fi
+
+    echo "push tag $VERSION"
+    git tag "$VERSION"
+    git push origin "$VERSION"
 }
 
 main() {

hack/load-test/README.md

@@ -15,8 +15,36 @@ The `dashboard.json` is a grafana dashboard file that can track several groups o
 5. **Run Pressure Test.** Start load test by rendering application templates with different IDs to generate application instances and apply them to Kubernetes at a desired creation speed. Wait for a while (could be hours) and delete them. This is standard progress of the pressure test. More mutating actions could be injected.
 6. **Check Result.** You can upload the grafana dashboard file to the Grafana website exposed from your cluster. Then you can check the result of the load test.
 
-## Use of deploy.sh
+## Use of application bulk deploy scripts
 
-Run `BEGIN=0 SIZE=1000 SHARD=3 WORKER=6 VERSION=0 bash deploy.sh` to deploy 1000 application (id from 0 to 1000) to 3 shard in 6 parallel threads.
+### Setup
 
-Without sharding mode, `SHARD` variable will not be used. You can update application version by setting the `VERSION` variable.  
+Run `SHARD=3 CLUSTER=2 bash bootstrap.sh`. This will create 3 namespaces `load-test-0`, `load-test-1`, `load-test-2` to local cluster and all managed clusters.
+
+### Deploy Apps
+
+#### Basic
+
+Run `BEGIN=0 SIZE=1000 SHARD=3 WORKER=6 bash deploy.sh` to deploy 1000 application (id from 0 to 1000) to 3 shard in 6 parallel threads.
+
+#### Version Update
+
+By default, the deployed apps will use variable `VERSION=1`. You can set this variable to change the version of applications and test version upgrades.
+
+#### Choose different app templates
+
+Set `TEMPLATE=heavy` will use the `app-templates/heavy.yaml` as the application template to deploy.
+
+#### Multicluster Apps
+
+Set `CLUSTER=3` will inject the `CLUSTER` variable to the app template. You can use `TEMPLATE=multicluster` or `TEMPLATE=region` to make multicluster application delivery.
+
+> To make multicluster load testing environment, you can set up multiple k3d instances and register them in the control plane.
+
+#### QPS
+
+By default, there is no rate limit for the client. If you want to set the QPS for each worker, you can use `QPS=2`.
+
+### Cleanup
+
+Run `SHARD=3 WORKER=4 BEGIN=0 SIZE=1000 bash cleanup.sh` to delete `app-0` to `app-999` from namespace `load-test-0` to `load-test-2` in 4 threads.

hack/load-test/app-templates/heavy.yaml

@@ -0,0 +1,90 @@
+apiVersion: core.oam.dev/v1beta1
+kind: Application
+metadata:
+  name: app-ID
+  namespace: load-test-SHARD
+  labels:
+    controller.core.oam.dev/scheduled-shard-id: shard-SHARD
+spec:
+  components:
+    - name: app-ID-vVERSION-c1
+      type: webservice
+      properties:
+        image: nginx
+      traits:
+        - type: scaler
+          properties:
+            replicas: 0
+    - name: app-ID-vVERSION-c2
+      type: webservice
+      properties:
+        image: nginx
+      traits:
+        - type: scaler
+          properties:
+            replicas: 0
+    - name: app-ID-vVERSION-c3
+      type: worker
+      properties:
+        image: nginx
+      traits:
+        - type: scaler
+          properties:
+            replicas: 0
+    - name: secret-ID
+      type: k8s-objects
+      properties:
+        objects:
+          - apiVersion: v1
+            kind: Secret
+            metadata:
+              name: secret-ID-s1
+            stringData:
+              id: "ID"
+              shard: "SHARD"
+          - apiVersion: v1
+            kind: Secret
+            metadata:
+              name: secret-ID-s2
+            stringData:
+              id: "ID"
+              shard: "SHARD"
+          - apiVersion: v1
+            kind: Secret
+            metadata:
+              name: secret-ID-s3
+            stringData:
+              id: "ID"
+              shard: "SHARD"
+          - apiVersion: v1
+            kind: ConfigMap
+            metadata:
+              name: cm-ID-c1
+            data:
+              id: "ID"
+              shard: "SHARD"
+              version: "VERSION"
+          - apiVersion: v1
+            kind: ConfigMap
+            metadata:
+              name: cm-ID-c2
+            data:
+              id: "ID"
+              shard: "SHARD"
+              version: "VERSION"
+          - apiVersion: v1
+            kind: ConfigMap
+            metadata:
+              name: cm-ID-c3
+            data:
+              id: "ID"
+              shard: "SHARD"
+              version: "VERSION"
+          - apiVersion: v1
+            kind: ConfigMap
+            metadata:
+              name: cm-ID-c4
+            data:
+              id: "ID"
+              shard: "SHARD"
+              version: "VERSION"

hack/load-test/app-templates/multicluster.yaml

@@ -0,0 +1,41 @@
+apiVersion: core.oam.dev/v1beta1
+kind: Application
+metadata:
+  name: app-ID
+  namespace: load-test-SHARD
+  labels:
+    controller.core.oam.dev/scheduled-shard-id: shard-SHARD
+spec:
+  components:
+    - name: app-ID-vVERSION-c1
+      type: webservice
+      properties:
+        image: nginx
+      traits:
+        - type: scaler
+          properties:
+            replicas: 0
+    - name: secret-ID
+      type: k8s-objects
+      properties:
+        objects:
+          - apiVersion: v1
+            kind: ConfigMap
+            metadata:
+              name: secret-ID
+            stringData:
+              id: "ID"
+              shard: "SHARD"
+          - apiVersion: v1
+            kind: ConfigMap
+            metadata:
+              name: cm-ID
+            data:
+              id: "ID"
+              shard: "SHARD"
+              version: "VERSION"
+  policies:
+    - type: topology
+      name: topology
+      properties:
+        clusters: ["cluster-CLUSTER"]

hack/load-test/app-templates/region.yaml

@@ -0,0 +1,42 @@
+apiVersion: core.oam.dev/v1beta1
+kind: Application
+metadata:
+  name: app-ID
+  namespace: load-test-SHARD
+  labels:
+    controller.core.oam.dev/scheduled-shard-id: shard-SHARD
+spec:
+  components:
+    - name: app-ID-vVERSION-c1
+      type: webservice
+      properties:
+        image: nginx
+      traits:
+        - type: scaler
+          properties:
+            replicas: 0
+    - name: secret-ID
+      type: k8s-objects
+      properties:
+        objects:
+          - apiVersion: v1
+            kind: Secret
+            metadata:
+              name: secret-ID
+            stringData:
+              id: "ID"
+              shard: "SHARD"
+          - apiVersion: v1
+            kind: ConfigMap
+            metadata:
+              name: cm-ID
+            data:
+              id: "ID"
+              shard: "SHARD"
+              version: "VERSION"
+  policies:
+    - type: topology
+      name: topology
+      properties:
+        clusterLabelSelector:
+          region: hz-CLUSTER

hack/load-test/bootstrap.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+
+SHARD=${SHARD:-3}
+
+for i in $(seq 0 $(expr $SHARD - 1)); do
+  kubectl create ns load-test-$i
+done
+
+for i in $(seq 0 $(expr $SHARD - 1)); do
+  echo "
+    apiVersion: v1
+    kind: Namespace
+    metadata:
+      name: load-test-$i
+  " > /tmp/ns-$i.yaml
+  kubectl get clustergateways | grep cluster- | awk '{print $1}' | xargs -n1 -P8 vela kube apply -f /tmp/ns-$i.yaml --cluster
+done

hack/load-test/cleanup.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+SHARD=${SHARD:-3}
+BEGIN=${BEGIN:-0}
+SIZE=${SIZE:-1000}
+WORKER=${WORKER:-8}
+
+run() {
+  for i in $(seq $(expr $1 + $BEGIN) $WORKER $(expr $BEGIN + $SIZE - 1)); do
+    kubectl delete app app-$i -n load-test-$(expr $i % $SHARD) --wait=false
+  done
+}
+
+for j in $(seq 0 $WORKER); do
+  run $j &
+done
+
+wait

hack/load-test/deploy.sh

@@ -4,27 +4,36 @@ BEGIN=${BEGIN:-1}
 SIZE=${SIZE:-1000}
 WORKER=${WORKER:-6}
 VERSION=${VERSION:-1}
+CLUSTER=${CLUSTER:-4}
+QPS=${QPS:-1}
 
 SHARD=${SHARD:-3}
 
+TEMPLATE=${TEMPLATE:-"light"}
+
 END=$(expr $BEGIN + $SIZE - 1)
 
+waitTime=$(expr 1000 / $QPS)e-3
+
 run() {
   for i in $(seq $1 $3 $2); do
     sid=$(expr $i % $SHARD)
     v=${VERSION}
-    cat ./app-templates/light.yaml | sed 's/ID/'$i'/g' | sed 's/SHARD/'$sid'/g' | sed 's/VERSION/'$v'/g' | kubectl apply -f -
+    c=$(expr $i % $CLUSTER)
+    cat ./app-templates/$TEMPLATE.yaml | \
+      sed 's/ID/'$i'/g' | \
+      sed 's/SHARD/'$sid'/g' | \
+      sed 's/VERSION/'$v'/g' | \
+      sed 's/CLUSTER/'$c'/g' | \
+      kubectl apply -f -
     echo "worker $4: apply app $i to $sid"
+    sleep $waitTime
   done
   echo "worker $4: done"
 }
 
-for i in $(seq 0 $(expr $SHARD - 1)); do
-  kubectl create ns load-test-$i
-done
-
 for i in $(seq 1 $WORKER); do
   run $(expr $BEGIN + $i - 1) $END $WORKER $i &
 done
 
-wait
+wait

hack/sdk/sync.sh

@@ -0,0 +1,92 @@
+#!/usr/bin/env bash
+
+# Copyright 2022 The KubeVela Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -o errexit
+
+# This script helps to sync SDK to other repos.
+
+VELA_GO_SDK=kubevela-contrib/kubevela-go-sdk
+
+if [[ -n "$SSH_DEPLOY_KEY" ]]; then
+  mkdir -p ~/.ssh
+  echo "$SSH_DEPLOY_KEY" >~/.ssh/id_rsa
+  chmod 600 ~/.ssh/id_rsa
+fi
+
+cd ..
+
+config() {
+  git config --global user.email "kubevela.bot@aliyun.com"
+  git config --global user.name "kubevela-bot"
+}
+
+cloneAndClearCoreAPI() {
+  echo "git clone"
+
+  if [[ -n "$SSH_DEPLOY_KEY" ]]; then
+    git clone --single-branch --depth 1 git@github.com:$VELA_GO_SDK.git kubevela-go-sdk
+  else
+    git clone --single-branch --depth 1 https://github.com/$VELA_GO_SDK.git kubevela-go-sdk
+  fi
+
+  echo "Clear kubevela-go-sdk pkg/apis/common, pkg/apis/component, pkg/apis/policy, pkg/apis/trait, pkg/apis/workflow-step, pkg/apis/utils, pkg/apis/types.go "
+  rm -rf kubevela-go-sdk/pkg/apis/common
+  rm -rf kubevela-go-sdk/pkg/apis/component
+  rm -rf kubevela-go-sdk/pkg/apis/policy
+  rm -rf kubevela-go-sdk/pkg/apis/trait
+  rm -rf kubevela-go-sdk/pkg/apis/workflow-step
+  rm -rf kubevela-go-sdk/pkg/apis/utils
+}
+
+updateRepo() {
+  cd kubevela
+  bin/vela def gen-api -f vela-templates/definitions/internal/ -o ../kubevela-go-sdk --package=github.com/$VELA_GO_SDK --init
+}
+
+syncRepo() {
+  cd ../kubevela-go-sdk
+  go mod tidy
+  echo "Push to $VELA_GO_SDK"
+  if git diff --quiet; then
+    echo "no changes, skip pushing commit"
+  else
+    git add .
+    git commit -m "Generated from kubevela-$VERSION from commit $COMMIT_ID"
+    git push origin main
+  fi
+
+  # push new tag anyway
+  # Only tags if VERSION starts with refs/tags/, remove the prefix and push it
+  if [[ "$VERSION" == refs/tags/* ]]; then
+    VERSION=${VERSION#refs/tags/}
+  else
+    echo "VERSION $VERSION is not a tag, skip pushing tag"
+    return
+  fi
+
+  echo "push tag $VERSION"
+  git tag "$VERSION"
+  git push origin "$VERSION"
+}
+
+main() {
+  config
+  cloneAndClearCoreAPI
+  updateRepo
+  syncRepo
+}
+
+main

makefiles/build.mk

@@ -16,10 +16,6 @@ docker-build: docker-build-core docker-build-apiserver docker-build-cli
 docker-build-core:
 	docker build --build-arg=VERSION=$(VELA_VERSION) --build-arg=GITVERSION=$(GIT_COMMIT) -t $(VELA_CORE_IMAGE) .
 
-.PHONY: docker-build-apiserver
-docker-build-apiserver:
-	docker build --build-arg=VERSION=$(VELA_VERSION) --build-arg=GITVERSION=$(GIT_COMMIT) -t $(VELA_APISERVER_IMAGE) -f Dockerfile.apiserver .
-
 .PHONY: docker-build-cli
 docker-build-cli:
 	docker build --build-arg=VERSION=$(VELA_VERSION) --build-arg=GITVERSION=$(GIT_COMMIT) -t $(VELA_CLI_IMAGE)  -f Dockerfile.cli .

makefiles/develop.mk

@@ -1,9 +1,4 @@
 
-# Run apiserver for velaux(UI)
-.PHONY: run-apiserver
-run-apiserver:
-	go run ./cmd/apiserver/main.go
-
 # Install CRDs and Definitions of Vela Core into a cluster, this is for develop convenient.
 .PHONY: core-install
 core-install: manifests

makefiles/e2e.mk

@@ -50,6 +50,7 @@ e2e-setup-core-w-auth:
 	    --set featureGates.zstdResourceTracker=true     \
 	    --set featureGates.zstdApplicationRevision=true \
 	    --set featureGates.validateComponentWhenSharding=true \
+	    --set multicluster.clusterGateway.enabled=true \
 	    --set sharding.enabled=true
 	kubectl get deploy kubevela-vela-core -oyaml -n vela-system | \
 		sed 's/schedulable-shards=/shard-id=shard-0/g' | \
@@ -100,11 +101,6 @@ e2e-api-test:
 	ginkgo -v -r e2e/application
 
 
-.PHONY: e2e-apiserver-test
-e2e-apiserver-test:
-	go test -v -coverpkg=./... -coverprofile=/tmp/e2e_apiserver_test.out ./test/e2e-apiserver-test
-	@$(OK) tests pass
-
 .PHONY: e2e-test
 e2e-test:
 	# Run e2e test

makefiles/release.mk

@@ -5,8 +5,6 @@ cross-build:
 	go get github.com/mitchellh/gox@v0.4.0
 	$(GOBUILD_ENV) $(GOX) -ldflags $(LDFLAGS) -parallel=2 -output="_bin/vela/{{.OS}}-{{.Arch}}/vela" -osarch='$(TARGETS)' ./references/cmd/cli
 	$(GOBUILD_ENV) $(GOX) -ldflags $(LDFLAGS) -parallel=2 -output="_bin/kubectl-vela/{{.OS}}-{{.Arch}}/kubectl-vela" -osarch='$(TARGETS)' ./cmd/plugin
-	$(GOBUILD_ENV) $(GOX) -ldflags $(LDFLAGS) -parallel=2 -output="_bin/apiserver/{{.OS}}-{{.Arch}}/apiserver" -osarch="$(TARGETS)" ./cmd/apiserver
-
 
 .PHONY: compress
 compress:

pkg/addon/addon.go

@@ -60,7 +60,6 @@ import (
 	common2 "github.com/oam-dev/kubevela/apis/core.oam.dev/common"
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
 	"github.com/oam-dev/kubevela/apis/types"
-	apiutils "github.com/oam-dev/kubevela/pkg/apiserver/utils"
 	"github.com/oam-dev/kubevela/pkg/config"
 	"github.com/oam-dev/kubevela/pkg/cue/script"
 	"github.com/oam-dev/kubevela/pkg/definition"
@@ -599,10 +598,20 @@ func getClusters(args map[string]interface{}) []string {
 		return nil
 	}
 	cc, ok := ccr.([]string)
+	if ok {
+		return cc
+	}
+	ccrslice, ok := ccr.([]interface{})
 	if !ok {
 		return nil
 	}
-	return cc
+	var ccstring []string
+	for _, c := range ccrslice {
+		if cstring, ok := c.(string); ok {
+			ccstring = append(ccstring, cstring)
+		}
+	}
+	return ccstring
 }
 
 // renderNeededNamespaceAsComps will convert namespace as app components to create namespace for managed clusters
@@ -1076,7 +1085,7 @@ func (h *Installer) checkDependency(addon *InstallPackage) ([]string, error) {
 // createOrUpdate will return true if updated
 func (h *Installer) createOrUpdate(app *v1beta1.Application) (bool, error) {
 	// Set the publish version for the addon application
-	oam.SetPublishVersion(app, apiutils.GenerateVersion("addon"))
+	oam.SetPublishVersion(app, util.GenerateVersion("addon"))
 	var existApp v1beta1.Application
 	err := h.cli.Get(h.ctx, client.ObjectKey{Name: app.Name, Namespace: app.Namespace}, &existApp)
 	if apierrors.IsNotFound(err) {

pkg/addon/addon_test.go

@@ -298,6 +298,41 @@ func TestRenderK8sObjects(t *testing.T) {
 	assert.Equal(t, comp.Type, "k8s-objects")
 }
 
+func TestGetClusters(t *testing.T) {
+	// string array test
+	args := map[string]interface{}{
+		types.ClustersArg: []string{
+			"cluster1", "cluster2",
+		},
+	}
+	clusters := getClusters(args)
+	assert.Equal(t, clusters, []string{
+		"cluster1", "cluster2",
+	})
+	// interface array test
+	args1 := map[string]interface{}{
+		types.ClustersArg: []interface{}{
+			"cluster3", "cluster4",
+		},
+	}
+	clusters1 := getClusters(args1)
+	assert.Equal(t, clusters1, []string{
+		"cluster3", "cluster4",
+	})
+	// no cluster arg test
+	args2 := map[string]interface{}{
+		"anyargkey": "anyargvalue",
+	}
+	clusters2 := getClusters(args2)
+	assert.Nil(t, clusters2)
+	// other type test
+	args3 := map[string]interface{}{
+		types.ClustersArg: "cluster5",
+	}
+	clusters3 := getClusters(args3)
+	assert.Nil(t, clusters3)
+}
+
 func TestGetAddonStatus(t *testing.T) {
 	getFunc := test.MockGetFn(func(ctx context.Context, key client.ObjectKey, obj client.Object) error {
 		switch key.Name {

pkg/addon/type.go

@@ -20,15 +20,15 @@ import (
 	"github.com/getkin/kin-openapi/openapi3"
 
 	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils"
+	"github.com/oam-dev/kubevela/pkg/utils/schema"
 )
 
 // UIData contains all information represent an addon for UI
 type UIData struct {
 	Meta
 
-	APISchema *openapi3.Schema     `json:"schema"`
-	UISchema  []*utils.UIParameter `json:"uiSchema"`
+	APISchema *openapi3.Schema      `json:"schema"`
+	UISchema  []*schema.UIParameter `json:"uiSchema"`
 
 	// Detail is README.md in an addon
 	Detail string `json:"detail,omitempty"`

pkg/apiserver/README.md

@@ -1,48 +0,0 @@
-# APIServer Module Architecture
-
-![apiserver architecture](./apiserver.jpg)
-
-## Interfaces
-
-Typically, it includes user interfaces, web services, and so on.
-
-* API
-
-Define the Restful API and perform basic validation on user input parameters.
-
-* DTO
-
-The carrier of data transmission. Here does not have any business logic inside, and the internal domain models can be isolated from the outside world through DTO.
-
-* Assembler
-
-Realize the mutual conversion and data exchange between DTO and DO.
-
-## Event
-
-Asynchronous task module. All workers under this module only run on the master node. Domain layer can be called.
-
-## Domain
-
-Code related to core business logic.
-
-* Service
-
-A domain service is a piece of business logic composed of multiple entities. You can put all domain services in the aggregate in one domain service class, or you can design each domain service as a class.
-
-* Repository
-
-Usually includes repository interface and repository implementation method. In order to facilitate the splitting and combination of aggregates, the principle is set: one aggregate corresponds to one repository. For example, save user information to a database.
-
-* Model
-
-Database model entity.
-
-## Infrastructure
-
-Provide general technical basic services for other layers, such as:
-
-* Database
-* Cache
-* Kube Client
-* MQ

pkg/apiserver/config/config.go

@@ -1,118 +0,0 @@
-/*
-Copyright 2022 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package config
-
-import (
-	"fmt"
-	"time"
-
-	"github.com/spf13/pflag"
-
-	"github.com/google/uuid"
-
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-)
-
-// Config config for server
-type Config struct {
-	// api server bind address
-	BindAddr string
-	// monitor metric path
-	MetricPath string
-
-	// Datastore config
-	Datastore datastore.Config
-
-	// LeaderConfig for leader election
-	LeaderConfig leaderConfig
-
-	// AddonCacheTime is how long between two cache operations
-	AddonCacheTime time.Duration
-
-	// DisableStatisticCronJob close the calculate system info cronJob
-	DisableStatisticCronJob bool
-
-	// KubeBurst the burst of kube client
-	KubeBurst int
-
-	// KubeQPS the QPS of kube client
-	KubeQPS float64
-
-	// PprofAddr the address for pprof to use while exporting profiling results.
-	PprofAddr string
-
-	// WorkflowVersion is the version of workflow
-	WorkflowVersion string
-}
-
-type leaderConfig struct {
-	ID       string
-	LockName string
-	Duration time.Duration
-}
-
-// NewConfig  returns a Config struct with default values
-func NewConfig() *Config {
-	return &Config{
-		BindAddr:   "0.0.0.0:8000",
-		MetricPath: "/metrics",
-		Datastore: datastore.Config{
-			Type:     "kubeapi",
-			Database: "kubevela",
-			URL:      "",
-		},
-		LeaderConfig: leaderConfig{
-			ID:       uuid.New().String(),
-			LockName: "apiserver-lock",
-			Duration: time.Second * 5,
-		},
-		AddonCacheTime:          time.Minute * 10,
-		DisableStatisticCronJob: false,
-		PprofAddr:               "",
-		KubeQPS:                 100,
-		KubeBurst:               300,
-	}
-}
-
-// Validate validate generic server run options
-func (s *Config) Validate() []error {
-	var errs []error
-
-	if s.Datastore.Type != "mongodb" && s.Datastore.Type != "kubeapi" {
-		errs = append(errs, fmt.Errorf("not support datastore type %s", s.Datastore.Type))
-	}
-
-	return errs
-}
-
-// AddFlags adds flags to the specified FlagSet
-func (s *Config) AddFlags(fs *pflag.FlagSet, c *Config) {
-	fs.StringVar(&s.BindAddr, "bind-addr", c.BindAddr, "The bind address used to serve the http APIs.")
-	fs.StringVar(&s.MetricPath, "metrics-path", c.MetricPath, "The path to expose the metrics.")
-	fs.StringVar(&s.Datastore.Type, "datastore-type", c.Datastore.Type, "Metadata storage driver type, support kubeapi and mongodb")
-	fs.StringVar(&s.Datastore.Database, "datastore-database", c.Datastore.Database, "Metadata storage database name, takes effect when the storage driver is mongodb.")
-	fs.StringVar(&s.Datastore.URL, "datastore-url", c.Datastore.URL, "Metadata storage database url,takes effect when the storage driver is mongodb.")
-	fs.StringVar(&s.LeaderConfig.ID, "id", c.LeaderConfig.ID, "the holder identity name")
-	fs.StringVar(&s.LeaderConfig.LockName, "lock-name", c.LeaderConfig.LockName, "the lease lock resource name")
-	fs.DurationVar(&s.LeaderConfig.Duration, "duration", c.LeaderConfig.Duration, "the lease lock resource name")
-	fs.DurationVar(&s.AddonCacheTime, "addon-cache-duration", c.AddonCacheTime, "how long between two addon cache operation")
-	fs.BoolVar(&s.DisableStatisticCronJob, "disable-statistic-cronJob", c.DisableStatisticCronJob, "close the system statistic info calculating cronJob")
-	fs.StringVar(&s.PprofAddr, "pprof-addr", c.PprofAddr, "The address for pprof to use while exporting profiling results. The default value is empty which means do not expose it. Set it to address like :6666 to expose it.")
-	fs.Float64Var(&s.KubeQPS, "kube-api-qps", c.KubeQPS, "the qps for kube clients. Low qps may lead to low throughput. High qps may give stress to api-server.")
-	fs.IntVar(&s.KubeBurst, "kube-api-burst", c.KubeBurst, "the burst for kube clients. Recommend setting it qps*3.")
-	fs.StringVar(&s.WorkflowVersion, "workflow-version", c.WorkflowVersion, "the version of workflow to meet controller requirement.")
-}

pkg/apiserver/domain/model/application.go

@@ -1,452 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-import (
-	"fmt"
-	"time"
-
-	workflowv1alpha1 "github.com/kubevela/workflow/api/v1alpha1"
-
-	"github.com/oam-dev/kubevela/apis/core.oam.dev/common"
-)
-
-func init() {
-	RegisterModel(&ApplicationComponent{}, &ApplicationPolicy{}, &Application{}, &ApplicationRevision{}, &ApplicationTrigger{})
-}
-
-// Application application delivery model
-type Application struct {
-	BaseModel
-	Name        string            `json:"name"`
-	Alias       string            `json:"alias"`
-	Project     string            `json:"project"`
-	Description string            `json:"description"`
-	Icon        string            `json:"icon"`
-	Labels      map[string]string `json:"labels,omitempty"`
-}
-
-// TableName return custom table name
-func (a *Application) TableName() string {
-	return tableNamePrefix + "application"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (a *Application) ShortTableName() string {
-	return "app"
-}
-
-// PrimaryKey return custom primary key
-// the app primary key is the app name, so the app name is globally unique in every namespace
-// when the app is synced from CR, the first synced one be same with app name,
-// if there's any conflicts, the name will be composed by <appname>-<namespace>
-func (a *Application) PrimaryKey() string {
-	return a.Name
-}
-
-// Index return custom index
-func (a *Application) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if a.Name != "" {
-		index["name"] = a.Name
-	}
-	if a.Project != "" {
-		index["project"] = a.Project
-	}
-	return index
-}
-
-// GetAppNamespaceForSynced will return the namespace of synced CR
-func (a *Application) GetAppNamespaceForSynced() string {
-	if a.Labels == nil {
-		return ""
-	}
-	return a.Labels[LabelSyncNamespace]
-}
-
-// IsSynced answer if the app is synced one
-func (a *Application) IsSynced() bool {
-	if a.Labels == nil {
-		return false
-	}
-	sot := a.Labels[LabelSourceOfTruth]
-	if sot == FromCR || sot == FromInner {
-		return true
-	}
-	return false
-}
-
-// IsReadOnly is readonly app
-// Only the source is inner, the app is readonly
-func (a *Application) IsReadOnly() bool {
-	if a.Labels == nil {
-		return false
-	}
-	sot := a.Labels[LabelSourceOfTruth]
-	return sot == FromInner
-}
-
-// ClusterSelector cluster selector
-type ClusterSelector struct {
-	Name string `json:"name"`
-	// Adapt to a scenario where only one Namespace is available or a user-defined Namespace is available.
-	Namespace string `json:"namespace,omitempty"`
-}
-
-// ComponentSelector component selector
-type ComponentSelector struct {
-	Components []string `json:"components"`
-}
-
-// ApplicationComponent component database model
-type ApplicationComponent struct {
-	BaseModel
-	AppPrimaryKey string            `json:"appPrimaryKey"`
-	Description   string            `json:"description,omitempty"`
-	Labels        map[string]string `json:"labels,omitempty"`
-	Icon          string            `json:"icon,omitempty"`
-	Creator       string            `json:"creator"`
-	Name          string            `json:"name"`
-	Alias         string            `json:"alias"`
-	Type          string            `json:"type"`
-	Main          bool              `json:"main"`
-	// ExternalRevision specified the component revisionName
-	ExternalRevision string                       `json:"externalRevision,omitempty"`
-	Properties       *JSONStruct                  `json:"properties,omitempty"`
-	DependsOn        []string                     `json:"dependsOn,omitempty"`
-	Inputs           workflowv1alpha1.StepInputs  `json:"inputs,omitempty"`
-	Outputs          workflowv1alpha1.StepOutputs `json:"outputs,omitempty"`
-	// Traits define the trait of one component, the type must be array to keep the order.
-	Traits []ApplicationTrait `json:"traits,omitempty"`
-	// scopes in ApplicationComponent defines the component-level scopes
-	// the format is <scope-type:scope-instance-name> pairs, the key represents type of `ScopeDefinition` while the value represent the name of scope instance.
-	Scopes       map[string]string             `json:"scopes,omitempty"`
-	WorkloadType common.WorkloadTypeDescriptor `json:"workloadType,omitempty"`
-}
-
-// TableName return custom table name
-func (a *ApplicationComponent) TableName() string {
-	return tableNamePrefix + "application_component"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (a *ApplicationComponent) ShortTableName() string {
-	return "app_cmp"
-}
-
-// PrimaryKey return custom primary key
-func (a *ApplicationComponent) PrimaryKey() string {
-	return fmt.Sprintf("%s-%s", a.AppPrimaryKey, a.Name)
-}
-
-// Index return custom index
-func (a *ApplicationComponent) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if a.Name != "" {
-		index["name"] = a.Name
-	}
-	if a.AppPrimaryKey != "" {
-		index["appPrimaryKey"] = a.AppPrimaryKey
-	}
-	if a.Type != "" {
-		index["type"] = a.Type
-	}
-	if a.WorkloadType.Type != "" {
-		index["workflowType"] = a.WorkloadType.Type
-	}
-	return index
-}
-
-// ApplicationPolicy app policy
-type ApplicationPolicy struct {
-	BaseModel
-	AppPrimaryKey string      `json:"appPrimaryKey"`
-	Name          string      `json:"name"`
-	Alias         string      `json:"alias"`
-	Description   string      `json:"description"`
-	Type          string      `json:"type"`
-	Creator       string      `json:"creator"`
-	Properties    *JSONStruct `json:"properties,omitempty"`
-	// EnvName if it is not empty, the policy is only belong to this environment
-	// For auto created policies, this field will be assigned a value
-	EnvName string `json:"envName"`
-}
-
-// TableName return custom table name
-func (a *ApplicationPolicy) TableName() string {
-	return tableNamePrefix + "application_policy"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (a *ApplicationPolicy) ShortTableName() string {
-	return "app_plc"
-}
-
-// PrimaryKey return custom primary key
-func (a *ApplicationPolicy) PrimaryKey() string {
-	return fmt.Sprintf("%s-%s", a.AppPrimaryKey, a.Name)
-}
-
-// Index return custom index
-func (a *ApplicationPolicy) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if a.Name != "" {
-		index["name"] = a.Name
-	}
-	if a.AppPrimaryKey != "" {
-		index["appPrimaryKey"] = a.AppPrimaryKey
-	}
-	if a.Type != "" {
-		index["type"] = a.Type
-	}
-	if a.EnvName != "" {
-		index["envName"] = a.EnvName
-	}
-	return index
-}
-
-// ApplicationTrait application trait
-type ApplicationTrait struct {
-	Alias       string      `json:"alias"`
-	Description string      `json:"description"`
-	Type        string      `json:"type"`
-	Properties  *JSONStruct `json:"properties,omitempty"`
-	CreateTime  time.Time   `json:"createTime"`
-	UpdateTime  time.Time   `json:"updateTime"`
-}
-
-// RevisionStatusInit event status init
-var RevisionStatusInit = "init"
-
-// RevisionStatusRunning event status running
-var RevisionStatusRunning = "running"
-
-// RevisionStatusComplete event status complete
-var RevisionStatusComplete = "complete"
-
-// RevisionStatusFail event status failure
-var RevisionStatusFail = "failure"
-
-// RevisionStatusTerminated event status terminated
-var RevisionStatusTerminated = "terminated"
-
-// RevisionStatusRollback event status rollback
-var RevisionStatusRollback = "rollback"
-
-// WorkflowStepPhaseStopped is the stopped phase
-var WorkflowStepPhaseStopped workflowv1alpha1.WorkflowStepPhase = "stopped"
-
-// ApplicationRevision be created when an application initiates deployment and describes the phased version of the application.
-type ApplicationRevision struct {
-	BaseModel
-	AppPrimaryKey   string `json:"appPrimaryKey"`
-	Version         string `json:"version"`
-	RollbackVersion string `json:"rollbackVersion,omitempty"`
-	// ApplyAppConfig Stores the application configuration during the current deploy.
-	ApplyAppConfig string `json:"applyAppConfig,omitempty"`
-
-	// RevisionCRName This is associated with the application revision in the cluster.
-	RevisionCRName string `json:"revisionCRName"`
-
-	// Deploy event status
-	Status string `json:"status"`
-	Reason string `json:"reason"`
-
-	// The user that triggers the deploy.
-	DeployUser string `json:"deployUser"`
-
-	// Information that users can note.
-	Note string `json:"note"`
-	// TriggerType the event trigger source, Web、API、SyncFromCR
-	TriggerType string `json:"triggerType"`
-
-	// WorkflowName deploy controller by workflow
-	WorkflowName string `json:"workflowName"`
-	// EnvName is the env name of this application revision
-	EnvName string `json:"envName"`
-	// CodeInfo is the code info of this application revision
-	CodeInfo *CodeInfo `json:"codeInfo,omitempty"`
-	// ImageInfo is the image info of this application revision
-	ImageInfo *ImageInfo `json:"imageInfo,omitempty"`
-}
-
-// CodeInfo is the code info for webhook request
-type CodeInfo struct {
-	// Commit is the commit hash
-	Commit string `json:"commit,omitempty"`
-	// Branch is the branch name
-	Branch string `json:"branch,omitempty"`
-	// User is the user name
-	User string `json:"user,omitempty"`
-}
-
-// ImageInfo is the image info for webhook request
-type ImageInfo struct {
-	// Type is the image type, ACR or Harbor or DockerHub
-	Type string `json:"type"`
-	// Resource is the image resource
-	Resource *ImageResource `json:"resource,omitempty"`
-	// Repository is the image repository
-	Repository *ImageRepository `json:"repository,omitempty"`
-}
-
-// ImageResource is the image resource
-type ImageResource struct {
-	// Digest is the image digest
-	Digest string `json:"digest"`
-	// Tag is the image tag
-	Tag string `json:"tag"`
-	// URL is the image url
-	URL string `json:"url"`
-	// CreateTime is the image create time
-	CreateTime time.Time `json:"createTime,omitempty"`
-}
-
-// ImageRepository is the image repository
-type ImageRepository struct {
-	// Name is the image repository name
-	Name string `json:"name"`
-	// Namespace is the image repository namespace
-	Namespace string `json:"namespace"`
-	// FullName is the image repository full name
-	FullName string `json:"fullName"`
-	// Region is the image repository region
-	Region string `json:"region,omitempty"`
-	// Type is the image repository type, public or private
-	Type string `json:"type"`
-	// CreateTime is the image repository create time
-	CreateTime time.Time `json:"createTime,omitempty"`
-}
-
-// TableName return custom table name
-func (a *ApplicationRevision) TableName() string {
-	return tableNamePrefix + "application_revision"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (a *ApplicationRevision) ShortTableName() string {
-	return "app_rev"
-}
-
-// PrimaryKey return custom primary key
-func (a *ApplicationRevision) PrimaryKey() string {
-	return fmt.Sprintf("%s-%s", a.AppPrimaryKey, a.Version)
-}
-
-// Index return custom index
-func (a *ApplicationRevision) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if a.Version != "" {
-		index["version"] = a.Version
-	}
-	if a.AppPrimaryKey != "" {
-		index["appPrimaryKey"] = a.AppPrimaryKey
-	}
-	if a.WorkflowName != "" {
-		index["workflowName"] = a.WorkflowName
-	}
-	if a.DeployUser != "" {
-		index["deployUser"] = a.DeployUser
-	}
-	if a.Status != "" {
-		index["status"] = a.Status
-	}
-	if a.TriggerType != "" {
-		index["triggerType"] = a.TriggerType
-	}
-	if a.EnvName != "" {
-		index["envName"] = a.EnvName
-	}
-	return index
-}
-
-// ApplicationTrigger is the model for trigger
-type ApplicationTrigger struct {
-	BaseModel
-	AppPrimaryKey string `json:"appPrimaryKey"`
-	WorkflowName  string `json:"workflowName,omitempty"`
-	Name          string `json:"name"`
-	Alias         string `json:"alias,omitempty"`
-	Description   string `json:"description,omitempty"`
-	Token         string `json:"token"`
-	Type          string `json:"type"`
-	PayloadType   string `json:"payloadType"`
-	ComponentName string `json:"componentName"`
-	Registry      string `json:"registry,omitempty"`
-}
-
-const (
-	// PayloadTypeCustom is the payload type custom
-	PayloadTypeCustom = "custom"
-	// PayloadTypeDockerhub is the payload type dockerhub
-	PayloadTypeDockerhub = "dockerhub"
-	// PayloadTypeACR is the payload type acr
-	PayloadTypeACR = "acr"
-	// PayloadTypeHarbor is the payload type harbor
-	PayloadTypeHarbor = "harbor"
-	// PayloadTypeJFrog is the payload type jfrog
-	PayloadTypeJFrog = "jfrog"
-
-	// ComponentTypeWebservice is the component type webservice
-	ComponentTypeWebservice = "webservice"
-	// ComponentTypeWorker is the component type worker
-	ComponentTypeWorker = "worker"
-	// ComponentTypeTask is the component type task
-	ComponentTypeTask = "task"
-)
-
-const (
-	// HarborEventTypePushArtifact is the event type PUSH_ARTIFACT
-	HarborEventTypePushArtifact = "PUSH_ARTIFACT"
-	// JFrogEventTypePush is push event type of jfrog webhook
-	JFrogEventTypePush = "pushed"
-	// JFrogDomainDocker is webhook domain of jfrog docker
-	JFrogDomainDocker = "docker"
-)
-
-// TableName return custom table name
-func (w *ApplicationTrigger) TableName() string {
-	return tableNamePrefix + "trigger"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (w *ApplicationTrigger) ShortTableName() string {
-	return "app_tg"
-}
-
-// PrimaryKey return custom primary key
-func (w *ApplicationTrigger) PrimaryKey() string {
-	return w.Token
-}
-
-// Index return custom index
-func (w *ApplicationTrigger) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if w.AppPrimaryKey != "" {
-		index["appPrimaryKey"] = w.AppPrimaryKey
-	}
-	if w.Token != "" {
-		index["token"] = w.Token
-	}
-	if w.Name != "" {
-		index["name"] = w.Name
-	}
-	if w.Type != "" {
-		index["type"] = w.Type
-	}
-	return index
-}

pkg/apiserver/domain/model/cluster.go

@@ -1,107 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-import (
-	"time"
-
-	"github.com/oam-dev/kubevela/pkg/multicluster"
-)
-
-func init() {
-	RegisterModel(&Cluster{})
-}
-
-// ProviderInfo describes the information from provider API
-type ProviderInfo struct {
-	Provider    string            `json:"provider"`
-	ClusterID   string            `json:"clusterID"`
-	ClusterName string            `json:"clusterName,omitempty"`
-	Zone        string            `json:"zone,omitempty"`
-	ZoneID      string            `json:"zoneID,omitempty"`
-	RegionID    string            `json:"regionID,omitempty"`
-	VpcID       string            `json:"vpcID,omitempty"`
-	Labels      map[string]string `json:"labels"`
-}
-
-const (
-	// ClusterStatusHealthy healthy cluster
-	ClusterStatusHealthy = "Healthy"
-	// ClusterStatusUnhealthy unhealthy cluster
-	ClusterStatusUnhealthy = "Unhealthy"
-)
-
-var (
-	// LocalClusterCreatedTime create time for local cluster, set to late date in order to ensure it is sorted to first
-	LocalClusterCreatedTime = time.Date(2999, 1, 1, 0, 0, 0, 0, time.UTC)
-)
-
-// Cluster describes the model of cluster in apiserver
-type Cluster struct {
-	BaseModel
-	Name             string            `json:"name"`
-	Alias            string            `json:"alias"`
-	Description      string            `json:"description"`
-	Icon             string            `json:"icon"`
-	Labels           map[string]string `json:"labels"`
-	Status           string            `json:"status"`
-	Reason           string            `json:"reason"`
-	Provider         ProviderInfo      `json:"provider"`
-	APIServerURL     string            `json:"apiServerURL"`
-	DashboardURL     string            `json:"dashboardURL"`
-	KubeConfig       string            `json:"kubeConfig"`
-	KubeConfigSecret string            `json:"kubeConfigSecret"`
-}
-
-// SetCreateTime for local cluster, create time is set to a large date which ensures the order of list
-func (c *Cluster) SetCreateTime(t time.Time) {
-	if c.Name == multicluster.ClusterLocalName {
-		c.CreateTime = LocalClusterCreatedTime
-		c.SetUpdateTime(t)
-	} else {
-		c.CreateTime = t
-	}
-}
-
-// TableName table name for datastore
-func (c *Cluster) TableName() string {
-	return tableNamePrefix + "cluster"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (c *Cluster) ShortTableName() string {
-	return "cls"
-}
-
-// PrimaryKey primary key for datastore
-func (c *Cluster) PrimaryKey() string {
-	return c.Name
-}
-
-// Index set to nil for list
-func (c *Cluster) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if c.Name != "" {
-		index["name"] = c.Name
-	}
-	return index
-}
-
-// DeepCopy create a copy of cluster
-func (c *Cluster) DeepCopy() *Cluster {
-	return deepCopy(c).(*Cluster)
-}

pkg/apiserver/domain/model/env.go

@@ -1,68 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-func init() {
-	RegisterModel(&Env{})
-}
-
-// Env models the data of env in database
-type Env struct {
-	BaseModel
-	Name        string `json:"name"`
-	Alias       string `json:"alias"`
-	Description string `json:"description,omitempty"`
-
-	// Project defines the project this Env belongs to
-	Project string `json:"project"`
-	// Namespace defines the K8s namespace of the Env in control plane
-	Namespace string `json:"namespace"`
-
-	// Targets defines the name of delivery target that belongs to this env
-	// In one project, a delivery target can only belong to one env.
-	Targets []string `json:"targets,omitempty"`
-}
-
-// TableName return custom table name
-func (p *Env) TableName() string {
-	return tableNamePrefix + "env"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (p *Env) ShortTableName() string {
-	return "ev"
-}
-
-// PrimaryKey return custom primary key
-func (p *Env) PrimaryKey() string {
-	return p.Name
-}
-
-// Index return custom index
-func (p *Env) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if p.Name != "" {
-		index["name"] = p.Name
-	}
-	if p.Namespace != "" {
-		index["namespace"] = p.Namespace
-	}
-	if p.Project != "" {
-		index["project"] = p.Project
-	}
-	return index
-}

pkg/apiserver/domain/model/envbinding.go

@@ -1,74 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-import "fmt"
-
-func init() {
-	RegisterModel(&EnvBinding{})
-}
-
-// EnvBinding application env binding
-type EnvBinding struct {
-	BaseModel
-	AppPrimaryKey   string           `json:"appPrimaryKey"`
-	AppDeployName   string           `json:"appDeployName"`
-	Name            string           `json:"name"`
-	ComponentsPatch []ComponentPatch `json:"componentsPatchs"`
-}
-
-// ComponentPatch Define differential patches for components in the environment.
-type ComponentPatch struct {
-	Name        string       `json:"name"`
-	Properties  *JSONStruct  `json:"properties,omitempty"`
-	Disable     bool         `json:"disable"`
-	TraitsPatch []TraitPatch `json:"traitsPatch,omitempty"`
-}
-
-// TraitPatch Define differential patches for traits in the environment.
-type TraitPatch struct {
-	Type       string      `json:"type"`
-	Properties *JSONStruct `json:"properties,omitempty"`
-	Disable    bool        `json:"disable"`
-}
-
-// TableName return custom table name
-func (e *EnvBinding) TableName() string {
-	return tableNamePrefix + "envbinding"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (e *EnvBinding) ShortTableName() string {
-	return "evb"
-}
-
-// PrimaryKey return custom primary key
-func (e *EnvBinding) PrimaryKey() string {
-	return fmt.Sprintf("%s-%s", e.AppPrimaryKey, e.Name)
-}
-
-// Index return custom index
-func (e *EnvBinding) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if e.Name != "" {
-		index["name"] = e.Name
-	}
-	if e.AppPrimaryKey != "" {
-		index["appPrimaryKey"] = e.AppPrimaryKey
-	}
-	return index
-}

pkg/apiserver/domain/model/model.go

@@ -1,159 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-import (
-	"encoding/json"
-	"fmt"
-	"reflect"
-	"time"
-
-	"k8s.io/apimachinery/pkg/runtime"
-	"k8s.io/klog/v2"
-	"sigs.k8s.io/yaml"
-)
-
-var tableNamePrefix = "vela_"
-
-var registeredModels = map[string]Interface{}
-
-// Interface model interface
-type Interface interface {
-	TableName() string
-	ShortTableName() string
-}
-
-// RegisterModel register model
-func RegisterModel(models ...Interface) {
-	for _, model := range models {
-		if _, exist := registeredModels[model.TableName()]; exist {
-			panic(fmt.Errorf("model table name %s conflict", model.TableName()))
-		}
-		registeredModels[model.TableName()] = model
-	}
-}
-
-// GetRegisterModels will return the register models
-func GetRegisterModels() map[string]Interface {
-	return registeredModels
-}
-
-// JSONStruct json struct, same with runtime.RawExtension
-type JSONStruct map[string]interface{}
-
-// NewJSONStruct new json struct from runtime.RawExtension
-func NewJSONStruct(raw *runtime.RawExtension) (*JSONStruct, error) {
-	if raw == nil || raw.Raw == nil {
-		return nil, nil
-	}
-	var data JSONStruct
-	err := json.Unmarshal(raw.Raw, &data)
-	if err != nil {
-		return nil, fmt.Errorf("parse raw data failure %w", err)
-	}
-	return &data, nil
-}
-
-// NewJSONStructByString new json struct from string
-func NewJSONStructByString(source string) (*JSONStruct, error) {
-	if source == "" {
-		return nil, nil
-	}
-	var data JSONStruct
-	err := json.Unmarshal([]byte(source), &data)
-	if err != nil {
-		return nil, fmt.Errorf("parse raw data failure %w", err)
-	}
-	return &data, nil
-}
-
-// NewJSONStructByStruct new json struct from struct object
-func NewJSONStructByStruct(object interface{}) (*JSONStruct, error) {
-	if object == nil {
-		return nil, nil
-	}
-	var data JSONStruct
-	out, err := yaml.Marshal(object)
-	if err != nil {
-		return nil, fmt.Errorf("marshal object data failure %w", err)
-	}
-	if err := yaml.Unmarshal(out, &data); err != nil {
-		return nil, fmt.Errorf("unmarshal object data failure %w", err)
-	}
-	return &data, nil
-}
-
-// JSON Encoded as a JSON string
-func (j *JSONStruct) JSON() string {
-	b, err := json.Marshal(j)
-	if err != nil {
-		klog.Errorf("json marshal failure %s", err.Error())
-	}
-	return string(b)
-}
-
-// Properties return the map
-func (j *JSONStruct) Properties() map[string]interface{} {
-	return *j
-}
-
-// RawExtension Encoded as a RawExtension
-func (j *JSONStruct) RawExtension() *runtime.RawExtension {
-	yamlByte, err := yaml.Marshal(j)
-	if err != nil {
-		klog.Errorf("yaml marshal failure %s", err.Error())
-		return nil
-	}
-	b, err := yaml.YAMLToJSON(yamlByte)
-	if err != nil {
-		klog.Errorf("yaml to json failure %s", err.Error())
-		return nil
-	}
-	if len(b) == 0 || string(b) == "null" {
-		return nil
-	}
-	return &runtime.RawExtension{Raw: b}
-}
-
-// BaseModel common model
-type BaseModel struct {
-	CreateTime time.Time `json:"createTime"`
-	UpdateTime time.Time `json:"updateTime"`
-}
-
-// SetCreateTime set create time
-func (m *BaseModel) SetCreateTime(time time.Time) {
-	m.CreateTime = time
-}
-
-// SetUpdateTime set update time
-func (m *BaseModel) SetUpdateTime(time time.Time) {
-	m.UpdateTime = time
-}
-
-func deepCopy(src interface{}) interface{} {
-	dst := reflect.New(reflect.TypeOf(src).Elem())
-
-	val := reflect.ValueOf(src).Elem()
-	nVal := dst.Elem()
-	for i := 0; i < val.NumField(); i++ {
-		nvField := nVal.Field(i)
-		nvField.Set(val.Field(i))
-	}
-
-	return dst.Interface()
-}

pkg/apiserver/domain/model/pipeline.go

@@ -1,111 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-import (
-	"fmt"
-
-	"github.com/kubevela/workflow/api/v1alpha1"
-)
-
-func init() {
-	RegisterModel(&PipelineContext{})
-	RegisterModel(&Pipeline{})
-}
-
-// Structs copied from workflow/api/v1alpha1/types.go
-
-// WorkflowSpec defines workflow steps and other attributes
-type WorkflowSpec struct {
-	Mode  *v1alpha1.WorkflowExecuteMode `json:"mode,omitempty"`
-	Steps []WorkflowStep                `json:"steps,omitempty"`
-}
-
-// Pipeline is the model of pipeline
-type Pipeline struct {
-	BaseModel
-	Spec        WorkflowSpec
-	Name        string `json:"name"`
-	Project     string `json:"project"`
-	Alias       string `json:"alias"`
-	Description string `json:"description"`
-}
-
-// PrimaryKey return custom primary key
-func (p Pipeline) PrimaryKey() string {
-	return fmt.Sprintf("%s-%s", p.Project, p.Name)
-}
-
-// TableName return custom table name
-func (p Pipeline) TableName() string {
-	return tableNamePrefix + "pipeline"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (p Pipeline) ShortTableName() string {
-	return "pipeline"
-}
-
-// Index return custom index
-func (p Pipeline) Index() map[string]interface{} {
-	var index = make(map[string]interface{})
-	if p.Project != "" {
-		index["project"] = p.Project
-	}
-	if p.Name != "" {
-		index["name"] = p.Name
-	}
-	return index
-}
-
-// Value is a k-v pair
-type Value struct {
-	Key   string `json:"key"`
-	Value string `json:"value"`
-}
-
-// PipelineContext is pipeline's context groups
-type PipelineContext struct {
-	BaseModel
-	PipelineName string             `json:"pipelineName"`
-	ProjectName  string             `json:"projectName"`
-	Contexts     map[string][]Value `json:"contexts"`
-}
-
-// TableName return custom table name
-func (c *PipelineContext) TableName() string {
-	return tableNamePrefix + "pipeline_context"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (c *PipelineContext) ShortTableName() string {
-	return "pp-ctx"
-}
-
-// PrimaryKey return custom primary key
-func (c *PipelineContext) PrimaryKey() string {
-	return fmt.Sprintf("%s-%s", c.ProjectName, c.PipelineName)
-}
-
-// Index return custom index
-func (c *PipelineContext) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if c.ProjectName != "" {
-		index["project_name"] = c.ProjectName
-	}
-	return index
-}

pkg/apiserver/domain/model/project.go

@@ -1,66 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-func init() {
-	RegisterModel(&Project{})
-}
-
-// Project basic model
-type Project struct {
-	BaseModel
-	Name        string `json:"name"`
-	Alias       string `json:"alias"`
-	Owner       string `json:"owner"`
-	Description string `json:"description,omitempty"`
-	Namespace   string `json:"namespace"`
-}
-
-// GetNamespace get the namespace name of this project.
-func (p *Project) GetNamespace() string {
-	if p.Namespace != "" {
-		return p.Namespace
-	}
-	return p.Name
-}
-
-// TableName return custom table name
-func (p *Project) TableName() string {
-	return tableNamePrefix + "project"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (p *Project) ShortTableName() string {
-	return "pj"
-}
-
-// PrimaryKey return custom primary key
-func (p *Project) PrimaryKey() string {
-	return p.Name
-}
-
-// Index return custom index
-func (p *Project) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if p.Name != "" {
-		index["name"] = p.Name
-	}
-	if p.Owner != "" {
-		index["owner"] = p.Owner
-	}
-	return index
-}

pkg/apiserver/domain/model/system_info.go

@@ -1,155 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-import "time"
-
-func init() {
-	RegisterModel(&SystemInfo{})
-}
-
-const (
-	// LoginTypeDex is the dex login type
-	LoginTypeDex string = "dex"
-	// LoginTypeLocal is the local login type
-	LoginTypeLocal string = "local"
-)
-
-// SystemInfo systemInfo model
-type SystemInfo struct {
-	BaseModel
-	SignedKey                   string        `json:"signedKey"`
-	InstallID                   string        `json:"installID"`
-	EnableCollection            bool          `json:"enableCollection"`
-	StatisticInfo               StatisticInfo `json:"statisticInfo,omitempty"`
-	LoginType                   string        `json:"loginType"`
-	DexUserDefaultProjects      []ProjectRef  `json:"projects"`
-	DexUserDefaultPlatformRoles []string      `json:"dexUserDefaultPlatformRoles"`
-}
-
-// ProjectRef set the project name and roles
-type ProjectRef struct {
-	Name  string   `json:"name"`
-	Roles []string `json:"roles"`
-}
-
-// UpdateDexConfig update dex config
-type UpdateDexConfig struct {
-	Connectors      []map[string]interface{}
-	StaticPasswords []StaticPassword
-	VelaAddress     string
-}
-
-// DexConfig dex config
-type DexConfig struct {
-	Issuer           string                   `json:"issuer"`
-	Web              DexWeb                   `json:"web"`
-	Storage          DexStorage               `json:"storage"`
-	Telemetry        Telemetry                `json:"telemetry"`
-	Frontend         WebConfig                `json:"frontend"`
-	StaticClients    []DexStaticClient        `json:"staticClients"`
-	Connectors       []map[string]interface{} `json:"connectors,omitempty"`
-	EnablePasswordDB bool                     `json:"enablePasswordDB"`
-	StaticPasswords  []StaticPassword         `json:"staticPasswords,omitempty"`
-}
-
-// StaticPassword is the static password for dex
-type StaticPassword struct {
-	Email    string `json:"email"`
-	Hash     string `json:"hash"`
-	Username string `json:"username"`
-}
-
-// StatisticInfo the system statistic info
-type StatisticInfo struct {
-	ClusterCount        string            `json:"clusterCount,omitempty"`
-	AppCount            string            `json:"appCount,omitempty"`
-	EnabledAddon        map[string]string `json:"enabledAddon,omitempty"`
-	TopKCompDef         []string          `json:"topKCompDef,omitempty"`
-	TopKTraitDef        []string          `json:"topKTraitDef,omitempty"`
-	TopKWorkflowStepDef []string          `json:"topKWorkflowStepDef,omitempty"`
-	TopKPolicyDef       []string          `json:"topKPolicyDef,omitempty"`
-	UpdateTime          time.Time         `json:"updateTime,omitempty"`
-}
-
-// DexStorage dex storage
-type DexStorage struct {
-	Type   string           `json:"type"`
-	Config DexStorageConfig `json:"config,omitempty"`
-}
-
-// DexStorageConfig is the storage config of dex
-type DexStorageConfig struct {
-	InCluster bool `json:"inCluster"`
-}
-
-// DexWeb dex web
-type DexWeb struct {
-	HTTP           string   `json:"http"`
-	HTTPS          string   `json:"https"`
-	TLSCert        string   `json:"tlsCert"`
-	TLSKey         string   `json:"tlsKey"`
-	AllowedOrigins []string `json:"allowedOrigins"`
-}
-
-// WebConfig holds the server's frontend templates and asset configuration.
-type WebConfig struct {
-	LogoURL string
-
-	// Defaults to "dex"
-	Issuer string
-
-	// Defaults to "light"
-	Theme string
-}
-
-// Telemetry is the config format for telemetry including the HTTP server config.
-type Telemetry struct {
-	HTTP string `json:"http"`
-}
-
-// DexStaticClient dex static client
-type DexStaticClient struct {
-	ID           string   `json:"id"`
-	Name         string   `json:"name"`
-	Secret       string   `json:"secret"`
-	RedirectURIs []string `json:"redirectURIs"`
-}
-
-// TableName return custom table name
-func (u *SystemInfo) TableName() string {
-	return tableNamePrefix + "system_info"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (u *SystemInfo) ShortTableName() string {
-	return "sysi"
-}
-
-// PrimaryKey return custom primary key
-func (u *SystemInfo) PrimaryKey() string {
-	return u.InstallID
-}
-
-// Index return custom index
-func (u *SystemInfo) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if u.InstallID != "" {
-		index["installID"] = u.InstallID
-	}
-	return index
-}

pkg/apiserver/domain/model/target.go

@@ -1,66 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-func init() {
-	RegisterModel(&Target{})
-}
-
-// Target defines the delivery target information for the application
-// It includes kubernetes clusters or cloud service providers
-type Target struct {
-	BaseModel
-	Name        string                 `json:"name"`
-	Alias       string                 `json:"alias,omitempty"`
-	Project     string                 `json:"project"`
-	Description string                 `json:"description,omitempty"`
-	Cluster     *ClusterTarget         `json:"cluster,omitempty"`
-	Variable    map[string]interface{} `json:"variable,omitempty"`
-}
-
-// TableName return custom table name
-func (d *Target) TableName() string {
-	return tableNamePrefix + "target"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (d *Target) ShortTableName() string {
-	return "tg"
-}
-
-// PrimaryKey return custom primary key
-func (d *Target) PrimaryKey() string {
-	return d.Name
-}
-
-// Index return custom index
-func (d *Target) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if d.Name != "" {
-		index["name"] = d.Name
-	}
-	if d.Project != "" {
-		index["project"] = d.Project
-	}
-	return index
-}
-
-// ClusterTarget one kubernetes cluster delivery target
-type ClusterTarget struct {
-	ClusterName string `json:"clusterName" validate:"checkname"`
-	Namespace   string `json:"namespace" optional:"true"`
-}

pkg/apiserver/domain/model/user.go

@@ -1,262 +0,0 @@
-/*
-Copyright 2022 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-import (
-	"fmt"
-	"time"
-
-	"github.com/form3tech-oss/jwt-go"
-)
-
-func init() {
-	RegisterModel(&User{})
-	RegisterModel(&ProjectUser{})
-	RegisterModel(&Role{})
-	RegisterModel(&Permission{})
-	RegisterModel(&PermissionTemplate{})
-}
-
-// DefaultAdminUserName default admin user name
-const DefaultAdminUserName = "admin"
-
-// DefaultAdminUserAlias default admin user alias
-const DefaultAdminUserAlias = "Administrator"
-
-// User is the model of user
-type User struct {
-	BaseModel
-	Name          string    `json:"name"`
-	Email         string    `json:"email"`
-	Alias         string    `json:"alias,omitempty"`
-	Password      string    `json:"password,omitempty"`
-	Disabled      bool      `json:"disabled"`
-	LastLoginTime time.Time `json:"lastLoginTime,omitempty"`
-	// UserRoles binding the platform level roles
-	UserRoles []string `json:"userRoles"`
-	DexSub    string   `json:"dexSub,omitempty"`
-}
-
-// TableName return custom table name
-func (u *User) TableName() string {
-	return tableNamePrefix + "user"
-}
-
-// ShortTableName return custom table name
-func (u *User) ShortTableName() string {
-	return "usr"
-}
-
-// PrimaryKey return custom primary key
-func (u *User) PrimaryKey() string {
-	return u.Name
-}
-
-// Index return custom index
-func (u *User) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if u.Name != "" {
-		index["name"] = u.Name
-	}
-	if u.Email != "" {
-		index["email"] = u.Email
-	}
-	if u.DexSub != "" {
-		index["dexSub"] = u.DexSub
-	}
-	return index
-}
-
-// ProjectUser is the model of user in project
-type ProjectUser struct {
-	BaseModel
-	Username    string `json:"username"`
-	ProjectName string `json:"projectName"`
-	// UserRoles binding the project level roles
-	UserRoles []string `json:"userRoles"`
-}
-
-// TableName return custom table name
-func (u *ProjectUser) TableName() string {
-	return tableNamePrefix + "project_user"
-}
-
-// ShortTableName return custom table name
-func (u *ProjectUser) ShortTableName() string {
-	return "pusr"
-}
-
-// PrimaryKey return custom primary key
-func (u *ProjectUser) PrimaryKey() string {
-	return fmt.Sprintf("%s-%s", u.ProjectName, u.Username)
-}
-
-// Index return custom index
-func (u *ProjectUser) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if u.Username != "" {
-		index["username"] = u.Username
-	}
-	if u.ProjectName != "" {
-		index["projectName"] = u.ProjectName
-	}
-	return index
-}
-
-// CustomClaims is the custom claims
-type CustomClaims struct {
-	Username  string `json:"username"`
-	GrantType string `json:"grantType"`
-	jwt.StandardClaims
-}
-
-// Role is a model for a new RBAC mode.
-type Role struct {
-	BaseModel
-	Name        string   `json:"name"`
-	Alias       string   `json:"alias"`
-	Project     string   `json:"project,omitempty"`
-	Permissions []string `json:"permissions"`
-}
-
-// Permission is a model for a new RBAC mode.
-type Permission struct {
-	BaseModel
-	Name      string   `json:"name"`
-	Alias     string   `json:"alias"`
-	Project   string   `json:"project,omitempty"`
-	Resources []string `json:"resources"`
-	Actions   []string `json:"actions"`
-	// Effect option values: Allow,Deny
-	Effect    string     `json:"effect"`
-	Principal *Principal `json:"principal,omitempty"`
-	Condition *Condition `json:"condition,omitempty"`
-}
-
-// Principal is a model for a new RBAC mode.
-type Principal struct {
-	// Type options: User or Role
-	Type  string   `json:"type"`
-	Names []string `json:"names"`
-}
-
-// Condition is a model for a new RBAC mode.
-type Condition struct {
-}
-
-// TableName return custom table name
-func (r *Role) TableName() string {
-	return tableNamePrefix + "role"
-}
-
-// ShortTableName return custom table name
-func (r *Role) ShortTableName() string {
-	return "role"
-}
-
-// PrimaryKey return custom primary key
-func (r *Role) PrimaryKey() string {
-	if r.Project == "" {
-		return r.Name
-	}
-	return fmt.Sprintf("%s-%s", r.Project, r.Name)
-}
-
-// Index return custom index
-func (r *Role) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if r.Name != "" {
-		index["name"] = r.Name
-	}
-	if r.Project != "" {
-		index["project"] = r.Project
-	}
-	return index
-}
-
-// TableName return custom table name
-func (p *Permission) TableName() string {
-	return tableNamePrefix + "perm"
-}
-
-// ShortTableName return custom table name
-func (p *Permission) ShortTableName() string {
-	return "perm"
-}
-
-// PrimaryKey return custom primary key
-func (p *Permission) PrimaryKey() string {
-	if p.Project == "" {
-		return p.Name
-	}
-	return fmt.Sprintf("%s-%s", p.Project, p.Name)
-}
-
-// Index return custom index
-func (p *Permission) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if p.Name != "" {
-		index["name"] = p.Name
-	}
-	if p.Project != "" {
-		index["project"] = p.Project
-	}
-	if p.Principal != nil && p.Principal.Type != "" {
-		index["principal.type"] = p.Principal.Type
-	}
-	return index
-}
-
-// PermissionTemplate is a model for a new RBAC mode.
-type PermissionTemplate struct {
-	BaseModel
-	Name  string `json:"name"`
-	Alias string `json:"alias"`
-	// Scope options: project or platform
-	Scope     string     `json:"scope"`
-	Resources []string   `json:"resources"`
-	Actions   []string   `json:"actions"`
-	Effect    string     `json:"effect"`
-	Condition *Condition `json:"condition,omitempty"`
-}
-
-// TableName return custom table name
-func (p *PermissionTemplate) TableName() string {
-	return tableNamePrefix + "perm_temp"
-}
-
-// ShortTableName return custom table name
-func (p *PermissionTemplate) ShortTableName() string {
-	return "perm_temp"
-}
-
-// PrimaryKey return custom primary key
-func (p *PermissionTemplate) PrimaryKey() string {
-	return p.Name
-}
-
-// Index return custom index
-func (p *PermissionTemplate) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if p.Name != "" {
-		index["name"] = p.Name
-	}
-	if p.Scope != "" {
-		index["scope"] = p.Scope
-	}
-	return index
-}

pkg/apiserver/domain/model/whole.go

@@ -1,81 +0,0 @@
-/*
- Copyright 2022 The KubeVela Authors.
-
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- 	http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
-*/
-
-package model
-
-const (
-	// AutoGenDesc describes the metadata in datastore that's automatically generated
-	AutoGenDesc = "Automatically converted from KubeVela Application in Kubernetes."
-
-	// AutoGenProj describes the automatically created project
-	AutoGenProj = "Automatically generated by sync mechanism."
-
-	// AutoGenEnvNamePrefix describes the common prefix for auto-generated env
-	AutoGenEnvNamePrefix = "syc-"
-	// AutoGenComp describes the creator of component that is auto-generated
-	AutoGenComp = "syc-comp"
-	// AutoGenPolicy describes the creator of policy that is auto-generated
-	AutoGenPolicy = "syc-policy"
-	// AutoGenRefPolicy describes the creator of policy that is auto-generated, this differs from AutoGenPolicy as the policy is referenced ones
-	AutoGenRefPolicy = "syc-ref-policy"
-	// AutoGenWorkflowNamePrefix describes the common prefix for auto-generated workflow
-	AutoGenWorkflowNamePrefix = "syc-"
-	// AutoGenTargetNamePrefix describes the common prefix for auto-generated target
-	AutoGenTargetNamePrefix = "syc-"
-
-	// LabelSyncGeneration describes the generation synced from
-	LabelSyncGeneration = "ux.oam.dev/synced-generation"
-	// LabelSyncRevision describes the revision name synced from
-	LabelSyncRevision = "ux.oam.dev/synced-revision"
-	// LabelSyncNamespace describes the namespace synced from
-	LabelSyncNamespace = "ux.oam.dev/from-namespace"
-)
-
-const (
-	// LabelSourceOfTruth describes the source of this app
-	LabelSourceOfTruth = "app.oam.dev/source-of-truth"
-
-	// FromCR means the data source of truth is from k8s CR
-	FromCR = "from-k8s-resource"
-	// FromUX means the data source of truth is from velaux data store
-	FromUX = "from-velaux"
-	// FromInner means the data source of truth is from KubeVela inner usage
-	// the configuration that don't want to be synced
-	// the addon application should be synced, but set to readonly mode
-	FromInner = "from-inner-system"
-)
-
-const (
-
-	// DefaultInitName is default object name for initialization
-	DefaultInitName = "default"
-
-	// DefaultSystemProject is project name for the system
-	DefaultSystemProject = "system"
-
-	//  DefaultSystemProjectAlias is project alias for the system
-	DefaultSystemProjectAlias = "System"
-
-	// DefaultInitNamespace is default namespace name for initialization
-	DefaultInitNamespace = "default"
-
-	// DefaultTargetDescription describes default target created
-	DefaultTargetDescription = "Default target is created by velaux system automatically."
-	// DefaultEnvDescription describes default env created
-	DefaultEnvDescription = "Default environment is created by velaux system automatically."
-	// DefaultProjectDescription describes the default project created
-	DefaultProjectDescription = "Default project is created by velaux system automatically."
-)

pkg/apiserver/domain/model/workflow.go

@@ -1,187 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package model
-
-import (
-	"fmt"
-	"time"
-
-	workflowv1alpha1 "github.com/kubevela/workflow/api/v1alpha1"
-)
-
-func init() {
-	RegisterModel(&Workflow{})
-	RegisterModel(&WorkflowRecord{})
-}
-
-// Finished means the workflow record is finished
-const Finished = "true"
-
-// UnFinished means the workflow record is not finished
-const UnFinished = "false"
-
-// Workflow application delivery database model
-type Workflow struct {
-	BaseModel
-	Name        string `json:"name"`
-	Alias       string `json:"alias"`
-	Description string `json:"description"`
-	// Workflow used by the default
-	Default       *bool                                `json:"default"`
-	AppPrimaryKey string                               `json:"appPrimaryKey"`
-	EnvName       string                               `json:"envName"`
-	Mode          workflowv1alpha1.WorkflowExecuteMode `json:"mode,omitempty"`
-	Steps         []WorkflowStep                       `json:"steps,omitempty"`
-}
-
-// WorkflowStep defines how to execute a workflow step.
-type WorkflowStep struct {
-	WorkflowStepBase `json:",inline" bson:",inline"`
-	SubSteps         []WorkflowStepBase `json:"subSteps,omitempty"`
-}
-
-// WorkflowStepBase is the step base of workflow
-type WorkflowStepBase struct {
-	// Name is the unique name of the workflow step.
-	Name        string                             `json:"name"`
-	Alias       string                             `json:"alias"`
-	Type        string                             `json:"type"`
-	Description string                             `json:"description"`
-	OrderIndex  int                                `json:"orderIndex"`
-	Inputs      workflowv1alpha1.StepInputs        `json:"inputs,omitempty"`
-	Outputs     workflowv1alpha1.StepOutputs       `json:"outputs,omitempty"`
-	DependsOn   []string                           `json:"dependsOn"`
-	Properties  *JSONStruct                        `json:"properties,omitempty"`
-	Meta        *workflowv1alpha1.WorkflowStepMeta `json:"meta,omitempty"`
-	If          string                             `json:"if,omitempty"`
-	Timeout     string                             `json:"timeout,omitempty"`
-}
-
-// TableName return custom table name
-func (w *Workflow) TableName() string {
-	return tableNamePrefix + "workflow"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (w *Workflow) ShortTableName() string {
-	return "wf"
-}
-
-// PrimaryKey return custom primary key
-func (w *Workflow) PrimaryKey() string {
-	return fmt.Sprintf("%s-%s", w.AppPrimaryKey, w.Name)
-}
-
-// Index return custom primary key
-func (w *Workflow) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if w.Name != "" {
-		index["name"] = w.Name
-	}
-	if w.AppPrimaryKey != "" {
-		index["appPrimaryKey"] = w.AppPrimaryKey
-	}
-	if w.EnvName != "" {
-		index["envName"] = w.EnvName
-	}
-	if w.Default != nil {
-		index["default"] = *w.Default
-	}
-
-	return index
-}
-
-// WorkflowRecord is the workflow record database model
-type WorkflowRecord struct {
-	BaseModel
-	WorkflowName  string `json:"workflowName"`
-	WorkflowAlias string `json:"workflowAlias"`
-	AppPrimaryKey string `json:"appPrimaryKey"`
-	// RevisionPrimaryKey: should be assigned the version(PublishVersion)
-	RevisionPrimaryKey string               `json:"revisionPrimaryKey"`
-	Name               string               `json:"name"`
-	Namespace          string               `json:"namespace"`
-	StartTime          time.Time            `json:"startTime,omitempty"`
-	EndTime            time.Time            `json:"endTime,omitempty"`
-	Finished           string               `json:"finished"`
-	Steps              []WorkflowStepStatus `json:"steps,omitempty"`
-	Status             string               `json:"status"`
-	Message            string               `json:"message"`
-	Mode               string               `json:"mode"`
-	ContextValue       map[string]string    `json:"contextValue,omitempty"`
-}
-
-// WorkflowStepStatus is the workflow step status database model
-type WorkflowStepStatus struct {
-	StepStatus     `json:",inline" bson:",inline"`
-	SubStepsStatus []StepStatus `json:"subSteps,omitempty"`
-}
-
-// StepStatus is the workflow step status database model
-type StepStatus struct {
-	ID               string                             `json:"id"`
-	Name             string                             `json:"name"`
-	Alias            string                             `json:"alias"`
-	Type             string                             `json:"type,omitempty"`
-	Phase            workflowv1alpha1.WorkflowStepPhase `json:"phase,omitempty"`
-	Message          string                             `json:"message,omitempty"`
-	Reason           string                             `json:"reason,omitempty"`
-	FirstExecuteTime time.Time                          `json:"firstExecuteTime,omitempty"`
-	LastExecuteTime  time.Time                          `json:"lastExecuteTime,omitempty"`
-}
-
-// TableName return custom table name
-func (w *WorkflowRecord) TableName() string {
-	return tableNamePrefix + "workflow_record"
-}
-
-// ShortTableName is the compressed version of table name for kubeapi storage and others
-func (w *WorkflowRecord) ShortTableName() string {
-	return "wfr"
-}
-
-// PrimaryKey return custom primary key
-func (w *WorkflowRecord) PrimaryKey() string {
-	return w.Name
-}
-
-// Index return custom primary key
-func (w *WorkflowRecord) Index() map[string]interface{} {
-	index := make(map[string]interface{})
-	if w.Name != "" {
-		index["name"] = w.Name
-	}
-	if w.Namespace != "" {
-		index["namespace"] = w.Namespace
-	}
-	if w.WorkflowName != "" {
-		index["workflowName"] = w.WorkflowName
-	}
-	if w.AppPrimaryKey != "" {
-		index["appPrimaryKey"] = w.AppPrimaryKey
-	}
-	if w.RevisionPrimaryKey != "" {
-		index["revisionPrimaryKey"] = w.RevisionPrimaryKey
-	}
-	if w.Finished != "" {
-		index["finished"] = w.Finished
-	}
-	if w.Status != "" {
-		index["status"] = w.Status
-	}
-	return index
-}

pkg/apiserver/domain/repository/application.go

@@ -1,123 +0,0 @@
-/*
-Copyright 2022 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package repository
-
-import (
-	"context"
-	"errors"
-
-	"k8s.io/klog/v2"
-
-	"github.com/oam-dev/kubevela/pkg/apiserver/domain/model"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils/bcode"
-	"github.com/oam-dev/kubevela/pkg/utils"
-)
-
-// ListApplicationPolicies query the application policies
-func ListApplicationPolicies(ctx context.Context, store datastore.DataStore, app *model.Application) (list []*model.ApplicationPolicy, err error) {
-	var policy = model.ApplicationPolicy{
-		AppPrimaryKey: app.PrimaryKey(),
-	}
-	policies, err := store.List(ctx, &policy, &datastore.ListOptions{})
-	if err != nil {
-		return nil, err
-	}
-	for _, policy := range policies {
-		pm := policy.(*model.ApplicationPolicy)
-		list = append(list, pm)
-	}
-	return
-}
-
-// ListApplicationEnvPolicies list the policies that only belong to the specified env
-func ListApplicationEnvPolicies(ctx context.Context, store datastore.DataStore, app *model.Application, envName string) (list []*model.ApplicationPolicy, err error) {
-	var policy = model.ApplicationPolicy{
-		AppPrimaryKey: app.PrimaryKey(),
-		EnvName:       envName,
-	}
-	policies, err := store.List(ctx, &policy, &datastore.ListOptions{})
-	if err != nil {
-		return nil, err
-	}
-	for _, policy := range policies {
-		pm := policy.(*model.ApplicationPolicy)
-		list = append(list, pm)
-	}
-	return
-}
-
-// ListApplicationCommonPolicies list the policies that common to all environments
-func ListApplicationCommonPolicies(ctx context.Context, store datastore.DataStore, app *model.Application) (list []*model.ApplicationPolicy, err error) {
-	var policy = model.ApplicationPolicy{
-		AppPrimaryKey: app.PrimaryKey(),
-	}
-	policies, err := store.List(ctx, &policy, &datastore.ListOptions{
-		FilterOptions: datastore.FilterOptions{
-			IsNotExist: []datastore.IsNotExistQueryOption{{
-				Key: "envName",
-			}},
-		},
-	})
-	if err != nil {
-		return nil, err
-	}
-	for _, policy := range policies {
-		pm := policy.(*model.ApplicationPolicy)
-		list = append(list, pm)
-	}
-	return
-}
-
-// DeleteApplicationEnvPolicies delete the policies via app name and env name
-func DeleteApplicationEnvPolicies(ctx context.Context, store datastore.DataStore, app *model.Application, envName string) error {
-	klog.Infof("clear the policies via app name %s and env name %s", app.PrimaryKey(), utils.Sanitize(envName))
-	policies, err := ListApplicationEnvPolicies(ctx, store, app, envName)
-	if err != nil {
-		return err
-	}
-	for _, policy := range policies {
-		if err := store.Delete(ctx, policy); err != nil && !errors.Is(err, datastore.ErrRecordNotExist) {
-			klog.Errorf("fail to clear the policies belong to the env %w", err)
-			continue
-		}
-	}
-	return nil
-}
-
-// GetApplicationRevision get the application revision
-// If the version is empty, will query the latest revision of the application
-func GetApplicationRevision(ctx context.Context, store datastore.DataStore, appName, version string) (*model.ApplicationRevision, error) {
-	ar := &model.ApplicationRevision{AppPrimaryKey: appName}
-	if version != "" {
-		ar.Version = version
-	}
-	revisions, err := store.List(ctx, ar, &datastore.ListOptions{
-		Page:     1,
-		PageSize: 1,
-		SortBy:   []datastore.SortOption{{Key: "createTime", Order: datastore.SortOrderDescending}},
-	})
-	if err != nil || len(revisions) == 0 {
-		return nil, bcode.ErrApplicationRevisionNotExist
-	}
-	latestRevisionRaw := revisions[0]
-	latestRevision, ok := latestRevisionRaw.(*model.ApplicationRevision)
-	if !ok {
-		return nil, errors.New("convert application revision error")
-	}
-	return latestRevision, nil
-}

pkg/apiserver/domain/repository/env.go

@@ -1,101 +0,0 @@
-/*
- Copyright 2021 The KubeVela Authors.
-
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- 	http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
-*/
-
-package repository
-
-import (
-	"context"
-	"errors"
-
-	"k8s.io/klog/v2"
-	"sigs.k8s.io/controller-runtime/pkg/client"
-
-	"github.com/oam-dev/kubevela/pkg/apiserver/domain/model"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils/bcode"
-	"github.com/oam-dev/kubevela/pkg/oam"
-	util "github.com/oam-dev/kubevela/pkg/utils"
-	velaerr "github.com/oam-dev/kubevela/pkg/utils/errors"
-)
-
-// CreateEnv create the environment
-func CreateEnv(ctx context.Context, kubeClient client.Client, ds datastore.DataStore, env *model.Env) error {
-	tenv := &model.Env{}
-	tenv.Name = env.Name
-
-	exist, err := ds.IsExist(ctx, tenv)
-	if err != nil {
-		klog.Errorf("check if env name exists failure %s", err.Error())
-		return err
-	}
-	if exist {
-		return bcode.ErrEnvAlreadyExists
-	}
-	if env.Namespace == "" {
-		env.Namespace = env.Name
-	}
-
-	// Creating the namespace at first.
-	err = util.CreateOrUpdateNamespace(ctx, kubeClient, env.Namespace,
-		util.MergeOverrideLabels(map[string]string{
-			oam.LabelControlPlaneNamespaceUsage: oam.VelaNamespaceUsageEnv,
-		}), util.MergeNoConflictLabels(map[string]string{
-			oam.LabelNamespaceOfEnvName: env.Name,
-		}))
-	if err != nil {
-		if velaerr.IsLabelConflict(err) {
-			return bcode.ErrEnvNamespaceAlreadyBound
-		}
-		klog.Errorf("update namespace label failure %s", err.Error())
-		return bcode.ErrEnvNamespaceFail
-	}
-	if err = ds.Add(ctx, env); err != nil {
-		return err
-	}
-	return nil
-}
-
-// GetEnv get the environment
-func GetEnv(ctx context.Context, ds datastore.DataStore, envName string) (*model.Env, error) {
-	env := &model.Env{}
-	env.Name = envName
-	if err := ds.Get(ctx, env); err != nil {
-		if errors.Is(err, datastore.ErrRecordNotExist) {
-			return nil, bcode.ErrEnvNotExisted
-		}
-		return nil, err
-	}
-	return env, nil
-}
-
-// ListEnvs list the environments
-func ListEnvs(ctx context.Context, ds datastore.DataStore, listOption *datastore.ListOptions) ([]*model.Env, error) {
-	var env = model.Env{}
-	entities, err := ds.List(ctx, &env, listOption)
-	if err != nil {
-		return nil, err
-	}
-
-	var envs []*model.Env
-	for _, entity := range entities {
-		apienv, ok := entity.(*model.Env)
-		if !ok {
-			continue
-		}
-		envs = append(envs, apienv)
-	}
-	return envs, nil
-}

pkg/apiserver/domain/repository/envbinding.go

@@ -1,130 +0,0 @@
-/*
- Copyright 2021 The KubeVela Authors.
-
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- 	http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
-*/
-
-package repository
-
-import (
-	"context"
-
-	"k8s.io/klog/v2"
-
-	"github.com/oam-dev/kubevela/pkg/apiserver/domain/model"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-	assembler "github.com/oam-dev/kubevela/pkg/apiserver/interfaces/api/assembler/v1"
-	apisv1 "github.com/oam-dev/kubevela/pkg/apiserver/interfaces/api/dto/v1"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils/bcode"
-)
-
-const (
-	// EnvBindingPolicyDefaultName default policy name
-	EnvBindingPolicyDefaultName string = "env-bindings"
-)
-
-// EnvListOption the option for listing the env
-type EnvListOption struct {
-	AppPrimaryKey string
-	EnvName       string
-	ProjectName   string
-}
-
-// ListFullEnvBinding list the envbinding and convert to DTO
-func ListFullEnvBinding(ctx context.Context, ds datastore.DataStore, option EnvListOption) ([]*apisv1.EnvBindingBase, error) {
-	envBindings, err := ListEnvBindings(ctx, ds, option)
-	if err != nil {
-		return nil, bcode.ErrEnvBindingsNotExist
-	}
-	targets, err := ListTarget(ctx, ds, option.ProjectName, nil)
-	if err != nil {
-		return nil, err
-	}
-	var listOption *datastore.ListOptions
-	if option.ProjectName != "" {
-		listOption = &datastore.ListOptions{
-			FilterOptions: datastore.FilterOptions{
-				In: []datastore.InQueryOption{
-					{
-						Key:    "project",
-						Values: []string{option.ProjectName},
-					},
-				},
-			},
-		}
-	}
-	envs, err := ListEnvs(ctx, ds, listOption)
-	if err != nil {
-		return nil, err
-	}
-	workflows, err := ListWorkflowForApp(ctx, ds, option.AppPrimaryKey)
-	if err != nil {
-		return nil, err
-	}
-	var list []*apisv1.EnvBindingBase
-	for _, eb := range envBindings {
-		env, err := pickEnv(envs, eb.Name)
-		if err != nil {
-			klog.Errorf("envbinding invalid %s", err.Error())
-			continue
-		}
-		workflow, err := pickEnvWorkflow(workflows, eb.Name)
-		if err != nil {
-			klog.Errorf("workflow invalid %s", err.Error())
-		}
-		list = append(list, assembler.ConvertEnvBindingModelToBase(eb, env, targets, workflow))
-	}
-	return list, nil
-}
-
-// ListEnvBindings list the envbinding
-func ListEnvBindings(ctx context.Context, ds datastore.DataStore, listOption EnvListOption) ([]*model.EnvBinding, error) {
-	var envBinding = model.EnvBinding{}
-	if listOption.AppPrimaryKey != "" {
-		envBinding.AppPrimaryKey = listOption.AppPrimaryKey
-	}
-	if listOption.EnvName != "" {
-		envBinding.Name = listOption.EnvName
-	}
-	envBindings, err := ds.List(ctx, &envBinding, &datastore.ListOptions{})
-	if err != nil {
-		return nil, err
-	}
-	var ret []*model.EnvBinding
-	for _, et := range envBindings {
-		eb, ok := et.(*model.EnvBinding)
-		if !ok {
-			continue
-		}
-		ret = append(ret, eb)
-	}
-	return ret, nil
-}
-
-func pickEnv(envs []*model.Env, name string) (*model.Env, error) {
-	for _, e := range envs {
-		if e.Name == name {
-			return e, nil
-		}
-	}
-	return nil, bcode.ErrEnvNotExisted
-}
-
-func pickEnvWorkflow(workflows []*model.Workflow, name string) (*model.Workflow, error) {
-	for _, w := range workflows {
-		if w.EnvName == name {
-			return w, nil
-		}
-	}
-	return nil, bcode.ErrWorkflowNotExist
-}

pkg/apiserver/domain/repository/grpc.go

@@ -1,54 +0,0 @@
-/*
-Copyright 2022 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package repository
-
-import (
-	"context"
-
-	"github.com/oam-dev/kubevela/pkg/apiserver/domain/model"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-)
-
-// ListRoles list roles from store
-func ListRoles(ctx context.Context, store datastore.DataStore, projectName string, page, pageSize int) ([]*model.Role, int64, error) {
-	var role = model.Role{
-		Project: projectName,
-	}
-	var filter datastore.FilterOptions
-	if projectName == "" {
-		filter.IsNotExist = append(filter.IsNotExist, datastore.IsNotExistQueryOption{
-			Key: "project",
-		})
-	}
-	entities, err := store.List(ctx, &role, &datastore.ListOptions{FilterOptions: filter, Page: page, PageSize: pageSize, SortBy: []datastore.SortOption{{Key: "createTime", Order: datastore.SortOrderDescending}}})
-	if err != nil {
-		return nil, 0, err
-	}
-	var roles []*model.Role
-	for i := range entities {
-		roles = append(roles, entities[i].(*model.Role))
-	}
-	count := int64(len(roles))
-	if page > 0 && pageSize > 0 {
-		var err error
-		count, err = store.Count(ctx, &role, &filter)
-		if err != nil {
-			return nil, 0, err
-		}
-	}
-	return roles, count, nil
-}

pkg/apiserver/domain/repository/suite_test.go

@@ -1,117 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package repository
-
-import (
-	"context"
-	"fmt"
-	"math/rand"
-	"testing"
-	"time"
-
-	. "github.com/onsi/ginkgo"
-	. "github.com/onsi/gomega"
-	corev1 "k8s.io/api/core/v1"
-	apierrors "k8s.io/apimachinery/pkg/api/errors"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	k8stypes "k8s.io/apimachinery/pkg/types"
-	"k8s.io/client-go/rest"
-	"k8s.io/utils/pointer"
-	"sigs.k8s.io/controller-runtime/pkg/client"
-	"sigs.k8s.io/controller-runtime/pkg/envtest"
-
-	"github.com/oam-dev/kubevela/apis/types"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/clients"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore/kubeapi"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore/mongodb"
-	"github.com/oam-dev/kubevela/pkg/utils/common"
-)
-
-var cfg *rest.Config
-var k8sClient client.Client
-var testEnv *envtest.Environment
-
-func TestService(t *testing.T) {
-	RegisterFailHandler(Fail)
-	RunSpecs(t, "Service Suite")
-}
-
-var _ = BeforeSuite(func(done Done) {
-	rand.Seed(time.Now().UnixNano())
-	By("bootstrapping test environment")
-
-	testEnv = &envtest.Environment{
-		ControlPlaneStartTimeout: time.Minute * 3,
-		ControlPlaneStopTimeout:  time.Minute,
-		UseExistingCluster:       pointer.BoolPtr(false),
-		CRDDirectoryPaths:        []string{"../../../../charts/vela-core/crds"},
-	}
-
-	By("start kube test env")
-	var err error
-	cfg, err = testEnv.Start()
-	Expect(err).ShouldNot(HaveOccurred())
-	Expect(cfg).ToNot(BeNil())
-
-	By("new kube client")
-	cfg.Timeout = time.Minute * 2
-	k8sClient, err = client.New(cfg, client.Options{Scheme: common.Scheme})
-	Expect(err).Should(BeNil())
-	Expect(k8sClient).ToNot(BeNil())
-	By("new kube client success")
-	clients.SetKubeClient(k8sClient)
-	Expect(err).Should(BeNil())
-
-	var namespace corev1.Namespace
-	err = k8sClient.Get(context.TODO(), k8stypes.NamespacedName{Name: types.DefaultKubeVelaNS}, &namespace)
-	if apierrors.IsNotFound(err) {
-		err := k8sClient.Create(context.TODO(), &corev1.Namespace{
-			ObjectMeta: metav1.ObjectMeta{
-				Name: types.DefaultKubeVelaNS,
-			},
-		})
-		Expect(err).Should(BeNil())
-	} else {
-		Expect(err).Should(BeNil())
-	}
-	close(done)
-}, 240)
-
-var _ = AfterSuite(func() {
-	By("tearing down the test environment")
-	err := testEnv.Stop()
-	Expect(err).ToNot(HaveOccurred())
-})
-
-func NewDatastore(cfg datastore.Config) (ds datastore.DataStore, err error) {
-	switch cfg.Type {
-	case "mongodb":
-		ds, err = mongodb.New(context.Background(), cfg)
-		if err != nil {
-			return nil, fmt.Errorf("create mongodb datastore instance failure %w", err)
-		}
-	case "kubeapi":
-		ds, err = kubeapi.New(context.Background(), cfg, k8sClient)
-		if err != nil {
-			return nil, fmt.Errorf("create mongodb datastore instance failure %w", err)
-		}
-	default:
-		return nil, fmt.Errorf("not support datastore type %s", cfg.Type)
-	}
-	return ds, nil
-}

pkg/apiserver/domain/repository/target.go

@@ -1,113 +0,0 @@
-/*
- Copyright 2021 The KubeVela Authors.
-
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- 	http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
-*/
-
-package repository
-
-import (
-	"context"
-
-	apierror "k8s.io/apimachinery/pkg/api/errors"
-	"k8s.io/klog/v2"
-	"sigs.k8s.io/controller-runtime/pkg/client"
-
-	"github.com/oam-dev/kubevela/pkg/apiserver/domain/model"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils/bcode"
-	"github.com/oam-dev/kubevela/pkg/multicluster"
-	"github.com/oam-dev/kubevela/pkg/oam"
-	"github.com/oam-dev/kubevela/pkg/utils"
-	velaerr "github.com/oam-dev/kubevela/pkg/utils/errors"
-)
-
-// CreateTargetNamespace create the namespace of the target
-func CreateTargetNamespace(ctx context.Context, k8sClient client.Client, clusterName, namespace, targetName string) error {
-	if clusterName == "" || namespace == "" {
-		return bcode.ErrTargetInvalidWithEmptyClusterOrNamespace
-	}
-	err := utils.CreateOrUpdateNamespace(multicluster.ContextWithClusterName(ctx, clusterName), k8sClient, namespace, utils.MergeOverrideLabels(map[string]string{
-		oam.LabelRuntimeNamespaceUsage: oam.VelaNamespaceUsageTarget,
-	}), utils.MergeNoConflictLabels(map[string]string{
-		oam.LabelNamespaceOfTargetName: targetName,
-	}))
-	if velaerr.IsLabelConflict(err) {
-		klog.Errorf("update namespace for target err %v", err)
-		return bcode.ErrTargetNamespaceAlreadyBound
-	}
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-// DeleteTargetNamespace delete the namespace of the target
-func DeleteTargetNamespace(ctx context.Context, k8sClient client.Client, clusterName, namespace, targetName string) error {
-	err := utils.UpdateNamespace(multicluster.ContextWithClusterName(ctx, clusterName), k8sClient, namespace,
-		// check no conflict label first to make sure the namespace belong to the target, then override it
-		utils.MergeNoConflictLabels(map[string]string{
-			oam.LabelNamespaceOfTargetName: targetName,
-		}),
-		utils.MergeOverrideLabels(map[string]string{
-			oam.LabelRuntimeNamespaceUsage: "",
-			oam.LabelNamespaceOfTargetName: "",
-		}))
-	if apierror.IsNotFound(err) {
-		return nil
-	}
-	return err
-}
-
-// CreateTarget create a target
-func CreateTarget(ctx context.Context, ds datastore.DataStore, tg *model.Target) error {
-	// check Target name.
-	exit, err := ds.IsExist(ctx, tg)
-	if err != nil {
-		klog.Errorf("check target existence failure %s", err.Error())
-		return err
-	}
-	if exit {
-		return bcode.ErrTargetExist
-	}
-
-	if err = ds.Add(ctx, tg); err != nil {
-		klog.Errorf("add target failure %s", err.Error())
-		return err
-	}
-	return nil
-}
-
-// ListTarget list the targets
-func ListTarget(ctx context.Context, ds datastore.DataStore, project string, dsOption *datastore.ListOptions) ([]*model.Target, error) {
-	if dsOption == nil {
-		dsOption = &datastore.ListOptions{}
-	}
-	target := model.Target{}
-	if project != "" {
-		target.Project = project
-	}
-	Targets, err := ds.List(ctx, &target, dsOption)
-	if err != nil {
-		klog.Errorf("list target err %v", err)
-		return nil, err
-	}
-	var respTargets []*model.Target
-	for _, raw := range Targets {
-		target, ok := raw.(*model.Target)
-		if ok {
-			respTargets = append(respTargets, target)
-		}
-	}
-	return respTargets, nil
-}

pkg/apiserver/domain/repository/workflow.go

@@ -1,685 +0,0 @@
-/*
- Copyright 2021 The KubeVela Authors.
-
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- 	http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
-*/
-
-package repository
-
-import (
-	"context"
-	"encoding/json"
-	"errors"
-	"fmt"
-	"strings"
-
-	workflowv1alpha1 "github.com/kubevela/workflow/api/v1alpha1"
-	k8stypes "k8s.io/apimachinery/pkg/types"
-	"k8s.io/klog/v2"
-	"sigs.k8s.io/controller-runtime/pkg/client"
-
-	"github.com/oam-dev/kubevela/apis/core.oam.dev/common"
-	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1alpha1"
-	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
-	"github.com/oam-dev/kubevela/apis/types"
-	"github.com/oam-dev/kubevela/pkg/apiserver/domain/model"
-	"github.com/oam-dev/kubevela/pkg/apiserver/event/sync/convert"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-	apisv1 "github.com/oam-dev/kubevela/pkg/apiserver/interfaces/api/dto/v1"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils/bcode"
-	"github.com/oam-dev/kubevela/pkg/oam/util"
-	pkgUtils "github.com/oam-dev/kubevela/pkg/utils"
-	"github.com/oam-dev/kubevela/pkg/workflow/step"
-)
-
-type state int
-
-const (
-	// keepState means this step or policy does not need to change
-	keepState state = iota
-	// newState means this step or policy needs to add
-	newState
-	// updateState means this step or policy needs to update with new
-	updateState
-	// deleteState means this step or policy needs to delete
-	deleteState
-	// modifyState means this step need to change the policies
-	modifyState
-)
-
-const (
-	// Deploy2Env deploy app to target cluster, suitable for common applications
-	Deploy2Env string = "deploy2env"
-	// DeployCloudResource deploy app to local and copy secret to target cluster, suitable for cloud application.
-	DeployCloudResource string = "deploy-cloud-resource"
-	// TerraformWorkloadType cloud application
-	TerraformWorkloadType string = "configurations.terraform.core.oam.dev"
-	// TerraformWorkloadKind terraform workload kind
-	TerraformWorkloadKind string = "Configuration"
-)
-
-type workflowStep struct {
-	name     string
-	stepType string
-	policies []*policy
-	state    state
-}
-
-type policy struct {
-	name       string
-	policyType string
-	targets    []string
-	state      state
-}
-
-type steps []*workflowStep
-
-func (s steps) getSteps(new, exist []model.WorkflowStep) []model.WorkflowStep {
-	var existMaps = make(map[string]model.WorkflowStep, len(exist))
-	var newMaps = make(map[string]model.WorkflowStep, len(new))
-	for i, s := range exist {
-		existMaps[s.Name] = exist[i]
-	}
-	for i, s := range new {
-		newMaps[s.Name] = new[i]
-	}
-	var result []model.WorkflowStep
-	for _, step := range s {
-		switch step.state {
-		case keepState:
-			result = append(result, existMaps[step.name])
-		case updateState, newState:
-			result = append(result, newMaps[step.name])
-		case modifyState:
-			if step.stepType == "deploy" {
-				modelStep := existMaps[step.name]
-				var policies []string
-				for _, p := range step.policies {
-					if p.state != deleteState {
-						policies = append(policies, p.name)
-					}
-				}
-				(*modelStep.Properties)["policies"] = policies
-				result = append(result, modelStep)
-			}
-		default:
-		}
-	}
-	return result
-}
-
-// getPolicies return the created, updated and deleted policies
-func (s steps) getPolicies(existPolicies, policies []datastore.Entity) (c, u, d []datastore.Entity) {
-	var created, updated, deleted []datastore.Entity
-	var tagDeleted = make(map[string]string)
-	var tagCreated = make(map[string]string)
-	var tagUpdated = make(map[string]string)
-	var tagKept = make(map[string]string)
-	for _, step := range s {
-		for _, p := range step.policies {
-			switch p.state {
-			case deleteState:
-				// maybe the multiple target use the one policy, so if the policy is keep, can not delete it
-				if p.policyType == v1alpha1.EnvBindingPolicyType && tagKept[p.name] != "" {
-					continue
-				}
-				tagDeleted[p.name] = p.name
-			case newState:
-				tagCreated[p.name] = p.name
-			case updateState:
-				tagUpdated[p.name] = p.name
-			default:
-				tagKept[p.name] = p.name
-				// maybe the multiple target use the one policy, so if the policy is keep, can not delete it
-				if _, ok := tagDeleted[p.name]; ok && p.policyType == v1alpha1.EnvBindingPolicyType {
-					delete(tagDeleted, p.name)
-				}
-			}
-		}
-	}
-	for i, p := range existPolicies {
-		policy := p.(*model.ApplicationPolicy)
-		if _, ok := tagDeleted[policy.Name]; ok {
-			deleted = append(deleted, existPolicies[i])
-			delete(tagDeleted, policy.Name)
-		}
-	}
-	for i, p := range policies {
-		policy := p.(*model.ApplicationPolicy)
-		// if the policy in updated and created, only set to updated
-		if _, ok := tagUpdated[policy.Name]; ok {
-			updated = append(updated, policies[i])
-			delete(tagUpdated, policy.Name)
-			delete(tagCreated, policy.Name)
-			continue
-		}
-		if _, ok := tagCreated[policy.Name]; ok {
-			created = append(created, policies[i])
-			delete(tagCreated, policy.Name)
-		}
-	}
-	return created, updated, deleted
-}
-
-func (s steps) String() string {
-	strBuffer := strings.Builder{}
-	for _, step := range s {
-		strBuffer.WriteString(fmt.Sprintf("step: %s/%s state: %v \n", step.name, step.stepType, step.state))
-		for _, p := range step.policies {
-			strBuffer.WriteString(fmt.Sprintf("\t policy: %s/%s state: %v targets: %v\n", p.name, p.policyType, p.state, p.targets))
-		}
-	}
-	return strBuffer.String()
-}
-
-func createWorkflowSteps(steps []model.WorkflowStep, policies []datastore.Entity) steps {
-	var policyMap = make(map[string]*policy)
-	var workflowSteps []*workflowStep
-	for _, entity := range policies {
-		p := entity.(*model.ApplicationPolicy)
-		switch p.Type {
-		case v1alpha1.TopologyPolicyType:
-			var targets []string
-			var topology v1alpha1.TopologyPolicySpec
-			if err := json.Unmarshal([]byte(p.Properties.JSON()), &topology); err != nil {
-				continue
-			}
-			for _, clu := range topology.Clusters {
-				targets = append(targets, fmt.Sprintf("%s/%s", clu, topology.Namespace))
-			}
-			policyMap[p.Name] = &policy{
-				name:       p.Name,
-				policyType: p.Type,
-				targets:    targets,
-			}
-		case v1alpha1.EnvBindingPolicyType:
-			var envBinding v1alpha1.EnvBindingSpec
-			if err := json.Unmarshal([]byte(p.Properties.JSON()), &envBinding); err != nil {
-				continue
-			}
-			for _, env := range envBinding.Envs {
-				targets := []string{fmt.Sprintf("%s/%s", env.Placement.ClusterSelector.Name, env.Placement.NamespaceSelector.Name)}
-				policyMap[p.Name+"-"+env.Name] = &policy{
-					name:       p.Name,
-					policyType: p.Type,
-					targets:    targets,
-				}
-			}
-
-		}
-	}
-	for _, wStep := range steps {
-		switch wStep.Type {
-		case step.DeployWorkflowStep:
-			var deploySpec step.DeployWorkflowStepSpec
-			if err := json.Unmarshal([]byte(wStep.Properties.JSON()), &deploySpec); err != nil {
-				continue
-			}
-			var policies []*policy
-			for _, policyName := range deploySpec.Policies {
-				if _, ok := policyMap[policyName]; ok {
-					policies = append(policies, policyMap[policyName])
-				}
-			}
-			workflowSteps = append(workflowSteps, &workflowStep{
-				name:     wStep.Name,
-				stepType: wStep.Type,
-				policies: policies,
-			})
-		case Deploy2Env, DeployCloudResource:
-			var deploySpec = make(map[string]interface{})
-			if err := json.Unmarshal([]byte(wStep.Properties.JSON()), &deploySpec); err != nil {
-				continue
-			}
-			policyName, _ := deploySpec["policy"].(string)
-			envName, _ := deploySpec["env"].(string)
-			if policyName != "" {
-				if p, ok := policyMap[policyName+"-"+envName]; ok {
-					workflowSteps = append(workflowSteps, &workflowStep{
-						name:     wStep.Name,
-						stepType: wStep.Type,
-						policies: []*policy{p},
-					})
-				}
-			}
-		default:
-			workflowSteps = append(workflowSteps, &workflowStep{
-				name:     wStep.Name,
-				stepType: wStep.Type,
-				state:    keepState,
-			})
-		}
-	}
-	return workflowSteps
-}
-
-// compareWorkflowSteps compare the old workflow steps with new workflow steps
-// will set the workflow step and policy state
-func compareWorkflowSteps(old, new steps) steps {
-	var oldTargets, newTargets []string
-	cacheTarget := func(t string, targets []string) []string {
-		if t == DeployCloudResource {
-			var re []string
-			for _, t := range targets {
-				re = append(re, fmt.Sprintf("c-"+t))
-			}
-			return re
-		}
-		return targets
-	}
-	for _, step := range old {
-		for _, p := range step.policies {
-			oldTargets = append(oldTargets, cacheTarget(step.stepType, p.targets)...)
-		}
-	}
-	for _, step := range new {
-		for _, p := range step.policies {
-			newTargets = append(newTargets, cacheTarget(step.stepType, p.targets)...)
-		}
-	}
-
-	_, needDeleted, needAdded := pkgUtils.ThreeWaySliceCompare(oldTargets, newTargets)
-	var workflowSteps []*workflowStep
-
-	var deployCloudResourcePolicyExist = false
-	for j := range old {
-		oldStep := old[j]
-		var deletedPolicyCount = 0
-		for i := range oldStep.policies {
-			p := oldStep.policies[i]
-			if pkgUtils.SliceIncludeSlice(needDeleted, cacheTarget(oldStep.stepType, p.targets)) {
-				p.state = deleteState
-				deletedPolicyCount++
-			}
-		}
-		if deletedPolicyCount != 0 && deletedPolicyCount == len(oldStep.policies) {
-			oldStep.state = deleteState
-		} else if deletedPolicyCount != 0 {
-			oldStep.state = modifyState
-		}
-		workflowSteps = append(workflowSteps, oldStep)
-		if oldStep.stepType == DeployCloudResource {
-			deployCloudResourcePolicyExist = true
-		}
-	}
-	for j := range new {
-		newStep := new[j]
-		for i := range newStep.policies {
-			p := newStep.policies[i]
-			if pkgUtils.SliceIncludeSlice(needAdded, cacheTarget(newStep.stepType, p.targets)) {
-				if p.policyType == v1alpha1.EnvBindingPolicyType && deployCloudResourcePolicyExist {
-					p.state = updateState
-				} else {
-					p.state = newState
-				}
-				newStep.state = newState
-				if newStep.stepType == DeployCloudResource {
-					workflowSteps = append([]*workflowStep{newStep}, workflowSteps...)
-				} else {
-					workflowSteps = append(workflowSteps, newStep)
-				}
-			}
-		}
-	}
-	return workflowSteps
-}
-
-// UpdateEnvWorkflow will update env workflow internally
-func UpdateEnvWorkflow(ctx context.Context, kubeClient client.Client, ds datastore.DataStore, app *model.Application, env *model.Env) error {
-	// The existing step configuration should be maintained and the delivery target steps should be automatically updated.
-	envSteps, policies := GenEnvWorkflowStepsAndPolicies(ctx, kubeClient, ds, env, app)
-	workflow, err := GetWorkflowForApp(ctx, ds, app, ConvertWorkflowName(env.Name))
-	if err != nil {
-		// no workflow exist mean no need to update
-		if errors.Is(err, bcode.ErrWorkflowNotExist) {
-			return nil
-		}
-		return err
-	}
-
-	existPolicies, err := ds.List(ctx, &model.ApplicationPolicy{AppPrimaryKey: app.PrimaryKey()}, &datastore.ListOptions{
-		FilterOptions: datastore.FilterOptions{
-			In: []datastore.InQueryOption{{
-				Key:    "type",
-				Values: []string{v1alpha1.TopologyPolicyType, v1alpha1.EnvBindingPolicyType},
-			}},
-		},
-	})
-	if err != nil {
-		return err
-	}
-
-	workflowSteps := compareWorkflowSteps(createWorkflowSteps(workflow.Steps, existPolicies), createWorkflowSteps(envSteps, policies))
-
-	// update the workflow
-	if err := UpdateWorkflowSteps(ctx, ds, workflow, workflowSteps.getSteps(envSteps, workflow.Steps)); err != nil {
-		return fmt.Errorf("fail to update the workflow steps %w", err)
-	}
-
-	// update the policies
-	created, updated, deleted := workflowSteps.getPolicies(existPolicies, policies)
-	for _, d := range deleted {
-		if err := ds.Delete(ctx, d); err != nil {
-			klog.Errorf("fail to delete the policy %s", err.Error())
-		}
-		klog.Infof("deleted a policy %s where update the workflow", d.PrimaryKey())
-	}
-
-	if err := ds.BatchAdd(ctx, created); err != nil {
-		klog.Errorf("fail to create the policy %s", err.Error())
-	}
-
-	for _, d := range updated {
-		if err := ds.Put(ctx, d); err != nil {
-			klog.Errorf("fail to update the policy %s", err.Error())
-		}
-		klog.Infof("updated a policy %s where update the workflow", d.PrimaryKey())
-	}
-
-	return nil
-}
-
-// UpdateAppEnvWorkflow will update the all env workflows internally of the specified app
-func UpdateAppEnvWorkflow(ctx context.Context, kubeClient client.Client, ds datastore.DataStore, app *model.Application) error {
-	envbindings, err := ListEnvBindings(ctx, ds, EnvListOption{AppPrimaryKey: app.PrimaryKey(), ProjectName: app.Project})
-	if err != nil {
-		return err
-	}
-	var envNames []string
-	for _, binding := range envbindings {
-		envNames = append(envNames, binding.Name)
-	}
-	if len(envNames) == 0 {
-		return nil
-	}
-	envs, err := ListEnvs(ctx, ds, &datastore.ListOptions{
-		FilterOptions: datastore.FilterOptions{
-			In: []datastore.InQueryOption{
-				{
-					Key:    "name",
-					Values: envNames,
-				},
-			},
-		},
-	})
-	if err != nil {
-		return err
-	}
-	for i := range envs {
-		if err := UpdateEnvWorkflow(ctx, kubeClient, ds, app, envs[i]); err != nil {
-			klog.Errorf("fail to update the env workflow %s", envs[i].PrimaryKey())
-		}
-	}
-	klog.Infof("The env workflows of app %s updated successfully", pkgUtils.Sanitize(app.PrimaryKey()))
-	return nil
-}
-
-// GetComponentDefinition will get componentDefinition by kube client
-func GetComponentDefinition(ctx context.Context, kubeClient client.Client, name string) (*v1beta1.ComponentDefinition, error) {
-	var componentDefinition v1beta1.ComponentDefinition
-	if err := kubeClient.Get(ctx, k8stypes.NamespacedName{Namespace: types.DefaultKubeVelaNS, Name: name}, &componentDefinition); err != nil {
-		return nil, err
-	}
-	return &componentDefinition, nil
-}
-
-// HaveTerraformWorkload there is at least one component with terraform workload
-func HaveTerraformWorkload(ctx context.Context, kubeClient client.Client, components []datastore.Entity) (terraformComponents []*model.ApplicationComponent) {
-	getComponentDeployType := func(component *model.ApplicationComponent) string {
-		definition, err := GetComponentDefinition(ctx, kubeClient, component.Type)
-		if err != nil {
-			klog.Errorf("get component definition %s failure %s", component.Type, err.Error())
-			// using Deploy2Env by default
-		}
-		if definition != nil {
-			if definition.Spec.Workload.Type == TerraformWorkloadType {
-				return DeployCloudResource
-			}
-			if definition.Spec.Workload.Definition.Kind == TerraformWorkloadKind {
-				return DeployCloudResource
-			}
-		}
-		return step.DeployWorkflowStep
-	}
-	for _, component := range components {
-		if getComponentDeployType(component.(*model.ApplicationComponent)) == DeployCloudResource {
-			terraformComponents = append(terraformComponents, component.(*model.ApplicationComponent))
-		}
-	}
-	return terraformComponents
-}
-
-func createOverrideConfigForTerraformComponent(env *model.Env, target *model.Target, terraformComponents []*model.ApplicationComponent) v1alpha1.EnvConfig {
-	placement := v1alpha1.EnvPlacement{}
-	if target.Cluster != nil {
-		placement.ClusterSelector = &common.ClusterSelector{Name: target.Cluster.ClusterName}
-		placement.NamespaceSelector = &v1alpha1.NamespaceSelector{Name: target.Cluster.Namespace}
-	}
-	var componentPatches []v1alpha1.EnvComponentPatch
-	// init cloud application region and provider info
-	for _, component := range terraformComponents {
-		properties := model.JSONStruct{
-			"providerRef": map[string]interface{}{
-				"name": "default",
-			},
-			"writeConnectionSecretToRef": map[string]interface{}{
-				"name":      fmt.Sprintf("%s-%s", component.Name, env.Name),
-				"namespace": env.Namespace,
-			},
-		}
-		if region, ok := target.Variable["region"]; ok {
-			properties["customRegion"] = region
-		}
-		if providerName, ok := target.Variable["providerName"]; ok {
-			properties["providerRef"].(map[string]interface{})["name"] = providerName
-		}
-		if providerNamespace, ok := target.Variable["providerNamespace"]; ok {
-			properties["providerRef"].(map[string]interface{})["namespace"] = providerNamespace
-		}
-		componentPatches = append(componentPatches, v1alpha1.EnvComponentPatch{
-			Name:       component.Name,
-			Properties: properties.RawExtension(),
-			Type:       component.Type,
-		})
-	}
-
-	return v1alpha1.EnvConfig{
-		Name:      genPolicyEnvName(target.Name),
-		Placement: placement,
-		Patch: v1alpha1.EnvPatch{
-			Components: componentPatches,
-		},
-	}
-}
-
-// GenEnvWorkflowStepsAndPolicies will generate workflow steps and policies for an env and application
-func GenEnvWorkflowStepsAndPolicies(ctx context.Context, kubeClient client.Client, ds datastore.DataStore, env *model.Env, app *model.Application) ([]model.WorkflowStep, []datastore.Entity) {
-	var workflowSteps []workflowv1alpha1.WorkflowStep
-	var policies []datastore.Entity
-	components, err := ds.List(ctx, &model.ApplicationComponent{AppPrimaryKey: app.PrimaryKey()}, nil)
-	if err != nil {
-		klog.Errorf("list application component list failure %s", err.Error())
-	}
-	userName, _ := ctx.Value(&apisv1.CtxKeyUser).(string)
-	terraformComponents := HaveTerraformWorkload(ctx, kubeClient, components)
-
-	var target = model.Target{Project: env.Project}
-	targets, err := ds.List(ctx, &target, &datastore.ListOptions{FilterOptions: datastore.FilterOptions{
-		In: []datastore.InQueryOption{{
-			Key:    "name",
-			Values: env.Targets,
-		}},
-	}})
-	if err != nil {
-		klog.Errorf("fail to get the targets detail info, %s", err.Error())
-	}
-	if len(terraformComponents) > 0 {
-		appPolicy := &model.ApplicationPolicy{
-			AppPrimaryKey: app.PrimaryKey(),
-			Name:          genPolicyName(env.Name),
-			Description:   "auto generated",
-			Type:          v1alpha1.EnvBindingPolicyType,
-			Creator:       userName,
-			EnvName:       env.Name,
-		}
-		var envs []v1alpha1.EnvConfig
-		// gen workflow step and policies for all targets
-		for i := range targets {
-			target := targets[i].(*model.Target)
-			step := workflowv1alpha1.WorkflowStep{
-				WorkflowStepBase: workflowv1alpha1.WorkflowStepBase{
-					Name: target.Name + "-cloud-resource",
-					Type: DeployCloudResource,
-					Properties: util.Object2RawExtension(map[string]string{
-						"policy": genPolicyName(env.Name),
-						"env":    genPolicyEnvName(target.Name),
-					}),
-				},
-			}
-			workflowSteps = append(workflowSteps, step)
-			envs = append(envs, createOverrideConfigForTerraformComponent(env, target, terraformComponents))
-		}
-		properties, err := model.NewJSONStructByStruct(v1alpha1.EnvBindingSpec{
-			Envs: envs,
-		})
-		if err != nil {
-			klog.Errorf("fail to create the properties of the topology policy, %s", err.Error())
-		} else {
-			appPolicy.Properties = properties
-			policies = append(policies, appPolicy)
-		}
-	}
-	if len(components) > len(terraformComponents) || len(components) == 0 {
-		// gen workflow step and policies for all targets
-		for i := range targets {
-			target := targets[i].(*model.Target)
-			if target.Cluster == nil {
-				continue
-			}
-			step := workflowv1alpha1.WorkflowStep{
-				WorkflowStepBase: workflowv1alpha1.WorkflowStepBase{
-					Name: target.Name,
-					Type: step.DeployWorkflowStep,
-					Properties: util.Object2RawExtension(map[string]interface{}{
-						"policies": []string{target.Name},
-					}),
-				},
-			}
-			workflowSteps = append(workflowSteps, step)
-			appPolicy := &model.ApplicationPolicy{
-				AppPrimaryKey: app.PrimaryKey(),
-				Name:          target.Name,
-				Description:   fmt.Sprintf("auto generated by the target %s", target.Name),
-				Type:          v1alpha1.TopologyPolicyType,
-				Creator:       userName,
-				EnvName:       env.Name,
-			}
-			properties, err := model.NewJSONStructByStruct(v1alpha1.TopologyPolicySpec{
-				Placement: v1alpha1.Placement{
-					Clusters: []string{target.Cluster.ClusterName},
-				},
-				Namespace: target.Cluster.Namespace,
-			})
-			if err != nil {
-				klog.Errorf("fail to create the properties of the topology policy, %s", err.Error())
-				continue
-			}
-			appPolicy.Properties = properties
-			policies = append(policies, appPolicy)
-		}
-	}
-	var steps []model.WorkflowStep
-	for _, step := range workflowSteps {
-		base, err := convert.FromCRWorkflowStepBase(step.WorkflowStepBase)
-		if err != nil {
-			klog.Errorf("workflow %s step %s properties is invalid %s", pkgUtils.Sanitize(app.Name), pkgUtils.Sanitize(step.Name), err.Error())
-			continue
-		}
-		targetName := strings.Replace(step.Name, "-cloud-resource", "", 1)
-		base.Alias = fmt.Sprintf("Deploy To %s", targetName)
-		base.Description = fmt.Sprintf("deploy app to delivery target %s", targetName)
-		ws := model.WorkflowStep{
-			WorkflowStepBase: *base,
-			SubSteps:         make([]model.WorkflowStepBase, 0),
-		}
-		// no sub steps handle here
-		steps = append(steps, ws)
-	}
-	return steps, policies
-}
-
-// UpdateWorkflowSteps will update workflow with new steps
-func UpdateWorkflowSteps(ctx context.Context, ds datastore.DataStore, workflow *model.Workflow, steps []model.WorkflowStep) error {
-	workflow.Steps = steps
-	return ds.Put(ctx, workflow)
-}
-
-// GetWorkflowForApp get the specified workflow of the application
-func GetWorkflowForApp(ctx context.Context, ds datastore.DataStore, app *model.Application, workflowName string) (*model.Workflow, error) {
-	var workflow = model.Workflow{
-		Name:          workflowName,
-		AppPrimaryKey: app.PrimaryKey(),
-	}
-	if err := ds.Get(ctx, &workflow); err != nil {
-		if errors.Is(err, datastore.ErrRecordNotExist) {
-			return nil, bcode.ErrWorkflowNotExist
-		}
-		return nil, err
-	}
-	return &workflow, nil
-}
-
-// GetWorkflowByEnv get the workflow by specified environment name.
-func GetWorkflowByEnv(ctx context.Context, ds datastore.DataStore, app *model.Application, envName string) (*model.Workflow, error) {
-	var workflow = model.Workflow{
-		AppPrimaryKey: app.PrimaryKey(),
-		EnvName:       envName,
-	}
-	res, err := ds.List(ctx, &workflow, nil)
-	if err != nil {
-		return nil, err
-	}
-	if len(res) > 0 {
-		return res[0].(*model.Workflow), nil
-	}
-	return nil, bcode.ErrWorkflowNotExist
-}
-
-// ListWorkflowForApp list all workflows of the application
-func ListWorkflowForApp(ctx context.Context, ds datastore.DataStore, appPrimaryKey string) ([]*model.Workflow, error) {
-	var workflow = model.Workflow{
-		AppPrimaryKey: appPrimaryKey,
-	}
-	workflows, err := ds.List(ctx, &workflow, &datastore.ListOptions{SortBy: []datastore.SortOption{{Key: "createTime", Order: datastore.SortOrderDescending}}})
-	if err != nil {
-		return nil, err
-	}
-	var res []*model.Workflow
-	for _, w := range workflows {
-		res = append(res, w.(*model.Workflow))
-	}
-	return res, nil
-}
-
-// ConvertWorkflowName generate the workflow name
-func ConvertWorkflowName(envName string) string {
-	return fmt.Sprintf("workflow-%s", envName)
-}
-
-func genPolicyName(envName string) string {
-	return fmt.Sprintf("%s-%s", EnvBindingPolicyDefaultName, envName)
-}
-
-func genPolicyEnvName(targetName string) string {
-	return targetName
-}

pkg/apiserver/domain/repository/workflow_test.go

@@ -1,575 +0,0 @@
-/*
-Copyright 2022 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package repository
-
-import (
-	"context"
-	"fmt"
-	"testing"
-
-	. "github.com/onsi/ginkgo"
-	. "github.com/onsi/gomega"
-	"github.com/stretchr/testify/assert"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/klog/v2"
-	"sigs.k8s.io/controller-runtime/pkg/client"
-
-	"github.com/oam-dev/kubevela/apis/core.oam.dev/common"
-	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1alpha1"
-	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
-	"github.com/oam-dev/kubevela/apis/types"
-	"github.com/oam-dev/kubevela/pkg/apiserver/domain/model"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/datastore"
-	pkgUtils "github.com/oam-dev/kubevela/pkg/utils"
-)
-
-func TestCompareWorkflowSteps(t *testing.T) {
-	existSteps := []model.WorkflowStep{
-		{
-			WorkflowStepBase: model.WorkflowStepBase{
-				Name: "step1",
-				Type: "deploy2env",
-				Properties: &model.JSONStruct{
-					"policy": "env-policy",
-					"env":    "target1",
-				},
-			},
-		},
-		{
-			WorkflowStepBase: model.WorkflowStepBase{
-				Name: "suspend",
-				Type: "suspend",
-			},
-		},
-		{
-			WorkflowStepBase: model.WorkflowStepBase{
-				Name: "step2",
-				Type: "deploy2env",
-				Properties: &model.JSONStruct{
-					"policy": "env-policy",
-					"env":    "target2",
-				},
-			},
-		},
-		{
-			WorkflowStepBase: model.WorkflowStepBase{
-				Name: "step3",
-				Type: "deploy2env",
-				Properties: &model.JSONStruct{
-					"policy": "env-policy",
-					"env":    "target3",
-				},
-			},
-		},
-		{
-			WorkflowStepBase: model.WorkflowStepBase{
-				Name:       "notify",
-				Type:       "notify",
-				Properties: &model.JSONStruct{"message": "dddd"},
-			},
-		},
-	}
-	newSteps := []model.WorkflowStep{
-		{
-			WorkflowStepBase: model.WorkflowStepBase{
-				Name:       "step1",
-				Type:       "deploy",
-				Properties: &model.JSONStruct{"policies": []string{"target1"}},
-			},
-		},
-		{
-			WorkflowStepBase: model.WorkflowStepBase{
-				Name:       "step2",
-				Type:       "deploy",
-				Properties: &model.JSONStruct{"policies": []string{"target2"}},
-			},
-		},
-		{
-			WorkflowStepBase: model.WorkflowStepBase{
-				Name:       "step4",
-				Type:       "deploy",
-				Properties: &model.JSONStruct{"policies": []string{"target4"}},
-			},
-		},
-	}
-	exist := createWorkflowSteps(existSteps, []datastore.Entity{
-		&model.ApplicationPolicy{
-			Name: "env-policy",
-			Type: "env-binding",
-			Properties: &model.JSONStruct{
-				"envs": []map[string]interface{}{
-					{
-						"name": "target1",
-						"placement": map[string]interface{}{
-							"clusterSelector": map[string]interface{}{
-								"name": "cluster1",
-							},
-							"namespaceSelector": map[string]interface{}{
-								"name": "ns1",
-							},
-						},
-					},
-					{
-						"name": "target2",
-						"placement": map[string]interface{}{
-							"clusterSelector": map[string]interface{}{
-								"name": "cluster2",
-							},
-							"namespaceSelector": map[string]interface{}{
-								"name": "ns2",
-							},
-						},
-					},
-					{
-						"name": "target3",
-						"placement": map[string]interface{}{
-							"clusterSelector": map[string]interface{}{
-								"name": "cluster3",
-							},
-							"namespaceSelector": map[string]interface{}{
-								"name": "ns3",
-							},
-						},
-					},
-				},
-			},
-		},
-	})
-	new := createWorkflowSteps(newSteps, []datastore.Entity{
-		&model.ApplicationPolicy{
-			Name: "target1",
-			Type: "topology",
-			Properties: &model.JSONStruct{
-				"clusters":  []string{"cluster1"},
-				"namespace": "ns1",
-			},
-		},
-		&model.ApplicationPolicy{
-			Name: "target2",
-			Type: "topology",
-			Properties: &model.JSONStruct{
-				"clusters":  []string{"cluster2"},
-				"namespace": "ns2",
-			},
-		},
-		&model.ApplicationPolicy{
-			Name: "target4",
-			Type: "topology",
-			Properties: &model.JSONStruct{
-				"clusters":  []string{"cluster4"},
-				"namespace": "ns4",
-			},
-		},
-	})
-	assert.Equal(t, len(exist), 5)
-	assert.Equal(t, len(new), 3)
-	result := compareWorkflowSteps(exist, new)
-	t.Log(result.String())
-	assert.Equal(t, len(result), 6)
-	assert.Equal(t, result[0].state, keepState)
-	assert.Equal(t, result[1].state, keepState)
-	assert.Equal(t, result[3].state, deleteState)
-	assert.Equal(t, result[5].state, newState)
-	assert.Equal(t, result[5].stepType, "deploy")
-	workflowReadySteps := result.getSteps(newSteps, existSteps)
-	assert.Equal(t, len(workflowReadySteps), 5)
-}
-
-var _ = Describe("Test workflow model", func() {
-	var store datastore.DataStore
-	BeforeEach(func() {
-		var err error
-		store, err = NewDatastore(datastore.Config{Type: "kubeapi", Database: "workflow-test-kubevela"})
-		Expect(err).Should(BeNil())
-		Expect(store).ToNot(BeNil())
-	})
-
-	It("update the workflow after added a cloud component", func() {
-		definition := &v1beta1.ComponentDefinition{
-			ObjectMeta: metav1.ObjectMeta{
-				Name:      "aliyun-rds",
-				Namespace: types.DefaultKubeVelaNS,
-			},
-			Spec: v1beta1.ComponentDefinitionSpec{
-				Workload: common.WorkloadTypeDescriptor{
-					Type: TerraformWorkloadType,
-				},
-			},
-		}
-		err := k8sClient.Create(context.TODO(), definition)
-		Expect(err).Should(BeNil())
-
-		app := &model.Application{
-			Name:    "test-mixture-components",
-			Project: "default",
-		}
-		webComponent := &model.ApplicationComponent{
-			Name:          "web",
-			AppPrimaryKey: app.PrimaryKey(),
-			Type:          "webservice",
-		}
-		env := &model.Env{
-			Name:    "dev",
-			Project: "default",
-			Targets: []string{"target1", "target2"},
-		}
-		target1 := &model.Target{
-			Name:    "target1",
-			Project: "default",
-			Cluster: &model.ClusterTarget{ClusterName: "local", Namespace: "target1"},
-		}
-		target2 := &model.Target{
-			Name:    "target2",
-			Project: "default",
-			Cluster: &model.ClusterTarget{ClusterName: "local", Namespace: "target2"},
-		}
-		err = store.BatchAdd(context.TODO(), []datastore.Entity{app, webComponent, target1, target2, env})
-		Expect(err).Should(BeNil())
-
-		err = CreateEnvWorkflow(context.TODO(), store, k8sClient, app, env, true)
-		Expect(err).Should(BeNil())
-
-		workflow, err := GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(2))
-
-		cloudComponent := &model.ApplicationComponent{
-			Name:          "cloud",
-			AppPrimaryKey: app.PrimaryKey(),
-			Type:          "aliyun-rds",
-		}
-
-		err = store.BatchAdd(context.TODO(), []datastore.Entity{cloudComponent})
-		Expect(err).Should(BeNil())
-
-		err = UpdateEnvWorkflow(context.Background(), k8sClient, store, app, env)
-		Expect(err).Should(BeNil())
-
-		workflow, err = GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(4))
-		Expect(workflow.Steps[0].Type).Should(Equal(DeployCloudResource))
-
-		entities, err := store.List(context.TODO(), &model.ApplicationPolicy{AppPrimaryKey: app.PrimaryKey()}, &datastore.ListOptions{
-			FilterOptions: datastore.FilterOptions{
-				In: []datastore.InQueryOption{{
-					Key:    "type",
-					Values: []string{v1alpha1.TopologyPolicyType, v1alpha1.EnvBindingPolicyType},
-				}},
-			},
-		})
-		Expect(err).Should(BeNil())
-		Expect(len(entities)).Should(Equal(3))
-		Expect(entities[0].(*model.ApplicationPolicy).Name).Should(Equal("env-bindings-dev"))
-
-		By("test the case that delete the cloud component")
-		err = store.Delete(context.TODO(), cloudComponent)
-		Expect(err).Should(BeNil())
-		err = UpdateEnvWorkflow(context.Background(), k8sClient, store, app, env)
-		Expect(err).Should(BeNil())
-		workflow, err = GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(2))
-	})
-
-	It("update the workflow after added a common component", func() {
-
-		app := &model.Application{
-			Name:    "test-mixture-components-2",
-			Project: "default",
-		}
-		cloudComponent := &model.ApplicationComponent{
-			Name:          "cloud",
-			AppPrimaryKey: app.PrimaryKey(),
-			Type:          "aliyun-rds",
-		}
-
-		env := &model.Env{
-			Name:    "dev",
-			Project: "default",
-			Targets: []string{"target1", "target2"},
-		}
-
-		err := store.BatchAdd(context.TODO(), []datastore.Entity{app, cloudComponent})
-		Expect(err).Should(BeNil())
-
-		err = CreateEnvWorkflow(context.TODO(), store, k8sClient, app, env, true)
-		Expect(err).Should(BeNil())
-
-		workflow, err := GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(2))
-
-		target3 := &model.Target{
-			Name:    "target3",
-			Project: "default",
-			Cluster: &model.ClusterTarget{ClusterName: "local", Namespace: "target3"},
-		}
-
-		webComponent := &model.ApplicationComponent{
-			Name:          "web",
-			AppPrimaryKey: app.PrimaryKey(),
-			Type:          "webservice",
-		}
-
-		env.Targets = []string{"target1", "target2", "target3"}
-
-		err = store.Put(context.TODO(), env)
-		Expect(err).Should(BeNil())
-
-		err = store.BatchAdd(context.TODO(), []datastore.Entity{webComponent, target3})
-		Expect(err).Should(BeNil())
-
-		err = UpdateEnvWorkflow(context.Background(), k8sClient, store, app, env)
-		Expect(err).Should(BeNil())
-
-		workflow, err = GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(6))
-		Expect(workflow.Steps[0].Type).Should(Equal(DeployCloudResource))
-
-		entities, err := store.List(context.TODO(), &model.ApplicationPolicy{AppPrimaryKey: app.PrimaryKey()}, &datastore.ListOptions{
-			FilterOptions: datastore.FilterOptions{
-				In: []datastore.InQueryOption{{
-					Key:    "type",
-					Values: []string{v1alpha1.TopologyPolicyType, v1alpha1.EnvBindingPolicyType},
-				}},
-			},
-		})
-		Expect(err).Should(BeNil())
-		Expect(len(entities)).Should(Equal(4))
-		Expect(entities[0].(*model.ApplicationPolicy).Name).Should(Equal("env-bindings-dev"))
-		Expect(len((*entities[0].(*model.ApplicationPolicy).Properties)["envs"].([]interface{}))).Should(Equal(3))
-	})
-
-	It("with the custom steps", func() {
-		app := &model.Application{
-			Name:    "test-mixture-components-3",
-			Project: "default",
-		}
-		webComponent := &model.ApplicationComponent{
-			Name:          "web",
-			AppPrimaryKey: app.PrimaryKey(),
-			Type:          "webservice",
-		}
-
-		env := &model.Env{
-			Name:    "dev",
-			Project: "default",
-			Targets: []string{"target1", "target2"},
-		}
-
-		err := store.BatchAdd(context.TODO(), []datastore.Entity{app, webComponent})
-		Expect(err).Should(BeNil())
-
-		err = CreateEnvWorkflow(context.TODO(), store, k8sClient, app, env, true)
-		Expect(err).Should(BeNil())
-
-		workflow, err := GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-
-		workflow.Steps = []model.WorkflowStep{
-			workflow.Steps[0], {
-				WorkflowStepBase: model.WorkflowStepBase{
-					Type: "suspend",
-					Name: "suspend",
-				},
-			}, workflow.Steps[1], {
-				WorkflowStepBase: model.WorkflowStepBase{
-					Type: "notification",
-					Name: "notification",
-				},
-			},
-		}
-
-		err = store.Put(context.TODO(), workflow)
-		Expect(err).Should(BeNil())
-
-		env.Targets = []string{"target1", "target2", "target3"}
-
-		err = store.Put(context.TODO(), env)
-		Expect(err).Should(BeNil())
-
-		err = UpdateEnvWorkflow(context.Background(), k8sClient, store, app, env)
-		Expect(err).Should(BeNil())
-
-		workflow, err = GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(5))
-		Expect(workflow.Steps[1].Type).Should(Equal("suspend"))
-		Expect(workflow.Steps[3].Type).Should(Equal("notification"))
-	})
-
-	It("with the concurrent steps", func() {
-		app := &model.Application{
-			Name:    "test-mixture-components-4",
-			Project: "default",
-		}
-		webComponent := &model.ApplicationComponent{
-			Name:          "web",
-			AppPrimaryKey: app.PrimaryKey(),
-			Type:          "webservice",
-		}
-
-		env := &model.Env{
-			Name:    "dev",
-			Project: "default",
-			Targets: []string{"target1", "target2"},
-		}
-
-		err := store.BatchAdd(context.TODO(), []datastore.Entity{app, webComponent})
-		Expect(err).Should(BeNil())
-
-		err = CreateEnvWorkflow(context.TODO(), store, k8sClient, app, env, true)
-		Expect(err).Should(BeNil())
-
-		workflow, err := GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-
-		step := workflow.Steps[0]
-		(*step.Properties)["policies"] = []string{"target1", "target2"}
-		workflow.Steps = []model.WorkflowStep{step}
-
-		err = store.Put(context.TODO(), workflow)
-		Expect(err).Should(BeNil())
-
-		env.Targets = []string{"target1", "target2", "target3"}
-
-		err = store.Put(context.TODO(), env)
-		Expect(err).Should(BeNil())
-
-		err = UpdateEnvWorkflow(context.Background(), k8sClient, store, app, env)
-		Expect(err).Should(BeNil())
-
-		workflow, err = GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(2))
-		Expect(workflow.Steps[0].Properties).ShouldNot(BeNil())
-		// the concurrent step should be kept.
-		Expect(len((*workflow.Steps[0].Properties)["policies"].([]interface{}))).Should(Equal(2))
-		Expect((*workflow.Steps[1].Properties)["policies"].([]interface{})[0].(string)).Should(Equal("target3"))
-
-		env.Targets = []string{"target2", "target3"}
-
-		err = store.Put(context.TODO(), env)
-		Expect(err).Should(BeNil())
-
-		err = UpdateEnvWorkflow(context.Background(), k8sClient, store, app, env)
-		Expect(err).Should(BeNil())
-
-		workflow, err = GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(2))
-		// the concurrent step should be kept.
-		Expect(workflow.Steps[0].Properties).ShouldNot(BeNil())
-		Expect(len((*workflow.Steps[0].Properties)["policies"].([]interface{}))).Should(Equal(1))
-		Expect((*workflow.Steps[0].Properties)["policies"].([]interface{})[0]).Should(Equal("target2"))
-		Expect((*workflow.Steps[1].Properties)["policies"].([]interface{})[0].(string)).Should(Equal("target3"))
-
-		entities, err := store.List(context.TODO(), &model.ApplicationPolicy{AppPrimaryKey: app.PrimaryKey()}, &datastore.ListOptions{
-			FilterOptions: datastore.FilterOptions{
-				In: []datastore.InQueryOption{{
-					Key:    "type",
-					Values: []string{v1alpha1.TopologyPolicyType, v1alpha1.EnvBindingPolicyType},
-				}},
-			},
-		})
-		Expect(err).Should(BeNil())
-		Expect(len(entities)).Should(Equal(2))
-	})
-
-	It("update the workflow after deleted a target", func() {
-
-		app := &model.Application{
-			Name:    "test-mixture-components-5",
-			Project: "default",
-		}
-		cloudComponent := &model.ApplicationComponent{
-			Name:          "cloud",
-			AppPrimaryKey: app.PrimaryKey(),
-			Type:          "aliyun-rds",
-		}
-
-		webComponent := &model.ApplicationComponent{
-			Name:          "web",
-			AppPrimaryKey: app.PrimaryKey(),
-			Type:          "webservice",
-		}
-
-		env := &model.Env{
-			Name:    "dev",
-			Project: "default",
-			Targets: []string{"target1", "target2"},
-		}
-
-		err := store.BatchAdd(context.TODO(), []datastore.Entity{app, cloudComponent, webComponent})
-		Expect(err).Should(BeNil())
-
-		err = CreateEnvWorkflow(context.TODO(), store, k8sClient, app, env, true)
-		Expect(err).Should(BeNil())
-
-		workflow, err := GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(4))
-
-		env.Targets = []string{"target1"}
-
-		err = store.Put(context.TODO(), env)
-		Expect(err).Should(BeNil())
-
-		err = UpdateEnvWorkflow(context.Background(), k8sClient, store, app, env)
-		Expect(err).Should(BeNil())
-
-		workflow, err = GetWorkflowForApp(context.TODO(), store, app, ConvertWorkflowName(env.Name))
-		Expect(err).Should(BeNil())
-		Expect(len(workflow.Steps)).Should(Equal(2))
-		Expect(workflow.Steps[0].Type).Should(Equal(DeployCloudResource))
-
-		entities, err := store.List(context.TODO(), &model.ApplicationPolicy{AppPrimaryKey: app.PrimaryKey()}, &datastore.ListOptions{
-			FilterOptions: datastore.FilterOptions{
-				In: []datastore.InQueryOption{{
-					Key:    "type",
-					Values: []string{v1alpha1.TopologyPolicyType, v1alpha1.EnvBindingPolicyType},
-				}},
-			},
-		})
-		Expect(err).Should(BeNil())
-		Expect(len(entities)).Should(Equal(2))
-	})
-})
-
-func CreateEnvWorkflow(ctx context.Context, store datastore.DataStore, kubeClient client.Client, app *model.Application, env *model.Env, isDefault bool) error {
-	steps, policies := GenEnvWorkflowStepsAndPolicies(ctx, kubeClient, store, env, app)
-	workflow := &model.Workflow{
-		Steps:         steps,
-		Name:          ConvertWorkflowName(env.Name),
-		Alias:         fmt.Sprintf("%s Workflow", env.Alias),
-		Description:   "Created automatically by envbinding.",
-		Default:       &isDefault,
-		EnvName:       env.Name,
-		AppPrimaryKey: app.PrimaryKey(),
-	}
-	klog.Infof("create workflow %s for app %s", pkgUtils.Sanitize(workflow.Name), pkgUtils.Sanitize(app.PrimaryKey()))
-	if err := store.Add(ctx, workflow); err != nil {
-		return err
-	}
-	err := store.BatchAdd(ctx, policies)
-	if err != nil {
-		return fmt.Errorf("fail to create policies %w", err)
-	}
-	return nil
-}

pkg/apiserver/domain/service/addon.go

@@ -1,563 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package service
-
-import (
-	"context"
-	"encoding/json"
-	"errors"
-	"fmt"
-	"sort"
-	"strings"
-	"sync"
-	"time"
-
-	errors3 "github.com/pkg/errors"
-	v1 "k8s.io/api/core/v1"
-	errors2 "k8s.io/apimachinery/pkg/api/errors"
-	"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
-	k8syaml "k8s.io/apimachinery/pkg/runtime/serializer/yaml"
-	k8stypes "k8s.io/apimachinery/pkg/types"
-	"k8s.io/client-go/discovery"
-	"k8s.io/client-go/rest"
-	"k8s.io/klog/v2"
-	"sigs.k8s.io/controller-runtime/pkg/client"
-
-	common2 "github.com/oam-dev/kubevela/apis/core.oam.dev/common"
-	"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
-	"github.com/oam-dev/kubevela/apis/types"
-	pkgaddon "github.com/oam-dev/kubevela/pkg/addon"
-	"github.com/oam-dev/kubevela/pkg/apiserver/infrastructure/clients"
-	apis "github.com/oam-dev/kubevela/pkg/apiserver/interfaces/api/dto/v1"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils/bcode"
-	"github.com/oam-dev/kubevela/pkg/definition"
-	"github.com/oam-dev/kubevela/pkg/multicluster"
-	"github.com/oam-dev/kubevela/pkg/oam"
-	addonutil "github.com/oam-dev/kubevela/pkg/utils/addon"
-	"github.com/oam-dev/kubevela/pkg/utils/apply"
-	velaerr "github.com/oam-dev/kubevela/pkg/utils/errors"
-)
-
-// AddonService handle CRUD and installation of addons
-type AddonService interface {
-	GetAddonRegistry(ctx context.Context, name string) (*apis.AddonRegistry, error)
-	CreateAddonRegistry(ctx context.Context, req apis.CreateAddonRegistryRequest) (*apis.AddonRegistry, error)
-	DeleteAddonRegistry(ctx context.Context, name string) error
-	UpdateAddonRegistry(ctx context.Context, name string, req apis.UpdateAddonRegistryRequest) (*apis.AddonRegistry, error)
-	ListAddonRegistries(ctx context.Context) ([]*apis.AddonRegistry, error)
-	ListAddons(ctx context.Context, registry, query string) ([]*apis.DetailAddonResponse, error)
-	StatusAddon(ctx context.Context, name string) (*apis.AddonStatusResponse, error)
-	GetAddon(ctx context.Context, name string, registry string, version string) (*apis.DetailAddonResponse, error)
-	EnableAddon(ctx context.Context, name string, args apis.EnableAddonRequest) error
-	DisableAddon(ctx context.Context, name string, force bool) error
-	ListEnabledAddon(ctx context.Context) ([]*apis.AddonBaseStatus, error)
-	UpdateAddon(ctx context.Context, name string, args apis.EnableAddonRequest) error
-	Init(ctx context.Context) error
-}
-
-// AddonImpl2AddonRes convert pkgaddon.UIData to the type apiserver need
-func AddonImpl2AddonRes(impl *pkgaddon.UIData, config *rest.Config) (*apis.DetailAddonResponse, error) {
-	var defs []*apis.AddonDefinition
-	for _, def := range impl.Definitions {
-		obj := &unstructured.Unstructured{}
-		dec := k8syaml.NewDecodingSerializer(unstructured.UnstructuredJSONScheme)
-		_, _, err := dec.Decode([]byte(def.Data), nil, obj)
-		if err != nil {
-			return nil, fmt.Errorf("convert %s file content to definition fail", def.Name)
-		}
-		defs = append(defs, &apis.AddonDefinition{
-			Name:        obj.GetName(),
-			DefType:     obj.GetKind(),
-			Description: obj.GetAnnotations()["definition.oam.dev/description"],
-		})
-	}
-
-	for _, cueDef := range impl.CUEDefinitions {
-		def := definition.Definition{Unstructured: unstructured.Unstructured{}}
-		err := def.FromCUEString(cueDef.Data, config)
-		if err != nil {
-			return nil, errors3.Wrapf(err, "fail to render definition: %s in cue's format", cueDef.Name)
-		}
-		defs = append(defs, &apis.AddonDefinition{
-			Name:        def.GetName(),
-			DefType:     def.GetKind(),
-			Description: def.GetAnnotations()["definition.oam.dev/description"],
-		})
-	}
-
-	if impl.Meta.DeployTo != nil && impl.Meta.DeployTo.LegacyRuntimeCluster != impl.Meta.DeployTo.RuntimeCluster {
-		impl.Meta.DeployTo.LegacyRuntimeCluster = impl.Meta.DeployTo.LegacyRuntimeCluster || impl.Meta.DeployTo.RuntimeCluster
-		impl.Meta.DeployTo.RuntimeCluster = impl.Meta.DeployTo.LegacyRuntimeCluster || impl.Meta.DeployTo.RuntimeCluster
-	}
-	return &apis.DetailAddonResponse{
-		Meta:              impl.Meta,
-		APISchema:         impl.APISchema,
-		UISchema:          impl.UISchema,
-		Detail:            impl.Detail,
-		Definitions:       defs,
-		RegistryName:      impl.RegistryName,
-		AvailableVersions: impl.AvailableVersions,
-	}, nil
-}
-
-// NewAddonService returns an addon service
-func NewAddonService(cacheTime time.Duration) AddonService {
-	dc, err := clients.GetDiscoveryClient()
-	if err != nil {
-		panic(err)
-	}
-
-	return &addonServiceImpl{
-		cacheTime:       cacheTime,
-		mutex:           new(sync.RWMutex),
-		discoveryClient: dc,
-	}
-}
-
-type addonServiceImpl struct {
-	cacheTime          time.Duration
-	addonRegistryCache *pkgaddon.Cache
-	RegistryDS         pkgaddon.RegistryDataStore `inject:"registryDatastore"`
-	KubeClient         client.Client              `inject:"kubeClient"`
-	KubeConfig         *rest.Config               `inject:"kubeConfig"`
-	Apply              apply.Applicator           `inject:"apply"`
-	discoveryClient    *discovery.DiscoveryClient
-	mutex              *sync.RWMutex
-}
-
-func (u *addonServiceImpl) Init(ctx context.Context) error {
-	cache := pkgaddon.NewCache(u.RegistryDS)
-	// TODO(@wonderflow): it's better to add a close channel here, but it should be fine as it's only invoke once in APIServer.
-	go cache.DiscoverAndRefreshLoop(ctx, u.cacheTime)
-	u.addonRegistryCache = cache
-	return nil
-}
-
-// GetAddon will get addon information
-func (u *addonServiceImpl) GetAddon(ctx context.Context, name string, registry string, version string) (*apis.DetailAddonResponse, error) {
-	var addon *pkgaddon.UIData
-	var err error
-	if registry == "" {
-		registries, err := u.RegistryDS.ListRegistries(ctx)
-		if err != nil {
-			return nil, err
-		}
-		for _, r := range registries {
-			addon, err = u.addonRegistryCache.GetUIData(r, name, version)
-			if err != nil && !errors.Is(err, pkgaddon.ErrNotExist) {
-				return nil, err
-			}
-			if addon != nil {
-				break
-			}
-		}
-	} else {
-		addonRegistry, err := u.RegistryDS.GetRegistry(ctx, registry)
-		if err != nil {
-			return nil, err
-		}
-		addon, err = u.addonRegistryCache.GetUIData(addonRegistry, name, version)
-		if err != nil && !errors.Is(err, pkgaddon.ErrNotExist) {
-			return nil, err
-		}
-	}
-
-	if addon == nil {
-		return nil, bcode.ErrAddonNotExist
-	}
-
-	addon.UISchema = renderAddonCustomUISchema(ctx, u.KubeClient, name, renderDefaultUISchema(addon.APISchema))
-
-	a, err := AddonImpl2AddonRes(addon, u.KubeConfig)
-	if err != nil {
-		return nil, err
-	}
-	return a, nil
-}
-
-func (u *addonServiceImpl) StatusAddon(ctx context.Context, name string) (*apis.AddonStatusResponse, error) {
-	status, err := pkgaddon.GetAddonStatus(ctx, u.KubeClient, name)
-	if err != nil {
-		return nil, bcode.ErrGetAddonApplication
-	}
-	var allClusters []apis.NameAlias
-	clusters, err := multicluster.ListVirtualClusters(ctx, u.KubeClient)
-	if err != nil {
-		klog.Errorf("err while list all clusters: %v", err)
-	}
-
-	for _, c := range clusters {
-		allClusters = append(allClusters, apis.NameAlias{Name: c.Name, Alias: c.Name})
-	}
-	if status.AddonPhase == string(apis.AddonPhaseDisabled) {
-		return &apis.AddonStatusResponse{
-			AddonBaseStatus: apis.AddonBaseStatus{
-				Name:  name,
-				Phase: apis.AddonPhase(status.AddonPhase),
-			},
-			InstalledVersion: status.InstalledVersion,
-			AllClusters:      allClusters,
-		}, nil
-	}
-
-	res := apis.AddonStatusResponse{
-		AddonBaseStatus: apis.AddonBaseStatus{
-			Name:  name,
-			Phase: apis.AddonPhase(status.AddonPhase),
-		},
-		InstalledVersion: status.InstalledVersion,
-		AppStatus:        *status.AppStatus,
-		Clusters:         status.Clusters,
-		AllClusters:      allClusters,
-	}
-
-	var sec v1.Secret
-	err = u.KubeClient.Get(ctx, client.ObjectKey{
-		Namespace: types.DefaultKubeVelaNS,
-		Name:      addonutil.Addon2SecName(name),
-	}, &sec)
-	if err != nil && !errors2.IsNotFound(err) {
-		return nil, bcode.ErrAddonSecretGet
-	} else if errors2.IsNotFound(err) {
-		return &res, nil
-	}
-
-	res.Args, err = pkgaddon.FetchArgsFromSecret(&sec)
-	if err != nil {
-		return nil, err
-	}
-
-	return &res, nil
-}
-
-func (u *addonServiceImpl) ListAddons(ctx context.Context, registry, query string) ([]*apis.DetailAddonResponse, error) {
-	var addons []*pkgaddon.UIData
-	rs, err := u.RegistryDS.ListRegistries(ctx)
-	if err != nil {
-		return nil, err
-	}
-
-	var gatherErr velaerr.ErrorList
-
-	for _, r := range rs {
-		if registry != "" && r.Name != registry {
-			continue
-		}
-		listAddons, err := u.addonRegistryCache.ListUIData(r)
-		if err != nil {
-			gatherErr = append(gatherErr, err)
-			continue
-		}
-		addons = mergeAddons(addons, listAddons, r.Name)
-	}
-
-	for i, a := range addons {
-		if a.Invisible {
-			addons = append(addons[:i], addons[i+1:]...)
-		}
-	}
-
-	if query != "" {
-		var filtered []*pkgaddon.UIData
-		for i, addon := range addons {
-			if strings.Contains(addon.Name, query) || strings.Contains(addon.Description, query) {
-				filtered = append(filtered, addons[i])
-			}
-		}
-		addons = filtered
-	}
-	sort.Slice(addons, func(i, j int) bool {
-		return addons[i].Name < addons[j].Name
-	})
-
-	for _, addon := range addons {
-		// render default ui schema
-		addon.UISchema = renderDefaultUISchema(addon.APISchema)
-	}
-
-	var addonResources []*apis.DetailAddonResponse
-	for _, a := range addons {
-		addonRes, err := AddonImpl2AddonRes(a, u.KubeConfig)
-		if err != nil {
-			klog.Errorf("err while converting AddonImpl to DetailAddonResponse: %v", err)
-			continue
-		}
-		addonResources = append(addonResources, addonRes)
-	}
-	if gatherErr.HasError() {
-		return addonResources, gatherErr
-	}
-	return addonResources, nil
-}
-
-func (u *addonServiceImpl) DeleteAddonRegistry(ctx context.Context, name string) error {
-	return u.RegistryDS.DeleteRegistry(ctx, name)
-}
-
-func (u *addonServiceImpl) CreateAddonRegistry(ctx context.Context, req apis.CreateAddonRegistryRequest) (*apis.AddonRegistry, error) {
-	r := addonRegistryModelFromCreateAddonRegistryRequest(req)
-
-	err := u.RegistryDS.AddRegistry(ctx, r)
-	if err != nil {
-		return nil, err
-	}
-
-	return convertAddonRegistry(r), nil
-}
-
-func convertAddonRegistry(r pkgaddon.Registry) *apis.AddonRegistry {
-	return &apis.AddonRegistry{
-		Name:   r.Name,
-		Git:    r.Git.SafeCopy(),
-		Gitee:  r.Gitee.SafeCopy(),
-		OSS:    r.OSS,
-		Helm:   r.Helm.SafeCopy(),
-		Gitlab: r.Gitlab.SafeCopy(),
-	}
-}
-
-func (u *addonServiceImpl) GetAddonRegistry(ctx context.Context, name string) (*apis.AddonRegistry, error) {
-	r, err := u.RegistryDS.GetRegistry(ctx, name)
-	if err != nil {
-		return nil, err
-	}
-	return convertAddonRegistry(r), nil
-}
-
-func (u addonServiceImpl) UpdateAddonRegistry(ctx context.Context, name string, req apis.UpdateAddonRegistryRequest) (*apis.AddonRegistry, error) {
-	r, err := u.RegistryDS.GetRegistry(ctx, name)
-	if err != nil {
-		return nil, bcode.ErrAddonRegistryNotExist
-	}
-	switch {
-	case req.Git != nil:
-		r.Git = req.Git
-	case req.Gitee != nil:
-		r.Gitee = req.Gitee
-	case req.Oss != nil:
-		r.OSS = req.Oss
-	case req.Helm != nil:
-		r.Helm = req.Helm
-	case req.Gitlab != nil:
-		r.Gitlab = req.Gitlab
-	}
-
-	err = u.RegistryDS.UpdateRegistry(ctx, r)
-	if err != nil {
-		return nil, err
-	}
-
-	return convertAddonRegistry(r), nil
-}
-
-func (u *addonServiceImpl) ListAddonRegistries(ctx context.Context) ([]*apis.AddonRegistry, error) {
-
-	var list []*apis.AddonRegistry
-	registries, err := u.RegistryDS.ListRegistries(ctx)
-	if err != nil {
-		// the storage configmap still not exist, don't return error add registry will create the configmap
-		if errors2.IsNotFound(err) {
-			return nil, nil
-		}
-		return nil, err
-	}
-	for _, registry := range registries {
-		r := convertAddonRegistry(registry)
-		list = append(list, r)
-	}
-	sort.Slice(list, func(i, j int) bool {
-		return list[i].Name < list[j].Name
-	})
-	return list, nil
-}
-
-func (u *addonServiceImpl) EnableAddon(ctx context.Context, name string, args apis.EnableAddonRequest) error {
-	var err error
-	registries, err := u.RegistryDS.ListRegistries(ctx)
-	if err != nil {
-		return err
-	}
-	if len(args.RegistryName) != 0 {
-		foundRegistry := false
-		for _, registry := range registries {
-			if registry.Name == args.RegistryName {
-				foundRegistry = true
-			}
-		}
-		if !foundRegistry {
-			return bcode.ErrAddonRegistryNotExist.SetMessage(fmt.Sprintf("specified registry %s not exist", args.RegistryName))
-		}
-	}
-	for i, r := range registries {
-		if len(args.RegistryName) != 0 && args.RegistryName != r.Name {
-			continue
-		}
-		// TODO: response the additional info to velaux users
-		_, err = pkgaddon.EnableAddon(ctx, name, args.Version, u.KubeClient, u.discoveryClient, u.Apply, u.KubeConfig, r, args.Args, u.addonRegistryCache, pkgaddon.FilterDependencyRegistries(i, registries))
-		if err == nil {
-			return nil
-		}
-
-		// if reach this line error must is not nil
-		if errors.Is(err, pkgaddon.ErrNotExist) {
-			// one registry return addon not exist error, should not break other registry func
-			continue
-		}
-		if strings.Contains(err.Error(), "specified version") {
-			return bcode.ErrAddonInvalidVersion.SetMessage(err.Error())
-		}
-
-		// wrap this error with special bcode
-		if errors.As(err, &pkgaddon.VersionUnMatchError{}) {
-			return bcode.ErrAddonSystemVersionMismatch.SetMessage(err.Error())
-		}
-		// except `addon not found`, other errors should return directly
-		return err
-	}
-	return bcode.ErrAddonNotExist
-}
-
-func (u *addonServiceImpl) DisableAddon(ctx context.Context, name string, force bool) error {
-	err := pkgaddon.DisableAddon(ctx, u.KubeClient, name, u.KubeConfig, force)
-	if err != nil {
-		klog.Errorf("delete application fail: %s", err.Error())
-		return err
-	}
-	return nil
-}
-
-func (u *addonServiceImpl) ListEnabledAddon(ctx context.Context) ([]*apis.AddonBaseStatus, error) {
-	apps := &v1beta1.ApplicationList{}
-	if err := u.KubeClient.List(ctx, apps, client.InNamespace(types.DefaultKubeVelaNS), client.HasLabels{oam.LabelAddonName}); err != nil {
-		return nil, err
-	}
-	var response []*apis.AddonBaseStatus
-	for _, application := range apps.Items {
-		if addonName := application.Labels[oam.LabelAddonName]; addonName != "" {
-			if application.Status.Phase != common2.ApplicationRunning {
-				continue
-			}
-			response = append(response, &apis.AddonBaseStatus{
-				Name:  addonName,
-				Phase: convertAppStateToAddonPhase(application.Status.Phase),
-			})
-		}
-	}
-	return response, nil
-}
-
-func (u *addonServiceImpl) UpdateAddon(ctx context.Context, name string, args apis.EnableAddonRequest) error {
-	var app v1beta1.Application
-	// check addon application whether exist
-	err := u.KubeClient.Get(ctx, client.ObjectKey{
-		Namespace: types.DefaultKubeVelaNS,
-		Name:      addonutil.Addon2AppName(name),
-	}, &app)
-	if err != nil {
-		return err
-	}
-
-	registries, err := u.RegistryDS.ListRegistries(ctx)
-	if err != nil {
-		return err
-	}
-
-	for i, r := range registries {
-		// TODO: response the additional info to velaux users
-		_, err = pkgaddon.EnableAddon(ctx, name, args.Version, u.KubeClient, u.discoveryClient, u.Apply, u.KubeConfig, r, args.Args, u.addonRegistryCache, pkgaddon.FilterDependencyRegistries(i, registries))
-		if err == nil {
-			return nil
-		}
-		if errors.Is(err, pkgaddon.ErrNotExist) {
-			continue
-		}
-		// wrap this error with special bcode
-		if errors.As(err, &pkgaddon.VersionUnMatchError{}) {
-			return bcode.ErrAddonSystemVersionMismatch
-		}
-		// except `addon not found`, other errors should return directly
-		return err
-	}
-	return bcode.ErrAddonNotExist
-}
-
-func addonRegistryModelFromCreateAddonRegistryRequest(req apis.CreateAddonRegistryRequest) pkgaddon.Registry {
-	return pkgaddon.Registry{
-		Name:   req.Name,
-		Git:    req.Git,
-		OSS:    req.Oss,
-		Gitee:  req.Gitee,
-		Helm:   req.Helm,
-		Gitlab: req.Gitlab,
-	}
-}
-
-func mergeAddons(a1, a2 []*pkgaddon.UIData, registryName string) []*pkgaddon.UIData {
-	for i, item := range a2 {
-		if hasAddon(a1, item.Name) {
-			continue
-		}
-		a2[i].RegistryName = registryName
-		a1 = append(a1, a2[i])
-	}
-	return a1
-}
-
-func hasAddon(addons []*pkgaddon.UIData, name string) bool {
-	if name == "" {
-		return true
-	}
-	for _, addon := range addons {
-		if addon.Name == name {
-			return true
-		}
-	}
-	return false
-}
-
-func convertAppStateToAddonPhase(state common2.ApplicationPhase) apis.AddonPhase {
-	switch state {
-	case common2.ApplicationRunning:
-		return apis.AddonPhaseEnabled
-	default:
-		return apis.AddonPhaseEnabling
-	}
-}
-
-func renderAddonCustomUISchema(ctx context.Context, cli client.Client, addonName string, defaultSchema []*utils.UIParameter) []*utils.UIParameter {
-	var cm v1.ConfigMap
-	if err := cli.Get(ctx, k8stypes.NamespacedName{
-		Namespace: types.DefaultKubeVelaNS,
-		Name:      fmt.Sprintf("addon-uischema-%s", addonName),
-	}, &cm); err != nil {
-		if !errors2.IsNotFound(err) {
-			klog.Errorf("find uischema configmap from cluster failure %s", err.Error())
-		}
-		return defaultSchema
-	}
-	data, ok := cm.Data[types.UISchema]
-	if !ok {
-		return defaultSchema
-	}
-	schema := []*utils.UIParameter{}
-	if err := json.Unmarshal([]byte(data), &schema); err != nil {
-		klog.Errorf("unmarshal ui schema failure %s", err.Error())
-		return defaultSchema
-	}
-	return patchSchema(defaultSchema, schema)
-}

pkg/apiserver/domain/service/addon_test.go

@@ -1,106 +0,0 @@
-/*
-Copyright 2021 The KubeVela Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package service
-
-import (
-	"context"
-	"fmt"
-	"os"
-
-	"github.com/oam-dev/kubevela/pkg/oam/util"
-
-	. "github.com/onsi/ginkgo"
-	. "github.com/onsi/gomega"
-	v1 "k8s.io/api/core/v1"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"sigs.k8s.io/yaml"
-
-	"github.com/oam-dev/kubevela/apis/types"
-	"github.com/oam-dev/kubevela/pkg/apiserver/utils"
-)
-
-var _ = Describe("addon service test", func() {
-	var ctx context.Context
-
-	BeforeEach(func() {
-		ctx = context.Background()
-		Expect(k8sClient.Create(ctx, &v1.Namespace{ObjectMeta: metav1.ObjectMeta{Name: types.DefaultKubeVelaNS}})).Should(SatisfyAny(BeNil(), util.AlreadyExistMatcher{}))
-	})
-
-	It("Test render customize ui-schema", func() {
-		schemaData, err := os.ReadFile("testdata/addon-uischema-test.yaml")
-
-		addonName := "test"
-		Expect(err).Should(BeNil())
-		jsonData, err := yaml.YAMLToJSON(schemaData)
-		Expect(err).Should(BeNil())
-		cm := v1.ConfigMap{
-			TypeMeta:   metav1.TypeMeta{APIVersion: "v1", Kind: "ConfigMap"},
-			ObjectMeta: metav1.ObjectMeta{Namespace: types.DefaultKubeVelaNS, Name: fmt.Sprintf("addon-uischema-%s", addonName)},
-			Data: map[string]string{
-				types.UISchema: string(jsonData),
-			}}
-
-		Expect(k8sClient.Create(ctx, &cm)).Should(BeNil())
-		defaultSchema := []*utils.UIParameter{
-			{
-				JSONKey: "version",
-				Sort:    3,
-			},
-			{
-				JSONKey: "domain",
-				Sort:    8,
-			},
-		}
-		res := renderAddonCustomUISchema(ctx, k8sClient, addonName, defaultSchema)
-		Expect(len(res)).Should(BeEquivalentTo(2))
-		for _, re := range res {
-			if re.JSONKey == "version" {
-				Expect(re.Validate.DefaultValue.(string)).Should(BeEquivalentTo("1.2.0-rc1"))
-				Expect(re.Sort).Should(BeEquivalentTo(1))
-			}
-			if re.JSONKey == "domain" {
-				Expect(re.Sort).Should(BeEquivalentTo(9))
-			}
-		}
-	})
-
-	It("Test render without ui-schema", func() {
-		addonName := "test-without-schema"
-		defaultSchema := []*utils.UIParameter{
-			{
-				JSONKey: "version",
-				Sort:    3,
-			},
-			{
-				JSONKey: "domain",
-				Sort:    8,
-			},
-		}
-		res := renderAddonCustomUISchema(ctx, k8sClient, addonName, defaultSchema)
-		Expect(len(res)).Should(BeEquivalentTo(2))
-		for _, re := range res {
-			if re.JSONKey == "version" {
-				Expect(re.Validate).Should(BeNil())
-				Expect(re.Sort).Should(BeEquivalentTo(3))
-			}
-			if re.JSONKey == "domain" {
-				Expect(re.Sort).Should(BeEquivalentTo(8))
-			}
-		}
-	})
-})