mirror of
https://github.com/kubevela/kubevela.git
synced 2026-03-05 19:22:03 +00:00
239c5474dd
Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com> Signed-off-by: FogDong <dongtianxin.tx@alibaba-inc.com>
66 lines
2.5 KiB
Go
66 lines
2.5 KiB
Go
/*
|
|
Copyright 2021 The KubeVela Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package step
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/pkg/errors"
|
|
kerrors "k8s.io/apimachinery/pkg/api/errors"
|
|
types2 "k8s.io/apimachinery/pkg/types"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
|
|
workflowv1alpha1 "github.com/kubevela/workflow/api/v1alpha1"
|
|
|
|
"github.com/oam-dev/kubevela/apis/core.oam.dev/v1alpha1"
|
|
"github.com/oam-dev/kubevela/apis/core.oam.dev/v1beta1"
|
|
"github.com/oam-dev/kubevela/pkg/utils"
|
|
)
|
|
|
|
// LoadExternalPoliciesForWorkflow detects policies used in workflow steps which are not declared in internal policies
|
|
// try to load them from external policy objects in the application's namespace
|
|
func LoadExternalPoliciesForWorkflow(ctx context.Context, cli client.Client, appNs string, steps []workflowv1alpha1.WorkflowStep, internalPolicies []v1beta1.AppPolicy) ([]v1beta1.AppPolicy, error) {
|
|
policies := internalPolicies
|
|
policyMap := map[string]struct{}{}
|
|
for _, policy := range policies {
|
|
policyMap[policy.Name] = struct{}{}
|
|
}
|
|
// Load extra used policies declared in the workflow step
|
|
for _, _step := range steps {
|
|
if _step.Type == DeployWorkflowStep && _step.Properties != nil {
|
|
props := DeployWorkflowStepSpec{}
|
|
if err := utils.StrictUnmarshal(_step.Properties.Raw, &props); err != nil {
|
|
return nil, errors.Wrapf(err, "invalid WorkflowStep %s", _step.Name)
|
|
}
|
|
for _, policyName := range props.Policies {
|
|
if _, found := policyMap[policyName]; !found {
|
|
po := &v1alpha1.Policy{}
|
|
if err := cli.Get(ctx, types2.NamespacedName{Namespace: appNs, Name: policyName}, po); err != nil {
|
|
if kerrors.IsNotFound(err) {
|
|
return nil, errors.Errorf("external policy %s not found", policyName)
|
|
}
|
|
return nil, errors.Wrapf(err, "failed to load external policy %s in namespace %s", policyName, appNs)
|
|
}
|
|
policies = append(policies, v1beta1.AppPolicy{Name: policyName, Type: po.Type, Properties: po.Properties})
|
|
policyMap[policyName] = struct{}{}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return policies, nil
|
|
}
|