Files
kubevela/references/cli/cli.go
Brian Kane 38dea0b56c feat: application-scoped policies (#7067)
Introduces application-scoped policies and global auto-applied policies
for KubeVela.

Key changes:
- PolicyDefinition gains `scope`, `global`, and `priority` fields
- Global policies (global=true, scope=Application) are auto-applied to
  every Application in their namespace (and vela-system globals apply
  cluster-wide) without being listed in spec.policies
- PolicyScopeIndex: in-memory singleton index of PolicyDefinition
  metadata, bootstrapped at startup and kept live via watch events.
  Follows KubeVela's 2-step lookup (local namespace → vela-system)
- ApplicationPolicyCache: per-app cache of rendered policy results,
  invalidated by spec hash, revision hash, or TTL; cleared on deletion
- Policy rendering pipeline extended to inject global policies before
  user-specified ones, respecting priority ordering
- Appfile.Context carries context.Context from controller into rendering
- Feature gates: EnableApplicationScopedPolicies and EnableGlobalPolicies
  (both Alpha, default false); admission webhook warns when a
  PolicyDefinition targets a disabled gate

Signed-off-by: Brian Kane <briankane1@gmail.com>
2026-03-19 07:58:15 -07:00

252 lines
7.6 KiB
Go

/*
Copyright 2021 The KubeVela Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package cli
import (
"flag"
"fmt"
"os"
"runtime"
gov "github.com/hashicorp/go-version"
"github.com/pkg/errors"
"github.com/spf13/cobra"
"github.com/spf13/pflag"
"k8s.io/klog/v2"
"sigs.k8s.io/controller-runtime/pkg/client/config"
cuexv1alpha1 "github.com/kubevela/pkg/apis/cue/v1alpha1"
workflowv1alpha1 "github.com/kubevela/workflow/api/v1alpha1"
"github.com/oam-dev/kubevela/apis/types"
velacmd "github.com/oam-dev/kubevela/pkg/cmd"
"github.com/oam-dev/kubevela/pkg/utils/common"
"github.com/oam-dev/kubevela/pkg/utils/helm"
"github.com/oam-dev/kubevela/pkg/utils/system"
"github.com/oam-dev/kubevela/pkg/utils/util"
velalog "github.com/oam-dev/kubevela/references/cli/log"
"github.com/oam-dev/kubevela/version"
)
var assumeYes bool
// NewCommand will contain all commands
func NewCommand() *cobra.Command {
return NewCommandWithIOStreams(util.NewDefaultIOStreams())
}
// NewCommandWithIOStreams will contain all commands and initialize them with given ioStream
func NewCommandWithIOStreams(ioStream util.IOStreams) *cobra.Command {
cmds := &cobra.Command{
Use: "vela",
DisableFlagParsing: true,
Run: func(cmd *cobra.Command, args []string) {
runHelp(cmd, cmd.Commands(), nil)
},
SilenceUsage: true,
ValidArgsFunction: func(cmd *cobra.Command, args []string, toComplete string) ([]string, cobra.ShellCompDirective) {
return nil, cobra.ShellCompDirectiveNoFileComp
},
FParseErrWhitelist: cobra.FParseErrWhitelist{
// Allow unknown flags for backward-compatibility.
UnknownFlags: true,
},
}
scheme := common.Scheme
err := workflowv1alpha1.AddToScheme(scheme)
if err != nil {
klog.Fatal(err)
}
err = cuexv1alpha1.AddToScheme(scheme)
if err != nil {
klog.Fatal(err)
}
commandArgs := common.Args{
Schema: scheme,
}
f := velacmd.NewDeferredFactory(config.GetConfig)
if err := system.InitDirs(); err != nil {
fmt.Println("InitDir err", err)
os.Exit(1)
}
cmds.AddCommand(
// Getting Start
NewInitCommand(commandArgs, "1", ioStream),
NewUpCommand(f, "2", commandArgs, ioStream),
NewAppStatusCommand(commandArgs, "3", ioStream),
NewListCommand(commandArgs, "4", ioStream),
NewDeleteCommand(f, "5"),
NewEnvCommand(commandArgs, "6", ioStream),
NewCapabilityShowCommand(commandArgs, "7", ioStream),
// Manage Apps
NewDryRunCommand(commandArgs, "1", ioStream),
NewLiveDiffCommand(commandArgs, "2", ioStream),
NewLogsCommand(commandArgs, "3", ioStream),
NewPortForwardCommand(commandArgs, "4", ioStream),
NewExecCommand(commandArgs, "5", ioStream),
RevisionCommandGroup(commandArgs, "6"),
NewDebugCommand(commandArgs, "7", ioStream),
PolicyCommandGroup(commandArgs, "8", ioStream),
// Continuous Delivery
NewWorkflowCommand(commandArgs, "1", ioStream),
NewAdoptCommand(f, "2", ioStream),
// Platform
NewTopCommand(commandArgs, "1", ioStream),
ClusterCommandGroup(f, "2", commandArgs, ioStream),
AuthCommandGroup(f, "3", ioStream),
// Config management
ConfigCommandGroup(f, "4", ioStream),
TemplateCommandGroup(f, "5", ioStream),
// Extension
// Addon
NewAddonCommand(commandArgs, "1", ioStream),
NewUISchemaCommand(commandArgs, "2", ioStream),
// Definitions
NewComponentsCommand(commandArgs, "3", ioStream),
NewTraitCommand(commandArgs, "4", ioStream),
DefinitionCommandGroup(commandArgs, "5", ioStream),
// System
NewInstallCommand(commandArgs, "1", ioStream),
NewUnInstallCommand(commandArgs, "2", ioStream),
NewSystemCommand(commandArgs, "3"),
NewVersionCommand(ioStream, "4"),
// aux
KubeCommandGroup(f, "1", ioStream),
CueXCommandGroup(f, "2"),
NewQlCommand(commandArgs, "3", ioStream),
NewCompletionCommand("4"),
NewHelpCommand("5"),
// hide (below commands will not be displayed in help command but still
// can be used by direct call)
NewWorkloadsCommand(commandArgs, ioStream),
NewExportCommand(commandArgs, ioStream),
NewRegistryCommand(ioStream, ""),
NewProviderCommand(commandArgs, "", ioStream),
)
fset := flag.NewFlagSet("logs", flag.ContinueOnError)
klog.InitFlags(fset)
pfset := pflag.NewFlagSet("logs", pflag.ContinueOnError)
pfset.AddGoFlagSet(fset)
pflg := pfset.Lookup("v")
pflg.Name = "verbosity"
pflg.Shorthand = "V"
klog.SetLogger(velalog.NewLogger("vela-cli"))
// init global flags
cmds.PersistentFlags().BoolVarP(&assumeYes, "yes", "y", false, "Assume yes for all user prompts")
cmds.PersistentFlags().AddFlag(pflg)
return cmds
}
// NewVersionCommand print client version
func NewVersionCommand(ioStream util.IOStreams, order string) *cobra.Command {
version := &cobra.Command{
Use: "version",
Short: "Prints vela build version information.",
Long: "Prints vela build version information.",
Run: func(cmd *cobra.Command, args []string) {
clusterVersion, _ := GetOAMReleaseVersion(types.DefaultKubeVelaNS)
fmt.Printf(`CLI Version: %v
Core Version: %s
GitRevision: %v
GolangVersion: %v
`,
version.VelaVersion,
clusterVersion,
version.GitRevision,
runtime.Version())
},
Annotations: map[string]string{
types.TagCommandType: types.TypeSystem,
types.TagCommandOrder: order,
},
}
version.AddCommand(NewVersionListCommand(ioStream))
return version
}
// NewVersionListCommand show all versions command
func NewVersionListCommand(ioStream util.IOStreams) *cobra.Command {
var showAll bool
cmd := &cobra.Command{
Use: "list",
Short: "List all available versions",
Long: "Query all available versions from remote server, compared to your current installed version.",
Args: cobra.ExactArgs(0),
RunE: func(cmd *cobra.Command, args []string) error {
helmHelper := helm.NewHelper()
versions, err := helmHelper.ListVersions(KubeVelaInstallerHelmRepoURL, kubeVelaChartName, true, nil)
if err != nil {
return err
}
clusterVersion, err := GetOAMReleaseVersion(types.DefaultKubeVelaNS)
if err != nil {
clusterVersion = version.VelaVersion
}
currentV, err := gov.NewVersion(clusterVersion)
if err != nil && !showAll {
return fmt.Errorf("can not parse current version %s", clusterVersion)
}
for _, chartV := range versions {
if chartV != nil {
v, err := gov.NewVersion(chartV.Version)
if err != nil {
continue
}
if v.GreaterThan(currentV) {
ioStream.Info("Newer Version:", v.String())
} else if showAll {
ioStream.Info("Older Version:", v.String())
}
}
}
return nil
},
Annotations: map[string]string{
types.TagCommandType: types.TypeSystem,
},
}
cmd.PersistentFlags().BoolVarP(&showAll, "all", "a", false, "List all available versions, if not, only list newer version")
return cmd
}
// GetOAMReleaseVersion gets version of vela-core runtime helm release
func GetOAMReleaseVersion(ns string) (string, error) {
results, err := helm.GetHelmRelease(ns)
if err != nil {
return "", err
}
for _, result := range results {
if result.Chart.ChartFullPath() == types.DefaultKubeVelaChartName {
return result.Chart.AppVersion(), nil
}
}
return "", errors.New("kubevela chart not found in your kubernetes cluster, refer to 'https://kubevela.io/docs/install' for installation")
}