mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-19 14:27:32 +00:00
c0878e4509
* docs: describe crd mode * docs: fix links * docs: fix commands and crdb resources * feat: add configure command * chore: use latest ORBOS * chore: use latest ORBOS * docs: start gitops docs * fix: compile * chore: fix build script path * chore: remove redundant prebuild * chore: add configure.go * docs: describe gitops mode * docs: point template links to main branch * docs: fix versions * feat: initialize empty keys * feat: reconfigure running ZITADEL * docs: describe crd mode * docs: fix links * docs: fix commands and crdb resources * feat: add configure command * chore: use latest ORBOS * chore: use latest ORBOS * docs: start gitops docs * fix: compile * chore: fix build script path * chore: remove redundant prebuild * chore: add configure.go * docs: describe gitops mode * docs: point template links to main branch * docs: fix versions * feat: initialize empty keys * feat: reconfigure running ZITADEL * test: fix * docs: keys are generated with configure * docs: remove keys from template * chore: pass compile time data * chore: use latest ORBOS * fix: when in-cluster, use in-cluster k8s client * fix: try in-cluster config if kubeconfig is empty * fix: reduce unneeded side effects for configure command * docs: boom version * chore: use latest ORBOS * chore: use latest ORBOS * initial commit * inital changes * commit WIP Information Architecture * commit a working state * add static assets and project * add org and fix img names * add plausible * remove img * change sidebar to easier mgmt * add openid oauth and domains * lint md * quickstarts * add auth flow * identity brokering * remove site * fix broken links * extend footer * extend readme * fix: styling * fix: zitadel logo on index * styling * border * fix: nav * fix: nav * fix: index * fix: corrected zitadelctl examples * fix: rename architecture to concepts * fix: introductions * fix: introductions * fix: introductions * docs: cli r/w secrets examples * docs: finish ZITADEL Enterprise Cloud * docs: mention ZITADEL Enterprise Cloud tier * docs: comment configuration options * docs: fix broken links * docs: move some introduction texts around * docs: twilio and email are mandatory * docs: download latest binaries Co-authored-by: Florian Forster <florian@caos.ch> Co-authored-by: fabi <fabienne.gerschwiler@gmail.com> Co-authored-by: Livio Amstutz <livio.a@gmail.com> Co-authored-by: Stefan Benz <stefan@caos.ch>
141 lines
3.9 KiB
Go
141 lines
3.9 KiB
Go
package orb
|
|
|
|
import (
|
|
"github.com/caos/orbos/mntr"
|
|
"github.com/caos/orbos/pkg/kubernetes"
|
|
"github.com/caos/orbos/pkg/kubernetes/resources/namespace"
|
|
"github.com/caos/orbos/pkg/labels"
|
|
"github.com/caos/orbos/pkg/secret"
|
|
"github.com/caos/orbos/pkg/tree"
|
|
"github.com/caos/orbos/pkg/treelabels"
|
|
"github.com/caos/zitadel/operator"
|
|
"github.com/caos/zitadel/operator/database/kinds/backups/bucket/backup"
|
|
"github.com/caos/zitadel/operator/database/kinds/backups/bucket/clean"
|
|
"github.com/caos/zitadel/operator/database/kinds/backups/bucket/restore"
|
|
"github.com/caos/zitadel/operator/database/kinds/databases"
|
|
"github.com/pkg/errors"
|
|
)
|
|
|
|
const (
|
|
NamespaceStr = "caos-zitadel"
|
|
)
|
|
|
|
func OperatorSelector() *labels.Selector {
|
|
return labels.OpenOperatorSelector("ZITADEL", "database.caos.ch")
|
|
}
|
|
|
|
func AdaptFunc(
|
|
timestamp string,
|
|
binaryVersion *string,
|
|
gitops bool,
|
|
features ...string,
|
|
) operator.AdaptFunc {
|
|
|
|
return func(
|
|
monitor mntr.Monitor,
|
|
orbDesiredTree *tree.Tree,
|
|
currentTree *tree.Tree,
|
|
) (
|
|
queryFunc operator.QueryFunc,
|
|
destroyFunc operator.DestroyFunc,
|
|
configureFunc operator.ConfigureFunc,
|
|
secrets map[string]*secret.Secret,
|
|
existing map[string]*secret.Existing,
|
|
migrate bool,
|
|
err error,
|
|
) {
|
|
defer func() {
|
|
err = errors.Wrapf(err, "building %s failed", orbDesiredTree.Common.Kind)
|
|
}()
|
|
|
|
orbMonitor := monitor.WithField("kind", "orb")
|
|
|
|
desiredKind, err := ParseDesiredV0(orbDesiredTree)
|
|
if err != nil {
|
|
return nil, nil, nil, nil, nil, migrate, errors.Wrap(err, "parsing desired state failed")
|
|
}
|
|
orbDesiredTree.Parsed = desiredKind
|
|
currentTree = &tree.Tree{}
|
|
|
|
if desiredKind.Spec.Verbose && !orbMonitor.IsVerbose() {
|
|
orbMonitor = orbMonitor.Verbose()
|
|
}
|
|
|
|
queryNS, err := namespace.AdaptFuncToEnsure(NamespaceStr)
|
|
if err != nil {
|
|
return nil, nil, nil, nil, nil, migrate, err
|
|
}
|
|
/*destroyNS, err := namespace.AdaptFuncToDestroy(NamespaceStr)
|
|
if err != nil {
|
|
return nil, nil, nil, err
|
|
}*/
|
|
|
|
databaseCurrent := &tree.Tree{}
|
|
|
|
operatorLabels := mustDatabaseOperator(binaryVersion)
|
|
|
|
queryDB, destroyDB, configureDB, secrets, existing, migrate, err := databases.Adapt(
|
|
orbMonitor,
|
|
desiredKind.Database,
|
|
databaseCurrent,
|
|
NamespaceStr,
|
|
treelabels.MustForAPI(desiredKind.Database, operatorLabels),
|
|
timestamp,
|
|
desiredKind.Spec.NodeSelector,
|
|
desiredKind.Spec.Tolerations,
|
|
desiredKind.Spec.Version,
|
|
features,
|
|
)
|
|
if err != nil {
|
|
return nil, nil, nil, nil, nil, migrate, err
|
|
}
|
|
|
|
destroyers := make([]operator.DestroyFunc, 0)
|
|
queriers := make([]operator.QueryFunc, 0)
|
|
for _, feature := range features {
|
|
switch feature {
|
|
case "database", backup.Instant, backup.Normal, restore.Instant, clean.Instant:
|
|
queriers = append(queriers,
|
|
operator.ResourceQueryToZitadelQuery(queryNS),
|
|
queryDB,
|
|
)
|
|
destroyers = append(destroyers,
|
|
destroyDB,
|
|
)
|
|
case "operator":
|
|
queriers = append(queriers,
|
|
operator.ResourceQueryToZitadelQuery(queryNS),
|
|
operator.EnsureFuncToQueryFunc(Reconcile(monitor, desiredKind.Spec, gitops)),
|
|
)
|
|
}
|
|
}
|
|
|
|
currentTree.Parsed = &DesiredV0{
|
|
Common: &tree.Common{
|
|
Kind: "databases.caos.ch/Orb",
|
|
Version: "v0",
|
|
},
|
|
Database: databaseCurrent,
|
|
}
|
|
|
|
return func(k8sClient kubernetes.ClientInt, queried map[string]interface{}) (operator.EnsureFunc, error) {
|
|
if queried == nil {
|
|
queried = map[string]interface{}{}
|
|
}
|
|
monitor.WithField("queriers", len(queriers)).Info("Querying")
|
|
return operator.QueriersToEnsureFunc(monitor, true, queriers, k8sClient, queried)
|
|
},
|
|
func(k8sClient kubernetes.ClientInt) error {
|
|
monitor.WithField("destroyers", len(queriers)).Info("Destroy")
|
|
return operator.DestroyersToDestroyFunc(monitor, destroyers)(k8sClient)
|
|
},
|
|
func(k8sClient kubernetes.ClientInt, queried map[string]interface{}, gitops bool) error {
|
|
return configureDB(k8sClient, queried, gitops)
|
|
},
|
|
secrets,
|
|
existing,
|
|
migrate,
|
|
nil
|
|
}
|
|
}
|