2 * ============LICENSE_START=======================================================
4 * ================================================================================
5 * Copyright (C) 2018 AT&T Intellectual Property. All rights reserved.
6 * ================================================================================
7 * Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
11 * http://www.apache.org/licenses/LICENSE-2.0
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
18 * ============LICENSE_END=========================================================
21 package org.onap.policy.controlloop;
23 import org.onap.policy.controlloop.params.ControlLoopParams;
24 import org.onap.policy.controlloop.VirtualControlLoopEvent;
25 import org.onap.policy.controlloop.VirtualControlLoopNotification;
26 import org.onap.policy.controlloop.ControlLoopEventStatus;
27 import org.onap.policy.controlloop.ControlLoopNotificationType;
28 import org.onap.policy.controlloop.ControlLoopLogger;
29 import org.onap.policy.controlloop.policy.PolicyResult;
30 import org.onap.policy.controlloop.policy.ControlLoopPolicy;
31 import org.onap.policy.controlloop.policy.Policy;
32 import org.onap.policy.controlloop.eventmanager.ControlLoopEventManager;
33 import org.onap.policy.controlloop.eventmanager.ControlLoopEventManager.NEW_EVENT_STATUS;
34 import org.onap.policy.controlloop.eventmanager.ControlLoopOperationManager;
35 import org.onap.policy.controlloop.actor.so.SOActorServiceProvider;
36 import org.onap.policy.aai.AaiNqResponseWrapper;
37 import org.onap.policy.appc.Request;
38 import org.onap.policy.appc.Response;
39 import org.onap.policy.appc.CommonHeader;
40 import org.onap.policy.appclcm.LcmRequestWrapper;
41 import org.onap.policy.appclcm.LcmResponseWrapper;
42 import org.onap.policy.appclcm.LcmRequest;
43 import org.onap.policy.appclcm.LcmResponse;
44 import org.onap.policy.appclcm.LcmCommonHeader;
45 import org.onap.policy.vfc.VFCRequest;
46 import org.onap.policy.vfc.VFCResponse;
47 import org.onap.policy.vfc.VFCManager;
48 import org.onap.policy.so.SOManager;
49 import org.onap.policy.so.SORequest;
50 import org.onap.policy.so.SORequestStatus;
51 import org.onap.policy.so.SORequestDetails;
52 import org.onap.policy.so.SOModelInfo;
53 import org.onap.policy.so.SOCloudConfiguration;
54 import org.onap.policy.so.SORequestInfo;
55 import org.onap.policy.so.SORequestParameters;
56 import org.onap.policy.so.SORelatedInstanceListElement;
57 import org.onap.policy.so.SORelatedInstance;
58 import org.onap.policy.so.SOResponse;
59 import org.onap.policy.so.SOResponseWrapper;
60 import org.onap.policy.guard.PolicyGuard;
61 import org.onap.policy.guard.PolicyGuard.LockResult;
62 import org.onap.policy.guard.TargetLock;
63 import org.onap.policy.guard.GuardResult;
64 import org.onap.policy.guard.PolicyGuardRequest;
65 import org.onap.policy.guard.PolicyGuardResponse;
66 import org.onap.policy.guard.PolicyGuardXacmlRequestAttributes;
67 import org.onap.policy.guard.PolicyGuardXacmlHelper;
69 import org.yaml.snakeyaml.Yaml;
70 import org.yaml.snakeyaml.constructor.Constructor;
72 import org.slf4j.LoggerFactory;
73 import org.slf4j.Logger;
75 import java.time.Instant;
76 import java.util.LinkedList;
77 import java.util.Iterator;
79 import org.onap.policy.drools.system.PolicyEngine;
84 declare OperationTimer
85 closedLoopControlName : String
93 declare ControlLoopTimer
94 closedLoopControlName : String
101 * Called when the ControlLoopParams object has been inserted into working memory from the BRMSGW.
106 $params : ControlLoopParams()
109 // Note: globals have bad behavior when persistence is used,
110 // hence explicitly getting the logger vs using a global
112 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
113 logger.info("{}: {} : YAML=[{}]", $params.getClosedLoopControlName(), $params.getPolicyName() + "." + drools.getRule().getName(), $params.getControlLoopYaml());
118 * This rule responds to DCAE Events where there is no manager yet. Either it is
119 * the first ONSET, or a subsequent badly formed Event (i.e. Syntax error, or is-closed-loop-disabled)
124 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
125 $event : VirtualControlLoopEvent( closedLoopControlName == $clName )
126 not ( ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() ) )
129 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
130 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
135 // Check the event, because we need it to not be null when
136 // we create the ControlLoopEventManager. The ControlLoopEventManager
137 // will do extra syntax checking as well check if the closed loop is disabled.
139 if ($event.getRequestId() == null) {
140 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
141 notification.setNotification(ControlLoopNotificationType.REJECTED);
142 notification.setFrom("policy");
143 notification.setMessage("Missing requestID");
144 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
145 notification.setPolicyScope($params.getPolicyScope());
146 notification.setPolicyVersion($params.getPolicyVersion());
149 // Let interested parties know
151 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
154 // Retract it from memory
157 } else if ($event.getClosedLoopEventStatus() != ControlLoopEventStatus.ONSET) {
158 throw new ControlLoopException($event.getClosedLoopEventStatus() + " received with no prior onset");
161 // Create an EventManager
163 ControlLoopEventManager manager = new ControlLoopEventManager($clName, $event.getRequestId());
165 // Determine if EventManager can actively process the event (i.e. syntax, is_closed_loop_disabled checks etc.)
167 VirtualControlLoopNotification notification = manager.activate($params.getControlLoopYaml(), $event);
168 notification.setFrom("pdp-0001-controller=controlloop"); // Engine.getInstanceName()
169 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
170 notification.setPolicyScope($params.getPolicyScope());
171 notification.setPolicyVersion($params.getPolicyVersion());
173 // Are we actively pursuing this event?
175 if (notification.getNotification() == ControlLoopNotificationType.ACTIVE) {
177 // Insert Event Manager into memory, this will now kick off processing.
181 // Let interested parties know
183 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
185 // Setup the Overall Control Loop timer
187 ControlLoopTimer clTimer = new ControlLoopTimer();
188 clTimer.setClosedLoopControlName($event.getClosedLoopControlName());
189 clTimer.setRequestID($event.getRequestId().toString());
190 clTimer.setDelay(manager.getControlLoopTimeout(1500) + "s");
197 // Let interested parties know
199 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
201 // Retract it from memory
207 // Now that the manager is inserted into Drools working memory, we'll wait for
208 // another rule to fire in order to continue processing. This way we can also
209 // then screen for additional ONSET and ABATED events for this RequestID.
212 } catch (Exception e) {
213 logger.warn("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName(), e);
215 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
216 notification.setNotification(ControlLoopNotificationType.REJECTED);
217 notification.setMessage("Exception occurred: " + e.getMessage());
218 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
219 notification.setPolicyScope($params.getPolicyScope());
220 notification.setPolicyVersion($params.getPolicyVersion());
224 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
234 * This rule happens when we got a valid ONSET, closed loop is enabled and an Event Manager
235 * is now created. We can start processing the yaml specification via the Event Manager.
240 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
241 $event : VirtualControlLoopEvent( closedLoopControlName == $clName )
242 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
243 $clTimer : ControlLoopTimer ( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
246 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
247 logger.info("{}: {}: event={} manager={} clTimer={}",
248 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
249 $event, $manager, $clTimer);
253 // Check which event this is.
255 ControlLoopEventManager.NEW_EVENT_STATUS eventStatus = $manager.onNewEvent($event);
257 // Check what kind of event this is
259 if (eventStatus == NEW_EVENT_STATUS.SUBSEQUENT_ONSET) {
261 // We don't care about subsequent onsets
263 logger.info("{}: {}: subsequent onset",
264 $clName, $params.getPolicyName() + "." + drools.getRule().getName());
268 if (eventStatus == NEW_EVENT_STATUS.SYNTAX_ERROR) {
270 // Ignore any bad syntax events
272 logger.warn("{}: {}: syntax error",
273 $clName, $params.getPolicyName() + "." + drools.getRule().getName());
278 // We only want the initial ONSET event in memory,
279 // all the other events need to be retracted to support
280 // cleanup and avoid the other rules being fired for this event.
282 if (eventStatus != NEW_EVENT_STATUS.FIRST_ONSET) {
283 logger.warn("{}: {}: no first onset",
284 $clName, $params.getPolicyName() + "." + drools.getRule().getName());
288 logger.debug("{}: {}: target={}", $clName,
289 $params.getPolicyName() + "." + drools.getRule().getName(), $event.getTarget());
291 // Now start seeing if we need to process this event
295 // Check if this is a Final Event
297 VirtualControlLoopNotification notification = $manager.isControlLoopFinal();
300 if (notification != null) {
302 // Its final, but are we waiting for abatement?
304 if ($manager.getNumAbatements() > 0) {
305 logger.info("{}: {}: abatement received for {}. Closing the control loop",
306 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
307 $event.getRequestId());
308 notification.setFrom("policy");
309 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
310 notification.setPolicyScope($params.getPolicyScope());
311 notification.setPolicyVersion($params.getPolicyVersion());
313 // In this case, we are done
315 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
319 TargetLock lock = $manager.unlockCurrentOperation();
321 logger.debug("{}: {}: retracting lock=", $clName,
322 $params.getPolicyName() + "." + drools.getRule().getName(), lock);
326 // Retract everything from memory
328 logger.info("{}: {}: retracting onset, manager, and timer",
329 $clName, $params.getPolicyName() + "." + drools.getRule().getName());
331 retract($manager.getOnsetEvent());
335 // TODO - what if we get subsequent Events for this RequestID?
336 // By default, it will all start over again. May be confusing for Ruby.
337 // Or, we could track this and then subsequently ignore the events
341 // Check whether we need to wait for abatement
343 if ($manager.getProcessor().getControlLoop().getAbatement() == true && notification.getNotification() == ControlLoopNotificationType.FINAL_SUCCESS) {
344 logger.info("{}: {}: waiting for abatement ..",
345 $clName, $params.getPolicyName() + "." + drools.getRule().getName());
347 logger.info("{}: {}: no abatement expect for {}. Closing the control loop",
348 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
349 $event.getRequestId());
351 notification.setFrom("policy");
352 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
353 notification.setPolicyScope($params.getPolicyScope());
354 notification.setPolicyVersion($params.getPolicyVersion());
357 // In this case, we are done
359 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
363 TargetLock lock = $manager.unlockCurrentOperation();
365 logger.debug("{}: {}: retracting lock=", $clName,
366 $params.getPolicyName() + "." + drools.getRule().getName(), lock);
370 // Retract everything from memory
372 logger.info("{}: {}: retracting onset, manager, and timer",
373 $clName, $params.getPolicyName() + "." + drools.getRule().getName());
375 retract($manager.getOnsetEvent());
382 // NOT final, so let's ask for the next operation
384 ControlLoopOperationManager operation = $manager.processControlLoop();
385 if (operation != null) {
387 // Let's ask for a lock right away
389 LockResult<GuardResult, TargetLock> result = $manager.lockCurrentOperation();
390 logger.info("{}: {}: guard lock acquired={}",
391 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
393 if (result.getA().equals(GuardResult.LOCK_ACQUIRED)) {
395 // insert the operation into memory
400 // insert operation timeout object
402 OperationTimer opTimer = new OperationTimer();
403 opTimer.setClosedLoopControlName($event.getClosedLoopControlName());
404 opTimer.setRequestID($event.getRequestId().toString());
405 opTimer.setDelay(operation.getOperationTimeout().toString() + "s");
409 // Insert lock into memory
411 insert(result.getB());
414 logger.debug("The target resource {} is already processing",
415 $event.getAai().get($event.getTarget()));
416 notification = new VirtualControlLoopNotification($event);
417 notification.setNotification(ControlLoopNotificationType.REJECTED);
418 notification.setMessage("The target " + $event.getAai().get($event.getTarget()) + " is already locked");
419 notification.setFrom("policy");
420 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
421 notification.setPolicyScope($params.getPolicyScope());
422 notification.setPolicyVersion($params.getPolicyVersion());
424 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
430 if(result.getB() != null) {
431 retract(result.getB());
434 logger.info("{}: {}: starting operation={}",
435 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
439 // Probably waiting for abatement
441 logger.info("{}: {}: no operation, probably waiting for abatement",
442 $clName, $params.getPolicyName() + "." + drools.getRule().getName());
445 } catch (Exception e) {
446 logger.warn("{}: {}: unexpected",
448 $params.getPolicyName() + "." + drools.getRule().getName(), e);
450 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
451 notification.setNotification(ControlLoopNotificationType.FINAL_FAILURE);
452 notification.setMessage(e.getMessage());
453 notification.setFrom("policy");
454 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
455 notification.setPolicyScope($params.getPolicyScope());
456 notification.setPolicyVersion($params.getPolicyVersion());
458 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
469 * Guard Permitted, let's send request to the actor.
472 rule "EVENT.MANAGER.OPERATION.LOCKED.GUARD_PERMITTED"
474 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
475 $event : VirtualControlLoopEvent( closedLoopControlName == $clName )
476 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
477 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId(), "Permit".equalsIgnoreCase(getGuardApprovalStatus()) )
478 $lock : TargetLock (requestID == $event.getRequestId())
479 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
482 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
483 logger.info("{}: {}: event={} manager={} operation={} lock={}",
484 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
485 $event, $manager, $operation, $lock);
487 Object request = null;
488 boolean caughtException = false;
491 request = $operation.startOperation($event);
493 if (request != null) {
494 logger.debug("{}: {}: starting operation ..",
496 $params.getPolicyName() + "." + drools.getRule().getName());
498 // Tell interested parties we are performing this Operation
500 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
501 notification.setNotification(ControlLoopNotificationType.OPERATION);
502 notification.setMessage($operation.getOperationMessage());
503 notification.setHistory($operation.getHistory());
504 notification.setFrom("policy");
505 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
506 notification.setPolicyScope($params.getPolicyScope());
507 notification.setPolicyVersion($params.getPolicyVersion());
509 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
511 switch ($operation.policy.getActor()){
515 if (request instanceof Request) {
516 PolicyEngine.manager.deliver("APPC-CL", request);
518 else if (request instanceof LcmRequestWrapper) {
519 PolicyEngine.manager.deliver("APPC-LCM-READ", request);
523 // at this point the AAI named query request should have already been made, the response recieved and used
524 // in the construction of the SO Request which is stored in operationRequest
526 if(request instanceof SORequest) {
527 // Call SO. The response will be inserted into memory once it's received
528 SOActorServiceProvider.sendRequest($event.getRequestId().toString(), drools.getWorkingMemory(), request);
532 if (request instanceof VFCRequest) {
534 Thread t = new Thread(new VFCManager(drools.getWorkingMemory(), (VFCRequest)request));
541 // What happens if its null?
543 logger.warn("{}: {}: unexpected null operation request",
545 $params.getPolicyName() + "." + drools.getRule().getName());
546 if ("SO".equals($operation.policy.getActor())) {
549 modify($manager) {finishOperation($operation)};
551 else if ("vfc".equalsIgnoreCase($operation.policy.getActor())) {
554 modify($manager) {finishOperation($operation)};
558 } catch (Exception e) {
559 String msg = e.getMessage();
560 logger.warn("{}: {}: operation={}: AAI failure: {}",
562 $params.getPolicyName() + "." + drools.getRule().getName(),
564 $operation.setOperationHasException(msg);
566 if(request != null) {
568 // Create a notification for it ("DB Write - end operation")
570 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
571 notification.setFrom("policy");
572 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
573 notification.setPolicyScope($params.getPolicyScope());
574 notification.setPolicyVersion($params.getPolicyVersion());
575 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
576 notification.setMessage($operation.getOperationHistory());
577 notification.setHistory($operation.getHistory());
579 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
584 caughtException = true;
587 // Having the modify statement in the catch clause doesn't work for whatever reason
588 if (caughtException) {
589 modify($manager) {finishOperation($operation)};
596 * We were able to acquire a lock so now let's ask Xacml Guard whether
597 * we are allowed to proceed with the request to the actor.
600 rule "EVENT.MANAGER.OPERATION.LOCKED.GUARD_NOT_YET_QUERIED"
602 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
603 $event : VirtualControlLoopEvent( closedLoopControlName == $clName )
604 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
605 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId(), getGuardApprovalStatus() == "NONE" )
606 $lock : TargetLock (requestID == $event.getRequestId())
609 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
610 logger.info("{}: {}: event={} manager={} operation={} lock={}",
611 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
612 $event, $manager, $operation, $lock);
615 // Sending notification that we are about to query Guard ("DB write - start operation")
617 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
618 notification.setNotification(ControlLoopNotificationType.OPERATION);
619 notification.setMessage("Sending guard query for " + $operation.policy.getActor() + " " + $operation.policy.getRecipe());
620 notification.setHistory($operation.getHistory());
621 notification.setFrom("policy");
622 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
623 notification.setPolicyScope($params.getPolicyScope());
624 notification.setPolicyVersion($params.getPolicyVersion());
626 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
629 // Now send Guard Request to XACML Guard. In order to bypass the call to Guard,
630 // just change guardEnabled to false.
632 // In order to use REST XACML, provide a URL instead of "" as a second argument
633 // to the CallGuardTask() and set the first argument to null
634 // (instead of XacmlPdpEngine).
637 // NOTE: The environment properties uses "guard.disabled" but the boolean is guardEnabled
638 boolean guardEnabled = "false".equalsIgnoreCase(PolicyEngine.manager.getEnvironmentProperty("guard.disabled"));
642 Thread t = new Thread(new org.onap.policy.guard.CallGuardTask(
643 drools.getWorkingMemory(),
644 $event.getClosedLoopControlName(),
645 $operation.policy.getActor().toString(),
646 $operation.policy.getRecipe(),
647 $operation.getTargetEntity(),
648 $event.getRequestId().toString(),
650 AaiNqResponseWrapper resp = $manager.getNqVserverFromAai();
651 return(resp == null ? null : resp.countVfModules());
656 insert(new PolicyGuardResponse("Permit", $event.getRequestId(), $operation.policy.getRecipe()));
662 // This rule will be triggered when a thread talking to the XACML Guard inserts a
663 // guardResponse object into the working memory
665 rule "GUARD.RESPONSE"
667 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
668 $event : VirtualControlLoopEvent( closedLoopControlName == $clName, closedLoopEventStatus == ControlLoopEventStatus.ONSET )
669 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
670 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
671 $lock : TargetLock (requestID == $event.getRequestId())
672 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
673 $guardResponse : PolicyGuardResponse(requestID == $event.getRequestId(), $operation.policy.recipe == operation)
676 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
677 logger.info("{}: {}: event={} manager={} operation={} lock={} opTimer={} guardResponse={}",
678 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
679 $event, $manager, $operation, $lock, $opTimer, $guardResponse);
682 //we will permit the operation if there was no Guard for it
683 if("Indeterminate".equalsIgnoreCase($guardResponse.getResult())){
684 $guardResponse.setResult("Permit");
688 // This notification has Guard result in "message". ("DB write - end operation in case of Guard Deny")
690 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
691 notification.setNotification(ControlLoopNotificationType.OPERATION);
692 notification.setMessage("Guard result for " + $operation.policy.getActor() + " " + $operation.policy.getRecipe() + " is " + $guardResponse.getResult());
693 notification.setHistory($operation.getHistory());
694 notification.setFrom("policy");
695 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
696 notification.setPolicyScope($params.getPolicyScope());
697 notification.setPolicyVersion($params.getPolicyVersion());
699 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
701 if("Permit".equalsIgnoreCase($guardResponse.getResult())){
703 modify($operation){setGuardApprovalStatus($guardResponse.getResult())};
706 //This is the Deny case
707 $operation.startOperation($event);
708 $operation.setOperationHasGuardDeny();
711 modify($manager) {finishOperation($operation)};
714 retract($guardResponse);
720 * This rule responds to APPC Response Events
722 * I would have like to be consistent and write the Response like this:
723 * $response : Response( CommonHeader.RequestId == $onset.getRequestId() )
725 * However, no compile error was given. But a runtime error was given. I think
726 * because drools is confused between the classname CommonHeader vs the property CommonHeader.
731 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
732 $event : VirtualControlLoopEvent( closedLoopControlName == $clName, closedLoopEventStatus == ControlLoopEventStatus.ONSET )
733 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
734 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
735 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
736 $lock : TargetLock (requestID == $event.getRequestId())
737 $response : Response( getCommonHeader().RequestId == $event.getRequestId() )
740 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
741 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
742 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
743 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
744 $event, $manager, $operation, $lock, $opTimer, $response);
746 // Get the result of the operation
748 PolicyResult policyResult = $operation.onResponse($response);
749 if (policyResult != null) {
750 logger.debug("{}: {}: operation finished - result={}",
751 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
754 // This Operation has completed, construct a notification showing our results. (DB write - end operation)
756 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
757 notification.setFrom("policy");
758 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
759 notification.setPolicyScope($params.getPolicyScope());
760 notification.setPolicyVersion($params.getPolicyVersion());
761 notification.setMessage($operation.getOperationHistory());
762 notification.setHistory($operation.getHistory());
763 if (policyResult.equals(PolicyResult.SUCCESS)) {
764 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
766 // Let interested parties know
768 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
770 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
772 // Let interested parties know
774 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
777 // Ensure the operation is complete
779 if ($operation.isOperationComplete() == true) {
781 // It is complete, remove it from memory
785 // We must also retract the timer object
786 // NOTE: We could write a Rule to do this
790 // Complete the operation
792 modify($manager) {finishOperation($operation)};
795 // Just doing this will kick off the LOCKED rule again
797 modify($operation) {};
801 // Its not finished yet (i.e. expecting more Response objects)
803 // Or possibly it is a leftover response that we timed the request out previously
807 // We are going to retract these objects from memory
814 * The problem with Responses is that they don't have a controlLoopControlName
815 * field in them, so the only way to attach them is via RequestID. If we have multiple
816 * control loop .drl's loaded in the same container, we need to be sure the cleanup
817 * rules don't remove Responses for other control loops.
820 rule "APPC.RESPONSE.CLEANUP"
822 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
823 $response : Response($id : getCommonHeader().RequestId )
824 not ( VirtualControlLoopEvent( requestId == $id, closedLoopEventStatus == ControlLoopEventStatus.ONSET ) )
827 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
828 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
829 logger.debug("{}: {}: orphan appc response={}",
830 $clName, $params.getPolicyName() + "." + drools.getRule().getName(), $id);
840 * This rule responds to APPC Response Events using the new LCM interface provided by appc
843 rule "APPC.LCM.RESPONSE"
845 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
846 $event : VirtualControlLoopEvent( closedLoopControlName == $clName, closedLoopEventStatus == ControlLoopEventStatus.ONSET )
847 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
848 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
849 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
850 $lock : TargetLock (requestID == $event.getRequestId())
851 $response : LcmResponseWrapper( getBody().getCommonHeader().getRequestId() == $event.getRequestId() )
854 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
855 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
856 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
857 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
858 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
861 // Get the result of the operation
863 PolicyResult policyResult = $operation.onResponse($response);
864 if (policyResult != null) {
865 logger.debug("{}: {}: operation finished - result={}",
866 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
870 // This Operation has completed, construct a notification showing our results. (DB write - end operation)
872 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
873 notification.setFrom("policy");
874 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
875 notification.setPolicyScope($params.getPolicyScope());
876 notification.setPolicyVersion($params.getPolicyVersion());
877 notification.setMessage($operation.getOperationHistory());
878 notification.setHistory($operation.getHistory());
879 if (policyResult.equals(PolicyResult.SUCCESS)) {
880 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
882 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
884 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
886 // Ensure the operation is complete
888 if ($operation.isOperationComplete() == true) {
890 // It is complete, remove it from memory
894 // We must also retract the timer object
895 // NOTE: We could write a Rule to do this
899 // Complete the operation
901 modify($manager) {finishOperation($operation)};
904 // Just doing this will kick off the LOCKED rule again
906 modify($operation) {};
910 // Its not finished yet (i.e. expecting more Response objects)
912 // Or possibly it is a leftover response that we timed the request out previously
916 // We are going to retract these objects from memory
923 * Clean Up any lingering LCM reponses
926 rule "APPC.LCM.RESPONSE.CLEANUP"
928 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
929 $response : LcmResponseWrapper($id : getBody().getCommonHeader().getRequestId )
930 not ( VirtualControlLoopEvent( requestId == $id, closedLoopEventStatus == ControlLoopEventStatus.ONSET ) )
933 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
934 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
935 logger.debug("{}: {}: orphan appc response={}",
936 $clName, $params.getPolicyName() + "." + drools.getRule().getName(), $id);
945 * This rule responds to SO Response Events
950 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
951 $event : VirtualControlLoopEvent( closedLoopControlName == $clName, closedLoopEventStatus == ControlLoopEventStatus.ONSET )
952 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
953 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
954 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
955 $lock : TargetLock (requestID == $event.getRequestId())
956 $response : SOResponseWrapper(requestID.toString() == $event.getRequestId().toString() )
959 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
960 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
961 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
962 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
963 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
965 // Get the result of the operation
967 PolicyResult policyResult = $operation.onResponse($response);
968 if (policyResult != null) {
969 logger.debug("{}: {}: operation finished - result={}",
970 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
974 // This Operation has completed, construct a notification showing our results
976 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
977 notification.setFrom("policy");
978 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
979 notification.setPolicyScope($params.getPolicyScope());
980 notification.setPolicyVersion($params.getPolicyVersion());
981 notification.setMessage($operation.getOperationHistory());
982 notification.setHistory($operation.getHistory());
983 if (policyResult.equals(PolicyResult.SUCCESS)) {
984 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
986 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
989 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
991 // Ensure the operation is complete
993 if ($operation.isOperationComplete() == true) {
995 // It is complete, remove it from memory
999 // We must also retract the timer object
1000 // NOTE: We could write a Rule to do this
1004 // Complete the operation
1006 modify($manager) {finishOperation($operation)};
1009 // Just doing this will kick off the LOCKED rule again
1011 modify($operation) {};
1015 // Its not finished yet (i.e. expecting more Response objects)
1017 // Or possibly it is a leftover response that we timed the request out previously
1021 // We are going to retract these objects from memory
1029 * This rule responds to VFC Response Events
1034 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
1035 $event : VirtualControlLoopEvent( closedLoopControlName == $clName, closedLoopEventStatus == ControlLoopEventStatus.ONSET )
1036 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1037 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
1038 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
1039 $lock : TargetLock (requestID == $event.getRequestId())
1040 $response : VFCResponse( requestId.toString() == $event.getRequestId().toString() )
1042 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1043 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
1044 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
1045 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
1046 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
1048 // Get the result of the operation
1050 PolicyResult policyResult = $operation.onResponse($response);
1051 if (policyResult != null) {
1053 // This Operation has completed, construct a notification showing our results
1055 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1056 notification.setFrom("policy");
1057 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
1058 notification.setPolicyScope($params.getPolicyScope());
1059 notification.setPolicyVersion($params.getPolicyVersion());
1060 notification.setMessage($operation.getOperationHistory());
1061 notification.setHistory($operation.getHistory());
1063 // Ensure the operation is complete
1065 if ($operation.isOperationComplete() == true) {
1067 // It is complete, remove it from memory
1069 retract($operation);
1071 // We must also retract the timer object
1072 // NOTE: We could write a Rule to do this
1076 // Complete the operation
1078 modify($manager) {finishOperation($operation)};
1081 // Just doing this will kick off the LOCKED rule again
1083 modify($operation) {};
1087 // Its not finished yet (i.e. expecting more Response objects)
1089 // Or possibly it is a leftover response that we timed the request out previously
1093 // We are going to retract these objects from memory
1101 * This is the timer that manages the timeout for an individual operation.
1104 rule "EVENT.MANAGER.OPERATION.TIMEOUT"
1107 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
1108 $event : VirtualControlLoopEvent( closedLoopControlName == $clName )
1109 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1110 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
1111 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString(), $to : getDelay() )
1112 $lock : TargetLock (requestID == $event.getRequestId())
1115 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1116 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
1117 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={}",
1118 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
1119 $event, $manager, $operation, $lock, $operation, $opTimer);
1122 // Tell it its timed out
1124 $operation.setOperationHasTimedOut();
1126 // Create a notification for it ("DB Write - end operation")
1128 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1129 notification.setFrom("policy");
1130 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
1131 notification.setPolicyScope($params.getPolicyScope());
1132 notification.setPolicyVersion($params.getPolicyVersion());
1133 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
1134 notification.setMessage($operation.getOperationHistory());
1135 notification.setHistory($operation.getHistory());
1137 // Let interested parties know
1139 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1141 // Get rid of the timer
1145 // Ensure the operation is complete
1147 if ($operation.isOperationComplete() == true) {
1149 // It is complete, remove it from memory
1151 retract($operation);
1153 // Complete the operation
1155 modify($manager) {finishOperation($operation)};
1158 // Just doing this will kick off the LOCKED rule again
1160 modify($operation) {};
1166 * This is the timer that manages the overall control loop timeout.
1169 rule "EVENT.MANAGER.TIMEOUT"
1172 $params : ControlLoopParams( $clName : getClosedLoopControlName() )
1173 $event : VirtualControlLoopEvent( closedLoopControlName == $clName )
1174 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1175 $clTimer : ControlLoopTimer ( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString(), $to : getDelay() )
1178 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1179 logger.info("{}: {}", $clName, $params.getPolicyName() + "." + drools.getRule().getName());
1181 logger.debug("{}: {}: event={}",
1182 $clName, $params.getPolicyName() + "." + drools.getRule().getName(),
1185 // Tell the Event Manager it has timed out
1187 VirtualControlLoopNotification notification = $manager.setControlLoopTimedOut();
1188 if (notification != null) {
1189 notification.setFrom("policy");
1190 notification.setPolicyName($params.getPolicyName() + "." + drools.getRule().getName());
1191 notification.setPolicyScope($params.getPolicyScope());
1192 notification.setPolicyVersion($params.getPolicyVersion());
1194 // Let interested parties know
1196 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1199 // Retract the event
1206 * This rule cleans up the manager and other objects after an event has
1210 rule "EVENT.MANAGER.CLEANUP"
1212 $manager : ControlLoopEventManager( $clName : getClosedLoopControlName(), $requestId : getRequestID() )
1213 $clTimer : ControlLoopTimer ( closedLoopControlName == $clName, requestID == $requestId.toString() )
1214 $operations : LinkedList()
1215 from collect( ControlLoopOperationManager( onset.closedLoopControlName == $clName, onset.getRequestId() == $requestId ) )
1216 $opTimers : LinkedList()
1217 from collect( OperationTimer( closedLoopControlName == $clName, requestID == $requestId.toString() ) )
1218 $locks : LinkedList()
1219 from collect( TargetLock (requestID == $requestId) )
1220 not( VirtualControlLoopEvent( closedLoopControlName == $clName, requestId == $requestId ) )
1223 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1224 logger.info("{}: {}", $clName, drools.getRule().getName());
1226 logger.debug("{}: {}: manager={} clTimer={} operations={}",
1227 $clName, drools.getRule().getName(),
1228 $manager, $clTimer, $operations.size());
1231 // Retract EVERYTHING
1236 for(Object manager: $operations) {
1237 retract((ControlLoopOperationManager) manager);
1239 for(Object opTimer: $opTimers) {
1240 retract((OperationTimer) opTimer);
1242 for(Object lock: $locks) {
1243 TargetLock tgt = (TargetLock) lock;
1245 // Ensure we release the lock
1247 PolicyGuard.unlockTarget(tgt);
1254 * This rule will clean up any rogue onsets where there is no
1255 * ControlLoopParams object corresponding to the onset event.
1258 rule "EVENT.CLEANUP"
1260 $event : VirtualControlLoopEvent( $clName: closedLoopControlName )
1261 not ( ControlLoopParams( getClosedLoopControlName() == $clName) )
1264 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1265 logger.info("{}: {}", $clName, drools.getRule().getName());
1266 logger.debug("{}: {}: orphan onset event={}",
1267 $clName, drools.getRule().getName(), $event);