2 * ============LICENSE_START=======================================================
4 * ================================================================================
5 * Copyright (C) 2017-2018 AT&T Intellectual Property. All rights reserved.
6 * ================================================================================
7 * Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
11 * http://www.apache.org/licenses/LICENSE-2.0
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
18 * ============LICENSE_END=========================================================
21 package org.onap.policy.controlloop;
23 import org.onap.policy.controlloop.VirtualControlLoopEvent;
24 import org.onap.policy.controlloop.VirtualControlLoopNotification;
25 import org.onap.policy.controlloop.ControlLoopEventStatus;
26 import org.onap.policy.controlloop.ControlLoopNotificationType;
27 import org.onap.policy.controlloop.ControlLoopLogger;
28 import org.onap.policy.controlloop.policy.PolicyResult;
29 import org.onap.policy.controlloop.policy.ControlLoopPolicy;
30 import org.onap.policy.controlloop.policy.Policy;
31 import org.onap.policy.controlloop.eventmanager.ControlLoopEventManager;
32 import org.onap.policy.controlloop.eventmanager.ControlLoopEventManager.NEW_EVENT_STATUS;
33 import org.onap.policy.controlloop.eventmanager.ControlLoopOperationManager;
34 import org.onap.policy.controlloop.actor.so.SOActorServiceProvider;
35 import org.onap.policy.appc.Request;
36 import org.onap.policy.appc.Response;
37 import org.onap.policy.appc.CommonHeader;
38 import org.onap.policy.appclcm.LcmRequestWrapper;
39 import org.onap.policy.appclcm.LcmResponseWrapper;
40 import org.onap.policy.appclcm.LcmRequest;
41 import org.onap.policy.appclcm.LcmResponse;
42 import org.onap.policy.appclcm.LcmCommonHeader;
43 import org.onap.policy.vfc.VFCRequest;
44 import org.onap.policy.vfc.VFCResponse;
45 import org.onap.policy.vfc.VFCManager;
46 import org.onap.policy.so.SOManager;
47 import org.onap.policy.so.SORequest;
48 import org.onap.policy.so.SORequestStatus;
49 import org.onap.policy.so.SORequestDetails;
50 import org.onap.policy.so.SOModelInfo;
51 import org.onap.policy.so.SOCloudConfiguration;
52 import org.onap.policy.so.SORequestInfo;
53 import org.onap.policy.so.SORequestParameters;
54 import org.onap.policy.so.SORelatedInstanceListElement;
55 import org.onap.policy.so.SORelatedInstance;
56 import org.onap.policy.so.SOResponse;
57 import org.onap.policy.so.SOResponseWrapper;
58 import org.onap.policy.guard.PolicyGuard;
59 import org.onap.policy.guard.PolicyGuard.LockResult;
60 import org.onap.policy.guard.TargetLock;
61 import org.onap.policy.guard.GuardResult;
62 import org.onap.policy.guard.PolicyGuardRequest;
63 import org.onap.policy.guard.PolicyGuardResponse;
64 import org.onap.policy.guard.PolicyGuardXacmlRequestAttributes;
65 import org.onap.policy.guard.PolicyGuardXacmlHelper;
67 import org.yaml.snakeyaml.Yaml;
68 import org.yaml.snakeyaml.constructor.Constructor;
70 import org.slf4j.LoggerFactory;
71 import org.slf4j.Logger;
73 import java.time.Instant;
74 import java.util.LinkedList;
75 import java.util.Iterator;
77 import org.onap.policy.drools.system.PolicyEngine;
80 * This structure mimics the Params structure.
81 * Its only purpose is to allow management of
82 * rules by the PAP component..
83 * It has no use at runtime since the rules go by
84 * Params for matching purposes.
87 closedLoopControlName : String
88 controlLoopYaml : String
92 * Control Loop Identity
95 closedLoopControlName : String
96 controlLoopYaml : String
100 * Used to clean up Params that no longer have associated rules.
102 declare ParamsCleaner
103 closedLoopControlName : String
104 controlLoopYaml : String
111 declare OperationTimer
112 closedLoopControlName : String
120 declare ControlLoopTimer
121 closedLoopControlName : String
128 * Called once and only once to insert the parameters into working memory for this Closed Loop policy.
129 * This has a higher salience so we can ensure that the Params is created before we have a chance to
130 * discard any events.
133 rule "${policyName}.SETUP"
136 not( Params( getClosedLoopControlName() == "${closedLoopControlName}", getControlLoopYaml() == "${controlLoopYaml}" ) )
139 Params params = new Params();
140 params.setClosedLoopControlName("${closedLoopControlName}");
141 params.setControlLoopYaml("${controlLoopYaml}");
144 // Note: globals have bad behavior when persistence is used,
145 // hence explicitly getting the logger vs using a global
147 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
148 logger.info("{}: {} : YAML=[{}]", params.getClosedLoopControlName(), drools.getRule().getName(), params.getControlLoopYaml());
153 * This rule responds to DCAE Events where there is no manager yet. Either it is
154 * the first ONSET, or a subsequent badly formed Event (i.e. Syntax error, or is-closed-loop-disabled)
157 rule "${policyName}.EVENT"
159 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
160 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
161 not ( ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() ) )
164 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
165 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
170 // Check the event, because we need it to not be null when
171 // we create the ControlLoopEventManager. The ControlLoopEventManager
172 // will do extra syntax checking as well check if the closed loop is disabled.
174 if ($event.getRequestId() == null) {
175 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
176 notification.setNotification(ControlLoopNotificationType.REJECTED);
177 notification.setFrom("policy");
178 notification.setMessage("Missing requestId");
179 notification.setPolicyName(drools.getRule().getName());
180 notification.setPolicyScope("${policyScope}");
181 notification.setPolicyVersion("${policyVersion}");
184 // Let interested parties know
186 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
189 // Retract it from memory
192 } else if ($event.getClosedLoopEventStatus() != ControlLoopEventStatus.ONSET) {
193 throw new ControlLoopException($event.getClosedLoopEventStatus() + " received with no prior onset");
196 // Create an EventManager
198 ControlLoopEventManager manager = new ControlLoopEventManager($params.getClosedLoopControlName(), $event.getRequestId());
200 // Determine if EventManager can actively process the event (i.e. syntax, is_closed_loop_disabled checks etc.)
202 VirtualControlLoopNotification notification = manager.activate($params.getControlLoopYaml(), $event);
203 notification.setFrom("pdp-0001-controller=controlloop"); // Engine.getInstanceName()
204 notification.setPolicyName(drools.getRule().getName());
205 notification.setPolicyScope("${policyScope}");
206 notification.setPolicyVersion("${policyVersion}");
208 // Are we actively pursuing this event?
210 if (notification.getNotification() == ControlLoopNotificationType.ACTIVE) {
212 // Insert Event Manager into memory, this will now kick off processing.
216 // Let interested parties know
218 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
220 // Setup the Overall Control Loop timer
222 ControlLoopTimer clTimer = new ControlLoopTimer();
223 clTimer.setClosedLoopControlName($event.getClosedLoopControlName());
224 clTimer.setRequestID($event.getRequestId().toString());
225 clTimer.setDelay(manager.getControlLoopTimeout(1500) + "s");
232 // Let interested parties know
234 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
236 // Retract it from memory
242 // Now that the manager is inserted into Drools working memory, we'll wait for
243 // another rule to fire in order to continue processing. This way we can also
244 // then screen for additional ONSET and ABATED events for this RequestId.
247 } catch (Exception e) {
248 logger.warn("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName(), e);
250 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
251 notification.setNotification(ControlLoopNotificationType.REJECTED);
252 notification.setMessage("Exception occurred: " + e.getMessage());
253 notification.setPolicyName(drools.getRule().getName());
254 notification.setPolicyScope("${policyScope}");
255 notification.setPolicyVersion("${policyVersion}");
259 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
269 * This rule happens when we got a valid ONSET, closed loop is enabled and an Event Manager
270 * is now created. We can start processing the yaml specification via the Event Manager.
273 rule "${policyName}.EVENT.MANAGER"
275 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
276 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
277 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
278 $clTimer : ControlLoopTimer ( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
281 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
282 logger.info("{}: {}: event={} manager={} clTimer={}",
283 $params.getClosedLoopControlName(), drools.getRule().getName(),
284 $event, $manager, $clTimer);
288 // Check which event this is.
290 ControlLoopEventManager.NEW_EVENT_STATUS eventStatus = $manager.onNewEvent($event);
292 // Check what kind of event this is
294 if (eventStatus == NEW_EVENT_STATUS.SUBSEQUENT_ONSET) {
296 // We don't care about subsequent onsets
298 logger.info("{}: {}: subsequent onset",
299 $params.getClosedLoopControlName(), drools.getRule().getName());
303 if (eventStatus == NEW_EVENT_STATUS.SYNTAX_ERROR) {
305 // Ignore any bad syntax events
307 logger.warn("{}: {}: syntax error",
308 $params.getClosedLoopControlName(), drools.getRule().getName());
313 // We only want the initial ONSET event in memory,
314 // all the other events need to be retracted to support
315 // cleanup and avoid the other rules being fired for this event.
317 if (eventStatus != NEW_EVENT_STATUS.FIRST_ONSET) {
318 logger.warn("{}: {}: not first onset",
319 $params.getClosedLoopControlName(), drools.getRule().getName());
323 logger.debug("{}: {}: target={}", $params.getClosedLoopControlName(),
324 drools.getRule().getName(), $event.getTarget());
326 // Now start seeing if we need to process this event
330 // Check if this is a Final Event
332 VirtualControlLoopNotification notification = $manager.isControlLoopFinal();
335 if (notification != null) {
337 // Its final, but are we waiting for abatement?
339 if ($manager.getNumAbatements() > 0) {
340 logger.info("{}: {}: abatement received for {}. Closing the control loop",
341 $params.getClosedLoopControlName(), drools.getRule().getName(),
342 $event.getRequestId());
343 notification.setFrom("policy");
344 notification.setPolicyName(drools.getRule().getName());
345 notification.setPolicyScope("${policyScope}");
346 notification.setPolicyVersion("${policyVersion}");
348 // In this case, we are done
350 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
354 TargetLock lock = $manager.unlockCurrentOperation();
356 logger.debug("{}: {}: retracting lock=", $params.getClosedLoopControlName(),
357 drools.getRule().getName(), lock);
361 // Retract everything from memory
363 logger.info("{}: {}: retracting onset, manager, and timer",
364 $params.getClosedLoopControlName(), drools.getRule().getName());
366 retract($manager.getOnsetEvent());
370 // TODO - what if we get subsequent Events for this RequestId?
371 // By default, it will all start over again. May be confusing for Ruby.
372 // Or, we could track this and then subsequently ignore the events
376 // Check whether we need to wait for abatement
378 if ($manager.getProcessor().getControlLoop().getAbatement() == true && notification.getNotification() == ControlLoopNotificationType.FINAL_SUCCESS) {
379 logger.info("{}: {}: waiting for abatement ..",
380 $params.getClosedLoopControlName(), drools.getRule().getName());
382 logger.info("{}: {}: no abatement expect for {}. Closing the control loop",
383 $params.getClosedLoopControlName(), drools.getRule().getName(),
384 $event.getRequestId());
386 notification.setFrom("policy");
387 notification.setPolicyName(drools.getRule().getName());
388 notification.setPolicyScope("${policyScope}");
389 notification.setPolicyVersion("${policyVersion}");
392 // In this case, we are done
394 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
398 TargetLock lock = $manager.unlockCurrentOperation();
400 logger.debug("{}: {}: retracting lock=", $params.getClosedLoopControlName(),
401 drools.getRule().getName(), lock);
405 // Retract everything from memory
407 logger.info("{}: {}: retracting onset, manager, and timer",
408 $params.getClosedLoopControlName(), drools.getRule().getName());
410 retract($manager.getOnsetEvent());
417 // NOT final, so let's ask for the next operation
419 ControlLoopOperationManager operation = $manager.processControlLoop();
420 if (operation != null) {
422 // Let's ask for a lock right away
424 LockResult<GuardResult, TargetLock> result = $manager.lockCurrentOperation();
425 logger.info("{}: {}: guard lock acquired={}",
426 $params.getClosedLoopControlName(), drools.getRule().getName(),
428 if (result.getA().equals(GuardResult.LOCK_ACQUIRED)) {
430 // insert the operation into memory
435 // insert operation timeout object
437 OperationTimer opTimer = new OperationTimer();
438 opTimer.setClosedLoopControlName($event.getClosedLoopControlName());
439 opTimer.setRequestID($event.getRequestId().toString());
440 opTimer.setDelay(operation.getOperationTimeout().toString() + "s");
444 // Insert lock into memory
446 insert(result.getB());
449 logger.debug("The target resource {} is already processing",
450 $event.getAai().get($event.getTarget()));
451 notification = new VirtualControlLoopNotification($event);
452 notification.setNotification(ControlLoopNotificationType.REJECTED);
453 notification.setMessage("The target " + $event.getAai().get($event.getTarget()) + " is already locked");
454 notification.setFrom("policy");
455 notification.setPolicyName(drools.getRule().getName());
456 notification.setPolicyScope("${policyScope}");
457 notification.setPolicyVersion("${policyVersion}");
459 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
465 if(result.getB() != null) {
466 retract(result.getB());
469 logger.info("{}: {}: starting operation={}",
470 $params.getClosedLoopControlName(), drools.getRule().getName(),
474 // Probably waiting for abatement
476 logger.info("{}: {}: no operation, probably waiting for abatement",
477 $params.getClosedLoopControlName(), drools.getRule().getName());
480 } catch (Exception e) {
481 logger.warn("{}: {}: unexpected",
482 $params.getClosedLoopControlName(),
483 drools.getRule().getName(), e);
485 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
486 notification.setNotification(ControlLoopNotificationType.FINAL_FAILURE);
487 notification.setMessage(e.getMessage());
488 notification.setFrom("policy");
489 notification.setPolicyName(drools.getRule().getName());
490 notification.setPolicyScope("${policyScope}");
491 notification.setPolicyVersion("${policyVersion}");
493 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
504 * Guard Permitted, let's send request to the actor.
507 rule "${policyName}.EVENT.MANAGER.OPERATION.LOCKED.GUARD_PERMITTED"
509 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
510 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
511 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
512 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId(), "Permit".equalsIgnoreCase(getGuardApprovalStatus()) )
513 $lock : TargetLock (requestID == $event.getRequestId())
514 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
517 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
518 logger.info("{}: {}: event={} manager={} operation={} lock={}",
519 $params.getClosedLoopControlName(), drools.getRule().getName(),
520 $event, $manager, $operation, $lock);
522 Object request = null;
523 boolean caughtException = false;
526 request = $operation.startOperation($event);
528 if (request != null) {
529 logger.debug("{}: {}: starting operation ..",
530 $params.getClosedLoopControlName(), drools.getRule().getName());
532 // Tell interested parties we are performing this Operation
534 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
535 notification.setNotification(ControlLoopNotificationType.OPERATION);
536 notification.setMessage($operation.getOperationMessage());
537 notification.setHistory($operation.getHistory());
538 notification.setFrom("policy");
539 notification.setPolicyName(drools.getRule().getName());
540 notification.setPolicyScope("${policyScope}");
541 notification.setPolicyVersion("${policyVersion}");
543 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
545 switch ($operation.policy.getActor()){
549 if (request instanceof Request) {
550 PolicyEngine.manager.deliver("APPC-CL", request);
552 else if (request instanceof LcmRequestWrapper) {
553 PolicyEngine.manager.deliver("APPC-LCM-READ", request);
557 // at this point the AAI named query request should have already been made, the response recieved and used
558 // in the construction of the SO Request which is stored in operationRequest
560 if(request instanceof SORequest) {
561 // Call SO. The response will be inserted into memory once it's received
562 SOActorServiceProvider.sendRequest($event.getRequestId().toString(), drools.getWorkingMemory(), request);
566 if (request instanceof VFCRequest) {
568 Thread t = new Thread(new VFCManager(drools.getWorkingMemory(), (VFCRequest)request));
575 // What happens if its null?
577 logger.warn("{}: {}: unexpected null operation request",
578 $params.getClosedLoopControlName(),
579 drools.getRule().getName());
580 if ("SO".equals($operation.policy.getActor())) {
583 modify($manager) {finishOperation($operation)};
585 else if ("vfc".equalsIgnoreCase($operation.policy.getActor())) {
588 modify($manager) {finishOperation($operation)};
592 } catch (Exception e) {
593 String msg = e.getMessage();
594 logger.warn("{}: {}: operation={}: AAI failure: {}",
595 $params.getClosedLoopControlName(), drools.getRule().getName(),
597 $operation.setOperationHasException(msg);
599 if(request != null) {
601 // Create a notification for it ("DB Write - end operation")
603 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
604 notification.setFrom("policy");
605 notification.setPolicyName(drools.getRule().getName());
606 notification.setPolicyScope("${policyScope}");
607 notification.setPolicyVersion("${policyVersion}");
608 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
609 notification.setMessage($operation.getOperationHistory());
610 notification.setHistory($operation.getHistory());
612 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
617 caughtException = true;
620 // Having the modify statement in the catch clause doesn't work for whatever reason
621 if (caughtException) {
622 modify($manager) {finishOperation($operation)};
629 * We were able to acquire a lock so now let's ask Xacml Guard whether
630 * we are allowed to proceed with the request to the actor.
633 rule "${policyName}.EVENT.MANAGER.OPERATION.LOCKED.GUARD_NOT_YET_QUERIED"
635 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
636 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
637 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
638 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId(), getGuardApprovalStatus() == "NONE" )
639 $lock : TargetLock (requestID == $event.getRequestId())
642 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
643 logger.info("{}: {}: event={} manager={} operation={} lock={}",
644 $params.getClosedLoopControlName(), drools.getRule().getName(),
645 $event, $manager, $operation, $lock);
648 // Sending notification that we are about to query Guard ("DB write - start operation")
650 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
651 notification.setNotification(ControlLoopNotificationType.OPERATION);
652 notification.setMessage("Sending guard query for " + $operation.policy.getActor() + " " + $operation.policy.getRecipe());
653 notification.setHistory($operation.getHistory());
654 notification.setFrom("policy");
655 notification.setPolicyName(drools.getRule().getName());
656 notification.setPolicyScope("${policyScope}");
657 notification.setPolicyVersion("${policyVersion}");
659 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
662 // Now send Guard Request to XACML Guard. In order to bypass the call to Guard,
663 // just change guardEnabled to false.
665 // In order to use REST XACML, provide a URL instead of "" as a second argument
666 // to the CallGuardTask() and set the first argument to null
667 // (instead of XacmlPdpEngine).
670 // NOTE: The environment properties uses "guard.disabled" but the boolean is guardEnabled
671 boolean guardEnabled = "false".equalsIgnoreCase(PolicyEngine.manager.getEnvironmentProperty("guard.disabled"));
675 Thread t = new Thread(new org.onap.policy.guard.CallGuardTask(
676 drools.getWorkingMemory(),
677 $event.getClosedLoopControlName(),
678 $operation.policy.getActor().toString(),
679 $operation.policy.getRecipe(),
680 $operation.getTargetEntity(),
681 $event.getRequestId().toString()
686 insert(new PolicyGuardResponse("Permit", $event.getRequestId(), $operation.policy.getRecipe()));
692 // This rule will be triggered when a thread talking to the XACML Guard inserts a
693 // guardResponse object into the working memory
695 rule "${policyName}.GUARD.RESPONSE"
697 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
698 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
699 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
700 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
701 $lock : TargetLock (requestID == $event.getRequestId())
702 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
703 $guardResponse : PolicyGuardResponse(requestID == $event.getRequestId(), $operation.policy.recipe == operation)
706 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
707 logger.info("{}: {}: event={} manager={} operation={} lock={} opTimer={} guardResponse={}",
708 $params.getClosedLoopControlName(), drools.getRule().getName(),
709 $event, $manager, $operation, $lock, $opTimer, $guardResponse);
712 //we will permit the operation if there was no Guard for it
713 if("Indeterminate".equalsIgnoreCase($guardResponse.getResult())){
714 $guardResponse.setResult("Permit");
718 // This notification has Guard result in "message". ("DB write - end operation in case of Guard Deny")
720 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
721 notification.setNotification(ControlLoopNotificationType.OPERATION);
722 notification.setMessage("Guard result for " + $operation.policy.getActor() + " " + $operation.policy.getRecipe() + " is " + $guardResponse.getResult());
723 notification.setHistory($operation.getHistory());
724 notification.setFrom("policy");
725 notification.setPolicyName(drools.getRule().getName());
726 notification.setPolicyScope("${policyScope}");
727 notification.setPolicyVersion("${policyVersion}");
729 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
731 if("Permit".equalsIgnoreCase($guardResponse.getResult())){
733 modify($operation){setGuardApprovalStatus($guardResponse.getResult())};
736 //This is the Deny case
737 $operation.startOperation($event);
738 $operation.setOperationHasGuardDeny();
741 modify($manager) {finishOperation($operation)};
744 retract($guardResponse);
750 * This rule responds to APPC Response Events
752 * I would have like to be consistent and write the Response like this:
753 * $response : Response( CommonHeader.RequestId == $onset.getRequestId() )
755 * However, no compile error was given. But a runtime error was given. I think
756 * because drools is confused between the classname CommonHeader vs the property CommonHeader.
759 rule "${policyName}.APPC.RESPONSE"
761 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
762 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
763 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
764 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
765 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
766 $lock : TargetLock (requestID == $event.getRequestId())
767 $response : Response( getCommonHeader().RequestId == $event.getRequestId() )
770 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
771 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
772 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
773 $params.getClosedLoopControlName(), drools.getRule().getName(),
774 $event, $manager, $operation, $lock, $opTimer, $response);
776 // Get the result of the operation
778 PolicyResult policyResult = $operation.onResponse($response);
779 if (policyResult != null) {
780 logger.debug("{}: {}: operation finished - result={}",
781 $params.getClosedLoopControlName(), drools.getRule().getName(),
784 // This Operation has completed, construct a notification showing our results. (DB write - end operation)
786 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
787 notification.setFrom("policy");
788 notification.setPolicyName(drools.getRule().getName());
789 notification.setPolicyScope("${policyScope}");
790 notification.setPolicyVersion("${policyVersion}");
791 notification.setMessage($operation.getOperationHistory());
792 notification.setHistory($operation.getHistory());
793 if (policyResult.equals(PolicyResult.SUCCESS)) {
794 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
796 // Let interested parties know
798 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
800 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
802 // Let interested parties know
804 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
807 // Ensure the operation is complete
809 if ($operation.isOperationComplete() == true) {
811 // It is complete, remove it from memory
815 // We must also retract the timer object
816 // NOTE: We could write a Rule to do this
820 // Complete the operation
822 modify($manager) {finishOperation($operation)};
825 // Just doing this will kick off the LOCKED rule again
827 modify($operation) {};
831 // Its not finished yet (i.e. expecting more Response objects)
833 // Or possibly it is a leftover response that we timed the request out previously
837 // We are going to retract these objects from memory
844 * The problem with Responses is that they don't have a controlLoopControlName
845 * field in them, so the only way to attach them is via RequestId. If we have multiple
846 * control loop .drl's loaded in the same container, we need to be sure the cleanup
847 * rules don't remove Responses for other control loops.
850 rule "${policyName}.APPC.RESPONSE.CLEANUP"
852 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
853 $response : Response($id : getCommonHeader().RequestId )
854 not ( VirtualControlLoopEvent( requestId == $id, closedLoopEventStatus == ControlLoopEventStatus.ONSET ) )
857 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
858 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
859 logger.debug("{}: {}: orphan appc response={}",
860 $params.getClosedLoopControlName(), drools.getRule().getName(), $id);
870 * This rule responds to APPC Response Events using the new LCM interface provided by appc
873 rule "${policyName}.APPC.LCM.RESPONSE"
875 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
876 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
877 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
878 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
879 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
880 $lock : TargetLock (requestID == $event.getRequestId())
881 $response : LcmResponseWrapper( getBody().getCommonHeader().getRequestId() == $event.getRequestId() )
884 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
885 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
886 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
887 $params.getClosedLoopControlName(), drools.getRule().getName(),
888 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
891 // Get the result of the operation
893 PolicyResult policyResult = $operation.onResponse($response);
894 if (policyResult != null) {
895 logger.debug("{}: {}: operation finished - result={}",
896 $params.getClosedLoopControlName(), drools.getRule().getName(),
900 // This Operation has completed, construct a notification showing our results. (DB write - end operation)
902 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
903 notification.setFrom("policy");
904 notification.setPolicyName(drools.getRule().getName());
905 notification.setPolicyScope("${policyScope}");
906 notification.setPolicyVersion("${policyVersion}");
907 notification.setMessage($operation.getOperationHistory());
908 notification.setHistory($operation.getHistory());
909 if (policyResult.equals(PolicyResult.SUCCESS)) {
910 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
912 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
914 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
916 // Ensure the operation is complete
918 if ($operation.isOperationComplete() == true) {
920 // It is complete, remove it from memory
924 // We must also retract the timer object
925 // NOTE: We could write a Rule to do this
929 // Complete the operation
931 modify($manager) {finishOperation($operation)};
934 // Just doing this will kick off the LOCKED rule again
936 modify($operation) {};
940 // Its not finished yet (i.e. expecting more Response objects)
942 // Or possibly it is a leftover response that we timed the request out previously
946 // We are going to retract these objects from memory
953 * Clean Up any lingering LCM reponses
956 rule "${policyName}.APPC.LCM.RESPONSE.CLEANUP"
958 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
959 $response : LcmResponseWrapper($id : getBody().getCommonHeader().getRequestId )
960 not ( VirtualControlLoopEvent( requestId == $id, closedLoopEventStatus == ControlLoopEventStatus.ONSET ) )
963 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
964 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
965 logger.debug("{}: {}: orphan appc response={}",
966 $params.getClosedLoopControlName(), drools.getRule().getName(), $id);
975 * This rule responds to SO Response Events
978 rule "${policyName}.SO.RESPONSE"
980 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
981 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
982 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
983 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
984 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
985 $lock : TargetLock (requestID == $event.getRequestId())
986 $response : SOResponseWrapper(requestID.toString() == $event.getRequestId().toString() )
989 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
990 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
991 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
992 $params.getClosedLoopControlName(), drools.getRule().getName(),
993 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
995 // Get the result of the operation
997 PolicyResult policyResult = $operation.onResponse($response);
998 if (policyResult != null) {
999 logger.debug("{}: {}: operation finished - result={}",
1000 $params.getClosedLoopControlName(), drools.getRule().getName(),
1004 // This Operation has completed, construct a notification showing our results
1006 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1007 notification.setFrom("policy");
1008 notification.setPolicyName(drools.getRule().getName());
1009 notification.setPolicyScope("${policyScope}");
1010 notification.setPolicyVersion("${policyVersion}");
1011 notification.setMessage($operation.getOperationHistory());
1012 notification.setHistory($operation.getHistory());
1013 if (policyResult.equals(PolicyResult.SUCCESS)) {
1014 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
1016 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
1019 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1021 // Ensure the operation is complete
1023 if ($operation.isOperationComplete() == true) {
1025 // It is complete, remove it from memory
1027 retract($operation);
1029 // We must also retract the timer object
1030 // NOTE: We could write a Rule to do this
1034 // Complete the operation
1036 modify($manager) {finishOperation($operation)};
1039 // Just doing this will kick off the LOCKED rule again
1041 modify($operation) {};
1045 // Its not finished yet (i.e. expecting more Response objects)
1047 // Or possibly it is a leftover response that we timed the request out previously
1051 // We are going to retract these objects from memory
1059 * This rule responds to VFC Response Events
1062 rule "${policyName}.VFC.RESPONSE"
1064 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1065 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
1066 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1067 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
1068 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
1069 $lock : TargetLock (requestID == $event.getRequestId())
1070 $response : VFCResponse( requestId.toString() == $event.getRequestId().toString() )
1072 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1073 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1074 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
1075 $params.getClosedLoopControlName(), drools.getRule().getName(),
1076 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
1078 // Get the result of the operation
1080 PolicyResult policyResult = $operation.onResponse($response);
1081 if (policyResult != null) {
1083 // This Operation has completed, construct a notification showing our results
1085 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1086 notification.setFrom("policy");
1087 notification.setPolicyName(drools.getRule().getName());
1088 notification.setPolicyScope("${policyScope}");
1089 notification.setPolicyVersion("${policyVersion}");
1090 notification.setMessage($operation.getOperationHistory());
1091 notification.setHistory($operation.getHistory());
1093 // Ensure the operation is complete
1095 if ($operation.isOperationComplete() == true) {
1097 // It is complete, remove it from memory
1099 retract($operation);
1101 // We must also retract the timer object
1102 // NOTE: We could write a Rule to do this
1106 // Complete the operation
1108 modify($manager) {finishOperation($operation)};
1111 // Just doing this will kick off the LOCKED rule again
1113 modify($operation) {};
1117 // Its not finished yet (i.e. expecting more Response objects)
1119 // Or possibly it is a leftover response that we timed the request out previously
1123 // We are going to retract these objects from memory
1131 * This is the timer that manages the timeout for an individual operation.
1134 rule "${policyName}.EVENT.MANAGER.OPERATION.TIMEOUT"
1137 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1138 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
1139 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1140 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
1141 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString(), $to : getDelay() )
1142 $lock : TargetLock (requestID == $event.getRequestId())
1145 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1146 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1147 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={}",
1148 $params.getClosedLoopControlName(), drools.getRule().getName(),
1149 $event, $manager, $operation, $lock, $operation, $opTimer);
1152 // Tell it its timed out
1154 $operation.setOperationHasTimedOut();
1156 // Create a notification for it ("DB Write - end operation")
1158 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1159 notification.setFrom("policy");
1160 notification.setPolicyName(drools.getRule().getName());
1161 notification.setPolicyScope("${policyScope}");
1162 notification.setPolicyVersion("${policyVersion}");
1163 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
1164 notification.setMessage($operation.getOperationHistory());
1165 notification.setHistory($operation.getHistory());
1167 // Let interested parties know
1169 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1171 // Get rid of the timer
1175 // Ensure the operation is complete
1177 if ($operation.isOperationComplete() == true) {
1179 // It is complete, remove it from memory
1181 retract($operation);
1183 // Complete the operation
1185 modify($manager) {finishOperation($operation)};
1188 // Just doing this will kick off the LOCKED rule again
1190 modify($operation) {};
1196 * This is the timer that manages the overall control loop timeout.
1199 rule "${policyName}.EVENT.MANAGER.TIMEOUT"
1202 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1203 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
1204 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1205 $clTimer : ControlLoopTimer ( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString(), $to : getDelay() )
1208 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1209 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1211 logger.debug("{}: {}: event={}",
1212 $params.getClosedLoopControlName(), drools.getRule().getName(),
1215 // Tell the Event Manager it has timed out
1217 VirtualControlLoopNotification notification = $manager.setControlLoopTimedOut();
1218 if (notification != null) {
1219 notification.setFrom("policy");
1220 notification.setPolicyName(drools.getRule().getName());
1221 notification.setPolicyScope("${policyScope}");
1222 notification.setPolicyVersion("${policyVersion}");
1224 // Let interested parties know
1226 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1229 // Retract the event
1236 * This rule cleans up the manager and other objects after an event has
1240 rule "${policyName}.EVENT.MANAGER.CLEANUP"
1242 $manager : ControlLoopEventManager( $clName : getClosedLoopControlName(), $requestId : getRequestID() )
1243 $clTimer : ControlLoopTimer ( closedLoopControlName == $clName, requestID == $requestId.toString() )
1244 $operations : LinkedList()
1245 from collect( ControlLoopOperationManager( onset.closedLoopControlName == $clName, onset.getRequestId() == $requestId ) )
1246 $opTimers : LinkedList()
1247 from collect( OperationTimer( closedLoopControlName == $clName, requestID == $requestId.toString() ) )
1248 $locks : LinkedList()
1249 from collect( TargetLock (requestID == $requestId) )
1250 not( VirtualControlLoopEvent( closedLoopControlName == $clName, requestId == $requestId ) )
1253 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1254 logger.info("{}: {}", $clName, drools.getRule().getName());
1256 logger.debug("{}: {}: manager={} clTimer={} operations={}",
1257 $clName, drools.getRule().getName(),
1258 $manager, $clTimer, $operations.size());
1261 // Retract EVERYTHING
1266 for(Object manager: $operations) {
1267 retract((ControlLoopOperationManager) manager);
1269 for(Object opTimer: $opTimers) {
1270 retract((OperationTimer) opTimer);
1272 for(Object lock: $locks) {
1273 TargetLock tgt = (TargetLock) lock;
1275 // Ensure we release the lock
1277 PolicyGuard.unlockTarget(tgt);
1284 * This rule will clean up any rogue onsets where there is no
1285 * ControlLoopParams object corresponding to the onset event.
1288 rule "${policyName}.EVENT.CLEANUP"
1290 $event : VirtualControlLoopEvent( $clName: closedLoopControlName )
1291 not ( Params( getClosedLoopControlName() == $clName) )
1294 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1295 logger.info("{}: {}", $clName, drools.getRule().getName());
1296 logger.debug("{}: {}: orphan onset event={}",
1297 $clName, drools.getRule().getName(), $event);
1304 * When rules are deleted, the associated Params (and its subordinate objects)
1305 * remain in working memory, because there are no longer any rules to clean
1306 * them up. However, ANY time new rules are loaded, this rule will trigger
1307 * a clean-up of ALL Params, regardless of their name & yaml, thus removing
1308 * any that no longer have associated rules.
1309 * This has a higher salience so that we immediately check Params when the
1310 * rules change, before processing any events.
1313 rule "${policyName}.PARAMS.CHECKUP"
1316 Params( $clName: closedLoopControlName, $yaml: controlLoopYaml )
1319 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1320 logger.info("{}: {} : YAML=[{}]", $clName, drools.getRule().getName(), $yaml);
1322 ParamsCleaner cleaner = new ParamsCleaner();
1323 cleaner.setClosedLoopControlName($clName);
1324 cleaner.setControlLoopYaml($yaml);
1331 * This rule removes "cleaner" objects for rules that are still active, thus
1332 * preventing the associated Params objects from being removed. Any cleaners
1333 * that are left after this rule has fired will cause their corresponding Params
1335 * This has a higher salience so that we discard the cleaner before it has
1336 * a chance to force the removal of the associated Params.
1339 rule "${policyName}.CLEANER.ACTIVE"
1342 $cleaner: ParamsCleaner( getClosedLoopControlName() == "${closedLoopControlName}", getControlLoopYaml() == "${controlLoopYaml}" )
1345 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1346 logger.info("{}: {} : YAML=[{}]", $cleaner.getClosedLoopControlName(), drools.getRule().getName(), $cleaner.getControlLoopYaml());
1353 * This rule removes Params objects that no longer have associated rules; if a
1354 * Params still had associated rules, then the cleaner would have been removed
1355 * by those rules and thus this rule would not fire.
1356 * This has a higher salience so that we remove old Params before it causes any
1357 * events to be processed.
1360 rule "${policyName}.PARAMS.CLEANUP"
1363 $params: Params( $clName: closedLoopControlName, $yaml: controlLoopYaml )
1364 ParamsCleaner( getClosedLoopControlName() == $clName, getControlLoopYaml() == $yaml )
1367 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1368 logger.info("{}: {} : YAML=[{}]", $params.getClosedLoopControlName(), drools.getRule().getName(), $params.getControlLoopYaml());
1372 // Note: the cleaner may be needed for cleaning additional params, thus
1373 // we do not retract it here - we'll leave that to another rule
1378 * This rule removes "cleaner" objects when they're no longer needed.
1381 rule "${policyName}.CLEANER.CLEANUP"
1383 $cleaner: ParamsCleaner( )
1386 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1387 logger.info("{}: {} : YAML=[{}]", $cleaner.getClosedLoopControlName(), drools.getRule().getName(), $cleaner.getControlLoopYaml());