2 * ============LICENSE_START=======================================================
4 * ================================================================================
5 * Copyright (C) 2017-2018 AT&T Intellectual Property. All rights reserved.
6 * ================================================================================
7 * Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
11 * http://www.apache.org/licenses/LICENSE-2.0
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
18 * ============LICENSE_END=========================================================
21 package org.onap.policy.controlloop;
23 import org.onap.policy.controlloop.VirtualControlLoopEvent;
24 import org.onap.policy.controlloop.VirtualControlLoopNotification;
25 import org.onap.policy.controlloop.ControlLoopEventStatus;
26 import org.onap.policy.controlloop.ControlLoopNotificationType;
27 import org.onap.policy.controlloop.ControlLoopLogger;
28 import org.onap.policy.controlloop.policy.PolicyResult;
29 import org.onap.policy.controlloop.policy.ControlLoopPolicy;
30 import org.onap.policy.controlloop.policy.Policy;
31 import org.onap.policy.controlloop.eventmanager.ControlLoopEventManager;
32 import org.onap.policy.controlloop.eventmanager.ControlLoopEventManager.NEW_EVENT_STATUS;
33 import org.onap.policy.controlloop.eventmanager.ControlLoopOperationManager;
34 import org.onap.policy.controlloop.actor.so.SOActorServiceProvider;
35 import org.onap.policy.appc.Request;
36 import org.onap.policy.appc.Response;
37 import org.onap.policy.appc.CommonHeader;
38 import org.onap.policy.appclcm.LcmRequestWrapper;
39 import org.onap.policy.appclcm.LcmResponseWrapper;
40 import org.onap.policy.appclcm.LcmRequest;
41 import org.onap.policy.appclcm.LcmResponse;
42 import org.onap.policy.appclcm.LcmCommonHeader;
43 import org.onap.policy.vfc.VFCRequest;
44 import org.onap.policy.vfc.VFCResponse;
45 import org.onap.policy.vfc.VFCManager;
46 import org.onap.policy.so.SOManager;
47 import org.onap.policy.so.SORequest;
48 import org.onap.policy.so.SORequestStatus;
49 import org.onap.policy.so.SORequestDetails;
50 import org.onap.policy.so.SOModelInfo;
51 import org.onap.policy.so.SOCloudConfiguration;
52 import org.onap.policy.so.SORequestInfo;
53 import org.onap.policy.so.SORequestParameters;
54 import org.onap.policy.so.SORelatedInstanceListElement;
55 import org.onap.policy.so.SORelatedInstance;
56 import org.onap.policy.so.SOResponse;
57 import org.onap.policy.so.SOResponseWrapper;
58 import org.onap.policy.guard.PolicyGuard;
59 import org.onap.policy.guard.PolicyGuard.LockResult;
60 import org.onap.policy.guard.TargetLock;
61 import org.onap.policy.guard.GuardResult;
62 import org.onap.policy.guard.PolicyGuardRequest;
63 import org.onap.policy.guard.PolicyGuardResponse;
64 import org.onap.policy.guard.PolicyGuardXacmlRequestAttributes;
65 import org.onap.policy.guard.PolicyGuardXacmlHelper;
67 import org.yaml.snakeyaml.Yaml;
68 import org.yaml.snakeyaml.constructor.Constructor;
70 import org.slf4j.LoggerFactory;
71 import org.slf4j.Logger;
73 import java.time.Instant;
74 import java.util.LinkedList;
75 import java.util.Iterator;
77 import org.onap.policy.drools.system.PolicyEngine;
80 * This structure mimics the Params structure.
81 * Its only purpose is to allow management of
82 * rules by the PAP component..
83 * It has no use at runtime since the rules go by
84 * Params for matching purposes.
87 closedLoopControlName : String
88 controlLoopYaml : String
92 * Control Loop Identity
95 closedLoopControlName : String
96 controlLoopYaml : String
100 * Used to clean up Params that no longer have associated rules.
102 declare ParamsCleaner
103 closedLoopControlName : String
104 controlLoopYaml : String
111 declare OperationTimer
112 closedLoopControlName : String
120 declare ControlLoopTimer
121 closedLoopControlName : String
128 * Called once and only once to insert the parameters into working memory for this Closed Loop policy.
129 * This has a higher salience so we can ensure that the Params is created before we have a chance to
130 * discard any events.
133 rule "${policyName}.SETUP"
136 not( Params( getClosedLoopControlName() == "${closedLoopControlName}", getControlLoopYaml() == "${controlLoopYaml}" ) )
139 Params params = new Params();
140 params.setClosedLoopControlName("${closedLoopControlName}");
141 params.setControlLoopYaml("${controlLoopYaml}");
144 // Note: globals have bad behavior when persistence is used,
145 // hence explicitly getting the logger vs using a global
147 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
148 logger.info("{}: {} : YAML=[{}]", params.getClosedLoopControlName(), drools.getRule().getName(), params.getControlLoopYaml());
153 * This rule responds to DCAE Events where there is no manager yet. Either it is
154 * the first ONSET, or a subsequent badly formed Event (i.e. Syntax error, or is-closed-loop-disabled)
157 rule "${policyName}.EVENT"
159 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
160 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
161 not ( ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() ) )
164 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
165 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
170 // Check the event, because we need it to not be null when
171 // we create the ControlLoopEventManager. The ControlLoopEventManager
172 // will do extra syntax checking as well check if the closed loop is disabled.
174 if ($event.getRequestId() == null) {
175 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
176 notification.setNotification(ControlLoopNotificationType.REJECTED);
177 notification.setFrom("policy");
178 notification.setMessage("Missing requestId");
179 notification.setPolicyName(drools.getRule().getName());
180 notification.setPolicyScope("${policyScope}");
181 notification.setPolicyVersion("${policyVersion}");
184 // Let interested parties know
186 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
189 // Retract it from memory
192 } else if ($event.getClosedLoopEventStatus() != ControlLoopEventStatus.ONSET) {
193 throw new ControlLoopException($event.getClosedLoopEventStatus() + " received with no prior onset");
196 // Create an EventManager
198 ControlLoopEventManager manager = new ControlLoopEventManager($params.getClosedLoopControlName(), $event.getRequestId());
200 // Determine if EventManager can actively process the event (i.e. syntax, is_closed_loop_disabled checks etc.)
202 VirtualControlLoopNotification notification = manager.activate($params.getControlLoopYaml(), $event);
203 notification.setFrom("pdp-0001-controller=controlloop"); // Engine.getInstanceName()
204 notification.setPolicyName(drools.getRule().getName());
205 notification.setPolicyScope("${policyScope}");
206 notification.setPolicyVersion("${policyVersion}");
208 // Are we actively pursuing this event?
210 if (notification.getNotification() == ControlLoopNotificationType.ACTIVE) {
212 // Insert Event Manager into memory, this will now kick off processing.
216 // Let interested parties know
218 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
220 // Setup the Overall Control Loop timer
222 ControlLoopTimer clTimer = new ControlLoopTimer();
223 clTimer.setClosedLoopControlName($event.getClosedLoopControlName());
224 clTimer.setRequestID($event.getRequestId().toString());
225 clTimer.setDelay(manager.getControlLoopTimeout(1500) + "s");
232 // Let interested parties know
234 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
236 // Retract it from memory
242 // Now that the manager is inserted into Drools working memory, we'll wait for
243 // another rule to fire in order to continue processing. This way we can also
244 // then screen for additional ONSET and ABATED events for this RequestId.
247 } catch (Exception e) {
248 logger.warn("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName(), e);
250 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
251 notification.setNotification(ControlLoopNotificationType.REJECTED);
252 notification.setMessage("Exception occurred: " + e.getMessage());
253 notification.setPolicyName(drools.getRule().getName());
254 notification.setPolicyScope("${policyScope}");
255 notification.setPolicyVersion("${policyVersion}");
259 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
269 * This rule happens when we got a valid ONSET, closed loop is enabled and an Event Manager
270 * is now created. We can start processing the yaml specification via the Event Manager.
273 rule "${policyName}.EVENT.MANAGER"
275 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
276 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
277 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
278 $clTimer : ControlLoopTimer ( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
281 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
282 logger.info("{}: {}: event={} manager={} clTimer={}",
283 $params.getClosedLoopControlName(), drools.getRule().getName(),
284 $event, $manager, $clTimer);
288 // Check which event this is.
290 ControlLoopEventManager.NEW_EVENT_STATUS eventStatus = $manager.onNewEvent($event);
292 // Check what kind of event this is
294 if (eventStatus == NEW_EVENT_STATUS.SUBSEQUENT_ONSET) {
296 // We don't care about subsequent onsets
298 logger.info("{}: {}: subsequent onset",
299 $params.getClosedLoopControlName(), drools.getRule().getName());
303 if (eventStatus == NEW_EVENT_STATUS.SYNTAX_ERROR) {
305 // Ignore any bad syntax events
307 logger.warn("{}: {}: syntax error",
308 $params.getClosedLoopControlName(), drools.getRule().getName());
313 // We only want the initial ONSET event in memory,
314 // all the other events need to be retracted to support
315 // cleanup and avoid the other rules being fired for this event.
317 if (eventStatus != NEW_EVENT_STATUS.FIRST_ONSET) {
318 logger.warn("{}: {}: not first onset",
319 $params.getClosedLoopControlName(), drools.getRule().getName());
323 logger.debug("{}: {}: target={}", $params.getClosedLoopControlName(),
324 drools.getRule().getName(), $event.getTarget());
326 // Now start seeing if we need to process this event
330 // Check if this is a Final Event
332 VirtualControlLoopNotification notification = $manager.isControlLoopFinal();
335 if (notification != null) {
337 // Its final, but are we waiting for abatement?
339 if ($manager.getNumAbatements() > 0) {
340 logger.info("{}: {}: abatement received for {}. Closing the control loop",
341 $params.getClosedLoopControlName(), drools.getRule().getName(),
342 $event.getRequestId());
344 /// DB Write---end event processing for this RequestId()
345 $manager.commitAbatement("Event Abated","Closed");
347 notification.setFrom("policy");
348 notification.setPolicyName(drools.getRule().getName());
349 notification.setPolicyScope("${policyScope}");
350 notification.setPolicyVersion("${policyVersion}");
352 // In this case, we are done
354 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
358 TargetLock lock = $manager.unlockCurrentOperation();
360 logger.debug("{}: {}: retracting lock=", $params.getClosedLoopControlName(),
361 drools.getRule().getName(), lock);
365 // Retract everything from memory
367 logger.info("{}: {}: retracting onset, manager, and timer",
368 $params.getClosedLoopControlName(), drools.getRule().getName());
370 retract($manager.getOnsetEvent());
374 // TODO - what if we get subsequent Events for this RequestId?
375 // By default, it will all start over again. May be confusing for Ruby.
376 // Or, we could track this and then subsequently ignore the events
380 // Check whether we need to wait for abatement
382 if ($manager.getProcessor().getControlLoop().getAbatement() == true && notification.getNotification() == ControlLoopNotificationType.FINAL_SUCCESS) {
383 logger.info("{}: {}: waiting for abatement ..",
384 $params.getClosedLoopControlName(), drools.getRule().getName());
386 logger.info("{}: {}: no abatement expect for {}. Closing the control loop",
387 $params.getClosedLoopControlName(), drools.getRule().getName(),
388 $event.getRequestId());
390 notification.setFrom("policy");
391 notification.setPolicyName(drools.getRule().getName());
392 notification.setPolicyScope("${policyScope}");
393 notification.setPolicyVersion("${policyVersion}");
396 // In this case, we are done
398 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
402 TargetLock lock = $manager.unlockCurrentOperation();
404 logger.debug("{}: {}: retracting lock=", $params.getClosedLoopControlName(),
405 drools.getRule().getName(), lock);
409 // Retract everything from memory
411 logger.info("{}: {}: retracting onset, manager, and timer",
412 $params.getClosedLoopControlName(), drools.getRule().getName());
414 retract($manager.getOnsetEvent());
421 // NOT final, so let's ask for the next operation
423 ControlLoopOperationManager operation = $manager.processControlLoop();
424 if (operation != null) {
426 // Let's ask for a lock right away
428 LockResult<GuardResult, TargetLock> result = $manager.lockCurrentOperation();
429 logger.info("{}: {}: guard lock acquired={}",
430 $params.getClosedLoopControlName(), drools.getRule().getName(),
432 if (result.getA().equals(GuardResult.LOCK_ACQUIRED)) {
434 // insert the operation into memory
439 // insert operation timeout object
441 OperationTimer opTimer = new OperationTimer();
442 opTimer.setClosedLoopControlName($event.getClosedLoopControlName());
443 opTimer.setRequestID($event.getRequestId().toString());
444 opTimer.setDelay(operation.getOperationTimeout().toString() + "s");
448 // Insert lock into memory
450 insert(result.getB());
453 logger.debug("The target resource {} is already processing",
454 $event.getAai().get($event.getTarget()));
455 notification = new VirtualControlLoopNotification($event);
456 notification.setNotification(ControlLoopNotificationType.REJECTED);
457 notification.setMessage("The target " + $event.getAai().get($event.getTarget()) + " is already locked");
458 notification.setFrom("policy");
459 notification.setPolicyName(drools.getRule().getName());
460 notification.setPolicyScope("${policyScope}");
461 notification.setPolicyVersion("${policyVersion}");
463 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
469 if(result.getB() != null) {
470 retract(result.getB());
473 logger.info("{}: {}: starting operation={}",
474 $params.getClosedLoopControlName(), drools.getRule().getName(),
478 // Probably waiting for abatement
480 logger.info("{}: {}: no operation, probably waiting for abatement",
481 $params.getClosedLoopControlName(), drools.getRule().getName());
484 } catch (Exception e) {
485 logger.warn("{}: {}: unexpected",
486 $params.getClosedLoopControlName(),
487 drools.getRule().getName(), e);
489 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
490 notification.setNotification(ControlLoopNotificationType.FINAL_FAILURE);
491 notification.setMessage(e.getMessage());
492 notification.setFrom("policy");
493 notification.setPolicyName(drools.getRule().getName());
494 notification.setPolicyScope("${policyScope}");
495 notification.setPolicyVersion("${policyVersion}");
497 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
508 * Guard Permitted, let's send request to the actor.
511 rule "${policyName}.EVENT.MANAGER.OPERATION.LOCKED.GUARD_PERMITTED"
513 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
514 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
515 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
516 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId(), "Permit".equalsIgnoreCase(getGuardApprovalStatus()) )
517 $lock : TargetLock (requestID == $event.getRequestId())
518 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
521 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
522 logger.info("{}: {}: event={} manager={} operation={} lock={}",
523 $params.getClosedLoopControlName(), drools.getRule().getName(),
524 $event, $manager, $operation, $lock);
526 Object request = null;
527 boolean caughtException = false;
530 request = $operation.startOperation($event);
532 if (request != null) {
533 logger.debug("{}: {}: starting operation ..",
534 $params.getClosedLoopControlName(), drools.getRule().getName());
536 // Tell interested parties we are performing this Operation
538 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
539 notification.setNotification(ControlLoopNotificationType.OPERATION);
540 notification.setMessage($operation.getOperationMessage());
541 notification.setHistory($operation.getHistory());
542 notification.setFrom("policy");
543 notification.setPolicyName(drools.getRule().getName());
544 notification.setPolicyScope("${policyScope}");
545 notification.setPolicyVersion("${policyVersion}");
547 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
549 switch ($operation.policy.getActor()){
553 if (request instanceof Request) {
554 PolicyEngine.manager.deliver("APPC-CL", request);
556 else if (request instanceof LcmRequestWrapper) {
557 PolicyEngine.manager.deliver("APPC-LCM-READ", request);
561 // at this point the AAI named query request should have already been made, the response recieved and used
562 // in the construction of the SO Request which is stored in operationRequest
564 if(request instanceof SORequest) {
565 // Call SO. The response will be inserted into memory once it's received
566 SOActorServiceProvider.sendRequest($event.getRequestId().toString(), drools.getWorkingMemory(), request);
570 if (request instanceof VFCRequest) {
572 Thread t = new Thread(new VFCManager(drools.getWorkingMemory(), (VFCRequest)request));
579 // What happens if its null?
581 logger.warn("{}: {}: unexpected null operation request",
582 $params.getClosedLoopControlName(),
583 drools.getRule().getName());
584 if ("SO".equals($operation.policy.getActor())) {
587 modify($manager) {finishOperation($operation)};
589 else if ("vfc".equalsIgnoreCase($operation.policy.getActor())) {
592 modify($manager) {finishOperation($operation)};
596 } catch (Exception e) {
597 String msg = e.getMessage();
598 logger.warn("{}: {}: operation={}: AAI failure: {}",
599 $params.getClosedLoopControlName(), drools.getRule().getName(),
601 $operation.setOperationHasException(msg);
603 if(request != null) {
605 // Create a notification for it ("DB Write - end operation")
607 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
608 notification.setFrom("policy");
609 notification.setPolicyName(drools.getRule().getName());
610 notification.setPolicyScope("${policyScope}");
611 notification.setPolicyVersion("${policyVersion}");
612 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
613 notification.setMessage($operation.getOperationHistory());
614 notification.setHistory($operation.getHistory());
616 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
621 caughtException = true;
624 // Having the modify statement in the catch clause doesn't work for whatever reason
625 if (caughtException) {
626 modify($manager) {finishOperation($operation)};
633 * We were able to acquire a lock so now let's ask Xacml Guard whether
634 * we are allowed to proceed with the request to the actor.
637 rule "${policyName}.EVENT.MANAGER.OPERATION.LOCKED.GUARD_NOT_YET_QUERIED"
639 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
640 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
641 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
642 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId(), getGuardApprovalStatus() == "NONE" )
643 $lock : TargetLock (requestID == $event.getRequestId())
646 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
647 logger.info("{}: {}: event={} manager={} operation={} lock={}",
648 $params.getClosedLoopControlName(), drools.getRule().getName(),
649 $event, $manager, $operation, $lock);
652 // Sending notification that we are about to query Guard ("DB write - start operation")
654 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
655 notification.setNotification(ControlLoopNotificationType.OPERATION);
656 notification.setMessage("Sending guard query for " + $operation.policy.getActor() + " " + $operation.policy.getRecipe());
657 notification.setHistory($operation.getHistory());
658 notification.setFrom("policy");
659 notification.setPolicyName(drools.getRule().getName());
660 notification.setPolicyScope("${policyScope}");
661 notification.setPolicyVersion("${policyVersion}");
663 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
666 // Now send Guard Request to XACML Guard. In order to bypass the call to Guard,
667 // just change guardEnabled to false.
669 // In order to use REST XACML, provide a URL instead of "" as a second argument
670 // to the CallGuardTask() and set the first argument to null
671 // (instead of XacmlPdpEngine).
674 // NOTE: The environment properties uses "guard.disabled" but the boolean is guardEnabled
675 boolean guardEnabled = "false".equalsIgnoreCase(PolicyEngine.manager.getEnvironmentProperty("guard.disabled"));
679 Thread t = new Thread(new org.onap.policy.guard.CallGuardTask(
680 drools.getWorkingMemory(),
681 $event.getClosedLoopControlName(),
682 $operation.policy.getActor().toString(),
683 $operation.policy.getRecipe(),
684 $operation.getTargetEntity(),
685 $event.getRequestId().toString()
690 insert(new PolicyGuardResponse("Permit", $event.getRequestId(), $operation.policy.getRecipe()));
696 // This rule will be triggered when a thread talking to the XACML Guard inserts a
697 // guardResponse object into the working memory
699 rule "${policyName}.GUARD.RESPONSE"
701 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
702 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
703 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
704 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
705 $lock : TargetLock (requestID == $event.getRequestId())
706 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
707 $guardResponse : PolicyGuardResponse(requestID == $event.getRequestId(), $operation.policy.recipe == operation)
710 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
711 logger.info("{}: {}: event={} manager={} operation={} lock={} opTimer={} guardResponse={}",
712 $params.getClosedLoopControlName(), drools.getRule().getName(),
713 $event, $manager, $operation, $lock, $opTimer, $guardResponse);
716 //we will permit the operation if there was no Guard for it
717 if("Indeterminate".equalsIgnoreCase($guardResponse.getResult())){
718 $guardResponse.setResult("Permit");
722 // This notification has Guard result in "message". ("DB write - end operation in case of Guard Deny")
724 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
725 notification.setNotification(ControlLoopNotificationType.OPERATION);
726 notification.setMessage("Guard result for " + $operation.policy.getActor() + " " + $operation.policy.getRecipe() + " is " + $guardResponse.getResult());
727 notification.setHistory($operation.getHistory());
728 notification.setFrom("policy");
729 notification.setPolicyName(drools.getRule().getName());
730 notification.setPolicyScope("${policyScope}");
731 notification.setPolicyVersion("${policyVersion}");
733 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
735 if("Permit".equalsIgnoreCase($guardResponse.getResult())){
737 modify($operation){setGuardApprovalStatus($guardResponse.getResult())};
740 //This is the Deny case
741 $operation.startOperation($event);
742 $operation.setOperationHasGuardDeny();
745 modify($manager) {finishOperation($operation)};
748 retract($guardResponse);
754 * This rule responds to APPC Response Events
756 * I would have like to be consistent and write the Response like this:
757 * $response : Response( CommonHeader.RequestId == $onset.getRequestId() )
759 * However, no compile error was given. But a runtime error was given. I think
760 * because drools is confused between the classname CommonHeader vs the property CommonHeader.
763 rule "${policyName}.APPC.RESPONSE"
765 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
766 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
767 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
768 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
769 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
770 $lock : TargetLock (requestID == $event.getRequestId())
771 $response : Response( getCommonHeader().RequestId == $event.getRequestId() )
774 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
775 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
776 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
777 $params.getClosedLoopControlName(), drools.getRule().getName(),
778 $event, $manager, $operation, $lock, $opTimer, $response);
780 // Get the result of the operation
782 PolicyResult policyResult = $operation.onResponse($response);
783 if (policyResult != null) {
784 logger.debug("{}: {}: operation finished - result={}",
785 $params.getClosedLoopControlName(), drools.getRule().getName(),
788 // This Operation has completed, construct a notification showing our results. (DB write - end operation)
790 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
791 notification.setFrom("policy");
792 notification.setPolicyName(drools.getRule().getName());
793 notification.setPolicyScope("${policyScope}");
794 notification.setPolicyVersion("${policyVersion}");
795 notification.setMessage($operation.getOperationHistory());
796 notification.setHistory($operation.getHistory());
797 if (policyResult.equals(PolicyResult.SUCCESS)) {
798 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
800 // Let interested parties know
802 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
804 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
806 // Let interested parties know
808 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
811 // Ensure the operation is complete
813 if ($operation.isOperationComplete() == true) {
815 // It is complete, remove it from memory
819 // We must also retract the timer object
820 // NOTE: We could write a Rule to do this
824 // Complete the operation
826 modify($manager) {finishOperation($operation)};
829 // Just doing this will kick off the LOCKED rule again
831 modify($operation) {};
835 // Its not finished yet (i.e. expecting more Response objects)
837 // Or possibly it is a leftover response that we timed the request out previously
841 // We are going to retract these objects from memory
848 * The problem with Responses is that they don't have a controlLoopControlName
849 * field in them, so the only way to attach them is via RequestId. If we have multiple
850 * control loop .drl's loaded in the same container, we need to be sure the cleanup
851 * rules don't remove Responses for other control loops.
854 rule "${policyName}.APPC.RESPONSE.CLEANUP"
856 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
857 $response : Response($id : getCommonHeader().RequestId )
858 not ( VirtualControlLoopEvent( requestId == $id, closedLoopEventStatus == ControlLoopEventStatus.ONSET ) )
861 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
862 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
863 logger.debug("{}: {}: orphan appc response={}",
864 $params.getClosedLoopControlName(), drools.getRule().getName(), $id);
874 * This rule responds to APPC Response Events using the new LCM interface provided by appc
877 rule "${policyName}.APPC.LCM.RESPONSE"
879 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
880 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
881 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
882 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
883 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
884 $lock : TargetLock (requestID == $event.getRequestId())
885 $response : LcmResponseWrapper( getBody().getCommonHeader().getRequestId() == $event.getRequestId() )
888 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
889 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
890 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
891 $params.getClosedLoopControlName(), drools.getRule().getName(),
892 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
895 // Get the result of the operation
897 PolicyResult policyResult = $operation.onResponse($response);
898 if (policyResult != null) {
899 logger.debug("{}: {}: operation finished - result={}",
900 $params.getClosedLoopControlName(), drools.getRule().getName(),
904 // This Operation has completed, construct a notification showing our results. (DB write - end operation)
906 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
907 notification.setFrom("policy");
908 notification.setPolicyName(drools.getRule().getName());
909 notification.setPolicyScope("${policyScope}");
910 notification.setPolicyVersion("${policyVersion}");
911 notification.setMessage($operation.getOperationHistory());
912 notification.setHistory($operation.getHistory());
913 if (policyResult.equals(PolicyResult.SUCCESS)) {
914 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
916 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
918 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
920 // Ensure the operation is complete
922 if ($operation.isOperationComplete() == true) {
924 // It is complete, remove it from memory
928 // We must also retract the timer object
929 // NOTE: We could write a Rule to do this
933 // Complete the operation
935 modify($manager) {finishOperation($operation)};
938 // Just doing this will kick off the LOCKED rule again
940 modify($operation) {};
944 // Its not finished yet (i.e. expecting more Response objects)
946 // Or possibly it is a leftover response that we timed the request out previously
950 // We are going to retract these objects from memory
957 * Clean Up any lingering LCM reponses
960 rule "${policyName}.APPC.LCM.RESPONSE.CLEANUP"
962 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
963 $response : LcmResponseWrapper($id : getBody().getCommonHeader().getRequestId )
964 not ( VirtualControlLoopEvent( requestId == $id, closedLoopEventStatus == ControlLoopEventStatus.ONSET ) )
967 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
968 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
969 logger.debug("{}: {}: orphan appc response={}",
970 $params.getClosedLoopControlName(), drools.getRule().getName(), $id);
979 * This rule responds to SO Response Events
982 rule "${policyName}.SO.RESPONSE"
984 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
985 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
986 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
987 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
988 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
989 $lock : TargetLock (requestID == $event.getRequestId())
990 $response : SOResponseWrapper(requestID.toString() == $event.getRequestId().toString() )
993 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
994 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
995 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
996 $params.getClosedLoopControlName(), drools.getRule().getName(),
997 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
999 // Get the result of the operation
1001 PolicyResult policyResult = $operation.onResponse($response);
1002 if (policyResult != null) {
1003 logger.debug("{}: {}: operation finished - result={}",
1004 $params.getClosedLoopControlName(), drools.getRule().getName(),
1008 // This Operation has completed, construct a notification showing our results
1010 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1011 notification.setFrom("policy");
1012 notification.setPolicyName(drools.getRule().getName());
1013 notification.setPolicyScope("${policyScope}");
1014 notification.setPolicyVersion("${policyVersion}");
1015 notification.setMessage($operation.getOperationHistory());
1016 notification.setHistory($operation.getHistory());
1017 if (policyResult.equals(PolicyResult.SUCCESS)) {
1018 notification.setNotification(ControlLoopNotificationType.OPERATION_SUCCESS);
1020 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
1023 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1025 // Ensure the operation is complete
1027 if ($operation.isOperationComplete() == true) {
1029 // It is complete, remove it from memory
1031 retract($operation);
1033 // We must also retract the timer object
1034 // NOTE: We could write a Rule to do this
1038 // Complete the operation
1040 modify($manager) {finishOperation($operation)};
1043 // Just doing this will kick off the LOCKED rule again
1045 modify($operation) {};
1049 // Its not finished yet (i.e. expecting more Response objects)
1051 // Or possibly it is a leftover response that we timed the request out previously
1055 // We are going to retract these objects from memory
1063 * This rule responds to VFC Response Events
1066 rule "${policyName}.VFC.RESPONSE"
1068 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1069 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
1070 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1071 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
1072 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString() )
1073 $lock : TargetLock (requestID == $event.getRequestId())
1074 $response : VFCResponse( requestId.toString() == $event.getRequestId().toString() )
1076 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1077 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1078 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
1079 $params.getClosedLoopControlName(), drools.getRule().getName(),
1080 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
1082 // Get the result of the operation
1084 PolicyResult policyResult = $operation.onResponse($response);
1085 if (policyResult != null) {
1087 // This Operation has completed, construct a notification showing our results
1089 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1090 notification.setFrom("policy");
1091 notification.setPolicyName(drools.getRule().getName());
1092 notification.setPolicyScope("${policyScope}");
1093 notification.setPolicyVersion("${policyVersion}");
1094 notification.setMessage($operation.getOperationHistory());
1095 notification.setHistory($operation.getHistory());
1097 // Ensure the operation is complete
1099 if ($operation.isOperationComplete() == true) {
1101 // It is complete, remove it from memory
1103 retract($operation);
1105 // We must also retract the timer object
1106 // NOTE: We could write a Rule to do this
1110 // Complete the operation
1112 modify($manager) {finishOperation($operation)};
1115 // Just doing this will kick off the LOCKED rule again
1117 modify($operation) {};
1121 // Its not finished yet (i.e. expecting more Response objects)
1123 // Or possibly it is a leftover response that we timed the request out previously
1127 // We are going to retract these objects from memory
1135 * This is the timer that manages the timeout for an individual operation.
1138 rule "${policyName}.EVENT.MANAGER.OPERATION.TIMEOUT"
1141 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1142 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
1143 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1144 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.getClosedLoopControlName(), onset.getRequestId() == $event.getRequestId() )
1145 $opTimer : OperationTimer( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString(), $to : getDelay() )
1146 $lock : TargetLock (requestID == $event.getRequestId())
1149 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1150 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1151 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={}",
1152 $params.getClosedLoopControlName(), drools.getRule().getName(),
1153 $event, $manager, $operation, $lock, $operation, $opTimer);
1156 // Tell it its timed out
1158 $operation.setOperationHasTimedOut();
1160 // Create a notification for it ("DB Write - end operation")
1162 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1163 notification.setFrom("policy");
1164 notification.setPolicyName(drools.getRule().getName());
1165 notification.setPolicyScope("${policyScope}");
1166 notification.setPolicyVersion("${policyVersion}");
1167 notification.setNotification(ControlLoopNotificationType.OPERATION_FAILURE);
1168 notification.setMessage($operation.getOperationHistory());
1169 notification.setHistory($operation.getHistory());
1171 // Let interested parties know
1173 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1175 // Get rid of the timer
1179 // Ensure the operation is complete
1181 if ($operation.isOperationComplete() == true) {
1183 // It is complete, remove it from memory
1185 retract($operation);
1187 // Complete the operation
1189 modify($manager) {finishOperation($operation)};
1192 // Just doing this will kick off the LOCKED rule again
1194 modify($operation) {};
1200 * This is the timer that manages the overall control loop timeout.
1203 rule "${policyName}.EVENT.MANAGER.TIMEOUT"
1206 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1207 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
1208 $manager : ControlLoopEventManager( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId() )
1209 $clTimer : ControlLoopTimer ( closedLoopControlName == $event.getClosedLoopControlName(), requestID == $event.getRequestId().toString(), $to : getDelay() )
1212 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1213 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1215 logger.debug("{}: {}: event={}",
1216 $params.getClosedLoopControlName(), drools.getRule().getName(),
1219 // Tell the Event Manager it has timed out
1221 VirtualControlLoopNotification notification = $manager.setControlLoopTimedOut();
1222 if (notification != null) {
1223 notification.setFrom("policy");
1224 notification.setPolicyName(drools.getRule().getName());
1225 notification.setPolicyScope("${policyScope}");
1226 notification.setPolicyVersion("${policyVersion}");
1228 // Let interested parties know
1230 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1233 // Retract the event
1240 * This rule cleans up the manager and other objects after an event has
1244 rule "${policyName}.EVENT.MANAGER.CLEANUP"
1246 $manager : ControlLoopEventManager( $clName : getClosedLoopControlName(), $requestId : getRequestID() )
1247 $clTimer : ControlLoopTimer ( closedLoopControlName == $clName, requestID == $requestId.toString() )
1248 $operations : LinkedList()
1249 from collect( ControlLoopOperationManager( onset.closedLoopControlName == $clName, onset.getRequestId() == $requestId ) )
1250 $opTimers : LinkedList()
1251 from collect( OperationTimer( closedLoopControlName == $clName, requestID == $requestId.toString() ) )
1252 $locks : LinkedList()
1253 from collect( TargetLock (requestID == $requestId) )
1254 not( VirtualControlLoopEvent( closedLoopControlName == $clName, requestId == $requestId ) )
1257 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1258 logger.info("{}: {}", $clName, drools.getRule().getName());
1260 logger.debug("{}: {}: manager={} clTimer={} operations={}",
1261 $clName, drools.getRule().getName(),
1262 $manager, $clTimer, $operations.size());
1265 // Retract EVERYTHING
1270 for(Object manager: $operations) {
1271 retract((ControlLoopOperationManager) manager);
1273 for(Object opTimer: $opTimers) {
1274 retract((OperationTimer) opTimer);
1276 for(Object lock: $locks) {
1277 TargetLock tgt = (TargetLock) lock;
1279 // Ensure we release the lock
1281 PolicyGuard.unlockTarget(tgt);
1288 * This rule will clean up any rogue onsets where there is no
1289 * ControlLoopParams object corresponding to the onset event.
1292 rule "${policyName}.EVENT.CLEANUP"
1294 $event : VirtualControlLoopEvent( $clName: closedLoopControlName )
1295 not ( Params( getClosedLoopControlName() == $clName) )
1298 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1299 logger.info("{}: {}", $clName, drools.getRule().getName());
1300 logger.debug("{}: {}: orphan onset event={}",
1301 $clName, drools.getRule().getName(), $event);
1308 * When rules are deleted, the associated Params (and its subordinate objects)
1309 * remain in working memory, because there are no longer any rules to clean
1310 * them up. However, ANY time new rules are loaded, this rule will trigger
1311 * a clean-up of ALL Params, regardless of their name & yaml, thus removing
1312 * any that no longer have associated rules.
1313 * This has a higher salience so that we immediately check Params when the
1314 * rules change, before processing any events.
1317 rule "${policyName}.PARAMS.CHECKUP"
1320 Params( $clName: closedLoopControlName, $yaml: controlLoopYaml )
1323 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1324 logger.info("{}: {} : YAML=[{}]", $clName, drools.getRule().getName(), $yaml);
1326 ParamsCleaner cleaner = new ParamsCleaner();
1327 cleaner.setClosedLoopControlName($clName);
1328 cleaner.setControlLoopYaml($yaml);
1335 * This rule removes "cleaner" objects for rules that are still active, thus
1336 * preventing the associated Params objects from being removed. Any cleaners
1337 * that are left after this rule has fired will cause their corresponding Params
1339 * This has a higher salience so that we discard the cleaner before it has
1340 * a chance to force the removal of the associated Params.
1343 rule "${policyName}.CLEANER.ACTIVE"
1346 $cleaner: ParamsCleaner( getClosedLoopControlName() == "${closedLoopControlName}", getControlLoopYaml() == "${controlLoopYaml}" )
1349 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1350 logger.info("{}: {} : YAML=[{}]", $cleaner.getClosedLoopControlName(), drools.getRule().getName(), $cleaner.getControlLoopYaml());
1357 * This rule removes Params objects that no longer have associated rules; if a
1358 * Params still had associated rules, then the cleaner would have been removed
1359 * by those rules and thus this rule would not fire.
1360 * This has a higher salience so that we remove old Params before it causes any
1361 * events to be processed.
1364 rule "${policyName}.PARAMS.CLEANUP"
1367 $params: Params( $clName: closedLoopControlName, $yaml: controlLoopYaml )
1368 ParamsCleaner( getClosedLoopControlName() == $clName, getControlLoopYaml() == $yaml )
1371 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1372 logger.info("{}: {} : YAML=[{}]", $params.getClosedLoopControlName(), drools.getRule().getName(), $params.getControlLoopYaml());
1376 // Note: the cleaner may be needed for cleaning additional params, thus
1377 // we do not retract it here - we'll leave that to another rule
1382 * This rule removes "cleaner" objects when they're no longer needed.
1385 rule "${policyName}.CLEANER.CLEANUP"
1387 $cleaner: ParamsCleaner( )
1390 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1391 logger.info("{}: {} : YAML=[{}]", $cleaner.getClosedLoopControlName(), drools.getRule().getName(), $cleaner.getControlLoopYaml());