2 * ============LICENSE_START=======================================================
4 * ================================================================================
5 * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
6 * ================================================================================
7 * Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
11 * http://www.apache.org/licenses/LICENSE-2.0
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
18 * ============LICENSE_END=========================================================
21 package org.onap.policy.controlloop;
23 import org.onap.policy.controlloop.VirtualControlLoopEvent;
24 import org.onap.policy.controlloop.VirtualControlLoopNotification;
25 import org.onap.policy.controlloop.ControlLoopEventStatus;
26 import org.onap.policy.controlloop.ControlLoopNotificationType;
27 import org.onap.policy.controlloop.ControlLoopLogger;
28 import org.onap.policy.controlloop.policy.PolicyResult;
29 import org.onap.policy.controlloop.policy.ControlLoopPolicy;
30 import org.onap.policy.controlloop.policy.Policy;
31 import org.onap.policy.controlloop.eventmanager.ControlLoopEventManager;
32 import org.onap.policy.controlloop.eventmanager.ControlLoopEventManager.NEW_EVENT_STATUS;
33 import org.onap.policy.controlloop.eventmanager.ControlLoopOperationManager;
34 import org.onap.policy.controlloop.actor.so.SOActorServiceProvider;
35 import org.onap.policy.appc.Request;
36 import org.onap.policy.appc.Response;
37 import org.onap.policy.appc.CommonHeader;
38 import org.onap.policy.appclcm.LCMRequestWrapper;
39 import org.onap.policy.appclcm.LCMResponseWrapper;
40 import org.onap.policy.appclcm.LCMRequest;
41 import org.onap.policy.appclcm.LCMResponse;
42 import org.onap.policy.appclcm.LCMCommonHeader;
43 import org.onap.policy.vfc.VFCRequest;
44 import org.onap.policy.vfc.VFCResponse;
45 import org.onap.policy.vfc.VFCManager;
46 import org.onap.policy.so.SOManager;
47 import org.onap.policy.so.SORequest;
48 import org.onap.policy.so.SORequestStatus;
49 import org.onap.policy.so.SORequestDetails;
50 import org.onap.policy.so.SOModelInfo;
51 import org.onap.policy.so.SOCloudConfiguration;
52 import org.onap.policy.so.SORequestInfo;
53 import org.onap.policy.so.SORequestParameters;
54 import org.onap.policy.so.SORelatedInstanceListElement;
55 import org.onap.policy.so.SORelatedInstance;
56 import org.onap.policy.so.SOResponse;
57 import org.onap.policy.guard.PolicyGuard;
58 import org.onap.policy.guard.PolicyGuard.LockResult;
59 import org.onap.policy.guard.TargetLock;
60 import org.onap.policy.guard.GuardResult;
61 import org.onap.policy.guard.PolicyGuardRequest;
62 import org.onap.policy.guard.PolicyGuardResponse;
63 import org.onap.policy.guard.PolicyGuardXacmlRequestAttributes;
64 import org.onap.policy.guard.PolicyGuardXacmlHelper;
66 import org.yaml.snakeyaml.Yaml;
67 import org.yaml.snakeyaml.constructor.Constructor;
69 import org.slf4j.LoggerFactory;
70 import org.slf4j.Logger;
72 import java.time.Instant;
73 import java.util.LinkedList;
74 import java.util.Iterator;
76 import org.onap.policy.drools.system.PolicyEngine;
79 closedLoopControlName : String
80 controlLoopYaml : String
84 declare OperationTimer
85 closedLoopControlName : String
90 declare ControlLoopTimer
91 closedLoopControlName : String
98 * Called once and only once to insert the parameters into working memory for this Closed Loop policy.
101 rule "${policyName}.SETUP"
105 Params params = new Params();
106 params.setClosedLoopControlName("${closedLoopControlName}");
107 params.setControlLoopYaml("${controlLoopYaml}");
110 // Note: globals have bad behavior when persistence is used,
111 // hence explicitly getting the logger vs using a global
113 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
114 logger.info("{}: {} : YAML=[{}]", params.getClosedLoopControlName(), drools.getRule().getName(), params.getControlLoopYaml());
116 String sqlDbUsername = PolicyEngine.manager.getEnvironmentProperty("sql.db.username");
118 String aaiUrl = PolicyEngine.manager.getEnvironmentProperty("aai.url");
119 String aaiUsername = PolicyEngine.manager.getEnvironmentProperty("aai.username");
120 String aaiPassword = PolicyEngine.manager.getEnvironmentProperty("aai.password");
122 String soUrl =PolicyEngine.manager.getEnvironmentProperty("so.url");
123 String soUsername = PolicyEngine.manager.getEnvironmentProperty("so.username");
124 String soPassword = PolicyEngine.manager.getEnvironmentProperty("so.password");
126 String vfcUrl =PolicyEngine.manager.getEnvironmentProperty("vfc.url");
127 String vfcUsername = PolicyEngine.manager.getEnvironmentProperty("vfc.username");
128 String vfcPassword = PolicyEngine.manager.getEnvironmentProperty("vfc.password");
130 String guardUrl = PolicyEngine.manager.getEnvironmentProperty("guard.url");
131 String guardUsername = PolicyEngine.manager.getEnvironmentProperty("pdpx.username");
132 String guardPassword = PolicyEngine.manager.getEnvironmentProperty("pdpx.password");
133 String guardJdbcUrl = PolicyEngine.manager.getEnvironmentProperty("guard.jdbc.url");
134 String guardDisabled = PolicyEngine.manager.getEnvironmentProperty("guard.disabled");
136 logger.info("{}: {} : AAI=[{}:{}]", params.getClosedLoopControlName(), drools.getRule().getName(), aaiUrl, aaiUsername);
137 logger.info("{}: {} : SO=[{}:{}]", params.getClosedLoopControlName(), drools.getRule().getName(), soUrl, soUsername);
138 logger.info("{}: {} : VFC=[{}:{}]", params.getClosedLoopControlName(), drools.getRule().getName(), vfcUrl, vfcUsername);
139 logger.info("{}: {} : GUARD=[{}:{}:{}:{}]", params.getClosedLoopControlName(), drools.getRule().getName(), guardUrl, guardUsername, guardJdbcUrl, guardDisabled);
140 logger.info("{}: {} : DB=[{}]", params.getClosedLoopControlName(), drools.getRule().getName(), sqlDbUsername);
145 * This rule responds to DCAE Events where there is no manager yet. Either it is
146 * the first ONSET, or a subsequent badly formed Event (i.e. Syntax error, or is-closed-loop-disabled)
149 rule "${policyName}.EVENT"
151 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
152 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
153 not ( ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID ) )
156 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
157 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
162 // Check the event, because we need it to not be null when
163 // we create the ControlLoopEventManager. The ControlLoopEventManager
164 // will do extra syntax checking as well check if the closed loop is disabled.
166 if ($event.requestID == null) {
167 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
168 notification.notification = ControlLoopNotificationType.REJECTED;
169 notification.from = "policy";
170 notification.message = "Missing requestID";
171 notification.policyName = drools.getRule().getName();
172 notification.policyScope = "${policyScope}";
173 notification.policyVersion = "${policyVersion}";
176 // Let interested parties know
178 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
181 // Retract it from memory
186 // Create an EventManager
188 ControlLoopEventManager manager = new ControlLoopEventManager($params.getClosedLoopControlName(), $event.requestID);
190 // Determine if EventManager can actively process the event (i.e. syntax, is_closed_loop_disabled checks etc.)
192 VirtualControlLoopNotification notification = manager.activate($params.getControlLoopYaml(), $event);
193 notification.from = "pdp-0001-controller=controlloop"; // Engine.getInstanceName()
194 notification.policyName = drools.getRule().getName();
195 notification.policyScope = "${policyScope}";
196 notification.policyVersion = "${policyVersion}";
198 // Are we actively pursuing this event?
200 if (notification.notification == ControlLoopNotificationType.ACTIVE) {
202 // Insert Event Manager into memory, this will now kick off processing.
206 // Let interested parties know
208 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
210 // Setup the Overall Control Loop timer
212 ControlLoopTimer clTimer = new ControlLoopTimer();
213 clTimer.setClosedLoopControlName($event.closedLoopControlName);
214 clTimer.setRequestID($event.requestID.toString());
215 clTimer.setDelay(manager.getControlLoopTimeout(1500) + "s");
222 // Let interested parties know
224 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
226 // Retract it from memory
232 // Now that the manager is inserted into Drools working memory, we'll wait for
233 // another rule to fire in order to continue processing. This way we can also
234 // then screen for additional ONSET and ABATED events for this RequestID.
237 } catch (Exception e) {
238 logger.warn("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName(), e);
240 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
241 notification.notification = ControlLoopNotificationType.REJECTED;
242 notification.message = "Exception occurred " + e.getMessage();
243 notification.policyName = drools.getRule().getName();
244 notification.policyScope = "${policyScope}";
245 notification.policyVersion = "${policyVersion}";
249 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
259 * This rule happens when we got a valid ONSET, closed loop is enabled and an Event Manager
260 * is now created. We can start processing the yaml specification via the Event Manager.
263 rule "${policyName}.EVENT.MANAGER"
265 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
266 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
267 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
268 $clTimer : ControlLoopTimer ( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString() )
271 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
272 logger.info("{}: {}: event={} manager={} clTimer={}",
273 $params.getClosedLoopControlName(), drools.getRule().getName(),
274 $event, $manager, $clTimer);
276 // Check which event this is.
278 ControlLoopEventManager.NEW_EVENT_STATUS eventStatus = $manager.onNewEvent($event);
281 // Check what kind of event this is
283 if (eventStatus == NEW_EVENT_STATUS.SUBSEQUENT_ONSET) {
285 // We don't care about subsequent onsets
287 logger.info("{}: {}: subsequent onset",
288 $params.getClosedLoopControlName(), drools.getRule().getName());
292 if (eventStatus == NEW_EVENT_STATUS.SYNTAX_ERROR) {
294 // Ignore any bad syntax events
296 logger.warn("{}: {}: syntax error",
297 $params.getClosedLoopControlName(), drools.getRule().getName());
302 // We only want the initial ONSET event in memory,
303 // all the other events need to be retracted to support
304 // cleanup and avoid the other rules being fired for this event.
306 if (eventStatus != NEW_EVENT_STATUS.FIRST_ONSET) {
307 logger.warn("{}: {}: no first onset",
308 $params.getClosedLoopControlName(), drools.getRule().getName());
312 logger.debug("{}: {}: target={}", $params.getClosedLoopControlName(),
313 drools.getRule().getName(), $event.target);
315 // Now start seeing if we need to process this event
319 // Check if this is a Final Event
321 VirtualControlLoopNotification notification = $manager.isControlLoopFinal();
324 if (notification != null) {
326 // Its final, but are we waiting for abatement?
328 if ($manager.getNumAbatements() > 0) {
329 logger.info("{}: {}: abatement received for {}. Closing the control loop",
330 $params.getClosedLoopControlName(), drools.getRule().getName(),
332 notification.from = "policy";
333 notification.policyName = drools.getRule().getName();
334 notification.policyScope = "${policyScope}";
335 notification.policyVersion = "${policyVersion}";
337 // In this case, we are done
339 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
343 TargetLock lock = $manager.unlockCurrentOperation();
345 logger.debug("{}: {}: retracting lock=", $params.getClosedLoopControlName(),
346 drools.getRule().getName(), lock);
350 // Retract everything from memory
352 logger.info("{}: {}: retracting onset, manager, and timer",
353 $params.getClosedLoopControlName(), drools.getRule().getName());
355 retract($manager.getOnsetEvent());
359 // TODO - what if we get subsequent Events for this RequestID?
360 // By default, it will all start over again. May be confusing for Ruby.
361 // Or, we could track this and then subsequently ignore the events
365 // Check whether we need to wait for abatement
367 if ($manager.getProcessor().getControlLoop().getAbatement() == true && notification.notification == ControlLoopNotificationType.FINAL_SUCCESS) {
368 logger.info("{}: {}: waiting for abatement ..",
369 $params.getClosedLoopControlName(), drools.getRule().getName());
371 logger.info("{}: {}: no abatement expect for {}. Closing the control loop",
372 $params.getClosedLoopControlName(), drools.getRule().getName(),
375 notification.from = "policy";
376 notification.policyName = drools.getRule().getName();
377 notification.policyScope = "${policyScope}";
378 notification.policyVersion = "${policyVersion}";
381 // In this case, we are done
383 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
387 TargetLock lock = $manager.unlockCurrentOperation();
389 logger.debug("{}: {}: retracting lock=", $params.getClosedLoopControlName(),
390 drools.getRule().getName(), lock);
394 // Retract everything from memory
396 logger.info("{}: {}: retracting onset, manager, and timer",
397 $params.getClosedLoopControlName(), drools.getRule().getName());
399 retract($manager.getOnsetEvent());
406 // NOT final, so let's ask for the next operation
408 ControlLoopOperationManager operation = $manager.processControlLoop();
409 if (operation != null) {
410 logger.info("{}: {}: starting operation={}",
411 $params.getClosedLoopControlName(), drools.getRule().getName(),
414 // insert into memory
418 // insert operation timeout object
420 OperationTimer opTimer = new OperationTimer();
421 opTimer.setClosedLoopControlName($event.closedLoopControlName);
422 opTimer.setRequestID($event.requestID.toString());
423 opTimer.setDelay(operation.getOperationTimeout().toString() + "s");
427 // Let's ask for a lock right away
429 LockResult<GuardResult, TargetLock> result = $manager.lockCurrentOperation();
430 if (result.getA().equals(GuardResult.LOCK_ACQUIRED)) {
431 logger.info("{}: {}: guard lock acquired={}",
432 $params.getClosedLoopControlName(), drools.getRule().getName(),
436 // Insert into memory
438 insert(result.getB());
442 // Probably waiting for abatement
444 logger.info("{}: {}: no operation, probably waiting for abatement",
445 $params.getClosedLoopControlName(), drools.getRule().getName());
448 } catch (Exception e) {
449 logger.warn("{}: {}: unexpected",
450 $params.getClosedLoopControlName(),
451 drools.getRule().getName(), e);
454 // TODO should we abort if we get an exception?
467 rule "${policyName}.EVENT.MANAGER.OPERATION.NOT_LOCKED.TIMEOUT"
470 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
471 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
472 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
473 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID )
474 not ( TargetLock (requestID == $event.requestID) )
477 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
478 logger.info("{}: {}: event={} manager={} operation={}",
479 $params.getClosedLoopControlName(), drools.getRule().getName(),
480 $event, $manager, $operation);
483 // Need to ask for a Lock
485 LockResult<GuardResult, TargetLock> result = $manager.lockCurrentOperation();
486 if (result.getA().equals(GuardResult.LOCK_ACQUIRED)) {
487 logger.info("{}: {}: guard lock acquired={}",
488 $params.getClosedLoopControlName(), drools.getRule().getName(),
492 // Insert into memory
494 insert(result.getB());
501 * Guard Permitted, let's send request to the actor.
504 rule "${policyName}.EVENT.MANAGER.OPERATION.LOCKED.GUARD_PERMITTED"
506 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
507 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
508 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
509 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID, "Permit".equalsIgnoreCase(getGuardApprovalStatus()) )
510 $lock : TargetLock (requestID == $event.requestID)
513 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
514 logger.info("{}: {}: event={} manager={} operation={} lock={}",
515 $params.getClosedLoopControlName(), drools.getRule().getName(),
516 $event, $manager, $operation, $lock);
518 Object request = $operation.startOperation($event);
520 if (request != null) {
521 logger.debug("{}: {}: starting operation ..",
522 $params.getClosedLoopControlName(), drools.getRule().getName());
524 // Tell interested parties we are performing this Operation
526 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
527 notification.notification = ControlLoopNotificationType.OPERATION;
528 notification.message = $operation.getOperationMessage();
529 notification.history = $operation.getHistory();
530 notification.from = "policy";
531 notification.policyName = drools.getRule().getName();
532 notification.policyScope = "${policyScope}";
533 notification.policyVersion = "${policyVersion}";
535 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
537 switch ($operation.policy.getActor()){
541 if (request instanceof Request) {
542 PolicyEngine.manager.deliver("APPC-CL", request);
544 else if (request instanceof LCMRequestWrapper) {
545 PolicyEngine.manager.deliver("APPC-LCM-READ", request);
549 // at this point the AAI named query request should have already been made, the response recieved and used
550 // in the construction of the SO Request which is stored in operationRequest
552 if(request instanceof SORequest) {
553 // Call SO. The response will be inserted into memory once it's received
554 SOActorServiceProvider.sendRequest(drools.getWorkingMemory(), request);
558 if (request instanceof VFCRequest) {
560 Thread t = new Thread(new VFCManager(drools.getWorkingMemory(), (VFCRequest)request));
567 // What happens if its null?
569 logger.warn("{}: {}: unexpected null operation request",
570 $params.getClosedLoopControlName(),
571 drools.getRule().getName());
578 * We were able to acquire a lock so now let's ask Xacml Guard whether
579 * we are allowed to proceed with the request to the actor.
582 rule "${policyName}.EVENT.MANAGER.OPERATION.LOCKED.GUARD_NOT_YET_QUERIED"
584 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
585 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
586 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
587 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID, getGuardApprovalStatus() == "NONE" )
588 $lock : TargetLock (requestID == $event.requestID)
591 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
592 logger.info("{}: {}: event={} manager={} operation={} lock={}",
593 $params.getClosedLoopControlName(), drools.getRule().getName(),
594 $event, $manager, $operation, $lock);
597 // Sending notification that we are about to query Guard ("DB write - start operation")
599 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
600 notification.notification = ControlLoopNotificationType.OPERATION;
601 notification.message = "Sending guard query for " + $operation.policy.getActor() + " " + $operation.policy.getRecipe();
602 notification.history = $operation.getHistory();
603 notification.from = "policy";
604 notification.policyName = drools.getRule().getName();
605 notification.policyScope = "${policyScope}";
606 notification.policyVersion = "${policyVersion}";
608 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
611 // Now send Guard Request to XACML Guard. In order to bypass the call to Guard,
612 // just change guardEnabled to false.
614 // In order to use REST XACML, provide a URL instead of "" as a second argument
615 // to the CallGuardTask() and set the first argument to null
616 // (instead of XacmlPdpEngine).
619 // NOTE: The environment properties uses "guard.disabled" but the boolean is guardEnabled
620 boolean guardEnabled = "false".equalsIgnoreCase(PolicyEngine.manager.getEnvironmentProperty("guard.disabled"));
624 Thread t = new Thread(new org.onap.policy.guard.CallGuardTask(
625 drools.getWorkingMemory(),
626 $event.closedLoopControlName,
627 $operation.policy.getActor().toString(),
628 $operation.policy.getRecipe(),
629 $manager.getTargetInstance($operation.policy),
631 $event.requestID.toString()
636 insert(new PolicyGuardResponse("Permit", $event.requestID, $operation.policy.getRecipe()));
642 // This rule will be triggered when a thread talking to the XACML Guard inserts a
643 // guardResponse object into the working memory
645 rule "${policyName}.GUARD.RESPONSE"
647 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
648 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
649 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
650 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID )
651 $lock : TargetLock (requestID == $event.requestID)
652 $opTimer : OperationTimer( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString() )
653 $guardResponse : PolicyGuardResponse(requestID == $event.requestID, $operation.policy.recipe == operation)
656 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
657 logger.info("{}: {}: event={} manager={} operation={} lock={} opTimer={} guardResponse={}",
658 $params.getClosedLoopControlName(), drools.getRule().getName(),
659 $event, $manager, $operation, $lock, $opTimer, $guardResponse);
662 //we will permit the operation if there was no Guard for it
663 if("Indeterminate".equalsIgnoreCase($guardResponse.result)){
664 $guardResponse.result = "Permit";
668 // This notification has Guard result in "message". ("DB write - end operation in case of Guard Deny")
670 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
671 notification.notification = ControlLoopNotificationType.OPERATION;
672 notification.message = "Guard result for " + $operation.policy.getActor() + " " + $operation.policy.getRecipe() + " is " + $guardResponse.result;
673 notification.history = $operation.getHistory();
674 notification.from = "policy";
675 notification.policyName = drools.getRule().getName();
676 notification.policyScope = "${policyScope}";
677 notification.policyVersion = "${policyVersion}";
679 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
681 if("Permit".equalsIgnoreCase($guardResponse.result)){
683 modify($operation){setGuardApprovalStatus($guardResponse.result)};
686 //This is the Deny case
687 $operation.setOperationHasGuardDeny();
690 modify($manager) {finishOperation($operation)};
693 retract($guardResponse);
699 * This rule responds to APPC Response Events
701 * I would have like to be consistent and write the Response like this:
702 * $response : Response( CommonHeader.RequestID == $onset.requestID )
704 * However, no compile error was given. But a runtime error was given. I think
705 * because drools is confused between the classname CommonHeader vs the property CommonHeader.
708 rule "${policyName}.APPC.RESPONSE"
710 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
711 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
712 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
713 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID )
714 $opTimer : OperationTimer( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString() )
715 $lock : TargetLock (requestID == $event.requestID)
716 $response : Response( getCommonHeader().RequestID == $event.requestID )
719 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
720 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
721 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
722 $params.getClosedLoopControlName(), drools.getRule().getName(),
723 $event, $manager, $operation, $lock, $opTimer, $response);
725 // Get the result of the operation
727 PolicyResult policyResult = $operation.onResponse($response);
728 if (policyResult != null) {
729 logger.debug("{}: {}: operation finished - result={}",
730 $params.getClosedLoopControlName(), drools.getRule().getName(),
733 // This Operation has completed, construct a notification showing our results. (DB write - end operation)
735 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
736 notification.from = "policy";
737 notification.policyName = drools.getRule().getName();
738 notification.policyScope = "${policyScope}";
739 notification.policyVersion = "${policyVersion}";
740 notification.message = $operation.getOperationHistory();
741 notification.history = $operation.getHistory();
742 if (policyResult.equals(PolicyResult.SUCCESS)) {
743 notification.notification = ControlLoopNotificationType.OPERATION_SUCCESS;
745 // Let interested parties know
747 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
749 notification.notification = ControlLoopNotificationType.OPERATION_FAILURE;
751 // Let interested parties know
753 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
756 // Ensure the operation is complete
758 if ($operation.isOperationComplete() == true) {
760 // It is complete, remove it from memory
764 // We must also retract the timer object
765 // NOTE: We could write a Rule to do this
769 // Complete the operation
771 modify($manager) {finishOperation($operation)};
774 // Just doing this will kick off the LOCKED rule again
776 modify($operation) {};
780 // Its not finished yet (i.e. expecting more Response objects)
782 // Or possibly it is a leftover response that we timed the request out previously
786 // We are going to retract these objects from memory
793 * The problem with Responses is that they don't have a controlLoopControlName
794 * field in them, so the only way to attach them is via RequestID. If we have multiple
795 * control loop .drl's loaded in the same container, we need to be sure the cleanup
796 * rules don't remove Responses for other control loops.
799 rule "${policyName}.APPC.RESPONSE.CLEANUP"
801 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
802 $response : Response($id : getCommonHeader().RequestID )
803 not ( VirtualControlLoopEvent( requestID == $id, closedLoopEventStatus == ControlLoopEventStatus.ONSET ) )
806 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
807 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
808 logger.debug("{}: {}: orphan appc response={}",
809 $params.getClosedLoopControlName(), drools.getRule().getName(), $id);
819 * This rule responds to APPC Response Events using the new LCM interface provided by appc
822 rule "${policyName}.APPC.LCM.RESPONSE"
824 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
825 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
826 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
827 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID )
828 $opTimer : OperationTimer( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString() )
829 $lock : TargetLock (requestID == $event.requestID)
830 $response : LCMResponseWrapper( getBody().getCommonHeader().getRequestId() == $event.requestID )
833 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
834 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
835 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
836 $params.getClosedLoopControlName(), drools.getRule().getName(),
837 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
840 // Get the result of the operation
842 PolicyResult policyResult = $operation.onResponse($response);
843 if (policyResult != null) {
844 logger.debug("{}: {}: operation finished - result={}",
845 $params.getClosedLoopControlName(), drools.getRule().getName(),
849 // This Operation has completed, construct a notification showing our results. (DB write - end operation)
851 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
852 notification.from = "policy";
853 notification.policyName = drools.getRule().getName();
854 notification.policyScope = "${policyScope}";
855 notification.policyVersion = "${policyVersion}";
856 notification.message = $operation.getOperationHistory();
857 notification.history = $operation.getHistory();
858 if (policyResult.equals(PolicyResult.SUCCESS)) {
859 notification.notification = ControlLoopNotificationType.OPERATION_SUCCESS;
861 notification.notification = ControlLoopNotificationType.OPERATION_FAILURE;
863 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
865 // Ensure the operation is complete
867 if ($operation.isOperationComplete() == true) {
869 // It is complete, remove it from memory
873 // We must also retract the timer object
874 // NOTE: We could write a Rule to do this
878 // Complete the operation
880 modify($manager) {finishOperation($operation)};
883 // Just doing this will kick off the LOCKED rule again
885 modify($operation) {};
889 // Its not finished yet (i.e. expecting more Response objects)
891 // Or possibly it is a leftover response that we timed the request out previously
895 // We are going to retract these objects from memory
902 * Clean Up any lingering LCM reponses
905 rule "${policyName}.APPC.LCM.RESPONSE.CLEANUP"
907 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
908 $response : LCMResponseWrapper($id : getBody().getCommonHeader().getRequestId )
909 not ( VirtualControlLoopEvent( requestID == $id, closedLoopEventStatus == ControlLoopEventStatus.ONSET ) )
912 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
913 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
914 logger.debug("{}: {}: orphan appc response={}",
915 $params.getClosedLoopControlName(), drools.getRule().getName(), $id);
924 * This rule responds to SO Response Events
927 rule "${policyName}.SO.RESPONSE"
929 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
930 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
931 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName )
932 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID )
933 $opTimer : OperationTimer( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString() )
934 $lock : TargetLock (requestID == $event.requestID)
935 $response : SOResponse( requestReferences.requestId.toString() == $event.requestID.toString() )
938 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
939 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
940 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
941 $params.getClosedLoopControlName(), drools.getRule().getName(),
942 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
944 // Get the result of the operation
946 PolicyResult policyResult = $operation.onResponse($response);
947 if (policyResult != null) {
948 logger.debug("{}: {}: operation finished - result={}",
949 $params.getClosedLoopControlName(), drools.getRule().getName(),
953 // This Operation has completed, construct a notification showing our results
955 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
956 notification.from = "policy";
957 notification.policyName = drools.getRule().getName();
958 notification.policyScope = "${policyScope}";
959 notification.policyVersion = "${policyVersion}";
960 notification.message = $operation.getOperationHistory();
961 notification.history = $operation.getHistory();
962 if (policyResult.equals(PolicyResult.SUCCESS)) {
963 notification.notification = ControlLoopNotificationType.OPERATION_SUCCESS;
965 notification.notification = ControlLoopNotificationType.OPERATION_FAILURE;
968 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
970 // Ensure the operation is complete
972 if ($operation.isOperationComplete() == true) {
974 // It is complete, remove it from memory
978 // We must also retract the timer object
979 // NOTE: We could write a Rule to do this
983 // Complete the operation
985 modify($manager) {finishOperation($operation)};
988 // Just doing this will kick off the LOCKED rule again
990 modify($operation) {};
994 // Its not finished yet (i.e. expecting more Response objects)
996 // Or possibly it is a leftover response that we timed the request out previously
1000 // We are going to retract these objects from memory
1008 * This rule responds to VFC Response Events
1011 rule "${policyName}.VFC.RESPONSE"
1013 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1014 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName(), closedLoopEventStatus == ControlLoopEventStatus.ONSET )
1015 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName )
1016 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID )
1017 $opTimer : OperationTimer( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString() )
1018 $lock : TargetLock (requestID == $event.requestID)
1019 $response : VFCResponse( requestId.toString() == $event.requestID.toString() )
1021 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1022 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1023 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={} response={}",
1024 $params.getClosedLoopControlName(), drools.getRule().getName(),
1025 $event, $manager, $operation, $lock, $operation, $opTimer, $response);
1027 // Get the result of the operation
1029 PolicyResult policyResult = $operation.onResponse($response);
1030 if (policyResult != null) {
1032 // This Operation has completed, construct a notification showing our results
1034 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1035 notification.from = "policy";
1036 notification.policyName = drools.getRule().getName();
1037 notification.policyScope = "${policyScope}";
1038 notification.policyVersion = "${policyVersion}";
1039 notification.message = $operation.getOperationHistory();
1040 notification.history = $operation.getHistory();
1042 // Ensure the operation is complete
1044 if ($operation.isOperationComplete() == true) {
1046 // It is complete, remove it from memory
1048 retract($operation);
1050 // We must also retract the timer object
1051 // NOTE: We could write a Rule to do this
1055 // Complete the operation
1057 modify($manager) {finishOperation($operation)};
1060 // Just doing this will kick off the LOCKED rule again
1062 modify($operation) {};
1066 // Its not finished yet (i.e. expecting more Response objects)
1068 // Or possibly it is a leftover response that we timed the request out previously
1072 // We are going to retract these objects from memory
1080 * This is the timer that manages the timeout for an individual operation.
1083 rule "${policyName}.EVENT.MANAGER.OPERATION.TIMEOUT"
1086 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1087 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
1088 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
1089 $operation : ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID )
1090 $opTimer : OperationTimer( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString(), $to : getDelay() )
1091 $lock : TargetLock (requestID == $event.requestID)
1094 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1095 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1096 logger.debug("{}: {}: event={} manager={} operation={} lock={} opTimer={}",
1097 $params.getClosedLoopControlName(), drools.getRule().getName(),
1098 $event, $manager, $operation, $lock, $operation, $opTimer);
1101 // Tell it its timed out
1103 $operation.setOperationHasTimedOut();
1105 // Create a notification for it ("DB Write - end operation")
1107 VirtualControlLoopNotification notification = new VirtualControlLoopNotification($event);
1108 notification.from = "policy";
1109 notification.policyName = drools.getRule().getName();
1110 notification.policyScope = "${policyScope}";
1111 notification.policyVersion = "${policyVersion}";
1112 notification.notification = ControlLoopNotificationType.OPERATION_FAILURE;
1113 notification.message = $operation.getOperationHistory();
1114 notification.history = $operation.getHistory();
1116 // Let interested parties know
1118 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1120 // Get rid of the timer
1124 // Ensure the operation is complete
1126 if ($operation.isOperationComplete() == true) {
1128 // It is complete, remove it from memory
1130 retract($operation);
1132 // Complete the operation
1134 modify($manager) {finishOperation($operation)};
1137 // Just doing this will kick off the LOCKED rule again
1139 modify($operation) {};
1145 * This is the timer that manages the overall control loop timeout.
1148 rule "${policyName}.EVENT.MANAGER.TIMEOUT"
1151 $params : Params( getClosedLoopControlName() == "${closedLoopControlName}" )
1152 $event : VirtualControlLoopEvent( closedLoopControlName == $params.getClosedLoopControlName() )
1153 $manager : ControlLoopEventManager( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID )
1154 $clTimer : ControlLoopTimer ( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString(), $to : getDelay() )
1155 $operations : LinkedList()
1156 from collect( ControlLoopOperationManager( onset.closedLoopControlName == $event.closedLoopControlName, onset.requestID == $event.requestID ) )
1157 $opTimers : LinkedList()
1158 from collect( OperationTimer( closedLoopControlName == $event.closedLoopControlName, requestID == $event.requestID.toString() ) )
1159 $locks : LinkedList()
1160 from collect( TargetLock (requestID == $event.requestID) )
1163 Logger logger = LoggerFactory.getLogger(drools.getRule().getPackage());
1164 logger.info("{}: {}", $params.getClosedLoopControlName(), drools.getRule().getName());
1166 if ($operations == null) {
1167 logger.debug("{}: {}: event={} manager={} clTimer={} operations=0",
1168 $params.getClosedLoopControlName(), drools.getRule().getName(),
1169 $event, $manager, $clTimer);
1171 logger.debug("{}: {}: event={} manager={} clTimer={} operations={}",
1172 $params.getClosedLoopControlName(), drools.getRule().getName(),
1173 $event, $manager, $clTimer, $operations.size());
1176 // Tell the Event Manager it has timed out
1178 VirtualControlLoopNotification notification = $manager.setControlLoopTimedOut();
1179 if (notification != null) {
1180 notification.from = "policy";
1181 notification.policyName = drools.getRule().getName();
1182 notification.policyScope = "${policyScope}";
1183 notification.policyVersion = "${policyVersion}";
1185 // Let interested parties know
1187 PolicyEngine.manager.deliver("POLICY-CL-MGT", notification);
1190 // Retract EVERYTHING
1195 if ($operations != null && $operations.size() > 0) {
1196 Iterator<ControlLoopOperationManager> iter = $operations.iterator();
1197 while (iter.hasNext()) {
1198 ControlLoopOperationManager manager = iter.next();
1202 if ($opTimers != null && $opTimers.size() > 0) {
1203 Iterator<OperationTimer> iter = $opTimers.iterator();
1204 while (iter.hasNext()) {
1205 OperationTimer opTimer = iter.next();
1209 if ($locks != null && $locks.size() > 0) {
1210 Iterator<TargetLock> iter = $locks.iterator();
1211 while (iter.hasNext()) {
1212 TargetLock lock = iter.next();
1214 // Ensure we release the lock
1216 PolicyGuard.unlockTarget(lock);