--- /dev/null
+/*-
+ * ============LICENSE_START=======================================================
+ * Copyright (C) 2022 Nordix Foundation.
+ * ================================================================================
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ * ============LICENSE_END=========================================================
+ */
+
+package org.onap.policy.clamp.acm.participant.kubernetes.configurations;
+
+import java.lang.invoke.MethodHandles;
+import java.util.ArrayList;
+import java.util.List;
+import lombok.Data;
+import org.onap.policy.clamp.acm.participant.kubernetes.models.HelmRepository;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.boot.context.properties.ConfigurationProperties;
+import org.springframework.stereotype.Component;
+
+@Component
+@ConfigurationProperties(prefix = "helm")
+@Data
+public class HelmRepositoryConfig {
+
+ private final Logger logger = LoggerFactory.getLogger(MethodHandles.lookup().lookupClass());
+
+ private List<HelmRepository> repos = new ArrayList<>();
+}
LOGGER.info("Installation request received for the Helm Chart {} ", chartData);
try {
var chartInfo = CODER.convert(chartData, ChartInfo.class);
- chartService.installChart(chartInfo);
- chartMap.put(element.getId(), chartInfo);
-
- var config = CODER.convert(nodeTemplate.getProperties(), ThreadConfig.class);
- checkPodStatus(automationCompositionId, element.getId(), chartInfo, config.uninitializedToPassiveTimeout,
- config.podStatusCheckInterval);
-
+ if (chartService.installChart(chartInfo)) {
+ chartMap.put(element.getId(), chartInfo);
+
+ var config = CODER.convert(nodeTemplate.getProperties(),
+ ThreadConfig.class);
+ checkPodStatus(automationCompositionId, element.getId(), chartInfo,
+ config.uninitializedToPassiveTimeout, config.podStatusCheckInterval);
+ }
} catch (ServiceException | CoderException | IOException | ExecutionException
| InterruptedException e) {
LOGGER.warn("Installation of Helm chart failed", e);
if (StringUtils.isEmpty(repo.getAddress())) {
throw new ServiceException("Repository Should have valid address");
}
- var url = repo.getProtocol() + "://" + repo.getAddress();
- if (repo.getPort() != null) {
- url = url + ":" + repo.getPort();
- }
// @formatter:off
List<String> helmArguments = new ArrayList<>(
List.of(
"helm",
"repo",
- "add", repo.getRepoName(), url
+ "add", repo.getRepoName(), repo.getAddress()
));
- if (repo.getUserName() != null && repo.getPassword() != null) {
+ if (!StringUtils.isEmpty(repo.getUserName()) && !StringUtils.isEmpty(repo.getPassword())) {
helmArguments.addAll(List.of("--username", repo.getUserName(), "--password", repo.getPassword()));
}
return new ProcessBuilder().command(helmArguments);
/*-
* ========================LICENSE_START=================================
- * Copyright (C) 2021 Nordix Foundation. All rights reserved.
+ * Copyright (C) 2021-2022 Nordix Foundation. All rights reserved.
* ======================================================================
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
package org.onap.policy.clamp.acm.participant.kubernetes.models;
+import lombok.AllArgsConstructor;
import lombok.Builder;
import lombok.Data;
+import lombok.NoArgsConstructor;
@Data
@Builder
+@NoArgsConstructor
+@AllArgsConstructor
public class HelmRepository {
private String repoName;
- private String protocol;
-
private String address;
- private String port;
-
private String userName;
private String password;
import java.io.IOException;
import java.lang.invoke.MethodHandles;
import java.util.Collection;
+import org.onap.policy.clamp.acm.participant.kubernetes.configurations.HelmRepositoryConfig;
import org.onap.policy.clamp.acm.participant.kubernetes.exception.ServiceException;
import org.onap.policy.clamp.acm.participant.kubernetes.helm.HelmClient;
import org.onap.policy.clamp.acm.participant.kubernetes.models.ChartInfo;
@Autowired
private HelmClient helmClient;
+ @Autowired
+ private HelmRepositoryConfig helmRepositoryConfig;
+
/**
* Get all the installed charts.
* @return list of charts.
/**
* Install a helm chart.
* @param chart name and version.
+ * @return boolean flag to indicate success or failure
* @throws ServiceException in case of error
* @throws IOException in case of IO errors
*/
- public void installChart(ChartInfo chart) throws ServiceException, IOException {
+ public boolean installChart(ChartInfo chart) throws ServiceException, IOException {
+ boolean whiteListed = false;
if (chart.getRepository() == null) {
String repoName = findChartRepo(chart);
if (repoName == null) {
logger.error("Chart repository could not be found. Skipping chart Installation "
+ "for the chart {} ", chart.getChartId().getName());
- return;
+ return false;
} else {
HelmRepository repo = HelmRepository.builder().repoName(repoName).build();
chart.setRepository(repo);
}
} else {
// Add remote repository if passed via TOSCA
- configureRepository(chart.getRepository());
+ // check whether the repo is whitelisted
+ for (HelmRepository repo : helmRepositoryConfig.getRepos()) {
+ if (repo.getAddress().equals(chart.getRepository().getAddress())
+ && chart.getRepository().getAddress().contains("https")) {
+ configureRepository(chart.getRepository());
+ whiteListed = true;
+ break;
+ }
+ }
+ if (!whiteListed) {
+ logger.error("Repository is not Whitelisted / plain http in not allowed");
+ return false;
+ }
}
helmClient.installChart(chart);
+ return true;
}
reportingTimeIntervalMs: 120000
description: Participant Description
participantId:
- name: org.onap.policy.clamp.acm.KubernetesParticipant
+ name: K8sParticipant0
version: 2.3.4
participantType:
name: org.onap.k8s.acm.K8SAutomationCompositionParticipant
logging:
# Configuration of logging
level:
- ROOT: ERROR
+ ROOT: INFO
org.springframework: ERROR
org.springframework.data: ERROR
org.springframework.web.reactive.function.client.ExchangeFunctions: ERROR
chart:
api:
enabled: false
+
+helm:
+ repos:
+ -
+ repoName: kong
+ address: https://charts.konghq.com
+ -
+ repoName: bitnami
+ address: https://charts.bitnami.com/bitnami
\ No newline at end of file
/*-
* ============LICENSE_START=======================================================
- * Copyright (C) 2021 Nordix Foundation.
+ * Copyright (C) 2021-2022 Nordix Foundation.
* Modifications Copyright (C) 2021 AT&T Intellectual Property. All rights reserved.
* ================================================================================
* Licensed under the Apache License, Version 2.0 (the "License");
@Test
void test_AutomationCompositionElementUpdate() throws PfModelException, IOException, ServiceException,
ExecutionException, InterruptedException {
+ doReturn(true).when(chartService).installChart(any());
doNothing().when(automationCompositionElementHandler).checkPodStatus(any(), any(), any(), anyInt(), anyInt());
UUID elementId1 = UUID.randomUUID();
AutomationCompositionElement element = new AutomationCompositionElement();
import static org.hamcrest.CoreMatchers.is;
import static org.mockito.ArgumentMatchers.any;
import static org.mockito.Mockito.doNothing;
+import static org.mockito.Mockito.doReturn;
import static org.mockito.Mockito.when;
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.content;
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
RequestBuilder requestBuilder;
//Mocking successful installation for void install method
- doNothing().when(chartService).installChart(charts.get(0));
+ doReturn(true).when(chartService).installChart(charts.get(0));
requestBuilder = MockMvcRequestBuilders.post(INSTALL_CHART_URL).accept(MediaType.APPLICATION_JSON_VALUE)
.content(getInstallationJson(charts.get(0).getChartId().getName(), charts.get(0).getChartId().getVersion()))
/*-
* ============LICENSE_START=======================================================
- * Copyright (C) 2021 Nordix Foundation.
+ * Copyright (C) 2021-2022 Nordix Foundation.
* Modifications Copyright (C) 2021 AT&T Intellectual Property. All rights reserved.
* ================================================================================
* Licensed under the Apache License, Version 2.0 (the "License");
import java.io.File;
import java.io.IOException;
+import java.util.ArrayList;
import java.util.Collection;
import java.util.List;
import org.junit.jupiter.api.BeforeAll;
import org.mockito.InjectMocks;
import org.mockito.Mock;
import org.mockito.Spy;
+import org.onap.policy.clamp.acm.participant.kubernetes.configurations.HelmRepositoryConfig;
import org.onap.policy.clamp.acm.participant.kubernetes.exception.ServiceException;
import org.onap.policy.clamp.acm.participant.kubernetes.helm.HelmClient;
import org.onap.policy.clamp.acm.participant.kubernetes.models.ChartInfo;
import org.onap.policy.clamp.acm.participant.kubernetes.models.ChartList;
+import org.onap.policy.clamp.acm.participant.kubernetes.models.HelmRepository;
import org.onap.policy.common.utils.coder.Coder;
import org.onap.policy.common.utils.coder.CoderException;
import org.onap.policy.common.utils.coder.StandardCoder;
@Mock
private HelmClient helmClient;
+ @Mock
+ private HelmRepositoryConfig helmRepositoryConfig;
+
@BeforeAll
static void init() throws CoderException {
charts = CODER.decode(new File(CHART_INFO_YAML), ChartList.class).getCharts();
@Test
void test_installChart() throws IOException, ServiceException {
+ List<HelmRepository> helmRepositoryList = new ArrayList<>();
+ helmRepositoryList.add(HelmRepository.builder().address("https://localhost:8080").build());
+ doReturn(helmRepositoryList).when(helmRepositoryConfig).getRepos();
assertDoesNotThrow(() -> chartService.installChart(charts.get(0)));
doThrow(ServiceException.class).when(helmClient).installChart(any());
assertThatThrownBy(() -> chartService.installChart(charts.get(0))).isInstanceOf(ServiceException.class);
},
"namespace" : "onap",
"repository" : {
- "repoName": "chartMuseum"
+ "repoName": "chartMuseum",
+ "address" : "https://localhost:8080"
},
"releaseName" : "helloworld"
},
Code Review / policy / clamp.git / commitdiff