package main import ( "bytes" "crypto/sha1" "encoding/hex" "fmt" "io" "log" "path" "reflect" "strings" yaml "gopkg.in/yaml.v2" "novit.tech/direktil/pkg/config" "novit.tech/direktil/local-server/pkg/clustersconfig" ) type renderContext struct { Labels map[string]string Annotations map[string]string Host *clustersconfig.Host Cluster *clustersconfig.Cluster Vars map[string]any BootstrapConfigTemplate *clustersconfig.Template ConfigTemplate *clustersconfig.Template StaticPodsTemplate *clustersconfig.Template clusterConfig *clustersconfig.Config } func newRenderContext(host *clustersconfig.Host, cfg *clustersconfig.Config) (ctx *renderContext, err error) { cluster := cfg.Cluster(host.Cluster) if cluster == nil { err = fmt.Errorf("no cluster named %q", host.Cluster) return } vars := make(map[string]any) for _, oVars := range []map[string]any{ cluster.Vars, host.Vars, } { mapMerge(vars, oVars) } return &renderContext{ Labels: mergeLabels(cluster.Labels, host.Labels), Annotations: mergeLabels(cluster.Annotations, host.Annotations), Host: host, Cluster: cluster, Vars: vars, BootstrapConfigTemplate: cfg.ConfigTemplate(host.BootstrapConfig), ConfigTemplate: cfg.ConfigTemplate(host.Config), clusterConfig: cfg, }, nil } func mergeLabels(sources ...map[string]string) map[string]string { ret := map[string]string{} for _, src := range sources { for k, v := range src { ret[k] = v } } return ret } func mapMerge(target, source map[string]interface{}) { for k, v := range source { target[k] = genericMerge(target[k], v) } } func genericMerge(target, source interface{}) (result interface{}) { srcV := reflect.ValueOf(source) tgtV := reflect.ValueOf(target) if srcV.Kind() == reflect.Map && tgtV.Kind() == reflect.Map { // XXX maybe more specific later result = map[interface{}]interface{}{} resultV := reflect.ValueOf(result) tgtIt := tgtV.MapRange() for tgtIt.Next() { sv := srcV.MapIndex(tgtIt.Key()) if sv.Kind() == 0 { resultV.SetMapIndex(tgtIt.Key(), tgtIt.Value()) continue } merged := genericMerge(tgtIt.Value().Interface(), sv.Interface()) resultV.SetMapIndex(tgtIt.Key(), reflect.ValueOf(merged)) } srcIt := srcV.MapRange() for srcIt.Next() { if resultV.MapIndex(srcIt.Key()).Kind() != 0 { continue // already done } resultV.SetMapIndex(srcIt.Key(), srcIt.Value()) } return } return source } func (ctx *renderContext) Name() string { switch { case ctx.Host != nil: return "host:" + ctx.Host.Name case ctx.Cluster != nil: return "cluster:" + ctx.Cluster.Name default: return "unknown" } } func (ctx *renderContext) BootstrapConfig() string { if ctx.BootstrapConfigTemplate == nil { log.Fatalf("no such (bootstrap) config: %q", ctx.Host.BootstrapConfig) } return ctx.renderConfig(ctx.BootstrapConfigTemplate) } func (ctx *renderContext) Config() string { if ctx.ConfigTemplate == nil { log.Fatalf("no such config: %q", ctx.Host.Config) } return ctx.renderConfig(ctx.ConfigTemplate) } func (ctx *renderContext) renderConfig(configTemplate *clustersconfig.Template) string { buf := new(strings.Builder) ctx.renderConfigTo(buf, configTemplate) return buf.String() } func (ctx *renderContext) renderConfigTo(buf io.Writer, configTemplate *clustersconfig.Template) { ctxName := ctx.Name() ctxMap := ctx.asMap() extraFuncs := ctx.templateFuncs(ctxMap) extraFuncs["static_pods_files"] = func(dir string) (string, error) { namePods := ctx.renderStaticPods() defs := make([]config.FileDef, 0) for _, namePod := range namePods { name := namePod.Namespace + "_" + namePod.Name ba, err := yaml.Marshal(namePod.Pod) if err != nil { return "", fmt.Errorf("static pod %s: failed to render: %v", name, err) } defs = append(defs, config.FileDef{ Path: path.Join(dir, name+".yaml"), Mode: 0640, Content: string(ba), }) } ba, err := yaml.Marshal(defs) return string(ba), err } extraFuncs["machine_id"] = func() string { ba := sha1.Sum([]byte(ctx.Cluster.Name + "/" + ctx.Host.Name)) // TODO: check semantics of machine-id return hex.EncodeToString(ba[:]) } if err := configTemplate.Execute(ctxName, "config", buf, ctxMap, extraFuncs); err != nil { log.Fatalf("failed to render config %q for host %q: %v", ctx.Host.Config, ctx.Host.Name, err) } } func (ctx *renderContext) templateFuncs(ctxMap map[string]interface{}) map[string]interface{} { cluster := ctx.Cluster.Name getKeyCert := func(name, funcName string) (s string, err error) { req := ctx.clusterConfig.CSR(name) if req == nil { err = fmt.Errorf("no certificate request named %q", name) return } if req.CA == "" { err = fmt.Errorf("CA not defined in req %q", name) return } buf := &bytes.Buffer{} err = req.Execute(ctx.Name(), "req:"+name, buf, ctxMap, nil) if err != nil { return } key := name if req.PerHost { key += "/" + ctx.Host.Name } if funcName == "tls_dir" { // needs the dir name dir := "/etc/tls/" + name s = fmt.Sprintf("{{ %s %q %q %q %q %q %q %q }}", funcName, dir, cluster, req.CA, key, req.Profile, req.Label, buf.String()) } else { s = fmt.Sprintf("{{ %s %q %q %q %q %q %q }}", funcName, cluster, req.CA, key, req.Profile, req.Label, buf.String()) } return } funcs := clusterFuncs(ctx.Cluster) for k, v := range map[string]interface{}{ "tls_key": func(name string) (string, error) { return getKeyCert(name, "tls_key") }, "tls_crt": func(name string) (s string, err error) { return getKeyCert(name, "tls_crt") }, "tls_dir": func(name string) (s string, err error) { return getKeyCert(name, "tls_dir") }, "ssh_host_keys": func(dir string) (s string) { return fmt.Sprintf("{{ ssh_host_keys %q %q \"\"}}", dir, cluster) }, "host_download_token": func() (s string) { return "{{ host_download_token }}" }, "hosts_of_group": func() (hosts []interface{}) { hosts = make([]interface{}, 0) for _, host := range ctx.clusterConfig.Hosts { if host.Group != ctx.Host.Group { continue } hosts = append(hosts, asMap(host)) } return hosts }, "hosts_of_group_count": func() (count int) { for _, host := range ctx.clusterConfig.Hosts { if host.Group == ctx.Host.Group { count++ } } return }, } { funcs[k] = v } return funcs } func (ctx *renderContext) asMap() map[string]interface{} { result := asMap(ctx) // also expand cluster: cluster := result["cluster"].(map[interface{}]interface{}) cluster["kubernetes_svc_ip"] = ctx.Cluster.KubernetesSvcIP().String() cluster["dns_svc_ip"] = ctx.Cluster.DNSSvcIP().String() return result } func asMap(v interface{}) map[string]interface{} { ba, err := yaml.Marshal(v) if err != nil { panic(err) // shouldn't happen } result := make(map[string]interface{}) if err := yaml.Unmarshal(ba, result); err != nil { panic(err) // shouldn't happen } return result }