stack/components/operator/internal/resources/auths/init.go

/*
Copyright 2022.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package auths

import (
	"github.com/formancehq/operator/api/formance.com/v1beta1"
	. "github.com/formancehq/operator/internal/core"
	"github.com/formancehq/operator/internal/resources/databases"
	"github.com/formancehq/operator/internal/resources/gatewayhttpapis"
	"github.com/formancehq/operator/internal/resources/jobs"
	"github.com/formancehq/operator/internal/resources/registries"
	"github.com/formancehq/operator/internal/resources/settings"
	. "github.com/formancehq/stack/libs/go-libs/collectionutils"
	"github.com/pkg/errors"
	appsv1 "k8s.io/api/apps/v1"
	batchv1 "k8s.io/api/batch/v1"
	corev1 "k8s.io/api/core/v1"
)

//+kubebuilder:rbac:groups=formance.com,resources=auths,verbs=get;list;watch;create;update;patch;delete
//+kubebuilder:rbac:groups=formance.com,resources=auths/status,verbs=get;update;patch
//+kubebuilder:rbac:groups=formance.com,resources=auths/finalizers,verbs=update

func Reconcile(ctx Context, stack *v1beta1.Stack, auth *v1beta1.Auth, version string) error {

	authClientList := make([]*v1beta1.AuthClient, 0)
	err := GetAllStackDependencies(ctx, auth.Spec.Stack, &authClientList)
	if err != nil {
		return err
	}

	configMap, err := createConfiguration(ctx, stack, auth, authClientList)
	if err != nil {
		return errors.Wrap(err, "creating configuration")
	}

	database, err := databases.Create(ctx, stack, auth)
	if err != nil {
		return errors.Wrap(err, "creating database")
	}

	if !database.Status.Ready {
		return NewPendingError().WithMessage("database is not ready")
	}

	image, err := registries.GetImage(ctx, stack, "auth", version)
	if err != nil {
		return errors.Wrap(err, "resolving image")
	}

	if IsGreaterOrEqual(version, "v2.0.0-rc.5") && databases.GetSavedModuleVersion(database) != version {
		serviceAccountName, err := settings.GetAWSServiceAccount(ctx, stack.Name)
		if err != nil {
			return errors.Wrap(err, "getting service account name")
		}

		migrateContainer, err := databases.MigrateDatabaseContainer(ctx, stack, image, database)
		if err != nil {
			return errors.Wrap(err, "creating migrate container")
		}

		if err := jobs.Handle(ctx, auth, "migrate",
			migrateContainer,
			jobs.WithServiceAccount(serviceAccountName),
		); err != nil {
			return err
		}

		if err := databases.SaveModuleVersion(ctx, database, version); err != nil {
			return errors.Wrap(err, "saving module version in database object")
		}
	}

	if err := createDeployment(ctx, stack, auth, database, configMap, image); err != nil {
		return errors.Wrap(err, "creating deployment")
	}

	if err := gatewayhttpapis.Create(ctx, auth, gatewayhttpapis.WithHealthCheckEndpoint("_healthcheck"), gatewayhttpapis.WithRules(gatewayhttpapis.RuleUnsecured())); err != nil {
		return errors.Wrap(err, "creating http api")
	}

	auth.Status.Clients = Map(authClientList, (*v1beta1.AuthClient).GetName)

	return nil
}

func init() {
	Init(
		WithModuleReconciler(Reconcile,
			WithOwn[*v1beta1.Auth](&appsv1.Deployment{}),
			WithOwn[*v1beta1.Auth](&v1beta1.GatewayHTTPAPI{}),
			WithOwn[*v1beta1.Auth](&v1beta1.Database{}),
			WithOwn[*v1beta1.Auth](&corev1.ConfigMap{}),
			WithOwn[*v1beta1.Auth](&batchv1.Job{}),
			WithOwn[*v1beta1.Auth](&v1beta1.ResourceReference{}),
			WithWatchSettings[*v1beta1.Auth](),
			WithWatchDependency[*v1beta1.Auth](&v1beta1.AuthClient{}),
			databases.Watch[*v1beta1.Auth](),
		),
	)
}