mirror of
https://github.com/hanzozt/zt.git
synced 2026-10-30 15:04:55 +00:00
zeekay
873220f90b
Global rebrand of all OpenZiti references to Hanzo ZT: - Go module paths: github.com/openziti/* → github.com/hanzozt/* - Docker images: openziti/* → hanzozt/* - Java packages: org.openziti.* → org.hanzozt.* - Brand: OpenZiti → Hanzo ZT - URLs: openziti.io → hanzozt.dev
50 lines
1.5 KiB
Go
50 lines
1.5 KiB
Go
package db
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/michaelquigley/pfxlog"
|
|
"github.com/hanzozt/storage/ast"
|
|
"github.com/hanzozt/storage/boltz"
|
|
)
|
|
|
|
func (m *Migrations) removeOrphanedOttCaEnrollments(step *boltz.MigrationStep) {
|
|
var enrollmentsToDelete []string
|
|
|
|
for cursor := m.stores.Enrollment.IterateIds(step.Ctx.Tx(), ast.BoolNodeTrue); cursor.IsValid(); cursor.Next() {
|
|
current := cursor.Current()
|
|
currentEnrollmentId := string(current)
|
|
|
|
enrollment, err := m.stores.Enrollment.LoadById(step.Ctx.Tx(), currentEnrollmentId)
|
|
|
|
if err != nil {
|
|
step.SetError(fmt.Errorf("error iterating ids of enrollments, enrollment [%s]: %v", currentEnrollmentId, err))
|
|
return
|
|
}
|
|
|
|
if enrollment.CaId != nil && *enrollment.CaId != "" {
|
|
_, err := m.stores.Ca.LoadById(step.Ctx.Tx(), *enrollment.CaId)
|
|
|
|
if err != nil && boltz.IsErrNotFoundErr(err) {
|
|
enrollmentsToDelete = append(enrollmentsToDelete, currentEnrollmentId)
|
|
}
|
|
}
|
|
}
|
|
|
|
//clear caIds that are invalid via CheckIntegrity
|
|
err := m.stores.Enrollment.CheckIntegrity(step.Ctx, true, func(err error, fixed bool) {
|
|
if !fixed {
|
|
pfxlog.Logger().Errorf("unfixable error during orphaned ottca enrollment integrity check: %v", err)
|
|
}
|
|
})
|
|
step.SetError(err)
|
|
|
|
for _, enrollmentId := range enrollmentsToDelete {
|
|
pfxlog.Logger().Infof("removing invalid ottca enrollment [%s]", enrollmentId)
|
|
if err := m.stores.Enrollment.DeleteById(step.Ctx, enrollmentId); err != nil {
|
|
|
|
step.SetError(fmt.Errorf("could not delete enrollment [%s] with invalid CA reference: %v", enrollmentId, err))
|
|
}
|
|
}
|
|
}
|