Files
zt/ziti/cmd/ascode/importer/importer_service_policies.go
Jens AlmandGitHub acf6fc463b Changing export/import structs to allow running it without using a Co… (#2727)
* Changing export/import structs to allow running it without using a Cobra command

* Switched away from using LoginOpts/Options out and err

* Removed unused file property

* Refactored input options and out/err handling

* Refactored to remove public loginOpts in import and export

* Fixed import

* Fixed lint issue. Updated help

* Removed verbose check around log statements

* Switched some log statements to print to stderr for consistency

* Refactored to remove specific output handling

* Fixed lint issue

* Refactor to use central client for both import and export
2025-02-06 08:08:28 -05:00

93 lines
3.2 KiB
Go

/*
Copyright NetFoundry Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
https://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package importer
import (
"errors"
"github.com/openziti/edge-api/rest_management_api_client/service_policy"
"github.com/openziti/edge-api/rest_model"
"github.com/openziti/edge-api/rest_util"
"github.com/openziti/ziti/internal"
"github.com/openziti/ziti/internal/rest/mgmt"
"slices"
)
func (importer *Importer) IsServicePolicyImportRequired(args []string) bool {
return slices.Contains(args, "all") || len(args) == 0 || // explicit all or nothing specified
slices.Contains(args, "service-policy")
}
func (importer *Importer) ProcessServicePolicies(input map[string][]interface{}) (map[string]string, error) {
var result = map[string]string{}
for _, data := range input["servicePolicies"] {
create := FromMap(data, rest_model.ServicePolicyCreate{})
// see if the service policy already exists
existing := mgmt.ServicePolicyFromFilter(importer.Client, mgmt.NameFilter(*create.Name))
if existing != nil {
log.WithFields(map[string]interface{}{
"name": *create.Name,
"servicePolicyId": *existing.ID,
}).
Info("Found existing ServicePolicy, skipping create")
_, _ = internal.FPrintfReusingLine(importer.Err, "Skipping ServicePolicy %s\r", *create.Name)
continue
}
// look up the service ids from the name and add to the create
serviceRoles, err := importer.lookupServices(create.ServiceRoles)
if err != nil {
return nil, err
}
create.ServiceRoles = serviceRoles
// look up the identity ids from the name and add to the create
identityRoles, err := importer.lookupIdentities(create.IdentityRoles)
if err != nil {
return nil, errors.Join(errors.New("Unable to read all identities from ServicePolicy"), err)
}
create.IdentityRoles = identityRoles
// do the actual create since it doesn't exist
_, _ = internal.FPrintfReusingLine(importer.Err, "Skipping ServicePolicy %s\r", *create.Name)
log.WithField("name", *create.Name).Debug("Creating ServicePolicy")
created, createErr := importer.Client.ServicePolicy.CreateServicePolicy(&service_policy.CreateServicePolicyParams{Policy: create}, nil)
if createErr != nil {
if payloadErr, ok := createErr.(rest_util.ApiErrorPayload); ok {
log.WithFields(map[string]interface{}{
"field": payloadErr.GetPayload().Error.Cause.APIFieldError.Field,
"reason": payloadErr.GetPayload().Error.Cause.APIFieldError.Reason,
}).
Error("Unable to create ServicePolicy")
} else {
log.WithError(createErr).Error("Unable to ")
return nil, createErr
}
}
log.WithFields(map[string]interface{}{
"name": *create.Name,
"servicePolicyId": created.Payload.Data.ID,
}).
Info("Created ServicePolicy")
result[*create.Name] = created.Payload.Data.ID
}
return result, nil
}