forked from TrueCloudLab/frostfs-node
221 lines
7.7 KiB
Go
221 lines
7.7 KiB
Go
package morph
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
|
|
morphUtil "git.frostfs.info/TrueCloudLab/frostfs-node/cmd/frostfs-adm/internal/modules/morph/util"
|
|
parseutil "git.frostfs.info/TrueCloudLab/frostfs-node/cmd/frostfs-cli/modules/util"
|
|
commonCmd "git.frostfs.info/TrueCloudLab/frostfs-node/cmd/internal/common"
|
|
apechain "git.frostfs.info/TrueCloudLab/policy-engine/pkg/chain"
|
|
"github.com/nspcc-dev/neo-go/pkg/util"
|
|
"github.com/spf13/cobra"
|
|
"github.com/spf13/viper"
|
|
)
|
|
|
|
const (
|
|
namespaceTarget = "namespace"
|
|
containerTarget = "container"
|
|
jsonFlag = "json"
|
|
jsonFlagDesc = "Output rule chains in JSON format"
|
|
chainIDFlag = "chain-id"
|
|
chainIDDesc = "Rule chain ID"
|
|
ruleFlag = "rule"
|
|
ruleFlagDesc = "Rule chain in text format"
|
|
ruleJSONFlag = "rule-json"
|
|
ruleJSONFlagDesc = "Chain rule in JSON format or path to the file"
|
|
targetNameFlag = "target-name"
|
|
targetNameDesc = "Resource name in APE resource name format"
|
|
targetTypeFlag = "target-type"
|
|
targetTypeDesc = "Resource type(container/namespace)"
|
|
addrAdminFlag = "addr"
|
|
addrAdminDesc = "The address of the admins wallet"
|
|
)
|
|
|
|
var (
|
|
apeCmd = &cobra.Command{
|
|
Use: "ape",
|
|
Short: "Section for APE configuration commands",
|
|
}
|
|
|
|
addRuleChainCmd = &cobra.Command{
|
|
Use: "add-rule-chain",
|
|
Short: "Add rule chain",
|
|
PreRun: func(cmd *cobra.Command, _ []string) {
|
|
_ = viper.BindPFlag(morphUtil.EndpointFlag, cmd.Flags().Lookup(morphUtil.EndpointFlag))
|
|
_ = viper.BindPFlag(alphabetWalletsFlag, cmd.Flags().Lookup(alphabetWalletsFlag))
|
|
},
|
|
Run: addRuleChain,
|
|
}
|
|
|
|
removeRuleChainCmd = &cobra.Command{
|
|
Use: "rm-rule-chain",
|
|
Short: "Remove rule chain",
|
|
PreRun: func(cmd *cobra.Command, _ []string) {
|
|
_ = viper.BindPFlag(morphUtil.EndpointFlag, cmd.Flags().Lookup(morphUtil.EndpointFlag))
|
|
_ = viper.BindPFlag(alphabetWalletsFlag, cmd.Flags().Lookup(alphabetWalletsFlag))
|
|
},
|
|
Run: removeRuleChain,
|
|
}
|
|
|
|
listRuleChainsCmd = &cobra.Command{
|
|
Use: "list-rule-chains",
|
|
Short: "List rule chains",
|
|
PreRun: func(cmd *cobra.Command, _ []string) {
|
|
_ = viper.BindPFlag(morphUtil.EndpointFlag, cmd.Flags().Lookup(morphUtil.EndpointFlag))
|
|
_ = viper.BindPFlag(alphabetWalletsFlag, cmd.Flags().Lookup(alphabetWalletsFlag))
|
|
},
|
|
Run: listRuleChains,
|
|
}
|
|
|
|
setAdminCmd = &cobra.Command{
|
|
Use: "set-admin",
|
|
Short: "Set admin",
|
|
PreRun: func(cmd *cobra.Command, _ []string) {
|
|
_ = viper.BindPFlag(morphUtil.EndpointFlag, cmd.Flags().Lookup(morphUtil.EndpointFlag))
|
|
_ = viper.BindPFlag(alphabetWalletsFlag, cmd.Flags().Lookup(alphabetWalletsFlag))
|
|
},
|
|
Run: setAdmin,
|
|
}
|
|
|
|
getAdminCmd = &cobra.Command{
|
|
Use: "get-admin",
|
|
Short: "Get admin",
|
|
PreRun: func(cmd *cobra.Command, _ []string) {
|
|
_ = viper.BindPFlag(morphUtil.EndpointFlag, cmd.Flags().Lookup(morphUtil.EndpointFlag))
|
|
_ = viper.BindPFlag(alphabetWalletsFlag, cmd.Flags().Lookup(alphabetWalletsFlag))
|
|
},
|
|
Run: getAdmin,
|
|
}
|
|
)
|
|
|
|
func initAddRuleChainCmd() {
|
|
apeCmd.AddCommand(addRuleChainCmd)
|
|
|
|
addRuleChainCmd.Flags().StringP(morphUtil.EndpointFlag, morphUtil.EndpointFlagShort, "", morphUtil.EndpointFlagDesc)
|
|
addRuleChainCmd.Flags().String(alphabetWalletsFlag, "", alphabetWalletsFlagDesc)
|
|
|
|
addRuleChainCmd.Flags().String(targetTypeFlag, "", targetTypeDesc)
|
|
_ = addRuleChainCmd.MarkFlagRequired(targetTypeFlag)
|
|
addRuleChainCmd.Flags().String(targetNameFlag, "", targetNameDesc)
|
|
_ = addRuleChainCmd.MarkFlagRequired(targetNameFlag)
|
|
|
|
addRuleChainCmd.Flags().String(chainIDFlag, "", chainIDDesc)
|
|
_ = addRuleChainCmd.MarkFlagRequired(chainIDFlag)
|
|
addRuleChainCmd.Flags().String(ruleFlag, "", ruleFlagDesc)
|
|
addRuleChainCmd.Flags().String(ruleJSONFlag, "", ruleJSONFlagDesc)
|
|
|
|
addRuleChainCmd.MarkFlagsMutuallyExclusive(ruleFlag, ruleJSONFlag)
|
|
}
|
|
|
|
func initRemoveRuleChainCmd() {
|
|
apeCmd.AddCommand(removeRuleChainCmd)
|
|
|
|
removeRuleChainCmd.Flags().StringP(morphUtil.EndpointFlag, morphUtil.EndpointFlagShort, "", morphUtil.EndpointFlagDesc)
|
|
removeRuleChainCmd.Flags().String(alphabetWalletsFlag, "", alphabetWalletsFlagDesc)
|
|
|
|
removeRuleChainCmd.Flags().String(targetTypeFlag, "", targetTypeDesc)
|
|
_ = removeRuleChainCmd.MarkFlagRequired(targetTypeFlag)
|
|
removeRuleChainCmd.Flags().String(targetNameFlag, "", targetNameDesc)
|
|
_ = removeRuleChainCmd.MarkFlagRequired(targetNameFlag)
|
|
removeRuleChainCmd.Flags().String(chainIDFlag, "", chainIDDesc)
|
|
_ = removeRuleChainCmd.MarkFlagRequired(chainIDFlag)
|
|
}
|
|
|
|
func initListRuleChainsCmd() {
|
|
apeCmd.AddCommand(listRuleChainsCmd)
|
|
|
|
listRuleChainsCmd.Flags().StringP(morphUtil.EndpointFlag, morphUtil.EndpointFlagShort, "", morphUtil.EndpointFlagDesc)
|
|
listRuleChainsCmd.Flags().String(alphabetWalletsFlag, "", alphabetWalletsFlagDesc)
|
|
listRuleChainsCmd.Flags().StringP(targetTypeFlag, "t", "", targetTypeDesc)
|
|
_ = listRuleChainsCmd.MarkFlagRequired(targetTypeFlag)
|
|
listRuleChainsCmd.Flags().String(targetNameFlag, "", targetNameDesc)
|
|
_ = listRuleChainsCmd.MarkFlagRequired(targetNameFlag)
|
|
listRuleChainsCmd.Flags().Bool(jsonFlag, false, jsonFlagDesc)
|
|
}
|
|
|
|
func initSetAdminCmd() {
|
|
apeCmd.AddCommand(setAdminCmd)
|
|
|
|
setAdminCmd.Flags().StringP(morphUtil.EndpointFlag, morphUtil.EndpointFlagShort, "", morphUtil.EndpointFlagDesc)
|
|
setAdminCmd.Flags().String(alphabetWalletsFlag, "", alphabetWalletsFlagDesc)
|
|
setAdminCmd.Flags().String(addrAdminFlag, "", addrAdminDesc)
|
|
_ = setAdminCmd.MarkFlagRequired(addrAdminFlag)
|
|
}
|
|
|
|
func initGetAdminCmd() {
|
|
apeCmd.AddCommand(getAdminCmd)
|
|
|
|
getAdminCmd.Flags().StringP(morphUtil.EndpointFlag, morphUtil.EndpointFlagShort, "", morphUtil.EndpointFlagDesc)
|
|
getAdminCmd.Flags().String(alphabetWalletsFlag, "", alphabetWalletsFlagDesc)
|
|
}
|
|
|
|
func addRuleChain(cmd *cobra.Command, _ []string) {
|
|
chain := parseChain(cmd)
|
|
target := parseTarget(cmd)
|
|
pci, ac := newPolicyContractInterface(cmd)
|
|
h, vub, err := pci.AddMorphRuleChain(apechain.Ingress, target, chain)
|
|
cmd.Println("Waiting for transaction to persist...")
|
|
_, err = ac.Wait(h, vub, err)
|
|
commonCmd.ExitOnErr(cmd, "add rule chain error: %w", err)
|
|
cmd.Println("Rule chain added successfully")
|
|
}
|
|
|
|
func removeRuleChain(cmd *cobra.Command, _ []string) {
|
|
chainID := parseChainID(cmd)
|
|
target := parseTarget(cmd)
|
|
pci, ac := newPolicyContractInterface(cmd)
|
|
h, vub, err := pci.RemoveMorphRuleChain(apechain.Ingress, target, chainID)
|
|
cmd.Println("Waiting for transaction to persist...")
|
|
_, err = ac.Wait(h, vub, err)
|
|
commonCmd.ExitOnErr(cmd, "remove rule chain error: %w", err)
|
|
cmd.Println("Rule chain removed successfully")
|
|
}
|
|
|
|
func listRuleChains(cmd *cobra.Command, _ []string) {
|
|
target := parseTarget(cmd)
|
|
pci, _ := newPolicyContractInterface(cmd)
|
|
chains, err := pci.ListMorphRuleChains(apechain.Ingress, target)
|
|
commonCmd.ExitOnErr(cmd, "list rule chains error: %w", err)
|
|
if len(chains) == 0 {
|
|
return
|
|
}
|
|
|
|
toJSON, _ := cmd.Flags().GetBool(jsonFlag)
|
|
if toJSON {
|
|
prettyJSONFormat(cmd, chains)
|
|
} else {
|
|
for _, c := range chains {
|
|
parseutil.PrintHumanReadableAPEChain(cmd, c)
|
|
}
|
|
}
|
|
}
|
|
|
|
func setAdmin(cmd *cobra.Command, _ []string) {
|
|
s, _ := cmd.Flags().GetString(addrAdminFlag)
|
|
addr, err := util.Uint160DecodeStringLE(s)
|
|
commonCmd.ExitOnErr(cmd, "can't decode admin addr: %w", err)
|
|
pci, ac := newPolicyContractInterface(cmd)
|
|
h, vub, err := pci.SetAdmin(addr)
|
|
cmd.Println("Waiting for transaction to persist...")
|
|
_, err = ac.Wait(h, vub, err)
|
|
commonCmd.ExitOnErr(cmd, "can't set admin: %w", err)
|
|
cmd.Println("Admin set successfully")
|
|
}
|
|
|
|
func getAdmin(cmd *cobra.Command, _ []string) {
|
|
pci, _ := newPolicyContractInterface(cmd)
|
|
addr, err := pci.GetAdmin()
|
|
commonCmd.ExitOnErr(cmd, "unable to get admin: %w", err)
|
|
cmd.Println(addr.StringLE())
|
|
}
|
|
|
|
func prettyJSONFormat(cmd *cobra.Command, chains []*apechain.Chain) {
|
|
wr := bytes.NewBufferString("")
|
|
data, err := json.Marshal(chains)
|
|
if err == nil {
|
|
err = json.Indent(wr, data, "", " ")
|
|
}
|
|
commonCmd.ExitOnErr(cmd, "print rule chain error: %w", err)
|
|
cmd.Println(wr)
|
|
}
|