32a2b7a9ae
P0 Health-gated rollback (standalone auto-update path): capture the previous image id + reference + healthcheck before the recreate, then poll the new container's health over a configurable window. On healthy proceed (and only then clean up the old image); on unhealthy/exit/timeout re-tag the old image back onto the original reference and Recreate (no pull) to restore it, reusing Recreate's config preservation. The decision is a pure decideRollback() helper. P1 Per-endpoint enable: ContainerAutomationDisabled flag on Endpoint (zero value participates, no migration churn), checked by both daemons; settable via the endpoint update API. UI control deferred (see report). P2 Notifier seam: minimal Notifier interface + logNotifier, emitting structured updated/rollback/update-failed/heal-restarted events from the daemon. Settings: RollbackOnFailure + RollbackTimeout (default 120s) added to ContainerAutomation.AutoUpdate, wired through defaults/migration/golden, settings_update validation, the AutoUpdatePanel and the TS types. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
127 lines
3.5 KiB
Go
127 lines
3.5 KiB
Go
package datastore
|
|
|
|
import (
|
|
"os"
|
|
|
|
portainer "github.com/portainer/portainer/api"
|
|
)
|
|
|
|
// Init creates the default data set.
|
|
func (store *Store) Init() error {
|
|
err := store.checkOrCreateDefaultSettings()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
err = store.checkOrCreateDefaultSSLSettings()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return store.checkOrCreateDefaultData()
|
|
}
|
|
|
|
func (store *Store) checkOrCreateDefaultSettings() error {
|
|
isDDExtention := false
|
|
if _, ok := os.LookupEnv("DOCKER_EXTENSION"); ok {
|
|
isDDExtention = true
|
|
}
|
|
|
|
// TODO: these need to also be applied when importing
|
|
settings, err := store.SettingsService.Settings()
|
|
if store.IsErrObjectNotFound(err) {
|
|
defaultSettings := &portainer.Settings{
|
|
AuthenticationMethod: portainer.AuthenticationInternal,
|
|
BlackListedLabels: make([]portainer.Pair, 0),
|
|
InternalAuthSettings: portainer.InternalAuthSettings{
|
|
RequiredPasswordLength: 12,
|
|
},
|
|
LDAPSettings: portainer.LDAPSettings{
|
|
AnonymousMode: true,
|
|
AutoCreateUsers: true,
|
|
TLSConfig: portainer.TLSConfiguration{},
|
|
SearchSettings: []portainer.LDAPSearchSettings{
|
|
{},
|
|
},
|
|
GroupSearchSettings: []portainer.LDAPGroupSearchSettings{
|
|
{},
|
|
},
|
|
},
|
|
OAuthSettings: portainer.OAuthSettings{
|
|
SSO: true,
|
|
},
|
|
SnapshotInterval: portainer.DefaultSnapshotInterval,
|
|
EdgeAgentCheckinInterval: portainer.DefaultEdgeAgentCheckinIntervalInSeconds,
|
|
TemplatesURL: "",
|
|
HelmRepositoryURL: portainer.DefaultHelmRepositoryURL,
|
|
UserSessionTimeout: portainer.DefaultUserSessionTimeout,
|
|
KubeconfigExpiry: portainer.DefaultKubeconfigExpiry,
|
|
KubectlShellImage: *store.flags.KubectlShellImage,
|
|
|
|
IsDockerDesktopExtension: isDDExtention,
|
|
EnforceEdgeID: true,
|
|
}
|
|
|
|
defaultSettings.ContainerAutomation.AutoHeal.Enabled = false
|
|
defaultSettings.ContainerAutomation.AutoHeal.CheckInterval = "30s"
|
|
defaultSettings.ContainerAutomation.AutoHeal.Scope = "labeled"
|
|
|
|
defaultSettings.ContainerAutomation.AutoUpdate.Enabled = false
|
|
defaultSettings.ContainerAutomation.AutoUpdate.PollInterval = "6h"
|
|
defaultSettings.ContainerAutomation.AutoUpdate.Scope = "labeled"
|
|
defaultSettings.ContainerAutomation.AutoUpdate.Cleanup = false
|
|
defaultSettings.ContainerAutomation.AutoUpdate.RollbackOnFailure = false
|
|
defaultSettings.ContainerAutomation.AutoUpdate.RollbackTimeout = "120s"
|
|
|
|
return store.SettingsService.UpdateSettings(defaultSettings)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if settings.UserSessionTimeout == "" {
|
|
settings.UserSessionTimeout = portainer.DefaultUserSessionTimeout
|
|
return store.Settings().UpdateSettings(settings)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (store *Store) checkOrCreateDefaultSSLSettings() error {
|
|
_, err := store.SSLSettings().Settings()
|
|
if store.IsErrObjectNotFound(err) {
|
|
defaultSSLSettings := &portainer.SSLSettings{
|
|
HTTPEnabled: true,
|
|
}
|
|
|
|
return store.SSLSettings().UpdateSettings(defaultSSLSettings)
|
|
}
|
|
|
|
return err
|
|
}
|
|
|
|
func (store *Store) checkOrCreateDefaultData() error {
|
|
groups, err := store.EndpointGroupService.ReadAll()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if len(groups) == 0 {
|
|
unassignedGroup := &portainer.EndpointGroup{
|
|
Name: "Unassigned",
|
|
Description: "Unassigned environments",
|
|
Labels: []portainer.Pair{},
|
|
UserAccessPolicies: portainer.UserAccessPolicies{},
|
|
TeamAccessPolicies: portainer.TeamAccessPolicies{},
|
|
TagIDs: []portainer.TagID{},
|
|
}
|
|
|
|
err = store.EndpointGroupService.Create(unassignedGroup)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|