99a372fb88
* feat(useractivity): introduce backend for useractivity logging (#213) * refactor(useractivity): move query and logs to base type * feat(useractivity): cleanup user activity logs * feat(useractivity): log an activity * refactor(useractivity): create generic get logs function * fix(api): hide unused function * refactor(useractivity): create generic get logs function * feat(useractivity): get user activity logs * feat(http/ua): add http get logs handler * refactor(http/ua): rename logs_list file * feat(useractivity): fetch logs as csv * feat(useractivity): save payload as bytes * style(useractivity): doc the count parameter * feat(useractivity): introduce UI for user activity logs (#220) * feat(useractivity): add useractivity page * feat(useractivity): get logs from server * feat(useractivity): show logs in datatable * fix(useractivity): save logs as csv * feat(useractivity): show logs payload * feat(useractivity): sort desc by default * feat(useractivity): parse object * fix(useractivity): expect base64 payload * feat(useractivity): show message when missing logs * feat(useractivity): log api (#215) * feat(templates): log write methods * refactor(useractivity): move middleware * feat(dockerhub): log update docker settings * feat(edgegroup): log write * feat(edgejobs): log write request * feat(useractivity): return bytes to user * fix(customtemplates): set activity context * feat(edgestacks): log activities * feat(endpointgroup): log activities * feat(endpoint): log write activities * feat(licenses): log write activities * feat(registries): log activitites * feat(resource_control): log user activity * feat(settings): log update * feat(stacks): log activity * feat(tags): log user activitiy * feat(teammembership): log user activity * feat(teams): log write activities * feat(useractivity): get default context * feat(http/upload): log upload tls * feat(users): log user activities * fix(settings): clean payload * feat(webhook): log user activities * feat(websocket): log activities * feat(docker): log write activities * refactor(useractivity): move log proxy * feat(azure): log write activity * refactor(kube): use basic transport for all transports * feat(kube): log kube activity * fix(useractivity): parse body * refactor(kuberenetes): log requests only if success * refactor(docker): log requests only if success * refactor(azure): log requests only if success * feat(gitlab): log activity * feat(registries): log proxy request Co-authored-by: Chaim Lev-Ari <chiptus@gmail.com> * feat(activity-logs): save pagination limit * feat(useractivity): remove config payload * fix(docker): log request after success * refactor(http): move copy body to utils * feat(kuberentes): remove config values * feat(useractivity): copy body before request * fix(useractivity): fix column size * feat(useractivity): filter json payloads * refactor(useractivity): log with same logic * fix(useractivity/csv): export same columns as datatable * fix(useractivity): replace context with endpoint * fix(user-activity): rename tables * feat(endpoint): clear azure key * feat(stacks): omit empty migrate values * fix(stacks): add back import * feat(endpoints): log update settings * fix(registry): clear password value * feat(registry): omit update empty value * fix(registries): don't return from unauthorized azure request * fix(useractivity): log any payload similar to json * feat(useractivity): ignoer binary upload * fix(useractivity): refresh user activity logs * feat(useractivity): use [REDACTED] for cleared credential (#265) * feat(docker/services): log force update service * feat(useractivity): log username when available * feat(webhooks): remove logging of execute * refactor(http): replace redacted values * style(kube): remove commented code * feat(http/kube): proxy local requests * feat(useractivity): log patch method * fix(datatables): use unique filter id * fix kube settings update * fix: EE-527 set payload to [REDACTED] when update kube config * refactor(http/k8s): rename proxy function * EE-530: a dummy fix of exec activity log for a local kube setup Co-authored-by: Dmitry Salakhov <to@dimasalakhov.com> Co-authored-by: Hui <arris_li@hotmail.com> Co-authored-by: Simon Meng <simon.meng@portainer.io>
298 lines
9.4 KiB
Go
298 lines
9.4 KiB
Go
package edgestacks
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/asaskevich/govalidator"
|
|
httperror "github.com/portainer/libhttp/error"
|
|
"github.com/portainer/libhttp/request"
|
|
"github.com/portainer/libhttp/response"
|
|
portainer "github.com/portainer/portainer/api"
|
|
"github.com/portainer/portainer/api/filesystem"
|
|
"github.com/portainer/portainer/api/http/useractivity"
|
|
"github.com/portainer/portainer/api/internal/edge"
|
|
)
|
|
|
|
// POST request on /api/endpoint_groups
|
|
func (handler *Handler) edgeStackCreate(w http.ResponseWriter, r *http.Request) *httperror.HandlerError {
|
|
method, err := request.RetrieveQueryParameter(r, "method", false)
|
|
if err != nil {
|
|
return &httperror.HandlerError{http.StatusBadRequest, "Invalid query parameter: method", err}
|
|
}
|
|
|
|
edgeStack, err := handler.createSwarmStack(method, r)
|
|
if err != nil {
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to create Edge stack", err}
|
|
}
|
|
|
|
endpoints, err := handler.DataStore.Endpoint().Endpoints()
|
|
if err != nil {
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to retrieve endpoints from database", err}
|
|
}
|
|
|
|
endpointGroups, err := handler.DataStore.EndpointGroup().EndpointGroups()
|
|
if err != nil {
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to retrieve endpoint groups from database", err}
|
|
}
|
|
|
|
edgeGroups, err := handler.DataStore.EdgeGroup().EdgeGroups()
|
|
if err != nil {
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to retrieve edge groups from database", err}
|
|
}
|
|
|
|
relatedEndpoints, err := edge.EdgeStackRelatedEndpoints(edgeStack.EdgeGroups, endpoints, endpointGroups, edgeGroups)
|
|
|
|
for _, endpointID := range relatedEndpoints {
|
|
relation, err := handler.DataStore.EndpointRelation().EndpointRelation(endpointID)
|
|
if err != nil {
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to find endpoint relation in database", err}
|
|
}
|
|
|
|
relation.EdgeStacks[edgeStack.ID] = true
|
|
|
|
err = handler.DataStore.EndpointRelation().UpdateEndpointRelation(endpointID, relation)
|
|
if err != nil {
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to persist endpoint relation in database", err}
|
|
}
|
|
}
|
|
|
|
return response.JSON(w, edgeStack)
|
|
}
|
|
|
|
func (handler *Handler) createSwarmStack(method string, r *http.Request) (*portainer.EdgeStack, error) {
|
|
switch method {
|
|
case "string":
|
|
return handler.createSwarmStackFromFileContent(r)
|
|
case "repository":
|
|
return handler.createSwarmStackFromGitRepository(r)
|
|
case "file":
|
|
return handler.createSwarmStackFromFileUpload(r)
|
|
}
|
|
return nil, errors.New("Invalid value for query parameter: method. Value must be one of: string, repository or file")
|
|
}
|
|
|
|
type swarmStackFromFileContentPayload struct {
|
|
Name string
|
|
StackFileContent string
|
|
EdgeGroups []portainer.EdgeGroupID
|
|
}
|
|
|
|
func (payload *swarmStackFromFileContentPayload) Validate(r *http.Request) error {
|
|
if govalidator.IsNull(payload.Name) {
|
|
return errors.New("Invalid stack name")
|
|
}
|
|
if govalidator.IsNull(payload.StackFileContent) {
|
|
return errors.New("Invalid stack file content")
|
|
}
|
|
if payload.EdgeGroups == nil || len(payload.EdgeGroups) == 0 {
|
|
return errors.New("Edge Groups are mandatory for an Edge stack")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (handler *Handler) createSwarmStackFromFileContent(r *http.Request) (*portainer.EdgeStack, error) {
|
|
var payload swarmStackFromFileContentPayload
|
|
err := request.DecodeAndValidateJSONPayload(r, &payload)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
err = handler.validateUniqueName(payload.Name)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
stackID := handler.DataStore.EdgeStack().GetNextIdentifier()
|
|
stack := &portainer.EdgeStack{
|
|
ID: portainer.EdgeStackID(stackID),
|
|
Name: payload.Name,
|
|
EntryPoint: filesystem.ComposeFileDefaultName,
|
|
CreationDate: time.Now().Unix(),
|
|
EdgeGroups: payload.EdgeGroups,
|
|
Status: make(map[portainer.EndpointID]portainer.EdgeStackStatus),
|
|
Version: 1,
|
|
}
|
|
|
|
stackFolder := strconv.Itoa(int(stack.ID))
|
|
projectPath, err := handler.FileService.StoreEdgeStackFileFromBytes(stackFolder, stack.EntryPoint, []byte(payload.StackFileContent))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
stack.ProjectPath = projectPath
|
|
|
|
err = handler.DataStore.EdgeStack().CreateEdgeStack(stack)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
useractivity.LogHttpActivity(handler.UserActivityStore, handlerActivityContext, r, payload)
|
|
|
|
return stack, nil
|
|
}
|
|
|
|
type swarmStackFromGitRepositoryPayload struct {
|
|
Name string
|
|
RepositoryURL string
|
|
RepositoryReferenceName string
|
|
RepositoryAuthentication bool
|
|
RepositoryUsername string
|
|
RepositoryPassword string
|
|
ComposeFilePathInRepository string
|
|
EdgeGroups []portainer.EdgeGroupID
|
|
}
|
|
|
|
func (payload *swarmStackFromGitRepositoryPayload) Validate(r *http.Request) error {
|
|
if govalidator.IsNull(payload.Name) {
|
|
return errors.New("Invalid stack name")
|
|
}
|
|
if govalidator.IsNull(payload.RepositoryURL) || !govalidator.IsURL(payload.RepositoryURL) {
|
|
return errors.New("Invalid repository URL. Must correspond to a valid URL format")
|
|
}
|
|
if payload.RepositoryAuthentication && (govalidator.IsNull(payload.RepositoryUsername) || govalidator.IsNull(payload.RepositoryPassword)) {
|
|
return errors.New("Invalid repository credentials. Username and password must be specified when authentication is enabled")
|
|
}
|
|
if govalidator.IsNull(payload.ComposeFilePathInRepository) {
|
|
payload.ComposeFilePathInRepository = filesystem.ComposeFileDefaultName
|
|
}
|
|
if payload.EdgeGroups == nil || len(payload.EdgeGroups) == 0 {
|
|
return errors.New("Edge Groups are mandatory for an Edge stack")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (handler *Handler) createSwarmStackFromGitRepository(r *http.Request) (*portainer.EdgeStack, error) {
|
|
var payload swarmStackFromGitRepositoryPayload
|
|
err := request.DecodeAndValidateJSONPayload(r, &payload)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
err = handler.validateUniqueName(payload.Name)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
stackID := handler.DataStore.EdgeStack().GetNextIdentifier()
|
|
stack := &portainer.EdgeStack{
|
|
ID: portainer.EdgeStackID(stackID),
|
|
Name: payload.Name,
|
|
EntryPoint: payload.ComposeFilePathInRepository,
|
|
CreationDate: time.Now().Unix(),
|
|
EdgeGroups: payload.EdgeGroups,
|
|
Status: make(map[portainer.EndpointID]portainer.EdgeStackStatus),
|
|
Version: 1,
|
|
}
|
|
|
|
projectPath := handler.FileService.GetEdgeStackProjectPath(strconv.Itoa(int(stack.ID)))
|
|
stack.ProjectPath = projectPath
|
|
|
|
gitCloneParams := &cloneRepositoryParameters{
|
|
url: payload.RepositoryURL,
|
|
referenceName: payload.RepositoryReferenceName,
|
|
path: projectPath,
|
|
authentication: payload.RepositoryAuthentication,
|
|
username: payload.RepositoryUsername,
|
|
password: payload.RepositoryPassword,
|
|
}
|
|
|
|
err = handler.cloneGitRepository(gitCloneParams)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
err = handler.DataStore.EdgeStack().CreateEdgeStack(stack)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
useractivity.LogHttpActivity(handler.UserActivityStore, handlerActivityContext, r, payload)
|
|
|
|
return stack, nil
|
|
}
|
|
|
|
type swarmStackFromFileUploadPayload struct {
|
|
Name string
|
|
StackFileContent []byte
|
|
EdgeGroups []portainer.EdgeGroupID
|
|
}
|
|
|
|
func (payload *swarmStackFromFileUploadPayload) Validate(r *http.Request) error {
|
|
name, err := request.RetrieveMultiPartFormValue(r, "Name", false)
|
|
if err != nil {
|
|
return errors.New("Invalid stack name")
|
|
}
|
|
payload.Name = name
|
|
|
|
composeFileContent, _, err := request.RetrieveMultiPartFormFile(r, "file")
|
|
if err != nil {
|
|
return errors.New("Invalid Compose file. Ensure that the Compose file is uploaded correctly")
|
|
}
|
|
payload.StackFileContent = composeFileContent
|
|
|
|
var edgeGroups []portainer.EdgeGroupID
|
|
err = request.RetrieveMultiPartFormJSONValue(r, "EdgeGroups", &edgeGroups, false)
|
|
if err != nil || len(edgeGroups) == 0 {
|
|
return errors.New("Edge Groups are mandatory for an Edge stack")
|
|
}
|
|
payload.EdgeGroups = edgeGroups
|
|
return nil
|
|
}
|
|
|
|
func (handler *Handler) createSwarmStackFromFileUpload(r *http.Request) (*portainer.EdgeStack, error) {
|
|
payload := &swarmStackFromFileUploadPayload{}
|
|
err := payload.Validate(r)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
err = handler.validateUniqueName(payload.Name)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
stackID := handler.DataStore.EdgeStack().GetNextIdentifier()
|
|
stack := &portainer.EdgeStack{
|
|
ID: portainer.EdgeStackID(stackID),
|
|
Name: payload.Name,
|
|
EntryPoint: filesystem.ComposeFileDefaultName,
|
|
CreationDate: time.Now().Unix(),
|
|
EdgeGroups: payload.EdgeGroups,
|
|
Status: make(map[portainer.EndpointID]portainer.EdgeStackStatus),
|
|
Version: 1,
|
|
}
|
|
|
|
stackFolder := strconv.Itoa(int(stack.ID))
|
|
projectPath, err := handler.FileService.StoreEdgeStackFileFromBytes(stackFolder, stack.EntryPoint, []byte(payload.StackFileContent))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
stack.ProjectPath = projectPath
|
|
|
|
err = handler.DataStore.EdgeStack().CreateEdgeStack(stack)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
useractivity.LogHttpActivity(handler.UserActivityStore, handlerActivityContext, r, payload)
|
|
|
|
return stack, nil
|
|
}
|
|
|
|
func (handler *Handler) validateUniqueName(name string) error {
|
|
edgeStacks, err := handler.DataStore.EdgeStack().EdgeStacks()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
for _, stack := range edgeStacks {
|
|
if strings.EqualFold(stack.Name, name) {
|
|
return errors.New("Edge stack name must be unique")
|
|
}
|
|
}
|
|
return nil
|
|
}
|