canic-core 0.110.10

Canic — a canister orchestration and management toolkit for the Internet Computer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

//! Pure domain policy decisions.
//!
//! This namespace owns side-effect-free decisions only. It must not read
//! storage, call IC/runtime APIs, spawn timers, serialize wire/storage payloads,
//! or mutate state.

pub mod auth;
pub mod authority_restore;
#[cfg(feature = "blob-storage-billing")]
pub mod blob_storage;
pub mod component_allocation;
pub mod component_child_allocation;
pub mod cycles;
pub mod cycles_funding;
pub mod env;
pub mod fleet_activation;
pub mod fleet_admission;
pub mod fleet_admission_projection;
pub mod fleet_admission_root;
pub mod fleet_funding;
pub mod icp_refill;
pub mod intent;
pub mod log;
pub mod placement;

use crate::InternalError;
use thiserror::Error as ThisError;

///
/// PolicyError
///

#[derive(Debug, ThisError)]
pub enum PolicyError {
    #[error(transparent)]
    AuthPolicy(#[from] auth::AuthPolicyError),

    #[error(transparent)]
    AuthorityRestorePolicy(#[from] authority_restore::AuthorityRestoreEndpointPolicyError),

    #[error(transparent)]
    EnvPolicy(#[from] env::EnvPolicyError),

    #[error(transparent)]
    FleetActivationPolicy(#[from] fleet_activation::FleetActivationEndpointPolicyError),

    #[error(transparent)]
    ScalingPolicy(#[from] placement::scaling::ScalingPolicyError),
}

impl From<PolicyError> for InternalError {
    fn from(err: PolicyError) -> Self {
        use crate::diagnostics::codes;

        let code = match err {
            PolicyError::AuthPolicy(err) => match err {
                auth::AuthPolicyError::PublicPrepareScopeNotSelfGrantable { .. }
                | auth::AuthPolicyError::RootIssuerAudienceNotAllowed { .. }
                | auth::AuthPolicyError::RootIssuerGrantNotAllowed { .. } => {
                    codes::AUTHORITY_UNAUTHORIZED
                }
                auth::AuthPolicyError::RootIssuerFleetMismatch
                | auth::AuthPolicyError::RootIssuerPolicyMismatch { .. } => {
                    codes::AUTHORITY_CONFLICT
                }
                auth::AuthPolicyError::RootIssuerAudienceRequired
                | auth::AuthPolicyError::RootIssuerGrantRequired
                | auth::AuthPolicyError::RootIssuerRenewalGrantRequired => {
                    codes::CONFIGURATION_INCOMPLETE
                }
                auth::AuthPolicyError::RootIssuerCertTtlZero
                | auth::AuthPolicyError::RootIssuerMaxCertTtlZero
                | auth::AuthPolicyError::RootIssuerRefreshAfterInvalid
                | auth::AuthPolicyError::RootIssuerRefreshRatioInvalid { .. } => {
                    codes::CONFIGURATION_INVALID
                }
                auth::AuthPolicyError::RootIssuerCertTtlExceedsMax { .. } => {
                    codes::TIME_INVALID_STATE
                }
                auth::AuthPolicyError::RootIssuerDisabled { .. } => codes::SECURITY_INACTIVE,
                auth::AuthPolicyError::RootIssuerRefreshAfterOverflow => codes::TIME_CAPACITY,
                auth::AuthPolicyError::RootIssuerUnregistered => codes::AUTHORITY_UNAVAILABLE,
            },
            PolicyError::AuthorityRestorePolicy(_) => codes::AUTHORITY_INACTIVE,
            PolicyError::EnvPolicy(_) => codes::CONFIGURATION_INCOMPLETE,
            PolicyError::FleetActivationPolicy(_) => codes::LIFECYCLE_INACTIVE,
            PolicyError::ScalingPolicy(err) => match err {
                placement::scaling::ScalingPolicyError::ScalingDisabled => {
                    codes::CONFIGURATION_INACTIVE
                }
                placement::scaling::ScalingPolicyError::PoolNotFound(_) => {
                    codes::CONFIGURATION_UNAVAILABLE
                }
            },
        };
        Self::public(code)
    }
}