rustploy 0.1.35

Rustploy PaaS daemon — lightweight self-hosted deployment platform
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87

//! `Command::SharedAccess{List,Grant,Revoke}`: quais projetos alcançam um
//! servidor de banco compartilhado (ver `deploy::shared_net`).

use crate::{bootstrap::state::AppState, features::deploy::shared_net, store};
use shared::{Response as RpResponse, Service, SharedAccess};

async fn server(state: &AppState, id: &str) -> Result<Service, RpResponse> {
    match store::services::get(&state.db, id).await {
        Ok(Some(s)) if s.spec.shared.is_some() => Ok(s),
        Ok(Some(_)) => Err(RpResponse::err(
            "NotShared",
            "este serviço não é um servidor compartilhado",
        )),
        Ok(None) => Err(RpResponse::err("NotFound", "service not found")),
        Err(e) => Err(RpResponse::err("DatabaseError", e.to_string())),
    }
}

async fn view(state: &AppState, svc: &Service) -> Vec<SharedAccess> {
    let projects = store::shared_access::projects_of(&state.db, &svc.id)
        .await
        .unwrap_or_default();
    let alias = shared_net::alias_of(svc);
    let mut out = vec![];
    for project_id in projects {
        let network = store::projects::network_name(&state.db, &project_id)
            .await
            .unwrap_or_default();
        out.push(SharedAccess {
            server_service_id: svc.id.clone(),
            project_id,
            network,
            alias: alias.clone(),
        });
    }
    out
}

pub async fn list(state: AppState, server_service_id: String) -> RpResponse {
    match server(&state, &server_service_id).await {
        Ok(svc) => RpResponse::SharedAccessList(view(&state, &svc).await),
        Err(r) => r,
    }
}

pub async fn grant(state: AppState, server_service_id: String, project_id: String) -> RpResponse {
    let svc = match server(&state, &server_service_id).await {
        Ok(s) => s,
        Err(r) => return r,
    };
    match store::projects::get(&state.db, &project_id).await {
        Ok(Some(_)) => {}
        Ok(None) => return RpResponse::err("NotFound", "project not found"),
        Err(e) => return RpResponse::err("DatabaseError", e.to_string()),
    }
    if project_id == svc.spec.project_id {
        return RpResponse::err(
            "InvalidRequest",
            "o servidor já está na rede deste projeto; use o nome interno dele",
        );
    }
    // Conecta agora, se o servidor estiver no ar. Se não estiver, o acesso fica
    // gravado e o deploy/reconcile conecta depois. Falha de alias em uso aborta
    // antes de gravar o acesso.
    if let Some(cid) = shared_net::server_container(&state.docker.inner, &svc).await
        && let Err(e) =
            shared_net::connect_to_project(&state.db, &state.docker, &svc, &cid, &project_id).await
    {
        return RpResponse::err("NetworkError", e.to_string());
    }
    if let Err(e) = store::shared_access::grant(&state.db, &svc.id, &project_id).await {
        return RpResponse::err("DatabaseError", e.to_string());
    }
    RpResponse::SharedAccessList(view(&state, &svc).await)
}

pub async fn revoke(state: AppState, server_service_id: String, project_id: String) -> RpResponse {
    let svc = match server(&state, &server_service_id).await {
        Ok(s) => s,
        Err(r) => return r,
    };
    if let Err(e) = store::shared_access::revoke(&state.db, &svc.id, &project_id).await {
        return RpResponse::err("DatabaseError", e.to_string());
    }
    let _ = shared_net::disconnect_from_project(&state.db, &state.docker, &svc, &project_id).await;
    RpResponse::SharedAccessList(view(&state, &svc).await)
}