Skip to content
GitLab
Switch branch/tag
Find file BlameHistoryPermalink
plugin_run.rs 9.77 KiB
1 
use crate::command_line_interface::CliOptions;
2 
use crate::error::Error;
3 
use crate::error::Result;
4 
use crate::internal_api;
5 
use crate::internal_api::new_random_string;
6 
use crate::plugin_auth_crypto::DatabaseKey;
7 
use crate::schema::Schema;
8 
use log::info;
9 
use rusqlite::Transaction;
10 
use std::collections::HashMap;
11 
use std::process::Command;
12 
use warp::http::status::StatusCode;
13
14 
/// Run a plugin, making sure that the correct ENV variables and settings are passed
15 
/// to the containerization / deployment processes.
16 
///
17 
/// Internally passes to docker / kubernetes / scripts
18 
/// depending on how Pod is configured by the user.
19 
#[allow(clippy::too_many_arguments)]
20 
pub fn run_plugin_container(
21 
    tx: &Transaction,
22 
    schema: &Schema,
23 
    container_image: String,
24 
    target_item_id: &str,
25 
    triggered_by_item_id: &str,
26 
    pod_owner: &str,
27 
    database_key: &DatabaseKey,
28 
    cli_options: &CliOptions,
29 
) -> Result<()> {
30 
    info!(
31 
        "Trying to run plugin container for target_item_id {}",
32 
        target_item_id
33 
    );
34 
    let target_item = internal_api::get_item_tx(tx, schema, target_item_id)?;
35 
    let target_item = target_item.into_iter().next().ok_or_else(|| Error {
36 
        code: StatusCode::BAD_REQUEST,
37 
        msg: format!(
38 
            "Failed to find target item {} to run a plugin against",
39 
            target_item_id
40 
        ),
41 
    })?;
42 
    let target_item_json = serde_json::to_string(&target_item)?;
43 
    let auth = database_key.create_plugin_auth()?;
44 
    let auth = serde_json::to_string(&auth)?;
45
46 
    let script_override = cli_options
47 
        .insecure_plugin_script
48 
        .iter()
49 
        .find(|(image, _script)| image == &container_image)
50 
        .map(|(_image, script)| script);
51
52 
    if let Some(script_path) = script_override {
53 
        run_local_script(
54 
            &container_image,
55 
            script_path,
56 
            &target_item_json,
57 
            pod_owner,
58 
            &auth,
59 
            triggered_by_item_id,
60 
            cli_options,
61 
        )
62 
    } else if cli_options.use_kubernetes {
63 
        run_kubernetes_container(
64 
            &container_image,
65 
            &target_item_json,
66 
            pod_owner,
67 
            &auth,
68 
            triggered_by_item_id,
69 
            cli_options,
70 
        )
7172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140
} else { run_docker_container( &container_image, &target_item_json, pod_owner, &auth, triggered_by_item_id, cli_options, ) } } fn run_local_script( _container: &str, plugin_path: &str, target_item: &str, pod_owner: &str, pod_auth: &str, triggered_by_item_id: &str, cli_options: &CliOptions, ) -> Result<()> { let pod_full_address = callback_address(cli_options, false); let args: Vec<String> = Vec::new(); let mut env_vars = HashMap::new(); env_vars.insert("POD_FULL_ADDRESS", pod_full_address.as_str()); env_vars.insert("POD_TARGET_ITEM", target_item); env_vars.insert("POD_PLUGINRUN_ID", triggered_by_item_id); env_vars.insert("POD_OWNER", pod_owner); env_vars.insert("POD_AUTH_JSON", pod_auth); run_any_command(plugin_path, &args, &env_vars, triggered_by_item_id) } /// Example: /// docker run \ /// --network=host \ /// --env=POD_FULL_ADDRESS="http://localhost:3030" \ /// --env=POD_TARGET_ITEM="{...json...}" \ /// --env=POD_OWNER="...64-hex-chars..." \ /// --env=POD_AUTH_JSON="{...json...}" \ /// --name="$containerImage-$trigger_item_id" \ /// --rm \ /// -- \ /// "$containerImage" fn run_docker_container( container_image: &str, target_item_json: &str, pod_owner: &str, pod_auth: &str, triggered_by_item_id: &str, cli_options: &CliOptions, ) -> Result<()> { let docker_network = match &cli_options.plugins_docker_network { Some(net) => net.to_string(), None => "host".to_string(), }; let container_id = format!( "{}-{}-{}", pod_owner .chars() .filter(|c| c.is_ascii_alphanumeric()) .collect::<String>(), container_image .chars() .filter(|c| c.is_ascii_alphanumeric()) .collect::<String>(), triggered_by_item_id .chars() .filter(|c| c.is_ascii_alphanumeric()) .collect::<String>() );