mirror of
https://github.com/kemko/nomad.git
synced 2026-01-04 17:35:43 +03:00
5dab41881b
This PR introduces a new allocrunner-level consul_hook which iterates over services and tasks, if their provider is consul, fetches consul tokens for all of them, stores them in AllocHookResources and in task secret dirs. Ref: hashicorp/team-nomad#404 --------- Co-authored-by: Tim Gross <tgross@hashicorp.com>
69 lines
1.9 KiB
Go
69 lines
1.9 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package structs
|
|
|
|
import (
|
|
"sync"
|
|
|
|
"github.com/hashicorp/nomad/client/pluginmanager/csimanager"
|
|
"github.com/hashicorp/nomad/helper"
|
|
)
|
|
|
|
// AllocHookResources contains data that is provided by AllocRunner Hooks for
|
|
// consumption by TaskRunners. This should be instantiated once in the
|
|
// AllocRunner and then only accessed via getters and setters that hold the
|
|
// lock.
|
|
type AllocHookResources struct {
|
|
csiMounts map[string]*csimanager.MountInfo
|
|
consulTokens map[string]map[string]string // Consul cluster -> service identity -> token
|
|
|
|
mu sync.RWMutex
|
|
}
|
|
|
|
func NewAllocHookResources() *AllocHookResources {
|
|
return &AllocHookResources{
|
|
csiMounts: map[string]*csimanager.MountInfo{},
|
|
consulTokens: map[string]map[string]string{},
|
|
}
|
|
}
|
|
|
|
// GetCSIMounts returns a copy of the CSI mount info previously written by the
|
|
// CSI allocrunner hook
|
|
func (a *AllocHookResources) GetCSIMounts() map[string]*csimanager.MountInfo {
|
|
a.mu.RLock()
|
|
defer a.mu.RUnlock()
|
|
|
|
return helper.DeepCopyMap(a.csiMounts)
|
|
}
|
|
|
|
// SetCSIMounts stores the CSI mount info for later use by the volume taskrunner
|
|
// hook
|
|
func (a *AllocHookResources) SetCSIMounts(m map[string]*csimanager.MountInfo) {
|
|
a.mu.Lock()
|
|
defer a.mu.Unlock()
|
|
|
|
a.csiMounts = m
|
|
}
|
|
|
|
// GetConsulTokens returns all the Consul tokens previously written by the
|
|
// consul allocrunner hook
|
|
func (a *AllocHookResources) GetConsulTokens() map[string]map[string]string {
|
|
a.mu.RLock()
|
|
defer a.mu.RUnlock()
|
|
|
|
return a.consulTokens
|
|
}
|
|
|
|
// SetConsulTokens merges a given map of Consul cluster names to task
|
|
// identities to Consul tokens with previously written data. This method is
|
|
// called by the allocrunner consul hook.
|
|
func (a *AllocHookResources) SetConsulTokens(m map[string]map[string]string) {
|
|
a.mu.Lock()
|
|
defer a.mu.Unlock()
|
|
|
|
for k, v := range m {
|
|
a.consulTokens[k] = v
|
|
}
|
|
}
|