Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit494afa9

Browse files
committed
review
1 parentb11895f commit494afa9

File tree

11 files changed

+220
-122
lines changed

11 files changed

+220
-122
lines changed

‎cli/server.go‎

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -722,13 +722,6 @@ func (r *RootCmd) Server(newAPI func(context.Context, *coderd.Options) (*coderd.
722722
options.Database=dbmetrics.NewDBMetrics(options.Database,options.Logger,options.PrometheusRegistry)
723723
}
724724

725-
wsUpdates,err:=coderd.NewUpdatesProvider(logger.Named("workspace_updates"),options.Pubsub,options.Database,options.Authorizer)
726-
iferr!=nil {
727-
returnxerrors.Errorf("create workspace updates provider: %w",err)
728-
}
729-
options.WorkspaceUpdatesProvider=wsUpdates
730-
deferwsUpdates.Close()
731-
732725
vardeploymentIDstring
733726
err=options.Database.InTx(func(tx database.Store)error {
734727
// This will block until the lock is acquired, and will be

‎coderd/coderd.go‎

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -227,8 +227,6 @@ type Options struct {
227227

228228
WorkspaceAppsStatsCollectorOptions workspaceapps.StatsCollectorOptions
229229

230-
WorkspaceUpdatesProvider tailnet.WorkspaceUpdatesProvider
231-
232230
// This janky function is used in telemetry to parse fields out of the raw
233231
// JWT. It needs to be passed through like this because license parsing is
234232
// under the enterprise license, and can't be imported into AGPL.
@@ -495,6 +493,8 @@ func New(options *Options) *API {
495493
}
496494
}
497495

496+
updatesProvider:=NewUpdatesProvider(options.Logger.Named("workspace_updates"),options.Pubsub,options.Database,options.Authorizer)
497+
498498
// Start a background process that rotates keys. We intentionally start this after the caches
499499
// are created to force initial requests for a key to populate the caches. This helps catch
500500
// bugs that may only occur when a key isn't precached in tests and the latency cost is minimal.
@@ -525,6 +525,7 @@ func New(options *Options) *API {
525525
metricsCache:metricsCache,
526526
Auditor: atomic.Pointer[audit.Auditor]{},
527527
TailnetCoordinator: atomic.Pointer[tailnet.Coordinator]{},
528+
UpdatesProvider:updatesProvider,
528529
TemplateScheduleStore:options.TemplateScheduleStore,
529530
UserQuietHoursScheduleStore:options.UserQuietHoursScheduleStore,
530531
AccessControlStore:options.AccessControlStore,
@@ -660,7 +661,7 @@ func New(options *Options) *API {
660661
DERPMapFn:api.DERPMap,
661662
NetworkTelemetryHandler:api.NetworkTelemetryBatcher.Handler,
662663
ResumeTokenProvider:api.Options.CoordinatorResumeTokenProvider,
663-
WorkspaceUpdatesProvider:api.Options.WorkspaceUpdatesProvider,
664+
WorkspaceUpdatesProvider:api.UpdatesProvider,
664665
})
665666
iferr!=nil {
666667
api.Logger.Fatal(context.Background(),"failed to initialize tailnet client service",slog.Error(err))
@@ -1414,6 +1415,8 @@ type API struct {
14141415
AccessControlStore*atomic.Pointer[dbauthz.AccessControlStore]
14151416
PortSharer atomic.Pointer[portsharing.PortSharer]
14161417

1418+
UpdatesProvider tailnet.WorkspaceUpdatesProvider
1419+
14171420
HTTPAuth*HTTPAuthorizer
14181421

14191422
// APIHandler serves "/api/v2"
@@ -1495,6 +1498,7 @@ func (api *API) Close() error {
14951498
_=api.OIDCConvertKeyCache.Close()
14961499
_=api.AppSigningKeyCache.Close()
14971500
_=api.AppEncryptionKeyCache.Close()
1501+
_=api.UpdatesProvider.Close()
14981502
returnnil
14991503
}
15001504

‎coderd/coderdtest/coderdtest.go‎

Lines changed: 0 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -163,8 +163,6 @@ type Options struct {
163163
APIKeyEncryptionCache cryptokeys.EncryptionKeycache
164164
OIDCConvertKeyCache cryptokeys.SigningKeycache
165165
Clock quartz.Clock
166-
167-
WorkspaceUpdatesProvider tailnet.WorkspaceUpdatesProvider
168166
}
169167

170168
// New constructs a codersdk client connected to an in-memory API instance.
@@ -256,20 +254,6 @@ func NewOptions(t testing.TB, options *Options) (func(http.Handler), context.Can
256254
options.NotificationsEnqueuer=new(testutil.FakeNotificationsEnqueuer)
257255
}
258256

259-
ifoptions.WorkspaceUpdatesProvider==nil {
260-
varerrerror
261-
options.WorkspaceUpdatesProvider,err=coderd.NewUpdatesProvider(
262-
options.Logger.Named("workspace_updates"),
263-
options.Pubsub,
264-
options.Database,
265-
options.Authorizer,
266-
)
267-
require.NoError(t,err)
268-
t.Cleanup(func() {
269-
_=options.WorkspaceUpdatesProvider.Close()
270-
})
271-
}
272-
273257
accessControlStore:=&atomic.Pointer[dbauthz.AccessControlStore]{}
274258
varacs dbauthz.AccessControlStore= dbauthz.AGPLTemplateAccessControlStore{}
275259
accessControlStore.Store(&acs)
@@ -546,7 +530,6 @@ func NewOptions(t testing.TB, options *Options) (func(http.Handler), context.Can
546530
HealthcheckTimeout:options.HealthcheckTimeout,
547531
HealthcheckRefresh:options.HealthcheckRefresh,
548532
StatsBatcher:options.StatsBatcher,
549-
WorkspaceUpdatesProvider:options.WorkspaceUpdatesProvider,
550533
WorkspaceAppsStatsCollectorOptions:options.WorkspaceAppsStatsCollectorOptions,
551534
AllowWorkspaceRenames:options.AllowWorkspaceRenames,
552535
NewTicker:options.NewTicker,

‎coderd/workspaceupdates.go‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,6 @@ import (
1414
"github.com/coder/coder/v2/coderd/database/dbauthz"
1515
"github.com/coder/coder/v2/coderd/database/pubsub"
1616
"github.com/coder/coder/v2/coderd/rbac"
17-
"github.com/coder/coder/v2/coderd/rbac/policy"
1817
"github.com/coder/coder/v2/coderd/util/slice"
1918
"github.com/coder/coder/v2/coderd/wspubsub"
2019
"github.com/coder/coder/v2/codersdk"
@@ -23,7 +22,8 @@ import (
2322
)
2423

2524
typeUpdatesQuerierinterface {
26-
GetAuthorizedWorkspacesAndAgentsByOwnerID(ctx context.Context,ownerID uuid.UUID,prep rbac.PreparedAuthorized) ([]database.GetWorkspacesAndAgentsByOwnerIDRow,error)
25+
// GetAuthorizedWorkspacesAndAgentsByOwnerID requires a context with an actor set
26+
GetWorkspacesAndAgentsByOwnerID(ctx context.Context,ownerID uuid.UUID) ([]database.GetWorkspacesAndAgentsByOwnerIDRow,error)
2727
GetWorkspaceByAgentID(ctx context.Context,agentID uuid.UUID) (database.Workspace,error)
2828
}
2929

@@ -42,14 +42,14 @@ func (w ownedWorkspace) Equal(other ownedWorkspace) bool {
4242
}
4343

4444
typesubstruct {
45+
// ALways contains an actor
4546
ctx context.Context
4647
cancelFn context.CancelFunc
4748

48-
mu sync.RWMutex
49-
userID uuid.UUID
50-
chchan*proto.WorkspaceUpdate
51-
prevworkspacesByID
52-
readPrep rbac.PreparedAuthorized
49+
mu sync.RWMutex
50+
userID uuid.UUID
51+
chchan*proto.WorkspaceUpdate
52+
prevworkspacesByID
5353

5454
dbUpdatesQuerier
5555
ps pubsub.Pubsub
@@ -76,7 +76,8 @@ func (s *sub) handleEvent(ctx context.Context, event wspubsub.WorkspaceEvent, er
7676
}
7777
}
7878

79-
rows,err:=s.db.GetAuthorizedWorkspacesAndAgentsByOwnerID(ctx,s.userID,s.readPrep)
79+
// Use context containing actor
80+
rows,err:=s.db.GetWorkspacesAndAgentsByOwnerID(s.ctx,s.userID)
8081
iferr!=nil {
8182
s.logger.Warn(ctx,"failed to get workspaces and agents by owner ID",slog.Error(err))
8283
return
@@ -97,7 +98,7 @@ func (s *sub) handleEvent(ctx context.Context, event wspubsub.WorkspaceEvent, er
9798
}
9899

99100
func (s*sub)start(ctx context.Context) (errerror) {
100-
rows,err:=s.db.GetAuthorizedWorkspacesAndAgentsByOwnerID(ctx,s.userID,s.readPrep)
101+
rows,err:=s.db.GetWorkspacesAndAgentsByOwnerID(ctx,s.userID)
101102
iferr!=nil {
102103
returnxerrors.Errorf("get workspaces and agents by owner ID: %w",err)
103104
}
@@ -150,7 +151,7 @@ func NewUpdatesProvider(
150151
ps pubsub.Pubsub,
151152
dbUpdatesQuerier,
152153
auth rbac.Authorizer,
153-
)(tailnet.WorkspaceUpdatesProvider,error) {
154+
) tailnet.WorkspaceUpdatesProvider {
154155
ctx,cancel:=context.WithCancel(context.Background())
155156
out:=&updatesProvider{
156157
auth:auth,
@@ -160,25 +161,25 @@ func NewUpdatesProvider(
160161
ctx:ctx,
161162
cancelFn:cancel,
162163
}
163-
returnout,nil
164+
returnout
164165
}
165166

166167
func (u*updatesProvider)Close()error {
167168
u.cancelFn()
168169
returnnil
169170
}
170171

172+
// Subscribe subscribes to workspace updates for a user, for the workspaces
173+
// that user is authorized to `ActionRead` on. The provided context must have
174+
// a dbauthz actor set.
171175
func (u*updatesProvider)Subscribe(ctx context.Context,userID uuid.UUID) (tailnet.Subscription,error) {
172176
actor,ok:=dbauthz.ActorFromContext(ctx)
173177
if!ok {
174178
returnnil,xerrors.Errorf("actor not found in context")
175179
}
176-
readPrep,err:=u.auth.Prepare(ctx,actor,policy.ActionRead,rbac.ResourceWorkspace.Type)
177-
iferr!=nil {
178-
returnnil,xerrors.Errorf("prepare read action: %w",err)
179-
}
180+
ctx,cancel:=context.WithCancel(u.ctx)
181+
ctx=dbauthz.As(ctx,actor)
180182
ch:=make(chan*proto.WorkspaceUpdate,1)
181-
ctx,cancel:=context.WithCancel(ctx)
182183
sub:=&sub{
183184
ctx:ctx,
184185
cancelFn:cancel,
@@ -188,9 +189,8 @@ func (u *updatesProvider) Subscribe(ctx context.Context, userID uuid.UUID) (tail
188189
ps:u.ps,
189190
logger:u.logger.Named(fmt.Sprintf("workspace_updates_subscriber_%s",userID)),
190191
prev:workspacesByID{},
191-
readPrep:readPrep,
192192
}
193-
err=sub.start(ctx)
193+
err:=sub.start(ctx)
194194
iferr!=nil {
195195
_=sub.Close()
196196
returnnil,err

‎coderd/workspaceupdates_test.go‎

Lines changed: 41 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -25,22 +25,23 @@ import (
2525

2626
funcTestWorkspaceUpdates(t*testing.T) {
2727
t.Parallel()
28-
ctx:=context.Background()
2928

30-
ws1ID:=uuid.New()
29+
ws1ID:= uuid.UUID{0x01}
3130
ws1IDSlice:=tailnet.UUIDToByteSlice(ws1ID)
32-
agent1ID:=uuid.New()
31+
agent1ID:= uuid.UUID{0x02}
3332
agent1IDSlice:=tailnet.UUIDToByteSlice(agent1ID)
34-
ws2ID:=uuid.New()
33+
ws2ID:= uuid.UUID{0x03}
3534
ws2IDSlice:=tailnet.UUIDToByteSlice(ws2ID)
36-
ws3ID:=uuid.New()
35+
ws3ID:= uuid.UUID{0x04}
3736
ws3IDSlice:=tailnet.UUIDToByteSlice(ws3ID)
38-
agent2ID:=uuid.New()
37+
agent2ID:= uuid.UUID{0x05}
3938
agent2IDSlice:=tailnet.UUIDToByteSlice(agent2ID)
40-
ws4ID:=uuid.New()
39+
ws4ID:= uuid.UUID{0x06}
4140
ws4IDSlice:=tailnet.UUIDToByteSlice(ws4ID)
41+
agent3ID:= uuid.UUID{0x07}
42+
agent3IDSlice:=tailnet.UUIDToByteSlice(agent3ID)
4243

43-
ownerID:=uuid.New()
44+
ownerID:= uuid.UUID{0x08}
4445
memberRole,err:=rbac.RoleByName(rbac.RoleMember())
4546
require.NoError(t,err)
4647
ownerSubject:= rbac.Subject{
@@ -53,9 +54,11 @@ func TestWorkspaceUpdates(t *testing.T) {
5354
t.Run("Basic",func(t*testing.T) {
5455
t.Parallel()
5556

57+
ctx:=testutil.Context(t,testutil.WaitShort)
58+
5659
db:=&mockWorkspaceStore{
5760
orderedRows: []database.GetWorkspacesAndAgentsByOwnerIDRow{
58-
// Gainsa new agent
61+
// Gainsagent2
5962
{
6063
ID:ws1ID,
6164
Name:"ws1",
@@ -81,6 +84,12 @@ func TestWorkspaceUpdates(t *testing.T) {
8184
Name:"ws3",
8285
JobStatus:database.ProvisionerJobStatusSucceeded,
8386
Transition:database.WorkspaceTransitionStop,
87+
Agents: []database.AgentIDNamePair{
88+
{
89+
ID:agent3ID,
90+
Name:"agent3",
91+
},
92+
},
8493
},
8594
},
8695
}
@@ -89,21 +98,22 @@ func TestWorkspaceUpdates(t *testing.T) {
8998
cbs:map[string]pubsub.ListenerWithErr{},
9099
}
91100

92-
updateProvider,err:=coderd.NewUpdatesProvider(slogtest.Make(t,nil),ps,db,&mockAuthorizer{})
93-
require.NoError(t,err)
101+
updateProvider:=coderd.NewUpdatesProvider(slogtest.Make(t,nil),ps,db,&mockAuthorizer{})
94102
t.Cleanup(func() {
95103
_=updateProvider.Close()
96104
})
97105

98106
sub,err:=updateProvider.Subscribe(dbauthz.As(ctx,ownerSubject),ownerID)
99107
require.NoError(t,err)
100-
ch:=sub.Updates()
108+
defersub.Close()
101109

102-
update,ok:=<-ch
103-
require.True(t,ok)
110+
update:=testutil.RequireRecvCtx(ctx,t,sub.Updates())
104111
slices.SortFunc(update.UpsertedWorkspaces,func(a,b*proto.Workspace)int {
105112
returnstrings.Compare(a.Name,b.Name)
106113
})
114+
slices.SortFunc(update.UpsertedAgents,func(a,b*proto.Agent)int {
115+
returnstrings.Compare(a.Name,b.Name)
116+
})
107117
require.Equal(t,&proto.WorkspaceUpdate{
108118
UpsertedWorkspaces: []*proto.Workspace{
109119
{
@@ -128,6 +138,11 @@ func TestWorkspaceUpdates(t *testing.T) {
128138
Name:"agent1",
129139
WorkspaceId:ws1IDSlice,
130140
},
141+
{
142+
Id:agent3IDSlice,
143+
Name:"agent3",
144+
WorkspaceId:ws3IDSlice,
145+
},
131146
},
132147
DeletedWorkspaces: []*proto.Workspace{},
133148
DeletedAgents: []*proto.Agent{},
@@ -169,8 +184,7 @@ func TestWorkspaceUpdates(t *testing.T) {
169184
WorkspaceID:ws1ID,
170185
})
171186

172-
update,ok=<-ch
173-
require.True(t,ok)
187+
update=testutil.RequireRecvCtx(ctx,t,sub.Updates())
174188
slices.SortFunc(update.UpsertedWorkspaces,func(a,b*proto.Workspace)int {
175189
returnstrings.Compare(a.Name,b.Name)
176190
})
@@ -203,13 +217,21 @@ func TestWorkspaceUpdates(t *testing.T) {
203217
Status:proto.Workspace_STOPPED,
204218
},
205219
},
206-
DeletedAgents: []*proto.Agent{},
220+
DeletedAgents: []*proto.Agent{
221+
{
222+
Id:agent3IDSlice,
223+
Name:"agent3",
224+
WorkspaceId:ws3IDSlice,
225+
},
226+
},
207227
},update)
208228
})
209229

210230
t.Run("Resubscribe",func(t*testing.T) {
211231
t.Parallel()
212232

233+
ctx:=testutil.Context(t,testutil.WaitShort)
234+
213235
db:=&mockWorkspaceStore{
214236
orderedRows: []database.GetWorkspacesAndAgentsByOwnerIDRow{
215237
{
@@ -231,8 +253,7 @@ func TestWorkspaceUpdates(t *testing.T) {
231253
cbs:map[string]pubsub.ListenerWithErr{},
232254
}
233255

234-
updateProvider,err:=coderd.NewUpdatesProvider(slogtest.Make(t,nil),ps,db,&mockAuthorizer{})
235-
require.NoError(t,err)
256+
updateProvider:=coderd.NewUpdatesProvider(slogtest.Make(t,nil),ps,db,&mockAuthorizer{})
236257
t.Cleanup(func() {
237258
_=updateProvider.Close()
238259
})
@@ -290,7 +311,7 @@ type mockWorkspaceStore struct {
290311
}
291312

292313
// GetAuthorizedWorkspacesAndAgentsByOwnerID implements coderd.UpdatesQuerier.
293-
func (m*mockWorkspaceStore)GetAuthorizedWorkspacesAndAgentsByOwnerID(context.Context, uuid.UUID, rbac.PreparedAuthorized) ([]database.GetWorkspacesAndAgentsByOwnerIDRow,error) {
314+
func (m*mockWorkspaceStore)GetWorkspacesAndAgentsByOwnerID(context.Context, uuid.UUID) ([]database.GetWorkspacesAndAgentsByOwnerIDRow,error) {
294315
returnm.orderedRows,nil
295316
}
296317

‎enterprise/tailnet/connio.go‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -133,7 +133,7 @@ var errDisconnect = xerrors.New("graceful disconnect")
133133

134134
func (c*connIO)handleRequest(req*proto.CoordinateRequest)error {
135135
c.logger.Debug(c.peerCtx,"got request")
136-
err:=c.auth.Authorize(c.coordCtx,req)
136+
err:=c.auth.Authorize(c.peerCtx,req)
137137
iferr!=nil {
138138
c.logger.Warn(c.peerCtx,"unauthorized request",slog.Error(err))
139139
returnxerrors.Errorf("authorize request: %w",err)

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp