Sep 9, 2024 · Aug 28, 2024 · Sep 3, 2024 · Sep 3, 2024 · Sep 3, 2024 · Sep 3, 2024
diff --git a/cli/server.go b/cli/server.go
 "cdr.dev/slog"
 "cdr.dev/slog/sloggers/sloghuman"
 "github.com/coder/coder/v2/coderd/entitlements"
 "github.com/coder/coder/v2/coderd/runtimeconfig"
 "github.com/coder/pretty"
 "github.com/coder/quartz"
 "github.com/coder/retry"
 returnerr
 }

 options.RuntimeConfig=runtimeconfig.NewManager()

 // This should be output before the logs start streaming.
 cliui.Infof(inv.Stdout,"\n==> Logs will stream in below (press ctrl+c to gracefully exit):")

diff --git a/coderd/coderd.go b/coderd/coderd.go
 "cdr.dev/slog"
 "github.com/coder/coder/v2/coderd/entitlements"
 "github.com/coder/coder/v2/coderd/idpsync"
 "github.com/coder/coder/v2/coderd/runtimeconfig"
 "github.com/coder/quartz"
 "github.com/coder/serpent"

 Logger           slog.Logger
 Database         database.Store
 Pubsub           pubsub.Pubsub
 RuntimeConfig    *runtimeconfig.Manager

 // CacheDir is used for caching files served by the API.
 CacheDir string
diff --git a/coderd/coderdtest/coderdtest.go b/coderd/coderdtest/coderdtest.go
 "github.com/coder/coder/v2/coderd/notifications"
 "github.com/coder/coder/v2/coderd/rbac"
 "github.com/coder/coder/v2/coderd/rbac/policy"
 "github.com/coder/coder/v2/coderd/runtimeconfig"
 "github.com/coder/coder/v2/coderd/schedule"
 "github.com/coder/coder/v2/coderd/telemetry"
 "github.com/coder/coder/v2/coderd/unhanger"
 var acs dbauthz.AccessControlStore = dbauthz.AGPLTemplateAccessControlStore{}
 accessControlStore.Store(&acs)

 runtimeManager := runtimeconfig.NewManager()
 options.Database = dbauthz.New(options.Database, options.Authorizer, *options.Logger, accessControlStore)

 // Some routes expect a deployment ID, so just make sure one exists.
 AppHostnameRegex:               appHostnameRegex,
 Logger:                         *options.Logger,
 CacheDir:                       t.TempDir(),
 RuntimeConfig:                  runtimeManager,
 Database:                       options.Database,
 Pubsub:                         options.Pubsub,
 ExternalAuthConfigs:            options.ExternalAuthConfigs,
diff --git a/coderd/database/dbauthz/dbauthz.go b/coderd/database/dbauthz/dbauthz.go
 return q.db.DeleteReplicasUpdatedBefore(ctx, updatedAt)
 }

 func (q *querier) DeleteRuntimeConfig(ctx context.Context, key string) error {
 if err := q.authorizeContext(ctx, policy.ActionDelete, rbac.ResourceSystem); err != nil {
 return err
 }
 return q.db.DeleteRuntimeConfig(ctx, key)
 }

 func (q *querier) DeleteTailnetAgent(ctx context.Context, arg database.DeleteTailnetAgentParams) (database.DeleteTailnetAgentRow, error) {
 if err := q.authorizeContext(ctx, policy.ActionUpdate, rbac.ResourceTailnetCoordinator); err != nil {
 return database.DeleteTailnetAgentRow{}, err
 return q.db.GetReplicasUpdatedAfter(ctx, updatedAt)
 }

 func (q *querier) GetRuntimeConfig(ctx context.Context, key string) (string, error) {
 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceSystem); err != nil {
 return "", err
 }
 return q.db.GetRuntimeConfig(ctx, key)
 }

 func (q *querier) GetTailnetAgents(ctx context.Context, id uuid.UUID) ([]database.TailnetAgent, error) {
 if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTailnetCoordinator); err != nil {
 return nil, err
 return q.db.UpsertProvisionerDaemon(ctx, arg)
 }

 func (q *querier) UpsertRuntimeConfig(ctx context.Context, arg database.UpsertRuntimeConfigParams) error {
 if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
 return err
 }
 return q.db.UpsertRuntimeConfig(ctx, arg)
 }

 func (q *querier) UpsertTailnetAgent(ctx context.Context, arg database.UpsertTailnetAgentParams) (database.TailnetAgent, error) {
 if err := q.authorizeContext(ctx, policy.ActionUpdate, rbac.ResourceTailnetCoordinator); err != nil {
 return database.TailnetAgent{}, err
diff --git a/coderd/database/dbauthz/dbauthz_test.go b/coderd/database/dbauthz/dbauthz_test.go
 AgentID:     uuid.New(),
 }).Asserts(tpl, policy.ActionCreate)
 }))
 s.Run("DeleteRuntimeConfig", s.Subtest(func(db database.Store, check *expects) {
 check.Args("test").Asserts(rbac.ResourceSystem, policy.ActionDelete)
 }))
 s.Run("GetRuntimeConfig", s.Subtest(func(db database.Store, check *expects) {
 _ = db.UpsertRuntimeConfig(context.Background(), database.UpsertRuntimeConfigParams{
 Key:   "test",
 Value: "value",
 })
 check.Args("test").Asserts(rbac.ResourceSystem, policy.ActionRead)
 }))
 s.Run("UpsertRuntimeConfig", s.Subtest(func(db database.Store, check *expects) {
 check.Args(database.UpsertRuntimeConfigParams{
 Key:   "test",
 Value: "value",
 }).Asserts(rbac.ResourceSystem, policy.ActionCreate)
 }))
 }

 func (s *MethodTestSuite) TestNotifications() {
diff --git a/coderd/database/dbmem/dbmem.go b/coderd/database/dbmem/dbmem.go
 workspaceProxies:          make([]database.WorkspaceProxy, 0),
 customRoles:               make([]database.CustomRole, 0),
 locks:                     map[int64]struct{}{},
 runtimeConfig:             map[string]string{},
 },
 }
 // Always start with a default org. Matching migration 198.
 workspaces                    []database.Workspace
 workspaceProxies              []database.WorkspaceProxy
 customRoles                   []database.CustomRole
 runtimeConfig                 map[string]string
 // Locks is a map of lock names. Any keys within the map are currently
 // locked.
 locks                            map[int64]struct{}
 return nil
 }

 func (q *FakeQuerier) DeleteRuntimeConfig(_ context.Context, key string) error {
 q.mutex.Lock()
 defer q.mutex.Unlock()

 delete(q.runtimeConfig, key)
 return nil
 }

 func (*FakeQuerier) DeleteTailnetAgent(context.Context, database.DeleteTailnetAgentParams) (database.DeleteTailnetAgentRow, error) {
 return database.DeleteTailnetAgentRow{}, ErrUnimplemented
 }
 return replicas, nil
 }

 func (q *FakeQuerier) GetRuntimeConfig(_ context.Context, key string) (string, error) {
 q.mutex.Lock()
 defer q.mutex.Unlock()

 val, ok := q.runtimeConfig[key]
 if !ok {
 return "", sql.ErrNoRows
 }

 return val, nil
 }

 func (*FakeQuerier) GetTailnetAgents(context.Context, uuid.UUID) ([]database.TailnetAgent, error) {
 return nil, ErrUnimplemented
 }
 return d, nil
 }

 func (q *FakeQuerier) UpsertRuntimeConfig(_ context.Context, arg database.UpsertRuntimeConfigParams) error {
 err := validateDatabaseType(arg)
 if err != nil {
 return err
 }

 q.mutex.Lock()
 defer q.mutex.Unlock()

 q.runtimeConfig[arg.Key] = arg.Value
 return nil
 }

 func (*FakeQuerier) UpsertTailnetAgent(context.Context, database.UpsertTailnetAgentParams) (database.TailnetAgent, error) {
 return database.TailnetAgent{}, ErrUnimplemented
 }
diff --git a/coderd/database/dbmetrics/dbmetrics.go b/coderd/database/dbmetrics/dbmetrics.go
diff --git a/coderd/database/dbmock/dbmock.go b/coderd/database/dbmock/dbmock.go
diff --git a/coderd/database/querier.go b/coderd/database/querier.go
diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go
diff --git a/coderd/database/queries/siteconfig.sql b/coderd/database/queries/siteconfig.sql
 INSERT INTO site_configs (key, value) VALUES ('notifications_settings', $1)
 ON CONFLICT (key) DO UPDATE SET value = $1 WHERE site_configs.key = 'notifications_settings';

 -- name: GetRuntimeConfig :one
 SELECT value FROM site_configs WHERE site_configs.key = $1;

 -- name: UpsertRuntimeConfig :exec
 INSERT INTO site_configs (key, value) VALUES ($1, $2)
 ON CONFLICT (key) DO UPDATE SET value = $2 WHERE site_configs.key = $1;

 -- name: DeleteRuntimeConfig :exec
 DELETE FROM site_configs
 WHERE site_configs.key = $1;
Original file line number	Diff line number	Diff line change
Expand Up		@@ -56,6 +56,7 @@ import (
		"cdr.dev/slog"
		"cdr.dev/slog/sloggers/sloghuman"
		"github.com/coder/coder/v2/coderd/entitlements"
		"github.com/coder/coder/v2/coderd/runtimeconfig"
		"github.com/coder/pretty"
		"github.com/coder/quartz"
		"github.com/coder/retry"
Expand DownExpand Up		@@ -820,6 +821,8 @@ func (r RootCmd) Server(newAPI func(context.Context, coderd.Options) (*coderd.
		returnerr
		}

		options.RuntimeConfig=runtimeconfig.NewManager()

		// This should be output before the logs start streaming.
		cliui.Infof(inv.Stdout,"\n==> Logs will stream in below (press ctrl+c to gracefully exit):")

Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -39,6 +39,7 @@ import (
		"cdr.dev/slog"
		"github.com/coder/coder/v2/coderd/entitlements"
		"github.com/coder/coder/v2/coderd/idpsync"
		"github.com/coder/coder/v2/coderd/runtimeconfig"
		"github.com/coder/quartz"
		"github.com/coder/serpent"

Expand DownExpand Up		@@ -135,6 +136,7 @@ type Options struct {
		Logger slog.Logger
		Database database.Store
		Pubsub pubsub.Pubsub
		RuntimeConfig *runtimeconfig.Manager

		// CacheDir is used for caching files served by the API.
		CacheDir string
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -67,6 +67,7 @@ import (
		"github.com/coder/coder/v2/coderd/notifications"
		"github.com/coder/coder/v2/coderd/rbac"
		"github.com/coder/coder/v2/coderd/rbac/policy"
		"github.com/coder/coder/v2/coderd/runtimeconfig"
		"github.com/coder/coder/v2/coderd/schedule"
		"github.com/coder/coder/v2/coderd/telemetry"
		"github.com/coder/coder/v2/coderd/unhanger"
Expand DownExpand Up		@@ -254,6 +255,7 @@ func NewOptions(t testing.TB, options *Options) (func(http.Handler), context.Can
		var acs dbauthz.AccessControlStore = dbauthz.AGPLTemplateAccessControlStore{}
		accessControlStore.Store(&acs)

		runtimeManager := runtimeconfig.NewManager()
		options.Database = dbauthz.New(options.Database, options.Authorizer, *options.Logger, accessControlStore)

		// Some routes expect a deployment ID, so just make sure one exists.
Expand DownExpand Up		@@ -482,6 +484,7 @@ func NewOptions(t testing.TB, options *Options) (func(http.Handler), context.Can
		AppHostnameRegex: appHostnameRegex,
		Logger: *options.Logger,
		CacheDir: t.TempDir(),
		RuntimeConfig: runtimeManager,
		Database: options.Database,
		Pubsub: options.Pubsub,
		ExternalAuthConfigs: options.ExternalAuthConfigs,
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -1183,6 +1183,13 @@ func (q *querier) DeleteReplicasUpdatedBefore(ctx context.Context, updatedAt tim
		return q.db.DeleteReplicasUpdatedBefore(ctx, updatedAt)
		}

		func (q *querier) DeleteRuntimeConfig(ctx context.Context, key string) error {
		if err := q.authorizeContext(ctx, policy.ActionDelete, rbac.ResourceSystem); err != nil {
		return err
		}
		return q.db.DeleteRuntimeConfig(ctx, key)
		}

		func (q *querier) DeleteTailnetAgent(ctx context.Context, arg database.DeleteTailnetAgentParams) (database.DeleteTailnetAgentRow, error) {
		if err := q.authorizeContext(ctx, policy.ActionUpdate, rbac.ResourceTailnetCoordinator); err != nil {
		return database.DeleteTailnetAgentRow{}, err
Expand DownExpand Up		@@ -1856,6 +1863,13 @@ func (q *querier) GetReplicasUpdatedAfter(ctx context.Context, updatedAt time.Ti
		return q.db.GetReplicasUpdatedAfter(ctx, updatedAt)
		}

		func (q *querier) GetRuntimeConfig(ctx context.Context, key string) (string, error) {
		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceSystem); err != nil {
		return "", err
		}
		return q.db.GetRuntimeConfig(ctx, key)
		}

		func (q *querier) GetTailnetAgents(ctx context.Context, id uuid.UUID) ([]database.TailnetAgent, error) {
		if err := q.authorizeContext(ctx, policy.ActionRead, rbac.ResourceTailnetCoordinator); err != nil {
		return nil, err
Expand DownExpand Up		@@ -3906,6 +3920,13 @@ func (q *querier) UpsertProvisionerDaemon(ctx context.Context, arg database.Upse
		return q.db.UpsertProvisionerDaemon(ctx, arg)
		}

		func (q *querier) UpsertRuntimeConfig(ctx context.Context, arg database.UpsertRuntimeConfigParams) error {
		if err := q.authorizeContext(ctx, policy.ActionCreate, rbac.ResourceSystem); err != nil {
		return err
		}
		return q.db.UpsertRuntimeConfig(ctx, arg)
		}

		func (q *querier) UpsertTailnetAgent(ctx context.Context, arg database.UpsertTailnetAgentParams) (database.TailnetAgent, error) {
		if err := q.authorizeContext(ctx, policy.ActionUpdate, rbac.ResourceTailnetCoordinator); err != nil {
		return database.TailnetAgent{}, err
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -2696,6 +2696,22 @@ func (s *MethodTestSuite) TestSystemFunctions() {
		AgentID: uuid.New(),
		}).Asserts(tpl, policy.ActionCreate)
		}))
		s.Run("DeleteRuntimeConfig", s.Subtest(func(db database.Store, check *expects) {
		check.Args("test").Asserts(rbac.ResourceSystem, policy.ActionDelete)
		}))
		s.Run("GetRuntimeConfig", s.Subtest(func(db database.Store, check *expects) {
		_ = db.UpsertRuntimeConfig(context.Background(), database.UpsertRuntimeConfigParams{
		Key: "test",
		Value: "value",
		})
		check.Args("test").Asserts(rbac.ResourceSystem, policy.ActionRead)
		}))
		s.Run("UpsertRuntimeConfig", s.Subtest(func(db database.Store, check *expects) {
		check.Args(database.UpsertRuntimeConfigParams{
		Key: "test",
		Value: "value",
		}).Asserts(rbac.ResourceSystem, policy.ActionCreate)
		}))
		}

		func (s *MethodTestSuite) TestNotifications() {
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -84,6 +84,7 @@ func New() database.Store {
		workspaceProxies: make([]database.WorkspaceProxy, 0),
		customRoles: make([]database.CustomRole, 0),
		locks: map[int64]struct{}{},
		runtimeConfig: map[string]string{},
		},
		}
		// Always start with a default org. Matching migration 198.
Expand DownExpand Up		@@ -194,6 +195,7 @@ type data struct {
		workspaces []database.Workspace
		workspaceProxies []database.WorkspaceProxy
		customRoles []database.CustomRole
		runtimeConfig map[string]string
		// Locks is a map of lock names. Any keys within the map are currently
		// locked.
		locks map[int64]struct{}
Expand DownExpand Up		@@ -1928,6 +1930,14 @@ func (q *FakeQuerier) DeleteReplicasUpdatedBefore(_ context.Context, before time
		return nil
		}

		func (q *FakeQuerier) DeleteRuntimeConfig(_ context.Context, key string) error {
		q.mutex.Lock()
		defer q.mutex.Unlock()

		delete(q.runtimeConfig, key)
		return nil
		}

		func (*FakeQuerier) DeleteTailnetAgent(context.Context, database.DeleteTailnetAgentParams) (database.DeleteTailnetAgentRow, error) {
		return database.DeleteTailnetAgentRow{}, ErrUnimplemented
		}
Expand DownExpand Up		@@ -3505,6 +3515,18 @@ func (q *FakeQuerier) GetReplicasUpdatedAfter(_ context.Context, updatedAt time.
		return replicas, nil
		}

		func (q *FakeQuerier) GetRuntimeConfig(_ context.Context, key string) (string, error) {
		q.mutex.Lock()
		defer q.mutex.Unlock()

		val, ok := q.runtimeConfig[key]
		if !ok {
		return "", sql.ErrNoRows
		}

		return val, nil
		}

		func (*FakeQuerier) GetTailnetAgents(context.Context, uuid.UUID) ([]database.TailnetAgent, error) {
		return nil, ErrUnimplemented
		}
Expand DownExpand Up		@@ -9186,6 +9208,19 @@ func (q *FakeQuerier) UpsertProvisionerDaemon(_ context.Context, arg database.Up
		return d, nil
		}

		func (q *FakeQuerier) UpsertRuntimeConfig(_ context.Context, arg database.UpsertRuntimeConfigParams) error {
		err := validateDatabaseType(arg)
		if err != nil {
		return err
		}

		q.mutex.Lock()
		defer q.mutex.Unlock()

		q.runtimeConfig[arg.Key] = arg.Value
		return nil
		}

		func (*FakeQuerier) UpsertTailnetAgent(context.Context, database.UpsertTailnetAgentParams) (database.TailnetAgent, error) {
		return database.TailnetAgent{}, ErrUnimplemented
		}
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -96,3 +96,14 @@ SELECT
		INSERT INTO site_configs (key, value) VALUES ('notifications_settings', $1)
		ON CONFLICT (key) DO UPDATE SET value = $1 WHERE site_configs.key = 'notifications_settings';

		-- name: GetRuntimeConfig :one
		SELECT value FROM site_configs WHERE site_configs.key = $1;

		-- name: UpsertRuntimeConfig :exec
		INSERT INTO site_configs (key, value) VALUES ($1, $2)
		ON CONFLICT (key) DO UPDATE SET value = $2 WHERE site_configs.key = $1;

		-- name: DeleteRuntimeConfig :exec
		DELETE FROM site_configs
		WHERE site_configs.key = $1;