woodpecker/pipeline/frontend/yaml/compiler/convert.go

229 lines
6.1 KiB
Go
Raw Normal View History

// Copyright 2023 Woodpecker Authors
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
2017-03-05 07:56:08 +00:00
package compiler
import (
"fmt"
"maps"
2017-03-05 07:56:08 +00:00
"path"
"strconv"
2017-04-10 10:39:50 +00:00
"strings"
2017-03-05 07:56:08 +00:00
"github.com/oklog/ulid/v2"
backend_types "go.woodpecker-ci.org/woodpecker/v2/pipeline/backend/types"
"go.woodpecker-ci.org/woodpecker/v2/pipeline/frontend/metadata"
"go.woodpecker-ci.org/woodpecker/v2/pipeline/frontend/yaml/compiler/settings"
yaml_types "go.woodpecker-ci.org/woodpecker/v2/pipeline/frontend/yaml/types"
"go.woodpecker-ci.org/woodpecker/v2/pipeline/frontend/yaml/utils"
2017-03-05 07:56:08 +00:00
)
const (
// The pluginWorkspaceBase should not be changed, only if you are sure what you do.
pluginWorkspaceBase = "/woodpecker"
// DefaultWorkspaceBase is set if not altered by the user.
DefaultWorkspaceBase = pluginWorkspaceBase
)
func (c *Compiler) createProcess(container *yaml_types.Container, stepType backend_types.StepType) (*backend_types.Step, error) {
2017-03-05 07:56:08 +00:00
var (
uuid = ulid.Make()
2017-03-05 07:56:08 +00:00
detached bool
workingDir string
2017-03-05 07:56:08 +00:00
privileged = container.Privileged
networkMode = container.NetworkMode
2017-03-05 07:56:08 +00:00
)
workspaceBase := c.workspaceBase
if container.IsPlugin() {
// plugins have a predefined workspace base to not tamper with entrypoint executables
workspaceBase = pluginWorkspaceBase
}
workspaceVolume := fmt.Sprintf("%s_default:%s", c.prefix, workspaceBase)
networks := []backend_types.Conn{
{
2017-03-05 07:56:08 +00:00
Name: fmt.Sprintf("%s_default", c.prefix),
2017-05-16 10:50:06 +00:00
Aliases: []string{container.Name},
2017-03-05 07:56:08 +00:00
},
}
2017-04-10 16:27:34 +00:00
for _, network := range c.networks {
networks = append(networks, backend_types.Conn{
2017-04-10 16:27:34 +00:00
Name: network,
})
}
2017-03-05 07:56:08 +00:00
extraHosts := make([]backend_types.HostAlias, len(container.ExtraHosts))
for i, extraHost := range container.ExtraHosts {
name, ip, ok := strings.Cut(extraHost, ":")
if !ok {
return nil, &ErrExtraHostFormat{host: extraHost}
}
extraHosts[i].Name = name
extraHosts[i].IP = ip
}
2017-03-19 09:07:21 +00:00
var volumes []string
if !c.local {
volumes = append(volumes, workspaceVolume)
2017-03-05 07:56:08 +00:00
}
2017-03-19 09:07:21 +00:00
volumes = append(volumes, c.volumes...)
2017-03-05 07:56:08 +00:00
for _, volume := range container.Volumes.Volumes {
volumes = append(volumes, volume.String())
}
// append default environment variables
environment := map[string]string{}
maps.Copy(environment, c.env)
2017-03-05 07:56:08 +00:00
environment["CI_WORKSPACE"] = path.Join(workspaceBase, c.workspacePath)
2017-03-05 07:56:08 +00:00
if stepType == backend_types.StepTypeService || container.Detached {
2017-07-21 21:52:52 +00:00
detached = true
2017-03-05 07:56:08 +00:00
}
workingDir = c.stepWorkingDir(container)
2017-03-05 07:56:08 +00:00
getSecretValue := func(name string) (string, error) {
name = strings.ToLower(name)
secret, ok := c.secrets[name]
if !ok {
return "", fmt.Errorf("secret %q not found", name)
}
event := c.metadata.Curr.Event
err := secret.Available(event, container)
if err != nil {
return "", err
}
return secret.Value, nil
}
// TODO: why don't we pass secrets to detached steps?
if !detached {
if err := settings.ParamsToEnv(container.Settings, environment, "PLUGIN_", true, getSecretValue); err != nil {
return nil, err
}
}
if err := settings.ParamsToEnv(container.Environment, environment, "", false, getSecretValue); err != nil {
return nil, err
}
2024-08-15 16:58:51 +00:00
for _, requested := range container.Secrets {
secretValue, err := getSecretValue(requested)
if err != nil {
return nil, err
}
2024-08-15 16:58:51 +00:00
if !environmentAllowed(requested, stepType) {
continue
}
2024-08-15 16:58:51 +00:00
environment[requested] = secretValue
2017-03-05 07:56:08 +00:00
}
if utils.MatchImageDynamic(container.Image, c.escalated...) && container.IsPlugin() {
2017-07-21 21:52:52 +00:00
privileged = true
}
authConfig := backend_types.Auth{}
2017-04-06 16:04:25 +00:00
for _, registry := range c.registries {
if utils.MatchHostname(container.Image, registry.Hostname) {
2017-04-06 16:04:25 +00:00
authConfig.Username = registry.Username
authConfig.Password = registry.Password
break
}
}
var ports []backend_types.Port
for _, portDef := range container.Ports {
port, err := convertPort(portDef)
if err != nil {
return nil, err
}
ports = append(ports, port)
}
// at least one constraint contain status success, or all constraints have no status set
onSuccess := container.When.IncludesStatusSuccess()
// at least one constraint must include the status failure.
onFailure := container.When.IncludesStatusFailure()
failure := container.Failure
if container.Failure == "" {
failure = metadata.FailureFail
}
return &backend_types.Step{
Name: container.Name,
UUID: uuid.String(),
Type: stepType,
Image: container.Image,
Pull: container.Pull,
Detached: detached,
Privileged: privileged,
WorkingDir: workingDir,
WorkspaceBase: workspaceBase,
Environment: environment,
Commands: container.Commands,
Entrypoint: container.Entrypoint,
ExtraHosts: extraHosts,
Volumes: volumes,
Tmpfs: container.Tmpfs,
Devices: container.Devices,
Networks: networks,
DNS: container.DNS,
DNSSearch: container.DNSSearch,
AuthConfig: authConfig,
OnSuccess: onSuccess,
OnFailure: onFailure,
Failure: failure,
NetworkMode: networkMode,
Ports: ports,
BackendOptions: container.BackendOptions,
}, nil
2017-03-05 07:56:08 +00:00
}
func (c *Compiler) stepWorkingDir(container *yaml_types.Container) string {
if path.IsAbs(container.Directory) {
return container.Directory
}
base := c.workspaceBase
if container.IsPlugin() {
base = pluginWorkspaceBase
}
return path.Join(base, c.workspacePath, container.Directory)
}
func convertPort(portDef string) (backend_types.Port, error) {
var err error
var port backend_types.Port
number, protocol, _ := strings.Cut(portDef, "/")
port.Protocol = protocol
portNumber, err := strconv.ParseUint(number, 10, 16)
if err != nil {
return port, err
}
port.Number = uint16(portNumber)
return port, nil
}