pkg/config/analysis/analyzers/multicluster/meshnetworks.go

// Copyright Istio Authors
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package multicluster

import (
	"fmt"
)

import (
	"istio.io/api/mesh/v1alpha1"
	v1 "k8s.io/api/core/v1"
)

import (
	"github.com/apache/dubbo-go-pixiu/pilot/pkg/serviceregistry/provider"
	"github.com/apache/dubbo-go-pixiu/pkg/config/analysis"
	"github.com/apache/dubbo-go-pixiu/pkg/config/analysis/analyzers/util"
	"github.com/apache/dubbo-go-pixiu/pkg/config/analysis/msg"
	"github.com/apache/dubbo-go-pixiu/pkg/config/resource"
	"github.com/apache/dubbo-go-pixiu/pkg/config/schema/collection"
	"github.com/apache/dubbo-go-pixiu/pkg/config/schema/collections"
	"github.com/apache/dubbo-go-pixiu/pkg/kube/multicluster"
)

// MeshNetworksAnalyzer validates MeshNetworks configuration in multi-cluster.
type MeshNetworksAnalyzer struct{}

var _ analysis.Analyzer = &MeshNetworksAnalyzer{}

// Service Registries that are known to istio.
var serviceRegistries = []provider.ID{
	provider.Mock,
	provider.Kubernetes,
	provider.External,
}

// Metadata implements Analyzer
func (s *MeshNetworksAnalyzer) Metadata() analysis.Metadata {
	return analysis.Metadata{
		Name:        "meshnetworks.MeshNetworksAnalyzer",
		Description: "Check the validity of MeshNetworks in the cluster",
		Inputs: collection.Names{
			collections.IstioMeshV1Alpha1MeshNetworks.Name(),
			collections.K8SCoreV1Secrets.Name(),
		},
	}
}

// Analyze implements Analyzer
func (s *MeshNetworksAnalyzer) Analyze(c analysis.Context) {
	c.ForEach(collections.K8SCoreV1Secrets.Name(), func(r *resource.Instance) bool {
		if r.Metadata.Labels[multicluster.MultiClusterSecretLabel] == "true" {
			s := r.Message.(*v1.Secret)
			for c := range s.Data {
				serviceRegistries = append(serviceRegistries, provider.ID(c))
			}
		}
		return true
	})

	// only one meshnetworks config should exist.
	c.ForEach(collections.IstioMeshV1Alpha1MeshNetworks.Name(), func(r *resource.Instance) bool {
		mn := r.Message.(*v1alpha1.MeshNetworks)
		for i, n := range mn.Networks {
			for j, e := range n.Endpoints {
				switch re := e.Ne.(type) {
				case *v1alpha1.Network_NetworkEndpoints_FromRegistry:
					found := false
					for _, s := range serviceRegistries {
						if provider.ID(re.FromRegistry) == s {
							found = true
						}
					}
					if !found {
						m := msg.NewUnknownMeshNetworksServiceRegistry(r, re.FromRegistry, i)

						if line, ok := util.ErrorLine(r, fmt.Sprintf(util.FromRegistry, i, j)); ok {
							m.Line = line
						}

						c.Report(collections.IstioMeshV1Alpha1MeshNetworks.Name(), m)
					}
				}
			}
		}
		return true
	})
}