velero/pkg/controller/download_request_controller.go

/*
Copyright the Velero contributors.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package controller

import (
	"context"
	"fmt"
	"time"

	"github.com/cockroachdb/errors"
	"github.com/sirupsen/logrus"
	apierrors "k8s.io/apimachinery/pkg/api/errors"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	clocks "k8s.io/utils/clock"
	ctrl "sigs.k8s.io/controller-runtime"
	kbclient "sigs.k8s.io/controller-runtime/pkg/client"
	"sigs.k8s.io/controller-runtime/pkg/predicate"

	velerov1api "github.com/velero-io/velero/pkg/apis/velero/v1"
	"github.com/velero-io/velero/pkg/constant"
	"github.com/velero-io/velero/pkg/itemoperationmap"
	"github.com/velero-io/velero/pkg/persistence"
	"github.com/velero-io/velero/pkg/plugin/clientmgmt"
	"github.com/velero-io/velero/pkg/util/kube"
)

const (
	defaultDownloadRequestSyncPeriod = time.Minute
)

// downloadRequestReconciler reconciles a DownloadRequest object
type downloadRequestReconciler struct {
	client kbclient.Client
	clock  clocks.Clock
	// use variables to refer to these functions so they can be
	// replaced with fakes for testing.
	newPluginManager  func(logrus.FieldLogger) clientmgmt.Manager
	backupStoreGetter persistence.ObjectBackupStoreGetter

	// used to force update of async backup item operations before processing download request
	backupItemOperationsMap *itemoperationmap.BackupItemOperationsMap
	// used to force update of async restore item operations before processing download request
	restoreItemOperationsMap *itemoperationmap.RestoreItemOperationsMap

	log logrus.FieldLogger
}

// NewDownloadRequestReconciler initializes and returns downloadRequestReconciler struct.
func NewDownloadRequestReconciler(
	client kbclient.Client,
	clock clocks.Clock,
	newPluginManager func(logrus.FieldLogger) clientmgmt.Manager,
	backupStoreGetter persistence.ObjectBackupStoreGetter,
	log logrus.FieldLogger,
	backupItemOperationsMap *itemoperationmap.BackupItemOperationsMap,
	restoreItemOperationsMap *itemoperationmap.RestoreItemOperationsMap,
) *downloadRequestReconciler {
	return &downloadRequestReconciler{
		client:                   client,
		clock:                    clock,
		newPluginManager:         newPluginManager,
		backupStoreGetter:        backupStoreGetter,
		backupItemOperationsMap:  backupItemOperationsMap,
		restoreItemOperationsMap: restoreItemOperationsMap,
		log:                      log,
	}
}

// +kubebuilder:rbac:groups=velero.io,resources=downloadrequests,verbs=get;list;watch;create;update;patch;delete
// +kubebuilder:rbac:groups=velero.io,resources=downloadrequests/status,verbs=get;update;patch

func (r *downloadRequestReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
	log := r.log.WithFields(logrus.Fields{
		"controller":      "download-request",
		"downloadRequest": req.NamespacedName,
	})

	// Fetch the DownloadRequest instance.
	log.Debug("Getting DownloadRequest")
	downloadRequest := &velerov1api.DownloadRequest{}
	if err := r.client.Get(ctx, req.NamespacedName, downloadRequest); err != nil {
		if apierrors.IsNotFound(err) {
			log.Debug("Unable to find DownloadRequest")
			return ctrl.Result{}, nil
		}

		log.WithError(err).Error("Error getting DownloadRequest")
		return ctrl.Result{}, errors.WithStack(err)
	}

	if downloadRequest.Status != (velerov1api.DownloadRequestStatus{}) && downloadRequest.Status.Expiration != nil {
		if downloadRequest.Status.Expiration.Time.Before(r.clock.Now()) {
			// Delete any request that is expired, regardless of the phase: it is not
			// worth proceeding and trying/retrying to find it.
			log.Debug("DownloadRequest has expired - deleting")
			if err := r.client.Delete(ctx, downloadRequest); err != nil {
				log.WithError(err).Error("Error deleting an expired download request")
				return ctrl.Result{}, errors.WithStack(err)
			}
			return ctrl.Result{}, nil
		} else if downloadRequest.Status.Phase == velerov1api.DownloadRequestPhaseProcessed {
			log.Debug("DownloadRequest has not yet expired.")
			return ctrl.Result{}, nil
		}
	}

	// Process a brand new request.
	if downloadRequest.Status.Phase == "" || downloadRequest.Status.Phase == velerov1api.DownloadRequestPhaseNew {
		backupName := downloadRequest.Spec.Target.Name
		original := downloadRequest.DeepCopy()
		defer func() {
			// Always attempt to Patch the downloadRequest object and status for new DownloadRequest.
			if err := r.client.Patch(ctx, downloadRequest, kbclient.MergeFrom(original)); err != nil {
				log.WithError(err).Error("Error updating download request")
				return
			}
		}()

		// Update the expiration.
		downloadRequest.Status.Expiration = &metav1.Time{Time: r.clock.Now().Add(persistence.DownloadURLTTL)}

		isRestoreTarget := downloadRequest.Spec.Target.Kind == velerov1api.DownloadTargetKindRestoreLog ||
			downloadRequest.Spec.Target.Kind == velerov1api.DownloadTargetKindRestoreResults ||
			downloadRequest.Spec.Target.Kind == velerov1api.DownloadTargetKindRestoreResourceList ||
			downloadRequest.Spec.Target.Kind == velerov1api.DownloadTargetKindRestoreItemOperations ||
			downloadRequest.Spec.Target.Kind == velerov1api.DownloadTargetKindRestoreVolumeInfo

		if isRestoreTarget {
			restore := &velerov1api.Restore{}
			if err := r.client.Get(ctx, kbclient.ObjectKey{
				Namespace: downloadRequest.Namespace,
				Name:      downloadRequest.Spec.Target.Name,
			}, restore); err != nil {
				if apierrors.IsNotFound(err) {
					log.WithError(err).Error("fail to get restore for DownloadRequest")
					return ctrl.Result{}, nil
				}
				log.Warnf("fail to get restore for DownloadRequest %s. Retry later.", err.Error())
				return ctrl.Result{}, errors.WithStack(err)
			}

			if restorePhaseHasNoArtifacts(restore.Status.Phase) {
				msg := fmt.Sprintf("restore %q is in phase %q and has not written any artifacts",
					restore.Name, restore.Status.Phase)
				log.Infof("%s, not signing a URL", msg)
				downloadRequest.Status.Phase = velerov1api.DownloadRequestPhaseFailed
				downloadRequest.Status.Message = msg
				return ctrl.Result{}, nil
			}

			backupName = restore.Spec.BackupName
		}

		backup := &velerov1api.Backup{}
		if err := r.client.Get(ctx, kbclient.ObjectKey{
			Namespace: downloadRequest.Namespace,
			Name:      backupName,
		}, backup); err != nil {
			if apierrors.IsNotFound(err) {
				log.WithError(err).Error("fail to get backup for DownloadRequest")
				return ctrl.Result{}, nil
			}
			log.Warnf("fail to get backup for DownloadRequest %s. Retry later.", err.Error())
			return ctrl.Result{}, errors.WithStack(err)
		}

		if !isRestoreTarget && backupPhaseHasNoArtifacts(backup.Status.Phase) {
			msg := fmt.Sprintf("backup %q is in phase %q and has not written any artifacts",
				backup.Name, backup.Status.Phase)
			log.Infof("%s, not signing a URL", msg)
			downloadRequest.Status.Phase = velerov1api.DownloadRequestPhaseFailed
			downloadRequest.Status.Message = msg
			return ctrl.Result{}, nil
		}

		location := &velerov1api.BackupStorageLocation{}
		if err := r.client.Get(ctx, kbclient.ObjectKey{
			Namespace: backup.Namespace,
			Name:      backup.Spec.StorageLocation,
		}, location); err != nil {
			if apierrors.IsNotFound(err) {
				log.Errorf("BSL for DownloadRequest cannot be found")
				return ctrl.Result{}, nil
			}
			log.Warnf("fail to get BSL for DownloadRequest: %s", err.Error())
			return ctrl.Result{}, errors.WithStack(err)
		}

		pluginManager := r.newPluginManager(log)
		defer pluginManager.CleanupClients()

		backupStore, err := r.backupStoreGetter.Get(location, pluginManager, log)
		if err != nil {
			log.WithError(err).Error("Error getting a backup store")
			// Fail to get backup store is due to BSL setting issue or credential issue.
			// It cannot be recovered. No need to retry.
			return ctrl.Result{}, nil
		}

		// If this is a request for backup item operations, force upload of in-memory operations that
		// are not yet uploaded (if there are any)
		if downloadRequest.Spec.Target.Kind == velerov1api.DownloadTargetKindBackupItemOperations &&
			r.backupItemOperationsMap != nil {
			// ignore errors here. If we can't upload anything here, process the download as usual
			_ = r.backupItemOperationsMap.UpdateForBackup(backupStore, backupName)
		}
		// If this is a request for restore item operations, force upload of in-memory operations that
		// are not yet uploaded (if there are any)
		if downloadRequest.Spec.Target.Kind == velerov1api.DownloadTargetKindRestoreItemOperations &&
			r.restoreItemOperationsMap != nil {
			// ignore errors here. If we can't upload anything here, process the download as usual
			_ = r.restoreItemOperationsMap.UpdateForRestore(backupStore, downloadRequest.Spec.Target.Name)
		}

		if downloadRequest.Status.DownloadURL, err = backupStore.GetDownloadURL(downloadRequest.Spec.Target); err != nil {
			log.Warnf("fail to get Backup metadata file's download URL %s, retry later: %s", downloadRequest.Spec.Target, err)
			return ctrl.Result{}, errors.WithStack(err)
		}

		downloadRequest.Status.Phase = velerov1api.DownloadRequestPhaseProcessed

		// Update the expiration again to extend the time we wait (the TTL) to start after successfully processing the URL.
		downloadRequest.Status.Expiration = &metav1.Time{Time: r.clock.Now().Add(persistence.DownloadURLTTL)}
	}

	return ctrl.Result{}, nil
}

func (r *downloadRequestReconciler) SetupWithManager(mgr ctrl.Manager) error {
	downloadRequestPredicate := kube.NewGenericEventPredicate(func(object kbclient.Object) bool {
		downloadRequest := object.(*velerov1api.DownloadRequest)
		if downloadRequest.Status != (velerov1api.DownloadRequestStatus{}) && downloadRequest.Status.Expiration != nil {
			return downloadRequest.Status.Expiration.Time.Before(r.clock.Now())
		}
		return true
	})
	downloadRequestSource := kube.NewPeriodicalEnqueueSource(r.log.WithField("controller", constant.ControllerDownloadRequest), mgr.GetClient(),
		&velerov1api.DownloadRequestList{}, defaultDownloadRequestSyncPeriod, kube.PeriodicalEnqueueSourceOption{
			Predicates: []predicate.Predicate{downloadRequestPredicate},
		})

	return ctrl.NewControllerManagedBy(mgr).
		For(&velerov1api.DownloadRequest{}).
		WatchesRawSource(downloadRequestSource).
		Complete(r)
}

// backupPhaseHasNoArtifacts reports whether a backup in this phase is known to have
// written nothing to object storage yet, so no DownloadTargetKind can exist for it.
//
// Only pre-execution phases are listed. InProgress and everything after it may have a
// partial log or other artifacts, and Deleting may still have all of them, so those are
// left alone: signing there preserves the behavior callers have today.
func backupPhaseHasNoArtifacts(phase velerov1api.BackupPhase) bool {
	switch phase {
	case velerov1api.BackupPhaseNew,
		velerov1api.BackupPhaseQueued,
		velerov1api.BackupPhaseReadyToStart,
		velerov1api.BackupPhaseFailedValidation:
		return true
	default:
		return false
	}
}

// restorePhaseHasNoArtifacts is the same test for a restore.
func restorePhaseHasNoArtifacts(phase velerov1api.RestorePhase) bool {
	switch phase {
	case velerov1api.RestorePhaseNew,
		velerov1api.RestorePhaseFailedValidation:
		return true
	default:
		return false
	}
}