unkin-agent
9da206dc7c
PVCs and CloudNativePG Clusters need S3 buckets and backup schedules
provisioned consistently. This operator watches the
backups.unkin.net/{schedule,destination} annotations on those objects and
provisions everything needed to back them up, with no new CRDs.
- Add a PVC controller that provisions cephrgw ObjectStoreUser/Bucket/BucketAccess,
auto-generates a restic repo-password Secret and creates a k8up Schedule scoped
to the PVC via spec.backup.volumes[].persistentVolumeClaim.claimName.
- Add a CNPG Cluster controller that provisions the same bucket stack, idempotently
patches spec.backup.barmanObjectStore (leaving a user-set destinationPath alone
with a Warning event) and creates a ScheduledBackup.
- Resolve destinations through a ConfigMap lookup table; requeue until the
BucketAccess is Ready before creating schedule resources; own-reference created
resources and retain bucket data by default.
- Add schedule-mapping helpers (k8up 5-field/shortcut pass-through, CNPG 6-field
seconds-first) and deterministic, length-bounded name derivation.
- Add unit tests (schedule mapping, name derivation, destination resolution) and
envtest controller tests for both paths, wiring the external CRDs into envtest.
- Add kubebuilder-generated RBAC, a Dockerfile (distroless/nonroot), Woodpecker
lint/test/build pipelines and a tag-triggered image push to the artifactapi
docker-internal registry, plus a version-bump Makefile and deploy manifests.
81 lines
2.0 KiB
Go
81 lines
2.0 KiB
Go
// Copyright 2016 Google Inc. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package uuid
|
|
|
|
import (
|
|
"encoding/binary"
|
|
"fmt"
|
|
"os"
|
|
)
|
|
|
|
// A Domain represents a Version 2 domain
|
|
type Domain byte
|
|
|
|
// Domain constants for DCE Security (Version 2) UUIDs.
|
|
const (
|
|
Person = Domain(0)
|
|
Group = Domain(1)
|
|
Org = Domain(2)
|
|
)
|
|
|
|
// NewDCESecurity returns a DCE Security (Version 2) UUID.
|
|
//
|
|
// The domain should be one of Person, Group or Org.
|
|
// On a POSIX system the id should be the users UID for the Person
|
|
// domain and the users GID for the Group. The meaning of id for
|
|
// the domain Org or on non-POSIX systems is site defined.
|
|
//
|
|
// For a given domain/id pair the same token may be returned for up to
|
|
// 7 minutes and 10 seconds.
|
|
func NewDCESecurity(domain Domain, id uint32) (UUID, error) {
|
|
uuid, err := NewUUID()
|
|
if err == nil {
|
|
uuid[6] = (uuid[6] & 0x0f) | 0x20 // Version 2
|
|
uuid[9] = byte(domain)
|
|
binary.BigEndian.PutUint32(uuid[0:], id)
|
|
}
|
|
return uuid, err
|
|
}
|
|
|
|
// NewDCEPerson returns a DCE Security (Version 2) UUID in the person
|
|
// domain with the id returned by os.Getuid.
|
|
//
|
|
// NewDCESecurity(Person, uint32(os.Getuid()))
|
|
func NewDCEPerson() (UUID, error) {
|
|
return NewDCESecurity(Person, uint32(os.Getuid()))
|
|
}
|
|
|
|
// NewDCEGroup returns a DCE Security (Version 2) UUID in the group
|
|
// domain with the id returned by os.Getgid.
|
|
//
|
|
// NewDCESecurity(Group, uint32(os.Getgid()))
|
|
func NewDCEGroup() (UUID, error) {
|
|
return NewDCESecurity(Group, uint32(os.Getgid()))
|
|
}
|
|
|
|
// Domain returns the domain for a Version 2 UUID. Domains are only defined
|
|
// for Version 2 UUIDs.
|
|
func (uuid UUID) Domain() Domain {
|
|
return Domain(uuid[9])
|
|
}
|
|
|
|
// ID returns the id for a Version 2 UUID. IDs are only defined for Version 2
|
|
// UUIDs.
|
|
func (uuid UUID) ID() uint32 {
|
|
return binary.BigEndian.Uint32(uuid[0:4])
|
|
}
|
|
|
|
func (d Domain) String() string {
|
|
switch d {
|
|
case Person:
|
|
return "Person"
|
|
case Group:
|
|
return "Group"
|
|
case Org:
|
|
return "Org"
|
|
}
|
|
return fmt.Sprintf("Domain%d", int(d))
|
|
}
|