unkin-agent
9da206dc7c
PVCs and CloudNativePG Clusters need S3 buckets and backup schedules
provisioned consistently. This operator watches the
backups.unkin.net/{schedule,destination} annotations on those objects and
provisions everything needed to back them up, with no new CRDs.
- Add a PVC controller that provisions cephrgw ObjectStoreUser/Bucket/BucketAccess,
auto-generates a restic repo-password Secret and creates a k8up Schedule scoped
to the PVC via spec.backup.volumes[].persistentVolumeClaim.claimName.
- Add a CNPG Cluster controller that provisions the same bucket stack, idempotently
patches spec.backup.barmanObjectStore (leaving a user-set destinationPath alone
with a Warning event) and creates a ScheduledBackup.
- Resolve destinations through a ConfigMap lookup table; requeue until the
BucketAccess is Ready before creating schedule resources; own-reference created
resources and retain bucket data by default.
- Add schedule-mapping helpers (k8up 5-field/shortcut pass-through, CNPG 6-field
seconds-first) and deterministic, length-bounded name derivation.
- Add unit tests (schedule mapping, name derivation, destination resolution) and
envtest controller tests for both paths, wiring the external CRDs into envtest.
- Add kubebuilder-generated RBAC, a Dockerfile (distroless/nonroot), Woodpecker
lint/test/build pipelines and a tag-triggered image push to the artifactapi
docker-internal registry, plus a version-bump Makefile and deploy manifests.
59 lines
2.0 KiB
Go
59 lines
2.0 KiB
Go
//go:build !appengine
|
|
// +build !appengine
|
|
|
|
// This file encapsulates usage of unsafe.
|
|
// xxhash_safe.go contains the safe implementations.
|
|
|
|
package xxhash
|
|
|
|
import (
|
|
"unsafe"
|
|
)
|
|
|
|
// In the future it's possible that compiler optimizations will make these
|
|
// XxxString functions unnecessary by realizing that calls such as
|
|
// Sum64([]byte(s)) don't need to copy s. See https://go.dev/issue/2205.
|
|
// If that happens, even if we keep these functions they can be replaced with
|
|
// the trivial safe code.
|
|
|
|
// NOTE: The usual way of doing an unsafe string-to-[]byte conversion is:
|
|
//
|
|
// var b []byte
|
|
// bh := (*reflect.SliceHeader)(unsafe.Pointer(&b))
|
|
// bh.Data = (*reflect.StringHeader)(unsafe.Pointer(&s)).Data
|
|
// bh.Len = len(s)
|
|
// bh.Cap = len(s)
|
|
//
|
|
// Unfortunately, as of Go 1.15.3 the inliner's cost model assigns a high enough
|
|
// weight to this sequence of expressions that any function that uses it will
|
|
// not be inlined. Instead, the functions below use a different unsafe
|
|
// conversion designed to minimize the inliner weight and allow both to be
|
|
// inlined. There is also a test (TestInlining) which verifies that these are
|
|
// inlined.
|
|
//
|
|
// See https://github.com/golang/go/issues/42739 for discussion.
|
|
|
|
// Sum64String computes the 64-bit xxHash digest of s with a zero seed.
|
|
// It may be faster than Sum64([]byte(s)) by avoiding a copy.
|
|
func Sum64String(s string) uint64 {
|
|
b := *(*[]byte)(unsafe.Pointer(&sliceHeader{s, len(s)}))
|
|
return Sum64(b)
|
|
}
|
|
|
|
// WriteString adds more data to d. It always returns len(s), nil.
|
|
// It may be faster than Write([]byte(s)) by avoiding a copy.
|
|
func (d *Digest) WriteString(s string) (n int, err error) {
|
|
d.Write(*(*[]byte)(unsafe.Pointer(&sliceHeader{s, len(s)})))
|
|
// d.Write always returns len(s), nil.
|
|
// Ignoring the return output and returning these fixed values buys a
|
|
// savings of 6 in the inliner's cost model.
|
|
return len(s), nil
|
|
}
|
|
|
|
// sliceHeader is similar to reflect.SliceHeader, but it assumes that the layout
|
|
// of the first two words is the same as the layout of a string.
|
|
type sliceHeader struct {
|
|
s string
|
|
cap int
|
|
}
|