• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

opendefensecloud / artifact-conduit / 21902650269

11 Feb 2026 11:06AM UTC coverage: 84.838% (+1.0%) from 83.835%
21902650269

push

github

web-flow
fix(deps): update k8s.io/utils digest to b8788ab (#202)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [k8s.io/utils](https://redirect.github.com/kubernetes/utils) | require
| digest | `914a6e7` → `b8788ab` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/opendefensecloud/artifact-conduit).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Ny4wIiwidXBkYXRlZEluVmVyIjoiNDIuOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

761 of 897 relevant lines covered (84.84%)

332.0 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

83.72
/pkg/controller/order_controller.go
1
// Copyright 2025 BWI GmbH and Artifact Conduit contributors
2
// SPDX-License-Identifier: Apache-2.0
3

4
package controller
5

6
import (
7
        "context"
8
        "crypto/sha256"
9
        "encoding/hex"
10
        "encoding/json"
11
        "fmt"
12
        "slices"
13
        "time"
14

15
        "github.com/go-logr/logr"
16
        corev1 "k8s.io/api/core/v1"
17
        apierrors "k8s.io/apimachinery/pkg/api/errors"
18
        metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
19
        "k8s.io/apimachinery/pkg/runtime"
20
        "k8s.io/client-go/tools/record"
21
        ctrl "sigs.k8s.io/controller-runtime"
22
        "sigs.k8s.io/controller-runtime/pkg/client"
23
        "sigs.k8s.io/controller-runtime/pkg/controller/controllerutil"
24

25
        arcv1alpha1 "go.opendefense.cloud/arc/api/arc/v1alpha1"
26
)
27

28
const (
29
        orderFinalizer = "arc.opendefense.cloud/order-finalizer"
30
)
31

32
// OrderReconciler reconciles a Order object
33
type OrderReconciler struct {
34
        client.Client
35
        Scheme   *runtime.Scheme
36
        Recorder record.EventRecorder
37
}
38

39
type desiredAW struct {
40
        index       int
41
        objectMeta  metav1.ObjectMeta
42
        artifact    *arcv1alpha1.OrderArtifact
43
        typeSpec    *arcv1alpha1.ArtifactTypeSpec
44
        srcEndpoint *arcv1alpha1.Endpoint
45
        dstEndpoint *arcv1alpha1.Endpoint
46
        srcSecret   *corev1.Secret
47
        dstSecret   *corev1.Secret
48
        sha         string
49
        cron        *arcv1alpha1.Cron
50
}
51

52
//+kubebuilder:rbac:groups=arc.opendefense.cloud,resources=endpoints,verbs=get;list;watch
53
//+kubebuilder:rbac:groups=arc.opendefense.cloud,resources=artifacttypes,verbs=get;list;watch
54
//+kubebuilder:rbac:groups=arc.opendefense.cloud,resources=clusterartifacttypes,verbs=get;list;watch
55
//+kubebuilder:rbac:groups=arc.opendefense.cloud,resources=artifactworkflows,verbs=get;list;watch;create;update;patch;delete
56
//+kubebuilder:rbac:groups=arc.opendefense.cloud,resources=orders,verbs=get;list;watch;create;update;patch;delete
57
//+kubebuilder:rbac:groups=arc.opendefense.cloud,resources=orders/status,verbs=get;update;patch
58
//+kubebuilder:rbac:groups=arc.opendefense.cloud,resources=orders/finalizers,verbs=update
59
//+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;update;patch;delete
60
// +kubebuilder:rbac:groups=core,resources=events,verbs=create;patch
61

62
// Reconcile moves the current state of the cluster closer to the desired state
63
func (r *OrderReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
786✔
64
        log := ctrl.LoggerFrom(ctx)
786✔
65
        ctrlResult := ctrl.Result{}
786✔
66

786✔
67
        // Fetch the Order instance
786✔
68
        order := &arcv1alpha1.Order{}
786✔
69
        if err := r.Get(ctx, req.NamespacedName, order); err != nil {
787✔
70
                if apierrors.IsNotFound(err) {
2✔
71
                        // Object not found, return. Created objects are automatically garbage collected.
1✔
72
                        return ctrlResult, nil
1✔
73
                }
1✔
74

75
                return ctrlResult, errLogAndWrap(log, err, "failed to get object")
×
76
        }
77

78
        // Update last reconcile time
79
        order.Status.LastReconcileAt = metav1.Now()
785✔
80

785✔
81
        // Handle deletion: cleanup artifact workflows, then remove finalizer
785✔
82
        if !order.DeletionTimestamp.IsZero() {
788✔
83
                log.V(1).Info("Order is being deleted")
3✔
84
                r.Recorder.Event(order, corev1.EventTypeWarning, "Deleting", "Order is being deleted, cleaning up artifact workflows")
3✔
85

3✔
86
                // Cleanup all artifact workflows
3✔
87
                if len(order.Status.ArtifactWorkflows) > 0 {
5✔
88
                        for sha := range order.Status.ArtifactWorkflows {
6✔
89
                                // Remove ArtifactWorkflow
4✔
90
                                aw := &arcv1alpha1.ArtifactWorkflow{
4✔
91
                                        ObjectMeta: awObjectMeta(order, sha),
4✔
92
                                }
4✔
93
                                _ = r.Delete(ctx, aw) // Ignore errors
4✔
94
                                delete(order.Status.ArtifactWorkflows, sha)
4✔
95
                        }
4✔
96
                        if err := r.Status().Update(ctx, order); err != nil {
3✔
97
                                return ctrlResult, errLogAndWrap(log, err, "failed to update order status")
1✔
98
                        }
1✔
99
                        log.V(1).Info("Order artifact workflows cleaned up")
1✔
100

1✔
101
                        // Requeue until all artifact workflows are gone
1✔
102
                        return ctrlResult, nil
1✔
103
                }
104
                // All artifact workflows are gone, remove finalizer
105
                if slices.Contains(order.Finalizers, orderFinalizer) {
2✔
106
                        log.V(1).Info("No artifact workflows, removing finalizer from Order")
1✔
107
                        order.Finalizers = slices.DeleteFunc(order.Finalizers, func(f string) bool {
2✔
108
                                return f == orderFinalizer
1✔
109
                        })
1✔
110
                        if err := r.Update(ctx, order); err != nil {
1✔
111
                                return ctrlResult, errLogAndWrap(log, err, "failed to remove finalizer")
×
112
                        }
×
113
                }
114

115
                return ctrlResult, nil
1✔
116
        }
117

118
        // Add finalizer if not present and not deleting
119
        if order.DeletionTimestamp.IsZero() {
1,564✔
120
                if !slices.Contains(order.Finalizers, orderFinalizer) {
800✔
121
                        log.V(1).Info("Adding finalizer to Order")
18✔
122
                        order.Finalizers = append(order.Finalizers, orderFinalizer)
18✔
123
                        if err := r.Update(ctx, order); err != nil {
18✔
124
                                return ctrlResult, errLogAndWrap(log, err, "failed to add finalizer")
×
125
                        }
×
126
                        // Return without requeue; the Update event will trigger reconciliation again
127
                        return ctrlResult, nil
18✔
128
                }
129
        }
130

131
        // Handle force reconcile annotation
132
        forceAt, err := GetForceAtAnnotationValue(order)
764✔
133
        if err != nil {
764✔
134
                log.V(1).Error(err, "Invalid force reconcile annotation, ignoring")
×
135
        }
×
136
        if !forceAt.IsZero() && (order.Status.LastForceAt.IsZero() || forceAt.After(order.Status.LastForceAt.Time)) {
765✔
137
                log.V(1).Info("Force reconcile requested")
1✔
138
                r.Recorder.Event(order, corev1.EventTypeNormal, "ForceReconcile", "Force reconcile requested via annotation")
1✔
139
                // Delete existing artifact workflows to force re-creation
1✔
140
                for sha := range order.Status.ArtifactWorkflows {
2✔
141
                        // Remove Secret and ArtifactWorkflow
1✔
142
                        aw := &arcv1alpha1.ArtifactWorkflow{
1✔
143
                                ObjectMeta: awObjectMeta(order, sha),
1✔
144
                        }
1✔
145
                        _ = r.Delete(ctx, aw) // Ignore errors
1✔
146
                        delete(order.Status.ArtifactWorkflows, sha)
1✔
147
                        r.Recorder.Eventf(order, corev1.EventTypeNormal, "ForceReconcile", "Deleted artifact workflow '%s' with sha %s", aw.Name, sha)
1✔
148
                }
1✔
149
                // Update last force time
150
                order.Status.LastForceAt = metav1.Now()
1✔
151
                if err := r.Status().Update(ctx, order); err != nil {
1✔
152
                        return ctrlResult, errLogAndWrap(log, err, "failed to update last force time")
×
153
                }
×
154
                // Return without requeue; the update event will trigger reconciliation again
155
                return ctrlResult, nil
1✔
156
        }
157

158
        // Make sure status is initialized
159
        if order.Status.ArtifactWorkflows == nil {
859✔
160
                order.Status.ArtifactWorkflows = map[string]arcv1alpha1.OrderArtifactWorkflowStatus{}
96✔
161
        }
96✔
162

163
        // Before we compare to our status, let's fetch all necessary information
164
        // to compute desired state:
165
        desiredAWs := map[string]desiredAW{}
763✔
166
        for i, artifact := range order.Spec.Artifacts {
1,788✔
167
                daw, err := r.computeDesiredAW(ctx, log, order, &artifact, i)
1,025✔
168
                if err != nil {
1,162✔
169
                        r.Recorder.Eventf(order, corev1.EventTypeWarning, "ComputationFailed", "Failed to compute desired artifact workflow for artifact index %d: %v", i, err)
137✔
170
                        order.Status.Message = fmt.Sprintf("Failed to compute desired artifact workflow for artifact index %d: %v", i, err)
137✔
171
                        if err := r.Status().Update(ctx, order); err != nil {
138✔
172
                                return ctrlResult, errLogAndWrap(log, err, "failed to update status")
1✔
173
                        }
1✔
174

175
                        return ctrlResult, errLogAndWrap(log, err, "failed to compute desired artifact workflow")
136✔
176
                }
177
                desiredAWs[daw.sha] = *daw
888✔
178
        }
179
        order.Status.Message = "" // Clear any previous error message
626✔
180

626✔
181
        // List missing artifact workflows
626✔
182
        var createAWs []string
626✔
183
        for sha := range desiredAWs {
1,512✔
184
                if _, exists := order.Status.ArtifactWorkflows[sha]; exists {
1,746✔
185
                        continue
860✔
186
                }
187

188
                createAWs = append(createAWs, sha)
26✔
189
        }
190

191
        // Find obsolete artifact workflows
192
        var deleteAWs []string
626✔
193
        for sha := range order.Status.ArtifactWorkflows {
1,487✔
194
                if _, exists := desiredAWs[sha]; exists {
1,721✔
195
                        continue
860✔
196
                }
197

198
                deleteAWs = append(deleteAWs, sha)
1✔
199
        }
200

201
        // Find finished artifact workflows to clean up
202
        var finishedAWs []string
626✔
203
        for sha := range order.Status.ArtifactWorkflows {
1,487✔
204
                awStatus := order.Status.ArtifactWorkflows[sha]
861✔
205

861✔
206
                // Only consider succeeded workflows for TTL cleanup
861✔
207
                if awStatus.Phase != arcv1alpha1.WorkflowSucceeded {
1,701✔
208
                        continue
840✔
209
                }
210

211
                // Do not clean up ArtifactWorkflows with cron specified
212
                if daw, ok := desiredAWs[sha]; ok && daw.cron != nil {
21✔
213
                        continue
×
214
                }
215

216
                // If TTL is set, check if it has expired
217
                if order.Spec.TTLSecondsAfterCompletion != nil && *order.Spec.TTLSecondsAfterCompletion > 0 {
21✔
218
                        if time.Since(awStatus.CompletionTime.Time) > time.Duration(*order.Spec.TTLSecondsAfterCompletion)*time.Second {
×
219
                                finishedAWs = append(finishedAWs, sha)
×
220
                        } else {
×
221
                                // Requeue when the next TTL expires
×
222
                                ctrlResult.RequeueAfter = time.Duration((*order.Spec.TTLSecondsAfterCompletion)+1)*time.Second - time.Since(awStatus.CompletionTime.Time)
×
223
                        }
×
224

225
                        continue
×
226
                }
227

228
                // No TTL set, cleanup immediately
229
                finishedAWs = append(finishedAWs, sha)
21✔
230
        }
231

232
        // Create missing artifact workflows
233
        for _, sha := range createAWs {
652✔
234
                daw := desiredAWs[sha]
26✔
235
                aw, err := r.hydrateArtifactWorkflow(&daw)
26✔
236
                if err != nil {
26✔
237
                        r.Recorder.Eventf(order, corev1.EventTypeWarning, "HydrationFailed", "Failed to hydrate artifact workflow for artifact index %d: %v", daw.index, err)
×
238
                        return ctrlResult, errLogAndWrap(log, err, "failed to hydrate artifact workflow")
×
239
                }
×
240

241
                // Set owner references
242
                if err := controllerutil.SetControllerReference(order, aw, r.Scheme); err != nil {
26✔
243
                        r.Recorder.Eventf(order, corev1.EventTypeWarning, "HydrationFailed", "Failed to set controller reference for artifact workflow: %v", err)
×
244
                        return ctrlResult, errLogAndWrap(log, err, "failed to set controller reference")
×
245
                }
×
246

247
                // Create artifact workflow
248
                if err := r.Create(ctx, aw); err != nil {
31✔
249
                        if apierrors.IsAlreadyExists(err) {
10✔
250
                                // Already created by a previous reconcile — that's fine
5✔
251
                                continue
5✔
252
                        }
253
                        r.Recorder.Eventf(order, corev1.EventTypeWarning, "CreationFailed", "Failed to create artifact workflow for artifact index %d: %v", daw.index, err)
×
254

×
255
                        return ctrlResult, errLogAndWrap(log, err, "failed to create artifact workflow")
×
256
                } else {
21✔
257
                        r.Recorder.Eventf(order, corev1.EventTypeNormal, "ArtifactWorkflowCreated", "Created artifact workflow '%s' for artifact index %d", aw.Name, daw.index)
21✔
258
                        log.V(1).Info("Created artifact workflow", "artifactWorkflow", aw.Name)
21✔
259
                }
21✔
260

261
                // Update status
262
                order.Status.ArtifactWorkflows[sha] = arcv1alpha1.OrderArtifactWorkflowStatus{
21✔
263
                        ArtifactIndex: daw.index,
21✔
264
                        WorkflowStatus: arcv1alpha1.WorkflowStatus{
21✔
265
                                Phase: arcv1alpha1.WorkflowUnknown,
21✔
266
                        },
21✔
267
                }
21✔
268
        }
269

270
        // Delete obsolete artifact workflows
271
        for _, sha := range deleteAWs {
627✔
272
                // Does not exist anymore, let's clean up!
1✔
273
                if err := r.Delete(ctx, &arcv1alpha1.ArtifactWorkflow{
1✔
274
                        ObjectMeta: awObjectMeta(order, sha),
1✔
275
                }); client.IgnoreNotFound(err) != nil {
1✔
276
                        r.Recorder.Eventf(order, corev1.EventTypeWarning, "DeletionFailed", "Failed to delete obsolete artifact workflow '%s': %v", sha, err)
×
277
                        return ctrlResult, errLogAndWrap(log, err, "failed to delete artifact workflow")
×
278
                }
×
279

280
                // Update status
281
                delete(order.Status.ArtifactWorkflows, sha)
1✔
282
                log.V(1).Info("Deleted obsolete artifact workflow", "artifactWorkflow", sha)
1✔
283
                r.Recorder.Eventf(order, corev1.EventTypeNormal, "ArtifactWorkflowDeleted", "Deleted obsolete artifact workflow '%s'", sha)
1✔
284
        }
285

286
        // Delete finished artifact workflows
287
        for _, sha := range finishedAWs {
647✔
288
                // Finished, let's clean up!
21✔
289
                if err := r.Delete(ctx, &arcv1alpha1.ArtifactWorkflow{
21✔
290
                        ObjectMeta: awObjectMeta(order, sha),
21✔
291
                }); client.IgnoreNotFound(err) != nil {
21✔
292
                        r.Recorder.Eventf(order, corev1.EventTypeWarning, "DeletionFailed", "Failed to delete finished artifact workflow '%s': %v", sha, err)
×
293
                        return ctrlResult, errLogAndWrap(log, err, "failed to delete artifact workflow")
×
294
                }
×
295

296
                log.V(1).Info("Deleted finished artifact workflow", "artifactWorkflow", sha)
21✔
297
                r.Recorder.Eventf(order, corev1.EventTypeNormal, "ArtifactWorkflowDeleted", "Deleted finished artifact workflow '%s'", sha)
21✔
298
        }
299

300
        anyPhaseChanged := false
626✔
301
        for sha, daw := range desiredAWs {
1,512✔
302
                if slices.Contains(createAWs, sha) {
912✔
303
                        // If it was just created we skip the update
26✔
304
                        continue
26✔
305
                }
306
                if daw.cron == nil && order.Status.ArtifactWorkflows[sha].Phase.Completed() {
881✔
307
                        // We do not need to check for updates if the workflow is completed and is NOT cron
21✔
308
                        continue
21✔
309
                }
310
                aw := arcv1alpha1.ArtifactWorkflow{}
839✔
311
                if err := r.Get(ctx, namespacedName(daw.objectMeta.Namespace, daw.objectMeta.Name), &aw); err != nil {
839✔
312
                        delete(order.Status.ArtifactWorkflows, sha)
×
313
                        log.V(1).Info("Artifact workflow not found, deleting from status.", "artifactWorkflow", sha)
×
314
                        if err := r.Status().Update(ctx, order); err != nil {
×
315
                                return ctrlResult, errLogAndWrap(log, err, "failed to update status")
×
316
                        }
×
317

318
                        return ctrlResult, errLogAndWrap(log, err, "failed to get artifact workflow")
×
319
                }
320
                orderAWStatus := order.Status.ArtifactWorkflows[sha]
839✔
321
                if orderAWStatus.Phase != aw.Status.Phase ||
839✔
322
                        orderAWStatus.Succeeded != aw.Status.Succeeded ||
839✔
323
                        orderAWStatus.Failed != aw.Status.Failed ||
839✔
324
                        !orderAWStatus.LastScheduled.Equal(aw.Status.LastScheduled) {
1,209✔
325
                        orderAWStatus.WorkflowStatus = aw.Status.WorkflowStatus
370✔
326
                        order.Status.ArtifactWorkflows[sha] = orderAWStatus
370✔
327
                        anyPhaseChanged = true
370✔
328
                }
370✔
329
        }
330

331
        // Update status
332
        if len(createAWs) > 0 || len(deleteAWs) > 0 || anyPhaseChanged {
996✔
333
                log.V(1).Info("Updating order status")
370✔
334
                // Make sure ArtifactIndex is up to date
370✔
335
                for sha, daw := range desiredAWs {
909✔
336
                        aws := order.Status.ArtifactWorkflows[sha]
539✔
337
                        aws.ArtifactIndex = daw.index
539✔
338
                        order.Status.ArtifactWorkflows[sha] = aws
539✔
339
                }
539✔
340
                if err := r.Status().Update(ctx, order); err != nil {
396✔
341
                        return ctrlResult, errLogAndWrap(log, err, "failed to update status")
26✔
342
                }
26✔
343
        }
344

345
        return ctrlResult, nil
600✔
346
}
347

348
func (r *OrderReconciler) hydrateArtifactWorkflow(daw *desiredAW) (*arcv1alpha1.ArtifactWorkflow, error) {
26✔
349
        params, err := dawToParameters(daw)
26✔
350
        if err != nil {
26✔
351
                return nil, err
×
352
        }
×
353

354
        // Next we create the ArtifactWorkflow instance
355
        aw := &arcv1alpha1.ArtifactWorkflow{
26✔
356
                ObjectMeta: daw.objectMeta,
26✔
357
                Spec: arcv1alpha1.ArtifactWorkflowSpec{
26✔
358
                        WorkflowTemplateRef: daw.typeSpec.WorkflowTemplateRef,
26✔
359
                        Parameters:          params,
26✔
360
                        SrcSecretRef:        daw.srcEndpoint.Spec.SecretRef,
26✔
361
                        DstSecretRef:        daw.dstEndpoint.Spec.SecretRef,
26✔
362
                        Cron:                daw.cron,
26✔
363
                },
26✔
364
        }
26✔
365

26✔
366
        return aw, nil
26✔
367
}
368

369
func (r *OrderReconciler) computeDesiredAW(ctx context.Context, log logr.Logger, order *arcv1alpha1.Order, artifact *arcv1alpha1.OrderArtifact, i int) (*desiredAW, error) {
1,025✔
370
        log = log.WithValues("artifactIndex", i)
1,025✔
371

1,025✔
372
        // We need the referenced src- and dst-endpoints for the artifact
1,025✔
373
        srcRefName := artifact.SrcRef.Name
1,025✔
374
        if srcRefName == "" {
1,128✔
375
                srcRefName = order.Spec.Defaults.SrcRef.Name
103✔
376
        }
103✔
377
        dstRefName := artifact.DstRef.Name
1,025✔
378
        if dstRefName == "" {
1,173✔
379
                dstRefName = order.Spec.Defaults.DstRef.Name
148✔
380
        }
148✔
381

382
        srcEndpoint := &arcv1alpha1.Endpoint{}
1,025✔
383
        if err := r.Get(ctx, namespacedName(order.Namespace, srcRefName), srcEndpoint); err != nil {
1,039✔
384
                r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidEndpoint", "Failed to fetch source endpoint '%s': %v", srcRefName, err)
14✔
385
                return nil, errLogAndWrap(log, err, "failed to fetch endpoint for source")
14✔
386
        }
14✔
387
        dstEndpoint := &arcv1alpha1.Endpoint{}
1,011✔
388
        if err := r.Get(ctx, namespacedName(order.Namespace, dstRefName), dstEndpoint); err != nil {
1,024✔
389
                r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidEndpoint", "Failed to fetch destination endpoint '%s': %v", dstRefName, err)
13✔
390
                return nil, errLogAndWrap(log, err, "failed to fetch endpoint for destination")
13✔
391
        }
13✔
392

393
        // Validate that the endpoint usage is correct
394
        if srcEndpoint.Spec.Usage != arcv1alpha1.EndpointUsagePullOnly && srcEndpoint.Spec.Usage != arcv1alpha1.EndpointUsageAll {
1,011✔
395
                err := fmt.Errorf("endpoint '%s' usage '%s' is not compatible with source usage", srcEndpoint.Name, srcEndpoint.Spec.Usage)
13✔
396
                r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidEndpoint", "Source endpoint '%s' has incompatible usage '%s'", srcEndpoint.Name, srcEndpoint.Spec.Usage)
13✔
397

13✔
398
                return nil, errLogAndWrap(log, err, "artifact validation failed")
13✔
399
        }
13✔
400
        if dstEndpoint.Spec.Usage != arcv1alpha1.EndpointUsagePushOnly && dstEndpoint.Spec.Usage != arcv1alpha1.EndpointUsageAll {
999✔
401
                err := fmt.Errorf("endpoint '%s' usage '%s' is not compatible with destination usage", dstEndpoint.Name, dstEndpoint.Spec.Usage)
14✔
402
                r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidEndpoint", "Destination endpoint '%s' has incompatible usage '%s'", dstEndpoint.Name, dstEndpoint.Spec.Usage)
14✔
403

14✔
404
                return nil, errLogAndWrap(log, err, "artifact validation failed")
14✔
405
        }
14✔
406

407
        // Validate against ArtifactType rules
408
        artifactType := &arcv1alpha1.ArtifactType{}
971✔
409
        if err := r.Get(ctx, namespacedName(order.Namespace, artifact.Type), artifactType); client.IgnoreNotFound(err) != nil {
971✔
410
                r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidArtifactType", "Failed to fetch ArtifactType '%s': %v", artifact.Type, err)
×
411
                return nil, errLogAndWrap(log, err, "failed to fetch referenced ArtifactType")
×
412
        }
×
413
        var (
971✔
414
                artifactTypeGen  int64
971✔
415
                artifactTypeSpec *arcv1alpha1.ArtifactTypeSpec
971✔
416
        )
971✔
417
        if artifactType.Name == "" { // was not found, let's check ClusterArtifactType
1,903✔
418
                clusterArtifactType := &arcv1alpha1.ClusterArtifactType{}
932✔
419
                if err := r.Get(ctx, namespacedName("", artifact.Type), clusterArtifactType); err != nil {
1,004✔
420
                        return nil, errLogAndWrap(log, err, "failed to fetch ArtifactType or ClusterArtifactType")
72✔
421
                }
72✔
422
                artifactTypeSpec = &clusterArtifactType.Spec
860✔
423
                artifactTypeGen = clusterArtifactType.Generation
860✔
424
                // NOTE: ClusterArtifactTypes can only reference ClusterWorkflowTemplates, so we enforce this here:
860✔
425
                artifactTypeSpec.WorkflowTemplateRef.ClusterScope = true
860✔
426
        } else {
39✔
427
                artifactTypeSpec = &artifactType.Spec
39✔
428
                artifactTypeGen = artifactType.Generation
39✔
429
        }
39✔
430

431
        if len(artifactTypeSpec.Rules.SrcTypes) > 0 && !slices.Contains(artifactTypeSpec.Rules.SrcTypes, srcEndpoint.Spec.Type) {
910✔
432
                err := fmt.Errorf("source endpoint type '%s' is not allowed by ArtifactType rules", srcEndpoint.Spec.Type)
11✔
433
                r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidArtifactType", "Source endpoint type '%s' is not allowed by ArtifactType '%s' rules", srcEndpoint.Spec.Type, artifact.Type)
11✔
434

11✔
435
                return nil, errLogAndWrap(log, err, "artifact validation failed")
11✔
436
        }
11✔
437
        if len(artifactTypeSpec.Rules.DstTypes) > 0 && !slices.Contains(artifactTypeSpec.Rules.DstTypes, dstEndpoint.Spec.Type) {
888✔
438
                err := fmt.Errorf("destination endpoint type '%s' is not allowed by ArtifactType rules", dstEndpoint.Spec.Type)
×
439
                r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidArtifactType", "Destination endpoint type '%s' is not allowed by ArtifactType '%s' rules", dstEndpoint.Spec.Type, artifact.Type)
×
440

×
441
                return nil, errLogAndWrap(log, err, "artifact validation failed")
×
442
        }
×
443

444
        // Next, we need the secret contents
445
        srcSecret := &corev1.Secret{}
888✔
446
        if srcEndpoint.Spec.SecretRef.Name != "" {
1,773✔
447
                if err := r.Get(ctx, namespacedName(order.Namespace, srcEndpoint.Spec.SecretRef.Name), srcSecret); err != nil {
885✔
448
                        r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidSecret", "Failed to fetch source secret '%s': %v", srcEndpoint.Spec.SecretRef.Name, err)
×
449
                        return nil, errLogAndWrap(log, err, "failed to fetch secret for source")
×
450
                }
×
451
        }
452

453
        dstSecret := &corev1.Secret{}
888✔
454
        if dstEndpoint.Spec.SecretRef.Name != "" {
1,773✔
455
                if err := r.Get(ctx, namespacedName(order.Namespace, dstEndpoint.Spec.SecretRef.Name), dstSecret); err != nil {
885✔
456
                        r.Recorder.Eventf(order, corev1.EventTypeWarning, "InvalidSecret", "Failed to fetch destination secret '%s': %v", dstEndpoint.Spec.SecretRef.Name, err)
×
457
                        return nil, errLogAndWrap(log, err, "failed to fetch secret for destination")
×
458
                }
×
459
        }
460

461
        // Cron schedule if any
462
        cron := artifact.Cron
888✔
463
        if cron == nil {
1,772✔
464
                cron = order.Spec.Defaults.Cron
884✔
465
        }
884✔
466

467
        // Create a hash based on all related data for idempotency and compute the workflow name
468
        h := sha256.New()
888✔
469
        data := []any{
888✔
470
                order.Namespace,
888✔
471
                artifact.Type,
888✔
472
                artifact.Spec.Raw,
888✔
473
                artifactTypeGen,
888✔
474
                srcEndpoint.Name,
888✔
475
                dstEndpoint.Name,
888✔
476
                order.Status.LastForceAt,
888✔
477
                cron,
888✔
478
        }
888✔
479

888✔
480
        if err := json.NewEncoder(h).Encode(data); err != nil {
888✔
481
                return nil, errLogAndWrap(log, err, "failed to marshal artifact workflow data")
×
482
        }
×
483

484
        sha := hex.EncodeToString(h.Sum(nil))[:16]
888✔
485

888✔
486
        // We gave all the information to further process this artifact workflow.
888✔
487
        // Let's store it to compare it to the current status!
888✔
488
        return &desiredAW{
888✔
489
                index:       i,
888✔
490
                objectMeta:  awObjectMeta(order, sha),
888✔
491
                artifact:    artifact,
888✔
492
                typeSpec:    artifactTypeSpec,
888✔
493
                srcEndpoint: srcEndpoint,
888✔
494
                dstEndpoint: dstEndpoint,
888✔
495
                srcSecret:   srcSecret,
888✔
496
                dstSecret:   dstSecret,
888✔
497
                sha:         sha,
888✔
498
                cron:        cron,
888✔
499
        }, nil
888✔
500
}
501

502
// SetupWithManager sets up the controller with the Manager.
503
func (r *OrderReconciler) SetupWithManager(mgr ctrl.Manager) error {
1✔
504
        return ctrl.NewControllerManagedBy(mgr).
1✔
505
                For(&arcv1alpha1.Order{}).
1✔
506
                Owns(&arcv1alpha1.ArtifactWorkflow{}).
1✔
507
                Complete(r)
1✔
508
}
1✔
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc