• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

opendefensecloud / solution-arsenal / 23234612708

18 Mar 2026 07:54AM UTC coverage: 71.443% (+0.3%) from 71.172%
23234612708

push

github

web-flow
Merge pull request #291 from opendefensecloud/renovate/k8s.io-kube-openapi-digest

fix(deps): update k8s.io/kube-openapi digest to 43fb72c

2109 of 2952 relevant lines covered (71.44%)

17.9 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

87.75
/pkg/controller/release_controller.go
1
// Copyright 2026 BWI GmbH and Solution Arsenal contributors
2
// SPDX-License-Identifier: Apache-2.0
3

4
package controller
5

6
import (
7
        "context"
8
        "fmt"
9
        "net/url"
10
        "slices"
11
        "time"
12

13
        corev1 "k8s.io/api/core/v1"
14
        apierrors "k8s.io/apimachinery/pkg/api/errors"
15
        apimeta "k8s.io/apimachinery/pkg/api/meta"
16
        metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
17
        "k8s.io/apimachinery/pkg/runtime"
18
        "k8s.io/apimachinery/pkg/types"
19
        "k8s.io/client-go/tools/events"
20
        ctrl "sigs.k8s.io/controller-runtime"
21
        "sigs.k8s.io/controller-runtime/pkg/client"
22
        "sigs.k8s.io/controller-runtime/pkg/controller/controllerutil"
23

24
        solarv1alpha1 "go.opendefense.cloud/solar/api/solar/v1alpha1"
25
)
26

27
const (
28
        releaseFinalizer = "solar.opendefense.cloud/release-finalizer"
29
)
30

31
// ReleaseReconciler reconciles a Release object
32
type ReleaseReconciler struct {
33
        client.Client
34
        Scheme   *runtime.Scheme
35
        Recorder events.EventRecorder
36
}
37

38
//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=releases,verbs=get;list;watch;create;update;patch;delete
39
//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=releases/status,verbs=get;update;patch
40
//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=releases/finalizers,verbs=update
41
//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=componentversions,verbs=get;list;watch
42
//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=rendertasks,verbs=get;list;watch;create;update;patch;delete
43
//+kubebuilder:rbac:groups=core,resources=events,verbs=create;patch
44
//+kubebuilder:rbac:groups=events.k8s.io,resources=events,verbs=create;patch
45

46
// Reconcile moves the current state of the cluster closer to the desired state
47
//
48
// Reconciliation Flow:
49
//
50
//        Release created
51
//            ↓
52
//        Add finalizer
53
//            ↓
54
//        Check if already succeeded → YES → Return (no-op)
55
//            ↓ NO
56
//        Get or create RenderTask
57
//            ↓
58
//        Update status from RenderTask
59

60
func (r *ReleaseReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
79✔
61
        log := ctrl.LoggerFrom(ctx)
79✔
62
        ctrlResult := ctrl.Result{}
79✔
63

79✔
64
        log.V(1).Info("Release is being reconciled", "req", req)
79✔
65

79✔
66
        // Fetch the Release instance
79✔
67
        res := &solarv1alpha1.Release{}
79✔
68
        if err := r.Get(ctx, req.NamespacedName, res); err != nil {
80✔
69
                if apierrors.IsNotFound(err) {
2✔
70
                        // Object not found, return. Created objects are automatically garbage collected.
1✔
71
                        return ctrlResult, nil
1✔
72
                }
1✔
73

74
                return ctrlResult, errLogAndWrap(log, err, "failed to get object")
×
75
        }
76

77
        // Handle deletion: cleanup rendertask, then remove finalizer
78
        if !res.DeletionTimestamp.IsZero() {
79✔
79
                log.V(1).Info("Release is being deleted")
1✔
80
                r.Recorder.Eventf(res, nil, corev1.EventTypeWarning, "Deleting", "Delete", "Release is being deleted, cleaning up resources")
1✔
81

1✔
82
                if err := r.deleteRenderTask(ctx, res); client.IgnoreNotFound(err) != nil {
1✔
83
                        return ctrlResult, errLogAndWrap(log, err, "failed to delete render task")
×
84
                }
×
85

86
                // Remove finalizer
87
                if slices.Contains(res.Finalizers, releaseFinalizer) {
2✔
88
                        log.V(1).Info("Removing finalizer from resource")
1✔
89
                        res.Finalizers = slices.DeleteFunc(res.Finalizers, func(f string) bool {
2✔
90
                                return f == releaseFinalizer
1✔
91
                        })
1✔
92
                        if err := r.Update(ctx, res); err != nil {
1✔
93
                                return ctrlResult, errLogAndWrap(log, err, "failed to remove finalizer")
×
94
                        }
×
95
                }
96

97
                return ctrlResult, nil
1✔
98
        }
99

100
        // Add finalizer if not present and not deleting
101
        if res.DeletionTimestamp.IsZero() {
154✔
102
                if !slices.Contains(res.Finalizers, releaseFinalizer) {
91✔
103
                        log.V(1).Info("Adding finalizer to resource")
14✔
104
                        res.Finalizers = append(res.Finalizers, releaseFinalizer)
14✔
105
                        if err := r.Update(ctx, res); err != nil {
14✔
106
                                return ctrlResult, errLogAndWrap(log, err, "failed to add finalizer")
×
107
                        }
×
108
                        // Return without requeue; the Update event will trigger reconciliation again
109
                        return ctrlResult, nil
14✔
110
                }
111
        }
112

113
        // Check if rendertask has already completed successfully
114
        sc := apimeta.FindStatusCondition(res.Status.Conditions, ConditionTypeTaskCompleted)
63✔
115
        if sc != nil && sc.ObservedGeneration >= res.Generation && sc.Status == metav1.ConditionTrue {
64✔
116
                log.V(1).Info("RenderTask has already completed successfully, no further action needed")
1✔
117
                return ctrlResult, nil
1✔
118
        }
1✔
119

120
        // Check if rendertask has already failed
121
        fc := apimeta.FindStatusCondition(res.Status.Conditions, ConditionTypeTaskFailed)
62✔
122
        if fc != nil && fc.ObservedGeneration >= res.Generation && fc.Status == metav1.ConditionTrue {
63✔
123
                log.V(1).Info("RenderTask has already failed, no further action needed")
1✔
124
                return ctrlResult, nil
1✔
125
        }
1✔
126

127
        // Reconcile RenderTask
128
        rt := &solarv1alpha1.RenderTask{}
61✔
129
        err := r.Get(ctx, client.ObjectKey{Name: generationName(res), Namespace: res.Namespace}, rt)
61✔
130
        if client.IgnoreNotFound(err) != nil {
61✔
131
                return ctrlResult, errLogAndWrap(log, err, "failed to get RenderTask")
×
132
        }
×
133

134
        if apierrors.IsNotFound(err) {
89✔
135
                if err := r.createRenderTask(ctx, res); err != nil {
48✔
136
                        log.V(1).Error(err, "Failed to create RenderTask")
20✔
137
                        r.Recorder.Eventf(res, nil, corev1.EventTypeWarning, "CreationFailed", "Create", fmt.Sprintf("failed to create RenderTask: %q", err))
20✔
138

20✔
139
                        if apierrors.IsNotFound(err) {
28✔
140
                                return ctrl.Result{RequeueAfter: 30 * time.Second}, nil
8✔
141
                        }
8✔
142

143
                        return ctrlResult, errLogAndWrap(log, err, "failed to create RenderTask")
12✔
144
                }
145
                log.V(1).Info("Created RenderTask", "res", res)
8✔
146
                r.Recorder.Eventf(res, rt, corev1.EventTypeNormal, "Created", "Create", "RenderTask was created")
8✔
147
        }
148

149
        if changed := r.updateStatusConditionsFromRenderTask(ctx, res, rt); changed {
43✔
150
                if err := r.Status().Update(ctx, res); err != nil {
2✔
151
                        return ctrlResult, errLogAndWrap(log, err, "failed to update status")
×
152
                }
×
153
        }
154

155
        // RenderTask still running, requeue
156
        return ctrl.Result{RequeueAfter: 5 * time.Second}, nil
41✔
157
}
158

159
func (r *ReleaseReconciler) updateStatusConditionsFromRenderTask(ctx context.Context, res *solarv1alpha1.Release, rt *solarv1alpha1.RenderTask) (changed bool) {
41✔
160
        if rt == nil || res == nil {
41✔
161
                return false
×
162
        }
×
163

164
        log := ctrl.LoggerFrom(ctx)
41✔
165

41✔
166
        if apimeta.IsStatusConditionTrue(rt.Status.Conditions, ConditionTypeJobFailed) {
42✔
167
                changed = apimeta.SetStatusCondition(&res.Status.Conditions, metav1.Condition{
1✔
168
                        Type:               ConditionTypeTaskFailed,
1✔
169
                        Status:             metav1.ConditionTrue,
1✔
170
                        ObservedGeneration: res.Generation,
1✔
171
                        Reason:             "TaskFailed",
1✔
172
                        Message:            "RenderTask failed",
1✔
173
                })
1✔
174

1✔
175
                log.V(1).Info("RenderTask failed", "name", rt.Name)
1✔
176
                r.Recorder.Eventf(res, rt, corev1.EventTypeWarning, "TaskFailed", "RunTask", "RenderTask failed")
1✔
177

1✔
178
                return changed
1✔
179
        }
1✔
180

181
        if apimeta.IsStatusConditionTrue(rt.Status.Conditions, ConditionTypeJobSucceeded) {
41✔
182
                changed = apimeta.SetStatusCondition(&res.Status.Conditions, metav1.Condition{
1✔
183
                        Type:               ConditionTypeTaskCompleted,
1✔
184
                        Status:             metav1.ConditionTrue,
1✔
185
                        ObservedGeneration: res.Generation,
1✔
186
                        Reason:             "TaskCompleted",
1✔
187
                        Message:            "RenderTask completed",
1✔
188
                })
1✔
189

1✔
190
                if res.Status.ChartURL != rt.Status.ChartURL {
1✔
191
                        res.Status.ChartURL = rt.Status.ChartURL
×
192
                        changed = true
×
193
                }
×
194

195
                log.V(1).Info("RenderTask succeeded", "name", rt.Name)
1✔
196
                r.Recorder.Eventf(res, rt, corev1.EventTypeWarning, "TaskCompleted", "RunTask", "RenderTask completed successfully")
1✔
197

1✔
198
                return changed
1✔
199
        }
200

201
        log.V(1).Info("RenderTask has no final condtions yet", "name", rt.Name)
39✔
202

39✔
203
        return false
39✔
204
}
205

206
func (r *ReleaseReconciler) createRenderTask(ctx context.Context, res *solarv1alpha1.Release) error {
28✔
207
        log := ctrl.LoggerFrom(ctx)
28✔
208

28✔
209
        // Check if we need to cleanup an old task
28✔
210
        if res.Status.RenderTaskRef != nil && res.Status.RenderTaskRef.Name != "" {
42✔
211
                if err := r.deleteRenderTask(ctx, res); err != nil {
15✔
212
                        return errLogAndWrap(log, err, "failed to cleanup old task")
1✔
213
                }
1✔
214
        }
215

216
        spec, err := r.computeRenderTaskSpec(ctx, res)
27✔
217
        if err != nil {
34✔
218
                return err
7✔
219
        }
7✔
220
        rt := &solarv1alpha1.RenderTask{
20✔
221
                ObjectMeta: metav1.ObjectMeta{
20✔
222
                        Name:      generationName(res),
20✔
223
                        Namespace: res.Namespace,
20✔
224
                },
20✔
225
                Spec: spec,
20✔
226
        }
20✔
227

20✔
228
        if err := r.Create(ctx, rt); err != nil {
32✔
229
                r.Recorder.Eventf(res, nil, corev1.EventTypeWarning, "CreationFailed", "Create", "Failed to create RenderTask", err)
12✔
230
                return errLogAndWrap(log, err, "failed to create RenderTask")
12✔
231
        }
12✔
232

233
        // Set owner references
234
        if err := controllerutil.SetControllerReference(res, rt, r.Scheme); err != nil {
8✔
235
                return errLogAndWrap(log, err, "failed to set controller reference")
×
236
        }
×
237

238
        // Set Reference in Status
239
        res.Status.RenderTaskRef = &corev1.ObjectReference{
8✔
240
                APIVersion: solarv1alpha1.SchemeGroupVersion.String(),
8✔
241
                Kind:       "RenderTask",
8✔
242
                Namespace:  rt.Namespace,
8✔
243
                Name:       rt.Name,
8✔
244
        }
8✔
245

8✔
246
        if err := r.Status().Update(ctx, res); err != nil {
8✔
247
                return errLogAndWrap(log, err, "failed to update status")
×
248
        }
×
249

250
        return nil
8✔
251
}
252

253
func (r *ReleaseReconciler) deleteRenderTask(ctx context.Context, res *solarv1alpha1.Release) error {
15✔
254
        if res.Status.RenderTaskRef == nil {
15✔
255
                return nil
×
256
        }
×
257

258
        rt := &solarv1alpha1.RenderTask{}
15✔
259
        if err := r.Get(ctx, client.ObjectKey{Name: res.Status.RenderTaskRef.Name, Namespace: res.Status.RenderTaskRef.Namespace}, rt); client.IgnoreNotFound(err) != nil {
15✔
260
                return err
×
261
        } else if err == nil {
19✔
262
                return r.Delete(ctx, rt, client.PropagationPolicy(metav1.DeletePropagationBackground))
4✔
263
        }
4✔
264

265
        return nil
11✔
266
}
267

268
func (r *ReleaseReconciler) computeRenderTaskSpec(ctx context.Context, res *solarv1alpha1.Release) (solarv1alpha1.RenderTaskSpec, error) {
27✔
269
        spec := solarv1alpha1.RenderTaskSpec{}
27✔
270

27✔
271
        cvRef := types.NamespacedName{
27✔
272
                Name:      res.Spec.ComponentVersionRef.Name,
27✔
273
                Namespace: res.Namespace,
27✔
274
        }
27✔
275

27✔
276
        cv := &solarv1alpha1.ComponentVersion{}
27✔
277
        if err := r.Get(ctx, cvRef, cv); err != nil {
34✔
278
                return spec, err
7✔
279
        }
7✔
280

281
        chartName := fmt.Sprintf("release-%s", res.Name)
20✔
282
        repo, err := url.JoinPath(res.Namespace, chartName)
20✔
283
        if err != nil {
20✔
284
                return spec, err
×
285
        }
×
286

287
        tag := fmt.Sprintf("v0.0.%d", res.GetGeneration())
20✔
288

20✔
289
        spec.RendererConfig = solarv1alpha1.RendererConfig{
20✔
290
                Type: solarv1alpha1.RendererConfigTypeRelease,
20✔
291
                ReleaseConfig: solarv1alpha1.ReleaseConfig{
20✔
292
                        Chart: solarv1alpha1.ChartConfig{
20✔
293
                                Name:        chartName,
20✔
294
                                Description: fmt.Sprintf("Release of %s", res.Spec.ComponentVersionRef.Name),
20✔
295
                                Version:     tag,
20✔
296
                                AppVersion:  tag,
20✔
297
                        },
20✔
298
                        Input: solarv1alpha1.ReleaseInput{
20✔
299
                                Component:  solarv1alpha1.ReleaseComponent{Name: cv.Spec.ComponentRef.Name},
20✔
300
                                Resources:  cv.Spec.Resources,
20✔
301
                                Entrypoint: cv.Spec.Entrypoint,
20✔
302
                        },
20✔
303
                        Values: res.Spec.Values,
20✔
304
                },
20✔
305
        }
20✔
306
        spec.Repository = repo
20✔
307
        spec.Tag = tag
20✔
308

20✔
309
        return spec, nil
20✔
310
}
311

312
// SetupWithManager sets up the controller with the Manager.
313
func (r *ReleaseReconciler) SetupWithManager(mgr ctrl.Manager) error {
1✔
314
        return ctrl.NewControllerManagedBy(mgr).
1✔
315
                For(&solarv1alpha1.Release{}).
1✔
316
                Owns(&solarv1alpha1.RenderTask{}).
1✔
317
                Complete(r)
1✔
318
}
1✔
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc