Documentation ¶
Index ¶
- func ExpandChange(backend Backend, relationToken string, appToken string, ...) (params.RemoteRelationChangeEvent, error)
- func GetBackend(st *state.State) stateShim
- func GetConsumingRelationTokens(backend Backend, tag names.RelationTag) (string, string, error)
- func GetOfferStatusChange(model CachedModel, st offerGetter, offerUUID, offerName string) (*params.OfferStatusChange, error)
- func GetOfferingRelationTokens(backend Backend, tag names.RelationTag) (string, string, error)
- func GetRelationLifeSuspendedStatusChange(st relationGetter, key string) (*params.RelationLifeSuspendedStatusChange, error)
- func PublishIngressNetworkChange(backend Backend, relationTag names.Tag, ...) error
- func PublishRelationChange(backend Backend, relationTag names.Tag, ...) error
- func RelationUnitSettings(backend Backend, ru params.RelationUnit) (params.Settings, error)
- func WatchRelationUnits(backend Backend, tag names.RelationTag) (common.RelationUnitsWatcher, error)
- type Application
- type AuthContext
- func (a *AuthContext) Authenticator(sourceModelUUID, offerUUID string) *authenticator
- func (a *AuthContext) CheckLocalAccessRequest(details *offerPermissionCheck) ([]checkers.Caveat, error)
- func (a *AuthContext) CheckOfferAccessCaveat(caveat string) (*offerPermissionCheck, error)
- func (a *AuthContext) CreateConsumeOfferMacaroon(ctx context.Context, offer *params.ApplicationOfferDetails, username string, ...) (*bakery.Macaroon, error)
- func (a *AuthContext) CreateRemoteRelationMacaroon(ctx context.Context, sourceModelUUID, offerUUID string, username string, ...) (*bakery.Macaroon, error)
- func (a *AuthContext) OfferThirdPartyKey() *bakery.KeyPair
- func (a *AuthContext) WithClock(clock clock.Clock) *AuthContext
- func (a *AuthContext) WithDischargeURL(offerAccessEndpoint string) *AuthContext
- type Backend
- type Bindings
- type CacheShim
- type CachedApplication
- type CachedModel
- type Charm
- type CrossModelAuthorizer
- type Relation
- type RelationUnit
- type RemoteApplication
- type StatePool
- type WrappedUnitsWatcher
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ExpandChange ¶
func ExpandChange( backend Backend, relationToken string, appToken string, change params.RelationUnitsChange, ) (params.RemoteRelationChangeEvent, error)
ExpandChange converts a params.RelationUnitsChange into a params.RemoteRelationChangeEvent by filling out the extra information from the passed backend. This takes relation and application token so that it can still return sensible results if the relation has been removed (just departing units).
func GetBackend ¶
GetBackend wraps a State to provide a Backend interface implementation.
func GetConsumingRelationTokens ¶
GetConsumingRelationTokens returns the tokens for the relation and the local application of the passed in relation tag.
func GetOfferStatusChange ¶
func GetOfferStatusChange(model CachedModel, st offerGetter, offerUUID, offerName string) (*params.OfferStatusChange, error)
GetOfferStatusChange returns a status change struct for a specified offer name.
func GetOfferingRelationTokens ¶
GetOfferingRelationTokens returns the tokens for the relation and the offer of the passed in relation tag.
func GetRelationLifeSuspendedStatusChange ¶
func GetRelationLifeSuspendedStatusChange( st relationGetter, key string, ) (*params.RelationLifeSuspendedStatusChange, error)
GetRelationLifeSuspendedStatusChange returns a life/suspended status change struct for a specified relation key.
func PublishIngressNetworkChange ¶
func PublishIngressNetworkChange(backend Backend, relationTag names.Tag, change params.IngressNetworksChangeEvent) error
PublishIngressNetworkChange saves the specified ingress networks for a relation.
func PublishRelationChange ¶
func PublishRelationChange(backend Backend, relationTag names.Tag, change params.RemoteRelationChangeEvent) error
PublishRelationChange applies the relation change event to the specified backend.
func RelationUnitSettings ¶
RelationUnitSettings returns the unit settings for the specified relation unit.
func WatchRelationUnits ¶
func WatchRelationUnits(backend Backend, tag names.RelationTag) (common.RelationUnitsWatcher, error)
WatchRelationUnits returns a watcher for changes to the units on the specified relation.
Types ¶
type Application ¶
type Application interface { // Name is the name of the application. Name() string // Life returns the lifecycle state of the application. Life() state.Life // Endpoints returns the application's currently available relation endpoints. Endpoints() ([]state.Endpoint, error) // Charm returns the application's charm and whether units should upgrade to that // charm even if they are in an error state. Charm() (ch Charm, force bool, err error) // CharmURL returns the application's charm URL, and whether units should upgrade // to the charm with that URL even if they are in an error state. CharmURL() (curl *charm.URL, force bool) // EndpointBindings returns the Bindings object for this application. EndpointBindings() (Bindings, error) // Status returns the status of the application. Status() (status.StatusInfo, error) }
Application represents the state of a application hosted in the local model.
type AuthContext ¶
type AuthContext struct {
// contains filtered or unexported fields
}
AuthContext is used to validate macaroons used to access application offers.
func NewAuthContext ¶
func NewAuthContext( pool StatePool, offerThirdPartyKey *bakery.KeyPair, offerBakery authentication.ExpirableStorageBakery, ) (*AuthContext, error)
NewAuthContext creates a new authentication context for checking macaroons used with application offer requests.
func (*AuthContext) Authenticator ¶
func (a *AuthContext) Authenticator(sourceModelUUID, offerUUID string) *authenticator
Authenticator returns an instance used to authenticate macaroons used to access the specified offer.
func (*AuthContext) CheckLocalAccessRequest ¶
func (a *AuthContext) CheckLocalAccessRequest(details *offerPermissionCheck) ([]checkers.Caveat, error)
CheckLocalAccessRequest checks that the user in the specified permission check details has consume access to the offer in the details. It returns an error with a *bakery.VerificationError cause if the macaroon verification failed. If the macaroon is valid, CheckLocalAccessRequest returns a list of caveats to add to the discharge macaroon.
func (*AuthContext) CheckOfferAccessCaveat ¶
func (a *AuthContext) CheckOfferAccessCaveat(caveat string) (*offerPermissionCheck, error)
CheckOfferAccessCaveat checks that the specified caveat required to be satisfied to gain access to an offer is valid, and returns the attributes return to check that the caveat is satisfied.
func (*AuthContext) CreateConsumeOfferMacaroon ¶
func (a *AuthContext) CreateConsumeOfferMacaroon(ctx context.Context, offer *params.ApplicationOfferDetails, username string, version bakery.Version) (*bakery.Macaroon, error)
CreateConsumeOfferMacaroon creates a macaroon that authorises access to the specified offer.
func (*AuthContext) CreateRemoteRelationMacaroon ¶
func (a *AuthContext) CreateRemoteRelationMacaroon(ctx context.Context, sourceModelUUID, offerUUID string, username string, rel names.Tag, version bakery.Version) (*bakery.Macaroon, error)
CreateRemoteRelationMacaroon creates a macaroon that authorises access to the specified relation.
func (*AuthContext) OfferThirdPartyKey ¶
func (a *AuthContext) OfferThirdPartyKey() *bakery.KeyPair
OfferThirdPartyKey returns the key used to discharge offer macaroons.
func (*AuthContext) WithClock ¶
func (a *AuthContext) WithClock(clock clock.Clock) *AuthContext
WithClock creates a new authentication context using the specified clock.
func (*AuthContext) WithDischargeURL ¶
func (a *AuthContext) WithDischargeURL(offerAccessEndpoint string) *AuthContext
WithDischargeURL create an auth context based on this context and used to perform third party discharges at the specified URL.
type Backend ¶
type Backend interface { // ModelUUID returns the model UUID for the model // controlled by this state instance. ModelUUID() string // ModelTag the tag of the model on which we are operating. ModelTag() names.ModelTag // AllModelUUIDs returns the UUIDs of all models in the controller. AllModelUUIDs() ([]string, error) // ControllerTag the tag of the controller in which we are operating. ControllerTag() names.ControllerTag // KeyRelation returns the existing relation with the given key (which can // be derived unambiguously from the relation's endpoints). KeyRelation(string) (Relation, error) // Application returns a local application by name. Application(string) (Application, error) // GetOfferAccess gets the access permission for the specified user on an offer. GetOfferAccess(offerUUID string, user names.UserTag) (permission.Access, error) // UserPermission returns the access permission for the passed subject and target. UserPermission(subject names.UserTag, target names.Tag) (permission.Access, error) // RemoteApplication returns a remote application by name. RemoteApplication(string) (RemoteApplication, error) // AddRelation adds a relation between the specified endpoints and returns the relation info. AddRelation(...state.Endpoint) (Relation, error) // EndpointsRelation returns the existing relation with the given endpoints. EndpointsRelation(...state.Endpoint) (Relation, error) // AddRemoteApplication creates a new remote application record, having the supplied relation endpoints, // with the supplied name (which must be unique across all applications, local and remote). AddRemoteApplication(state.AddRemoteApplicationParams) (RemoteApplication, error) // OfferNameForRelation gets the name of the offer for the // specified cross-model relation key. OfferNameForRelation(string) (string, error) // GetRemoteEntity returns the tag of the entity associated with the given token. GetRemoteEntity(string) (names.Tag, error) // GetToken returns the token associated with the entity with the given tag. GetToken(entity names.Tag) (string, error) // ExportLocalEntity adds an entity to the remote entities collection, // returning an opaque token that uniquely identifies the entity within // the model. ExportLocalEntity(names.Tag) (string, error) // ImportRemoteEntity adds an entity to the remote entities collection // with the specified opaque token. ImportRemoteEntity(entity names.Tag, token string) error // SaveIngressNetworks stores in state the ingress networks for the relation. SaveIngressNetworks(relationKey string, cidrs []string) (state.RelationNetworks, error) // IngressNetworks returns the networks for the specified relation. IngressNetworks(relationKey string) (state.RelationNetworks, error) // ApplicationOfferForUUID returns the application offer for the UUID. ApplicationOfferForUUID(offerUUID string) (*crossmodel.ApplicationOffer, error) // WatchOfferStatus returns a watcher that notifies of changes to the status // of the offer. WatchOfferStatus(offerUUID string) (state.NotifyWatcher, error) // WatchOffer returns a watcher that notifies of changes to the // lifecycle of the offer. WatchOffer(offerName string) state.NotifyWatcher // FirewallRule returns the firewall rule for the specified service. FirewallRule(service firewall.WellKnownServiceType) (*state.FirewallRule, error) // ApplyOperation applies a model operation to the state. ApplyOperation(op state.ModelOperation) error }
type Bindings ¶
type Bindings interface {
MapWithSpaceNames(network.SpaceInfos) (map[string]string, error)
}
Bindings defines a subset of the functionality provided by the state.Bindings type, as required by the application facade. For details on the methods, see the methods on state.Bindings with the same names.
type CacheShim ¶
CacheShim exists to be able to replace the cache with a fake implementation for tests.
func (CacheShim) Application ¶
func (c CacheShim) Application(name string) (CachedApplication, error)
Application returns the CachedApplication for the name specified.
type CachedApplication ¶
type CachedApplication interface {
Status() status.StatusInfo
}
CachedApplication represents the methods that the StatusAPI needs on an application from the model cache.
type CachedModel ¶
type CachedModel interface {
Application(string) (CachedApplication, error)
}
CachedModel represents the methods that the StatusAPI needs on a model from the model cache.
type Charm ¶
type Charm interface { // Meta returns the metadata of the charm. Meta() *charm.Meta // StoragePath returns the storage path of the charm bundle. StoragePath() string }
type CrossModelAuthorizer ¶
type CrossModelAuthorizer struct{}
CrossModelAuthorizer authorises any cmr operation presented to it.
type Relation ¶
type Relation interface { status.StatusGetter status.StatusSetter // Destroy ensures that the relation will be removed at some point; if // no units are currently in scope, it will be removed immediately. Destroy() error // DestroyWithForce may force the destruction of the relation. // In addition, this function also returns all non-fatal operational errors // encountered. DestroyWithForce(force bool, maxWait time.Duration) ([]error, error) // Id returns the integer internal relation key. Id() int // Life returns the relation's current life state. Life() state.Life // Tag returns the relation's tag. Tag() names.Tag // UnitCount is the number of units still in relation scope. UnitCount() int // RemoteUnit returns a RelationUnit for the remote application unit // with the supplied ID. RemoteUnit(unitId string) (RelationUnit, error) // AllRemoteUnits returns all the RelationUnits for the remote // application units for a given application. AllRemoteUnits(appName string) ([]RelationUnit, error) // Endpoints returns the endpoints that constitute the relation. Endpoints() []state.Endpoint // Endpoint returns the endpoint of the relation for the named application. Endpoint(appName string) (state.Endpoint, error) // Unit returns a RelationUnit for the unit with the supplied ID. Unit(unitId string) (RelationUnit, error) // WatchUnits returns a watcher that notifies of changes to the units of the // specified application in the relation. WatchUnits(applicationName string) (state.RelationUnitsWatcher, error) // WatchLifeSuspendedStatus returns a watcher that notifies of changes to the life // or suspended status of the relation. WatchLifeSuspendedStatus() state.StringsWatcher // Suspended returns the suspended status of the relation. Suspended() bool // SuspendedReason returns the reason why the relation is suspended. SuspendedReason() string // SetSuspended sets the suspended status of the relation. SetSuspended(bool, string) error // ReplaceApplicationSettings replaces the application's settings within the // relation. ReplaceApplicationSettings(appName string, settings map[string]interface{}) error // ApplicationSettings returns the settings for the specified // application in the relation. ApplicationSettings(appName string) (map[string]interface{}, error) }
Relation provides access a relation in global state.
type RelationUnit ¶
type RelationUnit interface { // EnterScope ensures that the unit has entered its scope in the // relation. When the unit has already entered its scope, EnterScope // will report success but make no changes to state. EnterScope(settings map[string]interface{}) error // InScope returns whether the relation unit has entered scope and // not left it. InScope() (bool, error) // LeaveScope signals that the unit has left its scope in the relation. // After the unit has left its relation scope, it is no longer a member // of the relation; if the relation is dying when its last member unit // leaves, it is removed immediately. It is not an error to leave a // scope that the unit is not, or never was, a member of. LeaveScope() error // Settings returns the relation unit's settings within the relation. Settings() (map[string]interface{}, error) // ReplaceSettings replaces the relation unit's settings within the // relation. ReplaceSettings(map[string]interface{}) error }
RelationUnit provides access to the settings of a single unit in a relation, and methods for modifying the unit's involvement in the relation.
type RemoteApplication ¶
type RemoteApplication interface { // DestroyWithForce in addition to doing what Destroy() does, // when force is passed in as 'true', forces th destruction of remote application, // ignoring errors. DestroyWithForce(force bool, maxWait time.Duration) (opErrs []error, err error) // Name returns the name of the remote application. Name() string // Tag returns the remote applications's tag. Tag() names.Tag // URL returns the offer URL, at which the application is offered. URL() (string, bool) // OfferUUID returns the UUID of the offer. OfferUUID() string // SourceModel returns the tag of the model hosting the remote application. SourceModel() names.ModelTag // Macaroon returns the macaroon used for authentication. Macaroon() (*macaroon.Macaroon, error) // Status returns the status of the remote application. Status() (status.StatusInfo, error) // IsConsumerProxy returns whether application is created // from a registration operation by a consuming model. IsConsumerProxy() bool // ConsumeVersion increments each time a new saas proxy // for the same offer is created. ConsumeVersion() int // Life returns the lifecycle state of the application. Life() state.Life // SetStatus sets the status of the remote application. SetStatus(info status.StatusInfo) error // TerminateOperation returns an operation that will set this // remote application to terminated and leave it in a state // enabling it to be removed cleanly. TerminateOperation(string) state.ModelOperation // DestroyOperation returns a model operation to destroy remote application. DestroyOperation(bool) state.ModelOperation }
RemoteApplication represents the state of an application hosted in an external (remote) model.
type StatePool ¶
type StatePool interface { // Get returns a State for a given model from the pool. Get(modelUUID string) (Backend, func(), error) }
StatePool provides the subset of a state pool.
func GetStatePool ¶
type WrappedUnitsWatcher ¶
type WrappedUnitsWatcher struct { common.RelationUnitsWatcher RelationToken string ApplicationToken string }
WrappedUnitsWatcher is a relation units watcher that remembers details about the relation it came from so changes can be expanded for sending outside this model.