mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-01-13 23:59:41 -06:00
329 lines
9.9 KiB
Go
329 lines
9.9 KiB
Go
package command
|
|
|
|
import (
|
|
"context"
|
|
"os"
|
|
"os/signal"
|
|
"path"
|
|
"sync"
|
|
"time"
|
|
|
|
"github.com/cs3org/reva/cmd/revad/runtime"
|
|
"github.com/gofrs/uuid"
|
|
"github.com/micro/cli"
|
|
"github.com/oklog/run"
|
|
"github.com/owncloud/ocis-reva/pkg/config"
|
|
"github.com/owncloud/ocis-reva/pkg/flagset"
|
|
"github.com/owncloud/ocis-reva/pkg/server/debug"
|
|
)
|
|
|
|
// Server is the entrypoint for the server command.
|
|
func Server(cfg *config.Config) cli.Command {
|
|
return cli.Command{
|
|
Name: "server",
|
|
Usage: "Start integrated server",
|
|
Flags: flagset.ServerWithConfig(cfg),
|
|
Action: func(c *cli.Context) error {
|
|
logger := NewLogger(cfg)
|
|
|
|
if cfg.Tracing.Enabled {
|
|
switch t := cfg.Tracing.Type; t {
|
|
case "agent":
|
|
logger.Error().
|
|
Str("type", t).
|
|
Msg("Reva only supports the jaeger tracing backend")
|
|
|
|
case "jaeger":
|
|
logger.Info().
|
|
Str("type", t).
|
|
Msg("configuring reva to use the jaeger tracing backend")
|
|
|
|
case "zipkin":
|
|
logger.Error().
|
|
Str("type", t).
|
|
Msg("Reva only supports the jaeger tracing backend")
|
|
|
|
default:
|
|
logger.Warn().
|
|
Str("type", t).
|
|
Msg("Unknown tracing backend")
|
|
}
|
|
|
|
} else {
|
|
logger.Debug().
|
|
Msg("Tracing is not enabled")
|
|
}
|
|
|
|
var (
|
|
gr = run.Group{}
|
|
ctx, cancel = context.WithCancel(context.Background())
|
|
)
|
|
|
|
defer cancel()
|
|
|
|
// Flags have to be injected all the way down to the go-micro service
|
|
{
|
|
|
|
if len(cfg.Reva.Configs) < 1 {
|
|
cfg.Reva.Configs = map[string]interface{}{
|
|
"default": map[string]interface{}{
|
|
"core": map[string]interface{}{
|
|
"max_cpus": cfg.Reva.MaxCPUs,
|
|
"tracing_enabled": cfg.Tracing.Enabled,
|
|
"tracing_endpoint": cfg.Tracing.Endpoint,
|
|
"tracing_collector": cfg.Tracing.Collector,
|
|
"tracing_service_name": cfg.Tracing.Service,
|
|
},
|
|
"log": map[string]interface{}{
|
|
"level": cfg.Reva.LogLevel,
|
|
//TODO mode = "console" # "console" or "json"
|
|
//TODO output = "./standalone.log"
|
|
},
|
|
"http": map[string]interface{}{
|
|
"network": cfg.Reva.HTTP.Network,
|
|
"address": cfg.Reva.HTTP.Addr,
|
|
"enabled_services": []string{
|
|
"dataprovider",
|
|
"prometheus",
|
|
},
|
|
"enabled_middlewares": []string{
|
|
//"cors",
|
|
"auth",
|
|
},
|
|
"middlewares": map[string]interface{}{
|
|
"auth": map[string]interface{}{
|
|
"gateway": cfg.Reva.GRPC.Addr,
|
|
"auth_type": "oidc",
|
|
"credential_strategy": "oidc",
|
|
"token_strategy": "header",
|
|
"token_writer": "header",
|
|
"token_manager": "jwt",
|
|
"token_managers": map[string]interface{}{
|
|
"jwt": map[string]interface{}{
|
|
"secret": cfg.Reva.JWTSecret,
|
|
},
|
|
},
|
|
"skip_methods": []string{
|
|
"/metrics", // for prometheus metrics
|
|
},
|
|
},
|
|
},
|
|
"services": map[string]interface{}{
|
|
"dataprovider": map[string]interface{}{
|
|
"driver": "local",
|
|
"prefix": "data",
|
|
"tmp_folder": "/var/tmp/",
|
|
"drivers": map[string]interface{}{
|
|
"local": map[string]interface{}{
|
|
"root": "/var/tmp/reva/data",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
"grpc": map[string]interface{}{
|
|
"network": cfg.Reva.GRPC.Network,
|
|
"address": cfg.Reva.GRPC.Addr,
|
|
"enabled_services": []string{
|
|
"authprovider", // provides basic auth
|
|
"storageprovider", // handles storage metadata
|
|
"usershareprovider", // provides user shares
|
|
"userprovider", // provides user matadata (used to look up email, displayname etc after a login)
|
|
"preferences", // provides user preferences
|
|
"gateway", // to lookup services and authenticate requests
|
|
"authregistry", // used by the gateway to look up auth providers
|
|
"storageregistry", // used by the gateway to look up storage providers
|
|
},
|
|
"interceptors": map[string]interface{}{
|
|
"auth": map[string]interface{}{
|
|
"token_manager": "jwt",
|
|
"token_managers": map[string]interface{}{
|
|
"jwt": map[string]interface{}{
|
|
"secret": cfg.Reva.JWTSecret,
|
|
},
|
|
},
|
|
"skip_methods": []string{
|
|
// we need to allow calls that happen during authentication
|
|
"/cs3.gatewayv0alpha.GatewayService/Authenticate",
|
|
"/cs3.gatewayv0alpha.GatewayService/WhoAmI",
|
|
"/cs3.gatewayv0alpha.GatewayService/GetUser",
|
|
"/cs3.gatewayv0alpha.GatewayService/ListAuthProviders",
|
|
"/cs3.authregistryv0alpha.AuthRegistryService/ListAuthProviders",
|
|
"/cs3.authregistryv0alpha.AuthRegistryService/GetAuthProvider",
|
|
"/cs3.authproviderv0alpha.AuthProviderService/Authenticate",
|
|
"/cs3.userproviderv0alpha.UserProviderService/GetUser",
|
|
},
|
|
},
|
|
},
|
|
"services": map[string]interface{}{
|
|
"gateway": map[string]interface{}{
|
|
"authregistrysvc": cfg.Reva.GRPC.Addr,
|
|
"storageregistrysvc": cfg.Reva.GRPC.Addr,
|
|
"appregistrysvc": cfg.Reva.GRPC.Addr,
|
|
"preferencessvc": cfg.Reva.GRPC.Addr,
|
|
"usershareprovidersvc": cfg.Reva.GRPC.Addr,
|
|
"publicshareprovidersvc": cfg.Reva.GRPC.Addr,
|
|
"ocmshareprovidersvc": cfg.Reva.GRPC.Addr,
|
|
"userprovidersvc": cfg.Reva.GRPC.Addr,
|
|
"commit_share_to_storage_grant": true,
|
|
"datagateway": "http://" + cfg.Reva.HTTP.Addr + "/data",
|
|
"transfer_shared_secret": "replace-me-with-a-transfer-secret",
|
|
"transfer_expires": 6, // give it a moment
|
|
"token_manager": "jwt",
|
|
"token_managers": map[string]interface{}{
|
|
"jwt": map[string]interface{}{
|
|
"secret": cfg.Reva.JWTSecret,
|
|
},
|
|
},
|
|
},
|
|
"authregistry": map[string]interface{}{
|
|
"driver": "static",
|
|
"drivers": map[string]interface{}{
|
|
"static": map[string]interface{}{
|
|
"rules": map[string]interface{}{
|
|
//"basic": "localhost:9999",
|
|
"oidc": cfg.Reva.GRPC.Addr,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
"storageregistry": map[string]interface{}{
|
|
"driver": "static",
|
|
"drivers": map[string]interface{}{
|
|
"static": map[string]interface{}{
|
|
"rules": map[string]interface{}{
|
|
"/": cfg.Reva.GRPC.Addr,
|
|
"123e4567-e89b-12d3-a456-426655440000": cfg.Reva.GRPC.Addr,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
"authprovider": map[string]interface{}{
|
|
"auth_manager": "oidc",
|
|
"auth_managers": map[string]interface{}{
|
|
"oidc": map[string]interface{}{
|
|
"provider": cfg.AuthProvider.Provider,
|
|
"insecure": cfg.AuthProvider.Insecure,
|
|
},
|
|
},
|
|
"userprovidersvc": cfg.Reva.GRPC.Addr,
|
|
},
|
|
"userprovider": map[string]interface{}{
|
|
"driver": "demo", // TODO use graph api
|
|
/*
|
|
"drivers": map[string]interface{}{
|
|
"graph": map[string]interface{}{
|
|
"provider": cfg.AuthProvider.Provider,
|
|
"insecure": cfg.AuthProvider.Insecure,
|
|
},
|
|
},
|
|
*/
|
|
},
|
|
"usershareprovider": map[string]interface{}{
|
|
"driver": "memory",
|
|
},
|
|
"storageprovider": map[string]interface{}{
|
|
"mount_path": "/",
|
|
"mount_id": "123e4567-e89b-12d3-a456-426655440000",
|
|
"data_server_url": "http://" + cfg.Reva.HTTP.Addr + "/data",
|
|
"expose_data_server": true,
|
|
"available_checksums": map[string]interface{}{
|
|
"md5": 100,
|
|
"unset": 1000,
|
|
},
|
|
"driver": "local",
|
|
"drivers": map[string]interface{}{
|
|
"local": map[string]interface{}{
|
|
"root": "/var/tmp/reva/data",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
}
|
|
gr.Add(func() error {
|
|
var wg sync.WaitGroup
|
|
for k, conf := range cfg.Reva.Configs {
|
|
wg.Add(1)
|
|
go func(wg *sync.WaitGroup, config string, c map[string]interface{}) {
|
|
uuid := uuid.Must(uuid.NewV4())
|
|
pidFile := path.Join(os.TempDir(), "revad-"+uuid.String()+".pid")
|
|
logger.Info().
|
|
Str("config", config).
|
|
Str("server", "reva").
|
|
Msg("Starting server")
|
|
// TODO register reva as a service in micro
|
|
runtime.Run(c, pidFile)
|
|
wg.Done()
|
|
}(&wg, k, conf.(map[string]interface{}))
|
|
}
|
|
wg.Wait()
|
|
return nil
|
|
}, func(_ error) {
|
|
logger.Info().
|
|
Str("server", "reva").
|
|
Msg("Shutting down server")
|
|
|
|
cancel()
|
|
})
|
|
}
|
|
|
|
{
|
|
server, err := debug.Server(
|
|
debug.Logger(logger),
|
|
debug.Context(ctx),
|
|
debug.Config(cfg),
|
|
)
|
|
|
|
if err != nil {
|
|
logger.Info().
|
|
Err(err).
|
|
Str("server", "debug").
|
|
Msg("Failed to initialize server")
|
|
|
|
return err
|
|
}
|
|
|
|
gr.Add(func() error {
|
|
return server.ListenAndServe()
|
|
}, func(_ error) {
|
|
ctx, timeout := context.WithTimeout(ctx, 5*time.Second)
|
|
|
|
defer timeout()
|
|
defer cancel()
|
|
|
|
if err := server.Shutdown(ctx); err != nil {
|
|
logger.Info().
|
|
Err(err).
|
|
Str("server", "debug").
|
|
Msg("Failed to shutdown server")
|
|
} else {
|
|
logger.Info().
|
|
Str("server", "debug").
|
|
Msg("Shutting down server")
|
|
}
|
|
})
|
|
}
|
|
|
|
{
|
|
stop := make(chan os.Signal, 1)
|
|
|
|
gr.Add(func() error {
|
|
signal.Notify(stop, os.Interrupt)
|
|
|
|
<-stop
|
|
|
|
return nil
|
|
}, func(err error) {
|
|
close(stop)
|
|
cancel()
|
|
})
|
|
}
|
|
|
|
return gr.Run()
|
|
},
|
|
}
|
|
}
|