2018-06-11 13:13:19 +00:00
|
|
|
package endpoints
|
|
|
|
|
|
|
|
import (
|
|
|
|
"net/http"
|
2019-10-07 02:42:01 +00:00
|
|
|
"reflect"
|
2018-06-11 13:13:19 +00:00
|
|
|
"strconv"
|
|
|
|
|
2018-09-10 10:01:38 +00:00
|
|
|
httperror "github.com/portainer/libhttp/error"
|
|
|
|
"github.com/portainer/libhttp/request"
|
|
|
|
"github.com/portainer/libhttp/response"
|
2021-02-17 02:39:22 +00:00
|
|
|
portainer "github.com/portainer/portainer/api"
|
2020-06-09 02:43:32 +00:00
|
|
|
"github.com/portainer/portainer/api/http/client"
|
2020-06-16 07:58:16 +00:00
|
|
|
"github.com/portainer/portainer/api/internal/edge"
|
|
|
|
"github.com/portainer/portainer/api/internal/tag"
|
2018-06-11 13:13:19 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
type endpointUpdatePayload struct {
|
2021-09-20 00:14:22 +00:00
|
|
|
// Name that will be used to identify this environment(endpoint)
|
|
|
|
Name *string `example:"my-environment"`
|
2021-02-23 03:21:39 +00:00
|
|
|
// URL or IP address of a Docker host
|
|
|
|
URL *string `example:"docker.mydomain.tld:2375"`
|
|
|
|
// URL or IP address where exposed containers will be reachable.\
|
|
|
|
// Defaults to URL if not specified
|
|
|
|
PublicURL *string `example:"docker.mydomain.tld:2375"`
|
|
|
|
// Group identifier
|
|
|
|
GroupID *int `example:"1"`
|
2021-09-20 00:14:22 +00:00
|
|
|
// Require TLS to connect against this environment(endpoint)
|
2021-02-23 03:21:39 +00:00
|
|
|
TLS *bool `example:"true"`
|
|
|
|
// Skip server verification when using TLS
|
|
|
|
TLSSkipVerify *bool `example:"false"`
|
|
|
|
// Skip client verification when using TLS
|
|
|
|
TLSSkipClientVerify *bool `example:"false"`
|
2021-09-20 00:14:22 +00:00
|
|
|
// The status of the environment(endpoint) (1 - up, 2 - down)
|
2021-02-23 03:21:39 +00:00
|
|
|
Status *int `example:"1"`
|
|
|
|
// Azure application ID
|
|
|
|
AzureApplicationID *string `example:"eag7cdo9-o09l-9i83-9dO9-f0b23oe78db4"`
|
|
|
|
// Azure tenant ID
|
|
|
|
AzureTenantID *string `example:"34ddc78d-4fel-2358-8cc1-df84c8o839f5"`
|
|
|
|
// Azure authentication key
|
|
|
|
AzureAuthenticationKey *string `example:"cOrXoK/1D35w8YQ8nH1/8ZGwzz45JIYD5jxHKXEQknk="`
|
2021-09-20 00:14:22 +00:00
|
|
|
// List of tag identifiers to which this environment(endpoint) is associated
|
2021-02-23 03:21:39 +00:00
|
|
|
TagIDs []portainer.TagID `example:"1,2"`
|
|
|
|
UserAccessPolicies portainer.UserAccessPolicies
|
|
|
|
TeamAccessPolicies portainer.TeamAccessPolicies
|
|
|
|
// The check in interval for edge agent (in seconds)
|
|
|
|
EdgeCheckinInterval *int `example:"5"`
|
|
|
|
// Associated Kubernetes data
|
|
|
|
Kubernetes *portainer.KubernetesData
|
2022-01-23 19:48:04 +00:00
|
|
|
// Whether the device has been trusted or not by the user
|
|
|
|
UserTrusted *bool
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
func (payload *endpointUpdatePayload) Validate(r *http.Request) error {
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2021-02-23 03:21:39 +00:00
|
|
|
// @id EndpointUpdate
|
2021-09-20 00:14:22 +00:00
|
|
|
// @summary Update an environment(endpoint)
|
|
|
|
// @description Update an environment(endpoint).
|
2021-10-11 23:12:08 +00:00
|
|
|
// @description **Access policy**: authenticated
|
2021-11-30 02:31:16 +00:00
|
|
|
// @security ApiKeyAuth
|
2021-02-23 03:21:39 +00:00
|
|
|
// @security jwt
|
|
|
|
// @tags endpoints
|
|
|
|
// @accept json
|
|
|
|
// @produce json
|
2021-09-20 00:14:22 +00:00
|
|
|
// @param id path int true "Environment(Endpoint) identifier"
|
|
|
|
// @param body body endpointUpdatePayload true "Environment(Endpoint) details"
|
2021-02-23 03:21:39 +00:00
|
|
|
// @success 200 {object} portainer.Endpoint "Success"
|
|
|
|
// @failure 400 "Invalid request"
|
2021-09-20 00:14:22 +00:00
|
|
|
// @failure 404 "Environment(Endpoint) not found"
|
2021-02-23 03:21:39 +00:00
|
|
|
// @failure 500 "Server error"
|
|
|
|
// @router /endpoints/{id} [put]
|
2018-06-11 13:13:19 +00:00
|
|
|
func (handler *Handler) endpointUpdate(w http.ResponseWriter, r *http.Request) *httperror.HandlerError {
|
|
|
|
endpointID, err := request.RetrieveNumericRouteVariableValue(r, "id")
|
|
|
|
if err != nil {
|
2021-09-08 08:42:17 +00:00
|
|
|
return &httperror.HandlerError{http.StatusBadRequest, "Invalid environment identifier route variable", err}
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
var payload endpointUpdatePayload
|
|
|
|
err = request.DecodeAndValidateJSONPayload(r, &payload)
|
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusBadRequest, "Invalid request payload", err}
|
|
|
|
}
|
|
|
|
|
2020-05-20 05:23:15 +00:00
|
|
|
endpoint, err := handler.DataStore.Endpoint().Endpoint(portainer.EndpointID(endpointID))
|
chore(store) EE-1981: Refactor/store/error checking, and other refactoring (#6173)
* use the Store interface IsErrObjectNotFound() to avoid revealing internal errors
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* what happens when you extract the datastore interfaces into their own package
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* Start renaming Storage methods
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* extract the boltdb specific code from the Portainer storage code (example, the others need the same)
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* more extract bolt.Tx from datastore code
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* minimise imports by putting moving the struct definition into the file that needs the Service imports
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* more extraction of boltdb.Tx
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* extract the use of bucket.SetSequence
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* almost done - just endpoint.Synchonise :/
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* so, endpoint.Synchonize looks hard, but i can't find where we use it, so 'delete first refactoring'
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* fix test compile errors
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* test compile fixes after rebase
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* fix a mis-remembering I had wrt deserialisation - last time i used AnyData - jsoniter's bindTo looks interesting for the same reason
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* set us up to make the connection an interface
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* make the db connection a datastore interface, and separate out our datastore services from the bolt ones
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* rename methods to something less oltdb internals specific
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* these errors are not boltdb secific
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* start using the db-backend factory method too
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* export boltdb raw in case we can't export from the service layer
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* add a raw export from boltdb to yaml for broken db's, and an export services to yaml in backup
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* add the version info by hand for now
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* actually, the export from services can be fully typed - its the import that needs to do more work
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* redo raw export, and make import capable of using it
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* add DockerHub
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* migration from anything older than v1.21.0 has been broken for quite a while, deleting the un-tested code
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* fix go test ./... again
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* my goland wasn't setup to gofmt
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* move the two extremely dubious migration tests down into store, so they can use the test store code
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* the migrator is now free of boltdb
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* reverse goland overzealous replcement of internal with boltdb
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* more undo over-zealous goland internal->boltdb
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* yay, now bolt is only mentioned inside the api/database/ dir
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* and this might be the last of the boltdb references?
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* add todo
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* extract the store code into a separate module too
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* don't need the fileService in boltdb anymore
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* use IsErrObjectNotFound()
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* use a string to select what database backend we use
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* make isNew store an ephemeral bool that doesn't stay true after we've initialised it
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* move the import.json wip to a separate file so its more obvious - we'll be using it for testing, emergency fixups, and in the next part of the store work, when we improve migrations and data model lifecycles
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* undo vscode formatting html
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* fix app templates symbol (#6221)
* feat(webhook) EE-2125 send registry auth haeder when update swarms service via webhook (#6220)
* feat(webhook) EE-2125 add some helpers to registry utils
* feat(webhook) EE-2125 persist registryID when creating a webhook
* feat(webhook) EE-2125 send registry auth header when executing a webhook
* feat(webhook) EE-2125 send registryID to backend when creating a service with webhook
* feat(webhook) EE-2125 use the initial registry ID to create webhook on editing service screen
* feat(webhook) EE-2125 update webhook when update registry
* feat(webhook) EE-2125 add endpoint of update webhook
* feat(webhook) EE-2125 code cleanup
* feat(webhook) EE-2125 fix a typo
* feat(webhook) EE-2125 fix circle import issue with unit test
Co-authored-by: Simon Meng <simon.meng@portainer.io>
* fix(kubeconfig): show kubeconfig download button for non admin users [EE-2123] (#6204)
Co-authored-by: Simon Meng <simon.meng@portainer.io>
* fix data-cy for k8s cluster menu (#6226)
LGTM
* feat(stack): make stack created from app template editable EE-1941 (#6104)
feat(stack): make stack from app template editable
* fix(container):disable Duplicate/Edit button when the container is portainer (#6223)
* fix/ee-1909/show-pull-image-error (#6195)
Co-authored-by: sunportainer <ericsun@SG1.local>
* feat(cy): add data-cy to helm install button (#6241)
* feat(cy): add data-cy to add registry button (#6242)
* refactor(app): convert root folder files to es6 (#4159)
* refactor(app): duplicate constants as es6 exports (#4158)
* fix(docker): provide workaround to save network name variable (#6080)
* fix/EE-1862/unable-to-stop-or-remove-stack workaround for var without default value in yaml file
* fix/EE-1862/unable-to-stop-or-remove-stack check yaml file
* fixed func and var names
* wrapper error and used bool for stringset
* UT case for createNetworkEnvFile
* UT case for %s=%s
* powerful StringSet
* wrapper error for extract network name
* wrapper all the return err
* store more env
* put to env file
* make default value None
* feat: gzip static resources (#6258)
* fix(ssl)//handle --sslcert and --sslkey ee-2106 (#6203)
* fix/ee-2106/handle-sslcert-sslkey
Co-authored-by: sunportainer <ericsun@SG1.local>
* fix(server):support disable https only ee-2068 (#6232)
* fix/ee-2068/disable-forcely-https
* feat(store): implement store tests EE-2112 (#6224)
* add store tests
* add some more tests
* Update missing helm user repo methods
* remove redundant comments
* add webhook export
* update webhooks
* use the Store interface IsErrObjectNotFound() to avoid revealing internal errors
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* what happens when you extract the datastore interfaces into their own package
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* Start renaming Storage methods
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* extract the boltdb specific code from the Portainer storage code (example, the others need the same)
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* more extract bolt.Tx from datastore code
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* minimise imports by putting moving the struct definition into the file that needs the Service imports
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* more extraction of boltdb.Tx
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* extract the use of bucket.SetSequence
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* almost done - just endpoint.Synchonise :/
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* so, endpoint.Synchonize looks hard, but i can't find where we use it, so 'delete first refactoring'
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* fix test compile errors
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* test compile fixes after rebase
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* fix a mis-remembering I had wrt deserialisation - last time i used AnyData - jsoniter's bindTo looks interesting for the same reason
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* set us up to make the connection an interface
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* make the db connection a datastore interface, and separate out our datastore services from the bolt ones
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* rename methods to something less oltdb internals specific
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* these errors are not boltdb secific
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* start using the db-backend factory method too
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* export boltdb raw in case we can't export from the service layer
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* add a raw export from boltdb to yaml for broken db's, and an export services to yaml in backup
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* add the version info by hand for now
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* actually, the export from services can be fully typed - its the import that needs to do more work
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* redo raw export, and make import capable of using it
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* add DockerHub
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* migration from anything older than v1.21.0 has been broken for quite a while, deleting the un-tested code
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* fix go test ./... again
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* my goland wasn't setup to gofmt
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* move the two extremely dubious migration tests down into store, so they can use the test store code
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* the migrator is now free of boltdb
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* reverse goland overzealous replcement of internal with boltdb
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* more undo over-zealous goland internal->boltdb
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* yay, now bolt is only mentioned inside the api/database/ dir
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* and this might be the last of the boltdb references?
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* add todo
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* extract the store code into a separate module too
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* don't need the fileService in boltdb anymore
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* use IsErrObjectNotFound()
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* use a string to select what database backend we use
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* make isNew store an ephemeral bool that doesn't stay true after we've initialised it
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* move the import.json wip to a separate file so its more obvious - we'll be using it for testing, emergency fixups, and in the next part of the store work, when we improve migrations and data model lifecycles
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* undo vscode formatting html
Signed-off-by: Sven Dowideit <sven.dowideit@portainer.io>
* Update missing helm user repo methods
* feat(store): implement store tests EE-2112 (#6224)
* add store tests
* add some more tests
* remove redundant comments
* add webhook export
* update webhooks
* fix build issues after rebasing
* move migratorparams
* remove unneeded integer type conversions
* disable the db import/export for now
Co-authored-by: Richard Wei <54336863+WaysonWei@users.noreply.github.com>
Co-authored-by: cong meng <mcpacino@gmail.com>
Co-authored-by: Simon Meng <simon.meng@portainer.io>
Co-authored-by: Marcelo Rydel <marcelorydel26@gmail.com>
Co-authored-by: Hao Zhang <hao.zhang@portainer.io>
Co-authored-by: sunportainer <93502624+sunportainer@users.noreply.github.com>
Co-authored-by: sunportainer <ericsun@SG1.local>
Co-authored-by: wheresolivia <78844659+wheresolivia@users.noreply.github.com>
Co-authored-by: Chaim Lev-Ari <chiptus@users.noreply.github.com>
Co-authored-by: Chao Geng <93526589+chaogeng77977@users.noreply.github.com>
Co-authored-by: Dmitry Salakhov <to@dimasalakhov.com>
Co-authored-by: Matt Hook <hookenz@gmail.com>
2021-12-15 02:26:09 +00:00
|
|
|
if handler.DataStore.IsErrObjectNotFound(err) {
|
2021-09-08 08:42:17 +00:00
|
|
|
return &httperror.HandlerError{http.StatusNotFound, "Unable to find an environment with the specified identifier inside the database", err}
|
2018-06-11 13:13:19 +00:00
|
|
|
} else if err != nil {
|
2021-09-08 08:42:17 +00:00
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to find an environment with the specified identifier inside the database", err}
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
2018-10-28 09:27:06 +00:00
|
|
|
if payload.Name != nil {
|
|
|
|
endpoint.Name = *payload.Name
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
2018-10-28 09:27:06 +00:00
|
|
|
if payload.URL != nil {
|
|
|
|
endpoint.URL = *payload.URL
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
2018-10-28 09:27:06 +00:00
|
|
|
if payload.PublicURL != nil {
|
|
|
|
endpoint.PublicURL = *payload.PublicURL
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
2020-06-04 05:35:09 +00:00
|
|
|
if payload.EdgeCheckinInterval != nil {
|
|
|
|
endpoint.EdgeCheckinInterval = *payload.EdgeCheckinInterval
|
|
|
|
}
|
|
|
|
|
2020-05-14 02:14:28 +00:00
|
|
|
groupIDChanged := false
|
2018-10-28 09:27:06 +00:00
|
|
|
if payload.GroupID != nil {
|
2020-05-14 02:14:28 +00:00
|
|
|
groupID := portainer.EndpointGroupID(*payload.GroupID)
|
|
|
|
groupIDChanged = groupID != endpoint.GroupID
|
|
|
|
endpoint.GroupID = groupID
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
2020-05-14 02:14:28 +00:00
|
|
|
tagsChanged := false
|
2020-03-29 09:54:14 +00:00
|
|
|
if payload.TagIDs != nil {
|
2020-06-16 07:58:16 +00:00
|
|
|
payloadTagSet := tag.Set(payload.TagIDs)
|
|
|
|
endpointTagSet := tag.Set((endpoint.TagIDs))
|
|
|
|
union := tag.Union(payloadTagSet, endpointTagSet)
|
|
|
|
intersection := tag.Intersection(payloadTagSet, endpointTagSet)
|
2020-05-14 02:14:28 +00:00
|
|
|
tagsChanged = len(union) > len(intersection)
|
|
|
|
|
|
|
|
if tagsChanged {
|
2020-06-16 07:58:16 +00:00
|
|
|
removeTags := tag.Difference(endpointTagSet, payloadTagSet)
|
2020-05-14 02:14:28 +00:00
|
|
|
|
|
|
|
for tagID := range removeTags {
|
2020-05-20 05:23:15 +00:00
|
|
|
tag, err := handler.DataStore.Tag().Tag(tagID)
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to find a tag inside the database", err}
|
|
|
|
}
|
|
|
|
|
|
|
|
delete(tag.Endpoints, endpoint.ID)
|
2020-05-20 05:23:15 +00:00
|
|
|
err = handler.DataStore.Tag().UpdateTag(tag.ID, tag)
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to persist tag changes inside the database", err}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
endpoint.TagIDs = payload.TagIDs
|
|
|
|
for _, tagID := range payload.TagIDs {
|
2020-05-20 05:23:15 +00:00
|
|
|
tag, err := handler.DataStore.Tag().Tag(tagID)
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to find a tag inside the database", err}
|
|
|
|
}
|
|
|
|
|
|
|
|
tag.Endpoints[endpoint.ID] = true
|
|
|
|
|
2020-05-20 05:23:15 +00:00
|
|
|
err = handler.DataStore.Tag().UpdateTag(tag.ID, tag)
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to persist tag changes inside the database", err}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
2018-06-15 07:18:25 +00:00
|
|
|
}
|
|
|
|
|
2021-07-23 05:10:46 +00:00
|
|
|
updateAuthorizations := false
|
|
|
|
|
2020-07-05 23:21:03 +00:00
|
|
|
if payload.Kubernetes != nil {
|
2021-07-23 05:10:46 +00:00
|
|
|
if payload.Kubernetes.Configuration.RestrictDefaultNamespace !=
|
|
|
|
endpoint.Kubernetes.Configuration.RestrictDefaultNamespace {
|
|
|
|
updateAuthorizations = true
|
|
|
|
}
|
|
|
|
|
2020-07-05 23:21:03 +00:00
|
|
|
endpoint.Kubernetes = *payload.Kubernetes
|
|
|
|
}
|
|
|
|
|
2019-10-07 02:42:01 +00:00
|
|
|
if payload.UserAccessPolicies != nil && !reflect.DeepEqual(payload.UserAccessPolicies, endpoint.UserAccessPolicies) {
|
2021-06-16 08:15:29 +00:00
|
|
|
updateAuthorizations = true
|
2019-05-24 06:04:58 +00:00
|
|
|
endpoint.UserAccessPolicies = payload.UserAccessPolicies
|
|
|
|
}
|
|
|
|
|
2019-10-07 02:42:01 +00:00
|
|
|
if payload.TeamAccessPolicies != nil && !reflect.DeepEqual(payload.TeamAccessPolicies, endpoint.TeamAccessPolicies) {
|
2021-06-16 08:15:29 +00:00
|
|
|
updateAuthorizations = true
|
2019-05-24 06:04:58 +00:00
|
|
|
endpoint.TeamAccessPolicies = payload.TeamAccessPolicies
|
|
|
|
}
|
|
|
|
|
2018-10-28 09:27:06 +00:00
|
|
|
if payload.Status != nil {
|
|
|
|
switch *payload.Status {
|
|
|
|
case 1:
|
|
|
|
endpoint.Status = portainer.EndpointStatusUp
|
|
|
|
break
|
|
|
|
case 2:
|
|
|
|
endpoint.Status = portainer.EndpointStatusDown
|
|
|
|
break
|
|
|
|
default:
|
|
|
|
break
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2020-06-09 02:43:32 +00:00
|
|
|
if endpoint.Type == portainer.AzureEnvironment {
|
|
|
|
credentials := endpoint.AzureCredentials
|
|
|
|
if payload.AzureApplicationID != nil {
|
|
|
|
credentials.ApplicationID = *payload.AzureApplicationID
|
|
|
|
}
|
|
|
|
if payload.AzureTenantID != nil {
|
|
|
|
credentials.TenantID = *payload.AzureTenantID
|
|
|
|
}
|
|
|
|
if payload.AzureAuthenticationKey != nil {
|
|
|
|
credentials.AuthenticationKey = *payload.AzureAuthenticationKey
|
|
|
|
}
|
|
|
|
|
|
|
|
httpClient := client.NewHTTPClient()
|
|
|
|
_, authErr := httpClient.ExecuteAzureAuthenticationRequest(&credentials)
|
|
|
|
if authErr != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to authenticate against Azure", authErr}
|
|
|
|
}
|
|
|
|
endpoint.AzureCredentials = credentials
|
|
|
|
}
|
|
|
|
|
2018-10-28 09:27:06 +00:00
|
|
|
if payload.TLS != nil {
|
|
|
|
folder := strconv.Itoa(endpointID)
|
|
|
|
|
|
|
|
if *payload.TLS {
|
|
|
|
endpoint.TLSConfig.TLS = true
|
|
|
|
if payload.TLSSkipVerify != nil {
|
|
|
|
endpoint.TLSConfig.TLSSkipVerify = *payload.TLSSkipVerify
|
|
|
|
|
|
|
|
if !*payload.TLSSkipVerify {
|
|
|
|
caCertPath, _ := handler.FileService.GetPathForTLSFile(folder, portainer.TLSFileCA)
|
|
|
|
endpoint.TLSConfig.TLSCACertPath = caCertPath
|
|
|
|
} else {
|
|
|
|
endpoint.TLSConfig.TLSCACertPath = ""
|
|
|
|
handler.FileService.DeleteTLSFile(folder, portainer.TLSFileCA)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if payload.TLSSkipClientVerify != nil {
|
|
|
|
if !*payload.TLSSkipClientVerify {
|
|
|
|
certPath, _ := handler.FileService.GetPathForTLSFile(folder, portainer.TLSFileCert)
|
|
|
|
endpoint.TLSConfig.TLSCertPath = certPath
|
|
|
|
keyPath, _ := handler.FileService.GetPathForTLSFile(folder, portainer.TLSFileKey)
|
|
|
|
endpoint.TLSConfig.TLSKeyPath = keyPath
|
|
|
|
} else {
|
|
|
|
endpoint.TLSConfig.TLSCertPath = ""
|
|
|
|
handler.FileService.DeleteTLSFile(folder, portainer.TLSFileCert)
|
|
|
|
endpoint.TLSConfig.TLSKeyPath = ""
|
|
|
|
handler.FileService.DeleteTLSFile(folder, portainer.TLSFileKey)
|
|
|
|
}
|
|
|
|
}
|
2018-06-11 13:13:19 +00:00
|
|
|
|
|
|
|
} else {
|
2018-10-28 09:27:06 +00:00
|
|
|
endpoint.TLSConfig.TLS = false
|
|
|
|
endpoint.TLSConfig.TLSSkipVerify = false
|
|
|
|
endpoint.TLSConfig.TLSCACertPath = ""
|
2018-06-11 13:13:19 +00:00
|
|
|
endpoint.TLSConfig.TLSCertPath = ""
|
|
|
|
endpoint.TLSConfig.TLSKeyPath = ""
|
2018-10-28 09:27:06 +00:00
|
|
|
err = handler.FileService.DeleteTLSFiles(folder)
|
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to remove TLS files from disk", err}
|
|
|
|
}
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
2021-02-17 02:39:22 +00:00
|
|
|
|
|
|
|
if endpoint.Type == portainer.AgentOnKubernetesEnvironment || endpoint.Type == portainer.EdgeAgentOnKubernetesEnvironment {
|
|
|
|
endpoint.TLSConfig.TLS = true
|
|
|
|
endpoint.TLSConfig.TLSSkipVerify = true
|
|
|
|
}
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
2020-06-09 02:43:32 +00:00
|
|
|
if payload.URL != nil || payload.TLS != nil || endpoint.Type == portainer.AzureEnvironment {
|
2019-11-12 23:41:42 +00:00
|
|
|
_, err = handler.ProxyManager.CreateAndRegisterEndpointProxy(endpoint)
|
2018-10-28 09:27:06 +00:00
|
|
|
if err != nil {
|
2021-09-08 08:42:17 +00:00
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to register HTTP proxy for the environment", err}
|
2018-10-28 09:27:06 +00:00
|
|
|
}
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
2021-06-16 08:15:29 +00:00
|
|
|
if updateAuthorizations {
|
|
|
|
if endpoint.Type == portainer.KubernetesLocalEnvironment || endpoint.Type == portainer.AgentOnKubernetesEnvironment || endpoint.Type == portainer.EdgeAgentOnKubernetesEnvironment {
|
|
|
|
err = handler.AuthorizationService.CleanNAPWithOverridePolicies(endpoint, nil)
|
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to update user authorizations", err}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2022-01-23 19:48:04 +00:00
|
|
|
if payload.UserTrusted != nil {
|
|
|
|
endpoint.UserTrusted = *payload.UserTrusted
|
|
|
|
}
|
|
|
|
|
2020-05-20 05:23:15 +00:00
|
|
|
err = handler.DataStore.Endpoint().UpdateEndpoint(endpoint.ID, endpoint)
|
2018-06-11 13:13:19 +00:00
|
|
|
if err != nil {
|
2021-09-08 08:42:17 +00:00
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to persist environment changes inside the database", err}
|
2018-06-11 13:13:19 +00:00
|
|
|
}
|
|
|
|
|
2020-07-05 23:21:03 +00:00
|
|
|
if (endpoint.Type == portainer.EdgeAgentOnDockerEnvironment || endpoint.Type == portainer.EdgeAgentOnKubernetesEnvironment) && (groupIDChanged || tagsChanged) {
|
2020-05-20 05:23:15 +00:00
|
|
|
relation, err := handler.DataStore.EndpointRelation().EndpointRelation(endpoint.ID)
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
2021-09-08 08:42:17 +00:00
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to find environment relation inside the database", err}
|
2020-05-14 02:14:28 +00:00
|
|
|
}
|
|
|
|
|
2020-05-20 05:23:15 +00:00
|
|
|
endpointGroup, err := handler.DataStore.EndpointGroup().EndpointGroup(endpoint.GroupID)
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
2021-09-08 08:42:17 +00:00
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to find environment group inside the database", err}
|
2020-05-14 02:14:28 +00:00
|
|
|
}
|
|
|
|
|
2020-05-20 05:23:15 +00:00
|
|
|
edgeGroups, err := handler.DataStore.EdgeGroup().EdgeGroups()
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to retrieve edge groups from the database", err}
|
|
|
|
}
|
|
|
|
|
2020-05-20 05:23:15 +00:00
|
|
|
edgeStacks, err := handler.DataStore.EdgeStack().EdgeStacks()
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to retrieve edge stacks from the database", err}
|
|
|
|
}
|
|
|
|
|
|
|
|
edgeStackSet := map[portainer.EdgeStackID]bool{}
|
|
|
|
|
2020-06-16 07:58:16 +00:00
|
|
|
endpointEdgeStacks := edge.EndpointRelatedEdgeStacks(endpoint, endpointGroup, edgeGroups, edgeStacks)
|
2020-05-14 02:14:28 +00:00
|
|
|
for _, edgeStackID := range endpointEdgeStacks {
|
|
|
|
edgeStackSet[edgeStackID] = true
|
|
|
|
}
|
|
|
|
|
|
|
|
relation.EdgeStacks = edgeStackSet
|
|
|
|
|
2020-05-20 05:23:15 +00:00
|
|
|
err = handler.DataStore.EndpointRelation().UpdateEndpointRelation(endpoint.ID, relation)
|
2020-05-14 02:14:28 +00:00
|
|
|
if err != nil {
|
2021-09-08 08:42:17 +00:00
|
|
|
return &httperror.HandlerError{http.StatusInternalServerError, "Unable to persist environment relation changes inside the database", err}
|
2020-05-14 02:14:28 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-06-11 13:13:19 +00:00
|
|
|
return response.JSON(w, endpoint)
|
|
|
|
}
|