Ryan McKinley
94 lines
3.0 KiB
Go
94 lines
3.0 KiB
Go
package rules
|
|
|
|
import (
|
|
"context"
|
|
|
|
restclient "k8s.io/client-go/rest"
|
|
|
|
"k8s.io/apimachinery/pkg/runtime/schema"
|
|
"k8s.io/apiserver/pkg/authorization/authorizer"
|
|
|
|
"github.com/grafana/grafana-app-sdk/app"
|
|
appsdkapiserver "github.com/grafana/grafana-app-sdk/k8s/apiserver"
|
|
"github.com/grafana/grafana-app-sdk/simple"
|
|
|
|
"github.com/grafana/grafana/apps/alerting/rules/pkg/apis"
|
|
rulesApp "github.com/grafana/grafana/apps/alerting/rules/pkg/app"
|
|
grafanarest "github.com/grafana/grafana/pkg/apiserver/rest"
|
|
"github.com/grafana/grafana/pkg/infra/log"
|
|
"github.com/grafana/grafana/pkg/registry/apps/alerting/rules/alertrule"
|
|
"github.com/grafana/grafana/pkg/registry/apps/alerting/rules/recordingrule"
|
|
"github.com/grafana/grafana/pkg/services/apiserver/appinstaller"
|
|
"github.com/grafana/grafana/pkg/services/apiserver/endpoints/request"
|
|
"github.com/grafana/grafana/pkg/services/ngalert"
|
|
"github.com/grafana/grafana/pkg/setting"
|
|
)
|
|
|
|
var (
|
|
_ appsdkapiserver.AppInstaller = (*AlertingRulesAppInstaller)(nil)
|
|
_ appinstaller.AuthorizerProvider = (*AlertingRulesAppInstaller)(nil)
|
|
_ appinstaller.LegacyStorageProvider = (*AlertingRulesAppInstaller)(nil)
|
|
)
|
|
|
|
type AlertingRulesAppInstaller struct {
|
|
appsdkapiserver.AppInstaller
|
|
cfg *setting.Cfg
|
|
ng *ngalert.AlertNG
|
|
}
|
|
|
|
func RegisterAppInstaller(
|
|
cfg *setting.Cfg,
|
|
ng *ngalert.AlertNG,
|
|
) (*AlertingRulesAppInstaller, error) {
|
|
if ng.IsDisabled() {
|
|
log.New("app-registry").Info("Skipping Kubernetes Alerting Rules apiserver (rules.alerting.grafana.app): Unified Alerting is disabled")
|
|
return nil, nil
|
|
}
|
|
|
|
installer := &AlertingRulesAppInstaller{
|
|
cfg: cfg,
|
|
ng: ng,
|
|
}
|
|
|
|
provider := simple.NewAppProvider(apis.LocalManifest(), nil, rulesApp.New)
|
|
|
|
appConfig := app.Config{
|
|
KubeConfig: restclient.Config{}, // this will be overridden by the installer's InitializeApp method
|
|
ManifestData: *apis.LocalManifest().ManifestData,
|
|
}
|
|
|
|
i, err := appsdkapiserver.NewDefaultAppInstaller(provider, appConfig, &apis.GoTypeAssociator{})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
installer.AppInstaller = i
|
|
return installer, nil
|
|
}
|
|
|
|
func (a *AlertingRulesAppInstaller) GetAuthorizer() authorizer.Authorizer {
|
|
authz := a.ng.Api.AccessControl
|
|
return authorizer.AuthorizerFunc(
|
|
func(ctx context.Context, a authorizer.Attributes) (authorizer.Decision, string, error) {
|
|
switch a.GetResource() {
|
|
case recordingrule.ResourceInfo.GroupResource().Resource:
|
|
return recordingrule.Authorize(ctx, authz, a)
|
|
case alertrule.ResourceInfo.GroupResource().Resource:
|
|
return alertrule.Authorize(ctx, authz, a)
|
|
}
|
|
return authorizer.DecisionNoOpinion, "", nil
|
|
},
|
|
)
|
|
}
|
|
|
|
func (a *AlertingRulesAppInstaller) GetLegacyStorage(gvr schema.GroupVersionResource) grafanarest.Storage {
|
|
namespacer := request.GetNamespaceMapper(a.cfg)
|
|
switch gvr {
|
|
case recordingrule.ResourceInfo.GroupVersionResource():
|
|
return recordingrule.NewStorage(*a.ng.Api.AlertRules, namespacer)
|
|
case alertrule.ResourceInfo.GroupVersionResource():
|
|
return alertrule.NewStorage(*a.ng.Api.AlertRules, namespacer)
|
|
default:
|
|
panic("unknown legacy storage requested: " + gvr.String())
|
|
}
|
|
}
|