Support OCM geneva actions to get cluster info and to cancel cluster upgrade policy

cmd/aro/rp.go

@@ -173,7 +173,7 @@ func rp(ctx context.Context, log, audit *logrus.Entry) error {
 	if err != nil {
 		return err
 	}
-	f, err := frontend.NewFrontend(ctx, audit, log.WithField("component", "frontend"), _env, dbAsyncOperations, dbClusterManagerConfiguration, dbOpenShiftClusters, dbSubscriptions, dbOpenShiftVersions, api.APIs, metrics, clusterm, feAead, hiveClusterManager, adminactions.NewKubeActions, adminactions.NewAzureActions, clusterdata.NewParallelEnricher(metrics, _env))
+	f, err := frontend.NewFrontend(ctx, audit, log.WithField("component", "frontend"), _env, dbAsyncOperations, dbClusterManagerConfiguration, dbOpenShiftClusters, dbSubscriptions, dbOpenShiftVersions, api.APIs, metrics, clusterm, feAead, hiveClusterManager, adminactions.NewKubeActions, adminactions.NewAzureActions, adminactions.NewOCMActions, clusterdata.NewParallelEnricher(metrics, _env))
 	if err != nil {
 		return err
 	}

pkg/frontend/admin_hive_clusterdeployment_get_test.go

@@ -90,10 +90,10 @@ func Test_getAdminHiveClusterDeployment(t *testing.T) {
 				clusterManager := mock_hive.NewMockClusterManager(controller)
 				clusterManager.EXPECT().GetClusterDeployment(gomock.Any(), gomock.Any()).Return(&clusterDeployment, nil).Times(tt.expectedGetClusterDeploymentCallCount)
 				f, err = NewFrontend(ctx, ti.audit, ti.log, _env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase,
-					ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, clusterManager, nil, nil, nil)
+					ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, clusterManager, nil, nil, nil, nil)
 			} else {
 				f, err = NewFrontend(ctx, ti.audit, ti.log, _env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase,
-					ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, nil, nil, nil)
+					ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, nil, nil, nil, nil)
 			}
 
 			if err != nil {

pkg/frontend/admin_openshiftcluster_approvecsr_test.go

@@ -93,7 +93,7 @@ func TestAdminApproveCSR(t *testing.T) {
 
 			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, func(*logrus.Entry, env.Interface, *api.OpenShiftCluster) (adminactions.KubeActions, error) {
 				return k, nil
-			}, nil, nil)
+			}, nil, nil, nil)
 
 			if err != nil {
 				t.Fatal(err)

pkg/frontend/admin_openshiftcluster_cordonnode_test.go

@@ -154,7 +154,7 @@ func TestAdminCordonUncordonNode(t *testing.T) {
 
 			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, func(*logrus.Entry, env.Interface, *api.OpenShiftCluster) (adminactions.KubeActions, error) {
 				return k, nil
-			}, nil, nil)
+			}, nil, nil, nil)
 
 			if err != nil {
 				t.Fatal(err)

pkg/frontend/admin_openshiftcluster_delete_managedresource_test.go

@@ -115,7 +115,7 @@ func TestAdminDeleteManagedResource(t *testing.T) {
 
 			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, nil, func(*logrus.Entry, env.Interface, *api.OpenShiftCluster, *api.SubscriptionDocument) (adminactions.AzureActions, error) {
 				return a, nil
-			}, nil)
+			}, nil, nil)
 
 			if err != nil {
 				t.Fatal(err)

pkg/frontend/admin_openshiftcluster_drainnode_test.go

@@ -86,7 +86,7 @@ func TestAdminDrainNode(t *testing.T) {
 
 			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, func(*logrus.Entry, env.Interface, *api.OpenShiftCluster) (adminactions.KubeActions, error) {
 				return k, nil
-			}, nil, nil)
+			}, nil, nil, nil)
 
 			if err != nil {
 				t.Fatal(err)

pkg/frontend/admin_openshiftcluster_etcdcertificaterenew_test.go

@@ -545,6 +545,7 @@ func TestAdminEtcdCertificateRenew(t *testing.T) {
 					return k, nil
 				},
 				nil,
+				nil,
 				nil)
 			if err != nil {
 				t.Fatal(err)
@@ -762,6 +763,7 @@ func TestAdminEtcdCertificateRecovery(t *testing.T) {
 					return k, nil
 				},
 				nil,
+				nil,
 				nil)
 			if err != nil {
 				t.Fatal(err)

pkg/frontend/admin_openshiftcluster_etcdrecovery_test.go

@@ -174,6 +174,7 @@ func TestAdminEtcdRecovery(t *testing.T) {
 				nil,
 				kubeActionsFactory,
 				nil,
+				nil,
 				ti.enricher)
 			if err != nil {
 				t.Fatal(err)

pkg/frontend/admin_openshiftcluster_kubernetesobjects_test.go

@@ -264,7 +264,7 @@ func TestAdminKubernetesObjectsGetAndDelete(t *testing.T) {
 
 			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, func(*logrus.Entry, env.Interface, *api.OpenShiftCluster) (adminactions.KubeActions, error) {
 				return k, nil
-			}, nil, nil)
+			}, nil, nil, nil)
 			if err != nil {
 				t.Fatal(err)
 			}
@@ -413,7 +413,7 @@ func TestAdminPostKubernetesObjects(t *testing.T) {
 
 			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, func(*logrus.Entry, env.Interface, *api.OpenShiftCluster) (adminactions.KubeActions, error) {
 				return k, nil
-			}, nil, nil)
+			}, nil, nil, nil)
 			if err != nil {
 				t.Fatal(err)
 			}

pkg/frontend/admin_openshiftcluster_kubernetespods_logs_test.go

@@ -127,7 +127,7 @@ func TestAdminKubernetesGetPodLogs(t *testing.T) {
 
 			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, nil, nil, func(*logrus.Entry, env.Interface, *api.OpenShiftCluster) (adminactions.KubeActions, error) {
 				return k, nil
-			}, nil, nil)
+			}, nil, nil, nil)
 			if err != nil {
 				t.Fatal(err)
 			}

pkg/frontend/admin_openshiftcluster_list_test.go

@@ -124,7 +124,7 @@ func TestAdminListOpenShiftCluster(t *testing.T) {
 				ti.openShiftClustersClient.SetError(tt.throwsError)
 			}
 
-			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, aead, nil, nil, nil, ti.enricher)
+			f, err := NewFrontend(ctx, ti.audit, ti.log, ti.env, ti.asyncOperationsDatabase, ti.clusterManagerDatabase, ti.openShiftClustersDatabase, ti.subscriptionsDatabase, nil, api.APIs, &noop.Noop{}, &noop.Noop{}, aead, nil, nil, nil, nil, ti.enricher)
 			if err != nil {
 				t.Fatal(err)
 			}

pkg/frontend/admin_openshiftcluster_ocm_operations.go

@@ -0,0 +1,154 @@
+package frontend
+
+// Copyright (c) Microsoft Corporation.
+// Licensed under the Apache License 2.0.
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"path/filepath"
+	"strings"
+
+	"github.com/ghodss/yaml"
+	"github.com/go-chi/chi/v5"
+	"github.com/sirupsen/logrus"
+	corev1 "k8s.io/api/core/v1"
+	"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
+	kruntime "k8s.io/apimachinery/pkg/runtime"
+
+	"github.com/Azure/ARO-RP/pkg/api"
+	"github.com/Azure/ARO-RP/pkg/database/cosmosdb"
+	"github.com/Azure/ARO-RP/pkg/frontend/adminactions"
+	"github.com/Azure/ARO-RP/pkg/frontend/middleware"
+	ocmapi "github.com/Azure/ARO-RP/pkg/util/ocm/api"
+	"github.com/Azure/ARO-RP/pkg/util/pullsecret"
+)
+
+func (f *frontend) getOCMClusterInfo(w http.ResponseWriter, r *http.Request) {
+	ctx := r.Context()
+	log := ctx.Value(middleware.ContextKeyLog).(*logrus.Entry)
+
+	ocmActions, err := f.getOCMActions(ctx, r, log)
+	if err != nil {
+		api.WriteError(w, http.StatusInternalServerError, api.CloudErrorCodeInternalServerError, "", "%v", err)
+		return
+	}
+
+	clusterInfo, err := ocmActions.GetClusterInfoWithUpgradePolicies(ctx)
+	if err != nil {
+		api.WriteError(w, http.StatusInternalServerError, api.CloudErrorCodeInternalServerError, "", "%v", err)
+		return
+	}
+
+	clusterInfoBytes, err := json.Marshal(clusterInfo)
+	if err != nil {
+		api.WriteError(w, http.StatusInternalServerError, api.CloudErrorCodeInternalServerError, "", "%v", err)
+		return
+	}
+
+	adminReply(log, w, nil, clusterInfoBytes, nil)
+}
+
+func (f *frontend) postAdminOCMCancelUpgradePolicy(w http.ResponseWriter, r *http.Request) {
+	ctx := r.Context()
+	log := ctx.Value(middleware.ContextKeyLog).(*logrus.Entry)
+	policyID := r.URL.Query().Get("policyID")
+
+	ocmActions, err := f.getOCMActions(ctx, r, log)
+	if err != nil {
+		api.WriteError(w, http.StatusInternalServerError, api.CloudErrorCodeInternalServerError, "", "%v", err)
+		return
+	}
+
+	response, err := ocmActions.CancelClusterUpgradePolicy(ctx, policyID)
+	if err != nil {
+		api.WriteError(w, http.StatusInternalServerError, api.CloudErrorCodeInternalServerError, "", "%v", err)
+		return
+	}
+
+	responseBytes, err := json.Marshal(response)
+	if err != nil {
+		api.WriteError(w, http.StatusInternalServerError, api.CloudErrorCodeInternalServerError, "", "%v", err)
+		return
+	}
+
+	adminReply(log, w, nil, responseBytes, nil)
+}
+
+func (f *frontend) getOCMActions(ctx context.Context, r *http.Request, log *logrus.Entry) (adminactions.OCMActions, error) {
+	resType, resName, resGroupName := chi.URLParam(r, "resourceType"), chi.URLParam(r, "resourceName"), chi.URLParam(r, "resourceGroupName")
+
+	r.URL.Path = filepath.Dir(r.URL.Path)
+	resourceID := strings.TrimPrefix(r.URL.Path, "/admin")
+	doc, err := f.dbOpenShiftClusters.Get(ctx, resourceID)
+	switch {
+	case cosmosdb.IsErrorStatusCode(err, http.StatusNotFound):
+		return nil, api.NewCloudError(http.StatusNotFound, api.CloudErrorCodeResourceNotFound, "", "The Resource '%s/%s' under resource group '%s' was not found.", resType, resName, resGroupName)
+	case err != nil:
+		return nil, err
+	}
+
+	clusterID := doc.ID
+	k, err := f.kubeActionsFactory(log, f.env, doc.OpenShiftCluster)
+	if err != nil {
+		return nil, err
+	}
+
+	ps, err := k.KubeGet(ctx, "Secret", "openshift-config", "pull-secret")
+	if err != nil {
+		return nil, err
+	}
+
+	var u unstructured.Unstructured
+	if err := json.Unmarshal(ps, &u); err != nil {
+		return nil, err
+	}
+	var secret corev1.Secret
+	if err := kruntime.DefaultUnstructuredConverter.FromUnstructured(u.Object, &secret); err != nil {
+		return nil, err
+	}
+
+	psKeys, err := pullsecret.UnmarshalSecretData(&secret)
+	if err != nil {
+		return nil, err
+	}
+
+	token, ok := psKeys["cloud.openshift.com"]
+	if !ok {
+		return nil, fmt.Errorf("token not found in pull secret")
+	}
+
+	cm, err := k.KubeGet(ctx, "ConfigMap", "openshift-managed-upgrade-operator", "managed-upgrade-operator-config")
+	if err != nil {
+		return nil, err
+	}
+
+	if err := json.Unmarshal(cm, &u); err != nil {
+		return nil, err
+	}
+	var configMap corev1.ConfigMap
+	if err := kruntime.DefaultUnstructuredConverter.FromUnstructured(u.Object, &configMap); err != nil {
+		return nil, err
+	}
+
+	configYaml, ok := configMap.Data["config.yaml"]
+	if !ok {
+		return nil, fmt.Errorf("config.yaml not found")
+	}
+
+	var config ocmapi.Config
+	err = yaml.Unmarshal([]byte(configYaml), &config)
+	if err != nil {
+		return nil, err
+	}
+
+	// default OCM base URL jic pending upgrade exists
+	ocmBaseUrl := "https://api.openshift.com"
+	if config.ConfigManager.Source == "OCM" {
+		ocmBaseUrl = config.ConfigManager.OcmBaseURL
+	}
+
+	return f.ocmActionsFactory(clusterID, ocmBaseUrl, token), nil
+}