2018-05-22 21:43:36 +02:00
|
|
|
// Copyright 2016-2018, Pulumi Corporation.
|
|
|
|
//
|
|
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
// you may not use this file except in compliance with the License.
|
|
|
|
// You may obtain a copy of the License at
|
|
|
|
//
|
|
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
//
|
|
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
// See the License for the specific language governing permissions and
|
|
|
|
// limitations under the License.
|
2017-06-07 01:42:14 +02:00
|
|
|
|
2017-10-16 21:04:35 +02:00
|
|
|
package stack
|
2017-06-07 01:42:14 +02:00
|
|
|
|
|
|
|
import (
|
|
|
|
"testing"
|
|
|
|
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
|
|
|
2018-05-25 22:29:59 +02:00
|
|
|
"github.com/pulumi/pulumi/pkg/apitype"
|
2017-09-22 04:18:21 +02:00
|
|
|
"github.com/pulumi/pulumi/pkg/resource"
|
|
|
|
"github.com/pulumi/pulumi/pkg/tokens"
|
2017-06-07 01:42:14 +02:00
|
|
|
)
|
|
|
|
|
2018-02-22 00:11:21 +01:00
|
|
|
// TestDeploymentSerialization creates a basic snapshot of a given resource state.
|
2017-06-07 01:42:14 +02:00
|
|
|
func TestDeploymentSerialization(t *testing.T) {
|
2017-06-11 02:03:58 +02:00
|
|
|
res := resource.NewState(
|
2017-06-07 01:42:14 +02:00
|
|
|
tokens.Type("Test"),
|
2017-06-11 02:03:58 +02:00
|
|
|
resource.NewURN(
|
|
|
|
tokens.QName("test"),
|
2017-08-30 03:24:12 +02:00
|
|
|
tokens.PackageName("resource/test"),
|
2017-12-04 23:50:55 +01:00
|
|
|
tokens.Type(""),
|
2017-06-11 02:03:58 +02:00
|
|
|
tokens.Type("Test"),
|
|
|
|
tokens.QName("resource-x"),
|
|
|
|
),
|
Implement components
This change implements core support for "components" in the Pulumi
Fabric. This work is described further in pulumi/pulumi#340, where
we are still discussing some of the finer points.
In a nutshell, resources no longer imply external providers. It's
entirely possible to have a resource that logically represents
something but without having a physical manifestation that needs to
be tracked and managed by our typical CRUD operations.
For example, the aws/serverless/Function helper is one such type.
It aggregates Lambda-related resources and exposes a nice interface.
All of the Pulumi Cloud Framework resources are also examples.
To indicate that a resource does participate in the usual CRUD resource
provider, it simply derives from ExternalResource instead of Resource.
All resources now have the ability to adopt children. This is purely
a metadata/tagging thing, and will help us roll up displays, provide
attribution to the developer, and even hide aspects of the resource
graph as appropriate (e.g., when they are implementation details).
Our use of this capability is ultra limited right now; in fact, the
only place we display children is in the CLI output. For instance:
+ aws:serverless:Function: (create)
[urn=urn:pulumi:demo::serverless::aws:serverless:Function::mylambda]
=> urn:pulumi:demo::serverless::aws:iam/role:Role::mylambda-iamrole
=> urn:pulumi:demo::serverless::aws:iam/rolePolicyAttachment:RolePolicyAttachment::mylambda-iampolicy-0
=> urn:pulumi:demo::serverless::aws:lambda/function:Function::mylambda
The bit indicating whether a resource is external or not is tracked
in the resulting checkpoint file, along with any of its children.
2017-10-14 23:18:43 +02:00
|
|
|
true,
|
2017-10-05 23:08:35 +02:00
|
|
|
false,
|
2017-06-11 02:03:58 +02:00
|
|
|
resource.ID("test-resource-x"),
|
|
|
|
resource.NewPropertyMapFromMap(map[string]interface{}{
|
2017-06-07 01:42:14 +02:00
|
|
|
"in-nil": nil,
|
|
|
|
"in-bool": true,
|
|
|
|
"in-float64": float64(1.5),
|
|
|
|
"in-string": "lumilumilo",
|
|
|
|
"in-array": []interface{}{"a", true, float64(32)},
|
|
|
|
"in-empty-array": []interface{}{},
|
|
|
|
"in-map": map[string]interface{}{
|
|
|
|
"a": true,
|
|
|
|
"b": float64(88),
|
|
|
|
"c": "c-see-saw",
|
|
|
|
"d": "d-dee-daw",
|
|
|
|
},
|
|
|
|
"in-empty-map": map[string]interface{}{},
|
|
|
|
}),
|
2017-06-11 02:03:58 +02:00
|
|
|
resource.NewPropertyMapFromMap(map[string]interface{}{
|
2017-06-07 01:42:14 +02:00
|
|
|
"out-nil": nil,
|
|
|
|
"out-bool": false,
|
|
|
|
"out-float64": float64(76),
|
|
|
|
"out-string": "loyolumiloom",
|
|
|
|
"out-array": []interface{}{false, "zzxx"},
|
|
|
|
"out-empty-array": []interface{}{},
|
|
|
|
"out-map": map[string]interface{}{
|
|
|
|
"x": false,
|
|
|
|
"y": "z-zee-zaw",
|
|
|
|
"z": float64(999.9),
|
|
|
|
},
|
|
|
|
"out-empty-map": map[string]interface{}{},
|
|
|
|
}),
|
2017-11-20 19:08:59 +01:00
|
|
|
"",
|
Implement resource protection (#751)
This change implements resource protection, as per pulumi/pulumi#689.
The overall idea is that a resource can be marked as "protect: true",
which will prevent deletion of that resource for any reason whatsoever
(straight deletion, replacement, etc). This is expressed in the
program. To "unprotect" a resource, one must perform an update setting
"protect: false", and then afterwards, they can delete the resource.
For example:
let res = new MyResource("precious", { .. }, { protect: true });
Afterwards, the resource will display in the CLI with a lock icon, and
any attempts to remove it will fail in the usual ways (in planning or,
worst case, during an actual update).
This was done by adding a new ResourceOptions bag parameter to the
base Resource types. This is unfortunately a breaking change, but now
is the right time to take this one. We had been adding new settings
one by one -- like parent and dependsOn -- and this new approach will
set us up to add any number of additional settings down the road,
without needing to worry about breaking anything ever again.
This is related to protected stacks, as described in
pulumi/pulumi-service#399. Most likely this will serve as a foundational
building block that enables the coarser grained policy management.
2017-12-20 23:31:07 +01:00
|
|
|
false,
|
2018-08-03 23:06:00 +02:00
|
|
|
false,
|
2018-02-22 21:52:50 +01:00
|
|
|
[]resource.URN{
|
|
|
|
resource.URN("foo:bar:baz"),
|
|
|
|
resource.URN("foo:bar:boo"),
|
|
|
|
},
|
2018-07-19 07:52:01 +02:00
|
|
|
[]string{},
|
Implement first-class providers. (#1695)
### First-Class Providers
These changes implement support for first-class providers. First-class
providers are provider plugins that are exposed as resources via the
Pulumi programming model so that they may be explicitly and multiply
instantiated. Each instance of a provider resource may be configured
differently, and configuration parameters may be source from the
outputs of other resources.
### Provider Plugin Changes
In order to accommodate the need to verify and diff provider
configuration and configure providers without complete configuration
information, these changes adjust the high-level provider plugin
interface. Two new methods for validating a provider's configuration
and diffing changes to the same have been added (`CheckConfig` and
`DiffConfig`, respectively), and the type of the configuration bag
accepted by `Configure` has been changed to a `PropertyMap`.
These changes have not yet been reflected in the provider plugin gRPC
interface. We will do this in a set of follow-up changes. Until then,
these methods are implemented by adapters:
- `CheckConfig` validates that all configuration parameters are string
or unknown properties. This is necessary because existing plugins
only accept string-typed configuration values.
- `DiffConfig` either returns "never replace" if all configuration
values are known or "must replace" if any configuration value is
unknown. The justification for this behavior is given
[here](https://github.com/pulumi/pulumi/pull/1695/files#diff-a6cd5c7f337665f5bb22e92ca5f07537R106)
- `Configure` converts the config bag to a legacy config map and
configures the provider plugin if all config values are known. If any
config value is unknown, the underlying plugin is not configured and
the provider may only perform `Check`, `Read`, and `Invoke`, all of
which return empty results. We justify this behavior becuase it is
only possible during a preview and provides the best experience we
can manage with the existing gRPC interface.
### Resource Model Changes
Providers are now exposed as resources that participate in a stack's
dependency graph. Like other resources, they are explicitly created,
may have multiple instances, and may have dependencies on other
resources. Providers are referred to using provider references, which
are a combination of the provider's URN and its ID. This design
addresses the need during a preview to refer to providers that have not
yet been physically created and therefore have no ID.
All custom resources that are not themselves providers must specify a
single provider via a provider reference. The named provider will be
used to manage that resource's CRUD operations. If a resource's
provider reference changes, the resource must be replaced. Though its
URN is not present in the resource's dependency list, the provider
should be treated as a dependency of the resource when topologically
sorting the dependency graph.
Finally, `Invoke` operations must now specify a provider to use for the
invocation via a provider reference.
### Engine Changes
First-class providers support requires a few changes to the engine:
- The engine must have some way to map from provider references to
provider plugins. It must be possible to add providers from a stack's
checkpoint to this map and to register new/updated providers during
the execution of a plan in response to CRUD operations on provider
resources.
- In order to support updating existing stacks using existing Pulumi
programs that may not explicitly instantiate providers, the engine
must be able to manage the "default" providers for each package
referenced by a checkpoint or Pulumi program. The configuration for
a "default" provider is taken from the stack's configuration data.
The former need is addressed by adding a provider registry type that is
responsible for managing all of the plugins required by a plan. In
addition to loading plugins froma checkpoint and providing the ability
to map from a provider reference to a provider plugin, this type serves
as the provider plugin for providers themselves (i.e. it is the
"provider provider").
The latter need is solved via two relatively self-contained changes to
plan setup and the eval source.
During plan setup, the old checkpoint is scanned for custom resources
that do not have a provider reference in order to compute the set of
packages that require a default provider. Once this set has been
computed, the required default provider definitions are conjured and
prepended to the checkpoint's resource list. Each resource that
requires a default provider is then updated to refer to the default
provider for its package.
While an eval source is running, each custom resource registration,
resource read, and invoke that does not name a provider is trapped
before being returned by the source iterator. If no default provider
for the appropriate package has been registered, the eval source
synthesizes an appropriate registration, waits for it to complete, and
records the registered provider's reference. This reference is injected
into the original request, which is then processed as usual. If a
default provider was already registered, the recorded reference is
used and no new registration occurs.
### SDK Changes
These changes only expose first-class providers from the Node.JS SDK.
- A new abstract class, `ProviderResource`, can be subclassed and used
to instantiate first-class providers.
- A new field in `ResourceOptions`, `provider`, can be used to supply
a particular provider instance to manage a `CustomResource`'s CRUD
operations.
- A new type, `InvokeOptions`, can be used to specify options that
control the behavior of a call to `pulumi.runtime.invoke`. This type
includes a `provider` field that is analogous to
`ResourceOptions.provider`.
2018-08-07 02:50:29 +02:00
|
|
|
"",
|
2017-06-07 01:42:14 +02:00
|
|
|
)
|
|
|
|
|
2017-06-11 02:03:58 +02:00
|
|
|
dep := SerializeResource(res)
|
2017-06-07 01:42:14 +02:00
|
|
|
|
|
|
|
// assert some things about the deployment record:
|
|
|
|
assert.NotNil(t, dep)
|
|
|
|
assert.NotNil(t, dep.ID)
|
2017-06-11 02:03:58 +02:00
|
|
|
assert.Equal(t, resource.ID("test-resource-x"), dep.ID)
|
2017-06-07 01:42:14 +02:00
|
|
|
assert.Equal(t, tokens.Type("Test"), dep.Type)
|
2018-02-22 00:11:21 +01:00
|
|
|
assert.Equal(t, 2, len(dep.Dependencies))
|
|
|
|
assert.Equal(t, resource.URN("foo:bar:baz"), dep.Dependencies[0])
|
|
|
|
assert.Equal(t, resource.URN("foo:bar:boo"), dep.Dependencies[1])
|
2017-06-07 01:42:14 +02:00
|
|
|
|
|
|
|
// assert some things about the inputs:
|
|
|
|
assert.NotNil(t, dep.Inputs)
|
|
|
|
assert.Nil(t, dep.Inputs["in-nil"])
|
|
|
|
assert.NotNil(t, dep.Inputs["in-bool"])
|
|
|
|
assert.True(t, dep.Inputs["in-bool"].(bool))
|
|
|
|
assert.NotNil(t, dep.Inputs["in-float64"])
|
|
|
|
assert.Equal(t, float64(1.5), dep.Inputs["in-float64"].(float64))
|
|
|
|
assert.NotNil(t, dep.Inputs["in-string"])
|
|
|
|
assert.Equal(t, "lumilumilo", dep.Inputs["in-string"].(string))
|
|
|
|
assert.NotNil(t, dep.Inputs["in-array"])
|
|
|
|
assert.Equal(t, 3, len(dep.Inputs["in-array"].([]interface{})))
|
|
|
|
assert.Equal(t, "a", dep.Inputs["in-array"].([]interface{})[0])
|
|
|
|
assert.Equal(t, true, dep.Inputs["in-array"].([]interface{})[1])
|
|
|
|
assert.Equal(t, float64(32), dep.Inputs["in-array"].([]interface{})[2])
|
|
|
|
assert.NotNil(t, dep.Inputs["in-empty-array"])
|
|
|
|
assert.Equal(t, 0, len(dep.Inputs["in-empty-array"].([]interface{})))
|
|
|
|
assert.NotNil(t, dep.Inputs["in-map"])
|
|
|
|
inmap := dep.Inputs["in-map"].(map[string]interface{})
|
|
|
|
assert.Equal(t, 4, len(inmap))
|
|
|
|
assert.NotNil(t, inmap["a"])
|
|
|
|
assert.Equal(t, true, inmap["a"].(bool))
|
|
|
|
assert.NotNil(t, inmap["b"])
|
|
|
|
assert.Equal(t, float64(88), inmap["b"].(float64))
|
|
|
|
assert.NotNil(t, inmap["c"])
|
|
|
|
assert.Equal(t, "c-see-saw", inmap["c"].(string))
|
|
|
|
assert.NotNil(t, inmap["d"])
|
|
|
|
assert.Equal(t, "d-dee-daw", inmap["d"].(string))
|
|
|
|
assert.NotNil(t, dep.Inputs["in-empty-map"])
|
|
|
|
assert.Equal(t, 0, len(dep.Inputs["in-empty-map"].(map[string]interface{})))
|
|
|
|
|
|
|
|
// assert some things about the outputs:
|
|
|
|
assert.NotNil(t, dep.Outputs)
|
|
|
|
assert.Nil(t, dep.Outputs["out-nil"])
|
|
|
|
assert.NotNil(t, dep.Outputs["out-bool"])
|
|
|
|
assert.False(t, dep.Outputs["out-bool"].(bool))
|
|
|
|
assert.NotNil(t, dep.Outputs["out-float64"])
|
|
|
|
assert.Equal(t, float64(76), dep.Outputs["out-float64"].(float64))
|
|
|
|
assert.NotNil(t, dep.Outputs["out-string"])
|
|
|
|
assert.Equal(t, "loyolumiloom", dep.Outputs["out-string"].(string))
|
|
|
|
assert.NotNil(t, dep.Outputs["out-array"])
|
|
|
|
assert.Equal(t, 2, len(dep.Outputs["out-array"].([]interface{})))
|
|
|
|
assert.Equal(t, false, dep.Outputs["out-array"].([]interface{})[0])
|
|
|
|
assert.Equal(t, "zzxx", dep.Outputs["out-array"].([]interface{})[1])
|
|
|
|
assert.NotNil(t, dep.Outputs["out-empty-array"])
|
|
|
|
assert.Equal(t, 0, len(dep.Outputs["out-empty-array"].([]interface{})))
|
|
|
|
assert.NotNil(t, dep.Outputs["out-map"])
|
|
|
|
outmap := dep.Outputs["out-map"].(map[string]interface{})
|
|
|
|
assert.Equal(t, 3, len(outmap))
|
|
|
|
assert.NotNil(t, outmap["x"])
|
|
|
|
assert.Equal(t, false, outmap["x"].(bool))
|
|
|
|
assert.NotNil(t, outmap["y"])
|
|
|
|
assert.Equal(t, "z-zee-zaw", outmap["y"].(string))
|
|
|
|
assert.NotNil(t, outmap["z"])
|
|
|
|
assert.Equal(t, float64(999.9), outmap["z"].(float64))
|
|
|
|
assert.NotNil(t, dep.Outputs["out-empty-map"])
|
|
|
|
assert.Equal(t, 0, len(dep.Outputs["out-empty-map"].(map[string]interface{})))
|
|
|
|
}
|
2018-05-25 22:29:59 +02:00
|
|
|
|
|
|
|
func TestLoadTooNewDeployment(t *testing.T) {
|
|
|
|
untypedDeployment := &apitype.UntypedDeployment{
|
|
|
|
Version: apitype.DeploymentSchemaVersionCurrent + 1,
|
|
|
|
}
|
|
|
|
|
2018-08-03 23:06:00 +02:00
|
|
|
deployment, err := DeserializeUntypedDeployment(untypedDeployment)
|
2018-05-25 22:29:59 +02:00
|
|
|
assert.Nil(t, deployment)
|
|
|
|
assert.Error(t, err)
|
|
|
|
assert.Equal(t, ErrDeploymentSchemaVersionTooNew, err)
|
|
|
|
}
|
|
|
|
|
|
|
|
func TestLoadTooOldDeployment(t *testing.T) {
|
|
|
|
untypedDeployment := &apitype.UntypedDeployment{
|
|
|
|
Version: DeploymentSchemaVersionOldestSupported - 1,
|
|
|
|
}
|
|
|
|
|
2018-08-03 23:06:00 +02:00
|
|
|
deployment, err := DeserializeUntypedDeployment(untypedDeployment)
|
2018-05-25 22:29:59 +02:00
|
|
|
assert.Nil(t, deployment)
|
|
|
|
assert.Error(t, err)
|
|
|
|
assert.Equal(t, ErrDeploymentSchemaVersionTooOld, err)
|
|
|
|
}
|