pulumi/pkg/resource/provider.go
joeduffy 6194a59798 Add a pre-pass to validate resources before creating/updating
This change adds a new Check RPC method on the provider interface,
permitting resource providers to perform arbitrary verification on
the values of properties.  This is useful for validating things
that might be difficult to express in the type system, and it runs
before *any* modifications are run (so failures can be caight early
before it's too late).  My favorite motivating example is verifying
that an AWS EC2 instance's AMI is available within the target region.

This resolves pulumi/coconut#107, although we aren't using this
in any resource providers just yet.  I'll add a work item now for that...
2017-03-02 18:15:38 -08:00

47 lines
2.7 KiB
Go

// Copyright 2016 Pulumi, Inc. All rights reserved.
package resource
import (
"io"
"github.com/pulumi/coconut/pkg/tokens"
)
// Provider presents a simple interface for orchestrating resource create, reead, update, and delete operations. Each
// provider understands how to handle all of the resource types within a single package.
//
// This interface hides some of the messiness of the underlying machinery, since providers are behind an RPC boundary.
//
// It is important to note that provider operations are not transactional. (Some providers might decide to offer
// transactional semantics, but such a provider is a rare treat.) As a result, failures in the operations below can
// range from benign to catastrophic (possibly leaving behind a corrupt resource). It is up to the provider to make a
// best effort to ensure catastrophies do not occur. The errors returned from mutating operations indicate both the
// underlying error condition in addition to a bit indicating whether the operation was successfully rolled back.
type Provider interface {
// Closer closes any underlying OS resources associated with this provider (like processes, RPC channels, etc).
io.Closer
// Check validates that the given property bag is valid for a resource of the given type.
Check(t tokens.Type, props PropertyMap) ([]CheckFailure, error)
// Name names a given resource. Sometimes this will be assigned by a developer, and so the provider
// simply fetches it from the property bag; other times, the provider will assign this based on its own algorithm.
// In any case, resources with the same name must be safe to use interchangeably with one another.
Name(t tokens.Type, props PropertyMap) (tokens.QName, error)
// Create allocates a new instance of the provided resource and returns its unique ID afterwards.
Create(t tokens.Type, props PropertyMap) (ID, error, ResourceState)
// Read reads the instance state identified by id/t, and returns a bag of properties.
Read(id ID, t tokens.Type) (PropertyMap, error)
// Update updates an existing resource with new values.
Update(id ID, t tokens.Type, olds PropertyMap, news PropertyMap) (error, ResourceState)
// UpdateImpact checks what impacts a hypothetical update will have on the resource's properties.
UpdateImpact(id ID, t tokens.Type, olds PropertyMap, news PropertyMap) ([]string, PropertyMap, error)
// Delete tears down an existing resource.
Delete(id ID, t tokens.Type) (error, ResourceState)
}
// CheckFailure indicates that a call to check failed; it contains the property and reason for the failure.
type CheckFailure struct {
Property PropertyKey // the property that failed checking.
Reason string // the reason the property failed to check.
}