mirror of
https://github.com/rocky-linux/peridot.git
synced 2024-11-01 04:41:22 +00:00
154 lines
5.1 KiB
Go
154 lines
5.1 KiB
Go
|
// Copyright (c) All respective contributors to the Peridot Project. All rights reserved.
|
||
|
// Copyright (c) 2021-2022 Rocky Enterprise Software Foundation, Inc. All rights reserved.
|
||
|
// Copyright (c) 2021-2022 Ctrl IQ, Inc. All rights reserved.
|
||
|
//
|
||
|
// Redistribution and use in source and binary forms, with or without
|
||
|
// modification, are permitted provided that the following conditions are met:
|
||
|
//
|
||
|
// 1. Redistributions of source code must retain the above copyright notice,
|
||
|
// this list of conditions and the following disclaimer.
|
||
|
//
|
||
|
// 2. Redistributions in binary form must reproduce the above copyright notice,
|
||
|
// this list of conditions and the following disclaimer in the documentation
|
||
|
// and/or other materials provided with the distribution.
|
||
|
//
|
||
|
// 3. Neither the name of the copyright holder nor the names of its contributors
|
||
|
// may be used to endorse or promote products derived from this software without
|
||
|
// specific prior written permission.
|
||
|
//
|
||
|
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
||
|
// AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||
|
// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||
|
// ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
|
||
|
// LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||
|
// CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||
|
// SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
||
|
// INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
||
|
// CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
||
|
// ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
||
|
// POSSIBILITY OF SUCH DAMAGE.
|
||
|
|
||
|
package main
|
||
|
|
||
|
import (
|
||
|
"context"
|
||
|
"github.com/sirupsen/logrus"
|
||
|
"github.com/spf13/cobra"
|
||
|
"go.temporal.io/sdk/client"
|
||
|
"log"
|
||
|
apolloconnector "peridot.resf.org/apollo/db/connector"
|
||
|
"peridot.resf.org/apollo/worker"
|
||
|
commonpb "peridot.resf.org/common"
|
||
|
"peridot.resf.org/temporalutils"
|
||
|
"peridot.resf.org/utils"
|
||
|
)
|
||
|
|
||
|
var root = &cobra.Command{
|
||
|
Use: "apollostarter",
|
||
|
Run: mn,
|
||
|
}
|
||
|
|
||
|
var cnf = utils.NewFlagConfig()
|
||
|
|
||
|
func init() {
|
||
|
cnf.DefaultPort = 31209
|
||
|
|
||
|
cnf.DatabaseName = utils.Pointer[string]("apollo")
|
||
|
cnf.Name = "apollostarter"
|
||
|
|
||
|
temporalutils.AddFlags(root.PersistentFlags())
|
||
|
utils.AddFlags(root.PersistentFlags(), cnf)
|
||
|
}
|
||
|
|
||
|
func mn(_ *cobra.Command, _ []string) {
|
||
|
c, err := temporalutils.NewClient(client.Options{})
|
||
|
if err != nil {
|
||
|
logrus.Fatalln("unable to create Temporal client", err)
|
||
|
}
|
||
|
defer c.Close()
|
||
|
|
||
|
db := apolloconnector.MustAuto()
|
||
|
|
||
|
w, err := worker.NewWorker(&worker.NewWorkerInput{
|
||
|
Temporal: c,
|
||
|
Database: db,
|
||
|
TaskQueue: "apollo-v1-main-queue",
|
||
|
})
|
||
|
defer w.Client.Close()
|
||
|
|
||
|
// Poll Red Hat for new CVEs and advisories every two hours
|
||
|
cveWfOpts := client.StartWorkflowOptions{
|
||
|
ID: "cron_cve_mirror",
|
||
|
TaskQueue: w.TaskQueue,
|
||
|
CronSchedule: "0 */2 * * *",
|
||
|
}
|
||
|
_, err = w.Client.ExecuteWorkflow(context.Background(), cveWfOpts, w.WorkflowController.PollRedHatCVEsWorkflow)
|
||
|
if err != nil {
|
||
|
log.Fatalf("unable to start cve workflow: %v", err)
|
||
|
}
|
||
|
errataWfOpts := client.StartWorkflowOptions{
|
||
|
ID: "cron_errata_mirror",
|
||
|
TaskQueue: w.TaskQueue,
|
||
|
CronSchedule: "0 */2 * * *",
|
||
|
}
|
||
|
_, err = w.Client.ExecuteWorkflow(context.Background(), errataWfOpts, w.WorkflowController.PollRedHatErrataWorkflow)
|
||
|
if err != nil {
|
||
|
log.Fatalf("unable to start errata workflow: %v", err)
|
||
|
}
|
||
|
|
||
|
// Poll unresolved CVE status and update every hour
|
||
|
cveStatusWfOpts := client.StartWorkflowOptions{
|
||
|
ID: "cron_cve_status",
|
||
|
TaskQueue: w.TaskQueue,
|
||
|
CronSchedule: "0 */1 * * *",
|
||
|
}
|
||
|
_, err = w.Client.ExecuteWorkflow(context.Background(), cveStatusWfOpts, w.WorkflowController.UpdateCVEStateWorkflow)
|
||
|
if err != nil {
|
||
|
log.Fatalf("unable to start cve status workflow: %v", err)
|
||
|
}
|
||
|
|
||
|
// Check if CVE is fixed downstream every 10 minutes
|
||
|
cveDownstreamWfOpts := client.StartWorkflowOptions{
|
||
|
ID: "cron_cve_downstream",
|
||
|
TaskQueue: w.TaskQueue,
|
||
|
CronSchedule: "*/10 * * * *",
|
||
|
}
|
||
|
_, err = w.Client.ExecuteWorkflow(context.Background(), cveDownstreamWfOpts, w.WorkflowController.DownstreamCVECheckWorkflow)
|
||
|
if err != nil {
|
||
|
log.Fatalf("unable to start cve downstream workflow: %v", err)
|
||
|
}
|
||
|
|
||
|
// Auto create advisory for fixed CVEs every 30 minutes
|
||
|
cveAdvisoryWfOpts := client.StartWorkflowOptions{
|
||
|
ID: "cron_cve_advisory",
|
||
|
TaskQueue: w.TaskQueue,
|
||
|
CronSchedule: "*/10 * * * *",
|
||
|
}
|
||
|
_, err = w.Client.ExecuteWorkflow(context.Background(), cveAdvisoryWfOpts, w.WorkflowController.AutoCreateAdvisoryWorkflow)
|
||
|
if err != nil {
|
||
|
log.Fatalf("unable to start cve advisory workflow: %v", err)
|
||
|
}
|
||
|
|
||
|
// only added so we get a health endpoint
|
||
|
s := utils.NewGRPCServer(
|
||
|
nil,
|
||
|
func(r *utils.Register) {
|
||
|
err := commonpb.RegisterHealthCheckServiceHandlerFromEndpoint(r.Context, r.Mux, r.Endpoint, r.Options)
|
||
|
if err != nil {
|
||
|
logrus.Fatalf("could not register health service: %v", err)
|
||
|
}
|
||
|
},
|
||
|
func(r *utils.RegisterServer) {
|
||
|
commonpb.RegisterHealthCheckServiceServer(r.Server, &utils.HealthServer{})
|
||
|
},
|
||
|
)
|
||
|
s.WaitGroup.Wait()
|
||
|
}
|
||
|
|
||
|
func main() {
|
||
|
utils.Main()
|
||
|
if err := root.Execute(); err != nil {
|
||
|
log.Fatal(err)
|
||
|
}
|
||
|
}
|