-
Notifications
You must be signed in to change notification settings - Fork 4.9k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Browse files
Browse the repository at this point in the history
- Loading branch information
1 parent
6db5806
commit 86a0bd8
Showing
38 changed files
with
2,847 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,97 @@ | ||
| // Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one | ||
| // or more contributor license agreements. Licensed under the Elastic License; | ||
| // you may not use this file except in compliance with the Elastic License. | ||
|
|
||
| package capabilities | ||
|
|
||
| import ( | ||
| "errors" | ||
| "os" | ||
|
|
||
| "gopkg.in/yaml.v2" | ||
|
|
||
| "github.com/elastic/beats/v7/x-pack/elastic-agent/pkg/core/logger" | ||
| "github.com/elastic/beats/v7/x-pack/elastic-agent/pkg/core/status" | ||
| ) | ||
|
|
||
| // Capability provides a way of applying predefined filter to object. | ||
| // It's up to capability to determine if capability is applicable on object. | ||
| type Capability interface { | ||
| // Apply applies capabilities on input and returns true if input should be completely blocked | ||
| // otherwise, false and updated input is returned | ||
| Apply(interface{}) (interface{}, error) | ||
| } | ||
|
|
||
| var ( | ||
| // ErrBlocked is returned when capability is blocking. | ||
| ErrBlocked = errors.New("capability blocked") | ||
| ) | ||
|
|
||
| type capabilitiesManager struct { | ||
| caps []Capability | ||
| reporter status.Reporter | ||
| } | ||
|
|
||
| type capabilityFactory func(*logger.Logger, *ruleDefinitions, status.Reporter) (Capability, error) | ||
|
|
||
| // Load loads capabilities files and prepares manager. | ||
| func Load(capsFile string, log *logger.Logger, sc status.Controller) (Capability, error) { | ||
| handlers := []capabilityFactory{ | ||
| newInputsCapability, | ||
| newOutputsCapability, | ||
| newUpgradesCapability, | ||
| } | ||
|
|
||
| cm := &capabilitiesManager{ | ||
| caps: make([]Capability, 0), | ||
| reporter: sc.RegisterWithPersistance("capabilities", true), | ||
| } | ||
|
|
||
| // load capabilities from file | ||
| fd, err := os.Open(capsFile) | ||
| if err != nil && !os.IsNotExist(err) { | ||
| return cm, err | ||
| } | ||
|
|
||
| if os.IsNotExist(err) { | ||
| log.Infof("capabilities file not found in %s", capsFile) | ||
| return cm, nil | ||
| } | ||
| defer fd.Close() | ||
|
|
||
| definitions := &ruleDefinitions{Capabilities: make([]ruler, 0)} | ||
| dec := yaml.NewDecoder(fd) | ||
| if err := dec.Decode(&definitions); err != nil { | ||
| return cm, err | ||
| } | ||
|
|
||
| // make list of handlers out of capabilities definition | ||
| for _, h := range handlers { | ||
| cap, err := h(log, definitions, cm.reporter) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| if cap == nil { | ||
| continue | ||
| } | ||
|
|
||
| cm.caps = append(cm.caps, cap) | ||
| } | ||
|
|
||
| return cm, nil | ||
| } | ||
|
|
||
| func (mgr *capabilitiesManager) Apply(in interface{}) (interface{}, error) { | ||
| var err error | ||
| // reset health on start, child caps will update to fail if needed | ||
| mgr.reporter.Update(status.Healthy) | ||
| for _, cap := range mgr.caps { | ||
| in, err = cap.Apply(in) | ||
| if err != nil { | ||
| return in, err | ||
| } | ||
| } | ||
|
|
||
| return in, nil | ||
| } |
Oops, something went wrong.