add.go

package registry

import (
	"errors"
	"fmt"

	"github.com/sirupsen/logrus"
	"github.com/spf13/cobra"

	"github.com/operator-framework/operator-registry/cmd/opm/internal/util"
	"github.com/operator-framework/operator-registry/pkg/containertools"
	"github.com/operator-framework/operator-registry/pkg/lib/registry"
	reg "github.com/operator-framework/operator-registry/pkg/registry"
	"github.com/operator-framework/operator-registry/pkg/sqlite"
)

func newRegistryAddCmd(showAlphaHelp bool) *cobra.Command {
	rootCmd := &cobra.Command{
		Use:   "add",
		Short: "add operator bundle to operator registry DB",
		Long: `add operator bundle to operator registry DB

` + sqlite.DeprecationMessage,

		PreRunE: func(cmd *cobra.Command, _ []string) error {
			if debug, _ := cmd.Flags().GetBool("debug"); debug {
				logrus.SetLevel(logrus.DebugLevel)
			}
			return nil
		},

		RunE: addFunc,
		Args: cobra.NoArgs,
	}

	rootCmd.Flags().Bool("debug", false, "enable debug logging")
	rootCmd.Flags().StringP("database", "d", "bundles.db", "relative path to database file")
	rootCmd.Flags().StringSliceP("bundle-images", "b", []string{}, "comma separated list of links to bundle image")
	rootCmd.Flags().Bool("permissive", false, "allow registry load errors")
	rootCmd.Flags().Bool("skip-tls", false, "use Plain HTTP for container image registries while pulling bundles")
	rootCmd.Flags().Bool("skip-tls-verify", false, "skip TLS certificate verification for container image registries while pulling bundles")
	rootCmd.Flags().Bool("use-http", false, "use plain HTTP for container image registries while pulling bundles")
	rootCmd.Flags().String("ca-file", "", "the root certificates to use when --container-tool=none; see docker/podman docs for certificate loading instructions")
	rootCmd.Flags().StringP("mode", "", "replaces", "graph update mode that defines how channel graphs are updated. One of: [replaces, semver, semver-skippatch]")
	rootCmd.Flags().StringP("container-tool", "c", "none", "tool to interact with container images (save, build, etc.). One of: [none, docker, podman]")
	rootCmd.Flags().Bool("overwrite-latest", false, "overwrite the latest bundles (channel heads) with those of the same csv name given by --bundles")
	if err := rootCmd.Flags().MarkHidden("overwrite-latest"); err != nil {
		logrus.Panic(err.Error())
	}
	rootCmd.Flags().Bool("enable-alpha", false, "enable unsupported alpha features of the OPM CLI")
	if !showAlphaHelp {
		if err := rootCmd.Flags().MarkHidden("enable-alpha"); err != nil {
			logrus.Panic(err.Error())
		}
	}
	if err := rootCmd.Flags().MarkDeprecated("skip-tls", "use --use-http and --skip-tls-verify instead"); err != nil {
		logrus.Panic(err.Error())
	}
	return rootCmd
}

func addFunc(cmd *cobra.Command, _ []string) error {
	permissive, err := cmd.Flags().GetBool("permissive")
	if err != nil {
		return err
	}
	caFile, err := cmd.Flags().GetString("ca-file")
	if err != nil {
		return err
	}
	fromFilename, err := cmd.Flags().GetString("database")
	if err != nil {
		return err
	}
	bundleImages, err := cmd.Flags().GetStringSlice("bundle-images")
	if err != nil {
		return err
	}
	containerToolStr, err := cmd.Flags().GetString("container-tool")
	if err != nil {
		return err
	}
	containerTool := containertools.NewContainerTool(containerToolStr, containertools.NoneTool)
	mode, err := cmd.Flags().GetString("mode")
	if err != nil {
		return err
	}
	modeEnum, err := reg.GetModeFromString(mode)
	if err != nil {
		return err
	}
	overwrite, err := cmd.Flags().GetBool("overwrite-latest")
	if err != nil {
		return err
	}

	enableAlpha, err := cmd.Flags().GetBool("enable-alpha")
	if err != nil {
		return err
	}

	skipTLSVerify, useHTTP, err := util.GetTLSOptions(cmd)
	if err != nil {
		return err
	}

	if caFile != "" {
		if skipTLSVerify {
			return errors.New("--skip-tls-verify must be false when --ca-file is set")
		}
		if containerTool != containertools.NoneTool {
			return fmt.Errorf("--ca-file cannot be set with --container-tool=%[1]s; "+
				"certificates must be configured specifically for %[1]s", containerTool)
		}
	}

	request := registry.AddToRegistryRequest{
		Permissive:    permissive,
		SkipTLSVerify: skipTLSVerify,
		PlainHTTP:     useHTTP,
		CaFile:        caFile,
		InputDatabase: fromFilename,
		Bundles:       bundleImages,
		Mode:          modeEnum,
		ContainerTool: containerTool,
		Overwrite:     overwrite,
		EnableAlpha:   enableAlpha,
	}

	logger := logrus.WithFields(logrus.Fields{"bundles": bundleImages})

	if skipTLSVerify {
		logger.Warn("--skip-tls-verify flag is set: this mode is insecure and meant for development purposes only.")
	}

	if useHTTP {
		logger.Warn("--use-http flag is set: this mode is insecure and meant for development purposes only.")
	}

	logger.Info("adding to the registry")

	registryAdder := registry.NewRegistryAdder(logger)

	err = registryAdder.AddToRegistry(request)
	if err != nil {
		return err
	}
	return nil
}