Merge pull request #307 from arangodb/feature/license-key

License Key

Author: neunhoef

Jenkinsfile.groovy

@@ -81,12 +81,16 @@ def buildTestSteps(Map myParams, String kubeConfigRoot, String kubeconfig) {
     return {
         timestamps {
             timeout(time: myParams.LONG ? 180 : 30) {
-                withCredentials([string(credentialsId: 'ENTERPRISEIMAGE', variable: 'DEFAULTENTERPRISEIMAGE')]) { 
+                withCredentials([
+                    string(credentialsId: 'ENTERPRISEIMAGE', variable: 'DEFAULTENTERPRISEIMAGE'),
+                    string(credentialsId: 'ENTERPRISELICENSE', variable: 'DEFAULTENTERPRISELICENSE'),
+                ]) { 
                     withEnv([
                     "CLEANDEPLOYMENTS=1",
                     "DEPLOYMENTNAMESPACE=${myParams.TESTNAMESPACE}-${env.GIT_COMMIT}",
                     "DOCKERNAMESPACE=${myParams.DOCKERNAMESPACE}",
                     "ENTERPRISEIMAGE=${myParams.ENTERPRISEIMAGE}",
+                    "ENTERPRISELICENSE=${myParams.ENTERPRISELICENSE}",
                     "ARANGODIMAGE=${myParams.ARANGODIMAGE}",
                     "IMAGETAG=jenkins-test",
                     "KUBECONFIG=${kubeConfigRoot}/${kubeconfig}",
@@ -132,6 +136,7 @@ pipeline {
       string(name: 'TESTNAMESPACE', defaultValue: 'jenkins', description: 'TESTNAMESPACE sets the kubernetes namespace to ru tests in (this must be short!!)', )
       string(name: 'ENTERPRISEIMAGE', defaultValue: '', description: 'ENTERPRISEIMAGE sets the docker image used for enterprise tests', )
       string(name: 'ARANGODIMAGE', defaultValue: '', description: 'ARANGODIMAGE sets the docker image used for tests (except enterprise and update tests)', )
+      string(name: 'ENTERPRISELICENSE', defaultValue: '', description: 'ENTERPRISELICENSE sets the enterprise license key for enterprise tests', )
       string(name: 'TESTOPTIONS', defaultValue: '', description: 'TESTOPTIONS is used to pass additional test options to the integration test', )
     }
     stages {

Makefile

@@ -73,6 +73,9 @@ endif
 ifndef ENTERPRISEIMAGE
 	ENTERPRISEIMAGE := $(DEFAULTENTERPRISEIMAGE)
 endif
+ifndef ENTERPRISELICENSE
+	ENTERPRISELICENSE := $(DEFAULTENTERPRISELICENSE)
+endif
 DASHBOARDBUILDIMAGE := kube-arangodb-dashboard-builder
 
 ifndef ALLOWCHAOS
@@ -307,7 +310,8 @@ endif
 	kubectl apply -f $(MANIFESTPATHDEPLOYMENTREPLICATION)
 	kubectl apply -f $(MANIFESTPATHTEST)
 	$(ROOTDIR)/scripts/kube_create_storage.sh $(DEPLOYMENTNAMESPACE)
-	$(ROOTDIR)/scripts/kube_run_tests.sh $(DEPLOYMENTNAMESPACE) $(TESTIMAGE) "$(ARANGODIMAGE)" "$(ENTERPRISEIMAGE)" $(TESTTIMEOUT) $(TESTLENGTHOPTIONS)
+	$(ROOTDIR)/scripts/kube_create_license_key_secret.sh "$(DEPLOYMENTNAMESPACE)" '$(ENTERPRISELICENSE)'
+	$(ROOTDIR)/scripts/kube_run_tests.sh $(DEPLOYMENTNAMESPACE) $(TESTIMAGE) "$(ARANGODIMAGE)" '$(ENTERPRISEIMAGE)' $(TESTTIMEOUT) $(TESTLENGTHOPTIONS)
 
 $(DURATIONTESTBIN): $(GOBUILDDIR) $(SOURCES)
 	@mkdir -p $(BINDIR)

dashboard/assets.go

@@ -332,6 +332,12 @@ The default is `false`.
 
 This setting cannot be changed after the deployment has been created.
 
+### `spec.license.secretName: string`
+
+This setting specifies the name of a kubernetes `Secret` that contains
+the license key token used for enterprise images. This value is not used for
+the community edition.
+
 ### `spec.<group>.count: number`
 
 This setting specifies the number of servers to start for the given group.

docs/Manual/Deployment/Kubernetes/DeploymentResource.md

@@ -60,6 +60,7 @@ type DeploymentSpec struct {
 	Authentication AuthenticationSpec `json:"auth"`
 	TLS            TLSSpec            `json:"tls"`
 	Sync           SyncSpec           `json:"sync"`
+	License        LicenseSpec        `json:"license"`
 
 	Single       ServerGroupSpec `json:"single"`
 	Agents       ServerGroupSpec `json:"agents"`
@@ -204,6 +205,7 @@ func (s *DeploymentSpec) SetDefaultsFrom(source DeploymentSpec) {
 	if s.DisableIPv6 == nil {
 		s.DisableIPv6 = util.NewBoolOrNil(source.DisableIPv6)
 	}
+	s.License.SetDefaultsFrom(source.License)
 	s.ExternalAccess.SetDefaultsFrom(source.ExternalAccess)
 	s.RocksDB.SetDefaultsFrom(source.RocksDB)
 	s.Authentication.SetDefaultsFrom(source.Authentication)
@@ -272,6 +274,9 @@ func (s *DeploymentSpec) Validate() error {
 	if err := s.Chaos.Validate(); err != nil {
 		return maskAny(errors.Wrap(err, "spec.chaos"))
 	}
+	if err := s.License.Validate(); err != nil {
+		return maskAny(errors.Wrap(err, "spec.licenseKey"))
+	}
 	return nil
 }
 

pkg/apis/deployment/v1alpha/deployment_spec.go

@@ -0,0 +1,63 @@
+//
+// DISCLAIMER
+//
+// Copyright 2018 ArangoDB GmbH, Cologne, Germany
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// Copyright holder is ArangoDB GmbH, Cologne, Germany
+//
+
+package v1alpha
+
+import (
+	"github.com/arangodb/kube-arangodb/pkg/util"
+	"github.com/arangodb/kube-arangodb/pkg/util/k8sutil"
+)
+
+// LicenseSpec holds the license related information
+type LicenseSpec struct {
+	SecretName *string `json:"secretName,omitempty"`
+}
+
+// HasSecretName returns true if a license key secret name was set
+func (s LicenseSpec) HasSecretName() bool {
+	return s.SecretName != nil
+}
+
+// GetSecretName returns the license key if set. Empty string otherwise.
+func (s LicenseSpec) GetSecretName() string {
+	if s.HasSecretName() {
+		return *s.SecretName
+	}
+
+	return ""
+}
+
+// Validate validates the LicenseSpec
+func (s LicenseSpec) Validate() error {
+	if s.HasSecretName() {
+		if err := k8sutil.ValidateResourceName(s.GetSecretName()); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+// SetDefaultsFrom fills all values not set in s with values from other
+func (s LicenseSpec) SetDefaultsFrom(other LicenseSpec) {
+	if !s.HasSecretName() {
+		s.SecretName = util.NewStringOrNil(other.SecretName)
+	}
+}

pkg/apis/deployment/v1alpha/license_spec.go

@@ -0,0 +1,15 @@
+package v1alpha
+
+import (
+	"testing"
+
+	"github.com/arangodb/kube-arangodb/pkg/util"
+	"github.com/stretchr/testify/assert"
+)
+
+func TestLicenseSpecValidation(t *testing.T) {
+	assert.Nil(t, LicenseSpec{SecretName: nil}.Validate())
+	assert.Nil(t, LicenseSpec{SecretName: util.NewString("some-name")}.Validate())
+
+	assert.Error(t, LicenseSpec{SecretName: util.NewString("@@")}.Validate())
+}

pkg/apis/deployment/v1alpha/license_spec_test.go

@@ -377,6 +377,6 @@ func (d *Deployment) DeleteSecret(secretName string) error {
 
 // GetExpectedPodArguments creates command line arguments for a server in the given group with given ID.
 func (d *Deployment) GetExpectedPodArguments(apiObject metav1.Object, deplSpec api.DeploymentSpec, group api.ServerGroup,
-	agents api.MemberStatusList, id string) []string {
-	return d.resources.GetExpectedPodArguments(apiObject, deplSpec, group, agents, id)
+	agents api.MemberStatusList, id string, version driver.Version) []string {
+	return d.resources.GetExpectedPodArguments(apiObject, deplSpec, group, agents, id, version)
 }

pkg/apis/deployment/v1alpha/zz_generated.deepcopy.go

@@ -80,6 +80,12 @@ func (d *Deployment) inspectDeployment(lastInterval util.Interval) util.Interval
 			d.CreateEvent(k8sutil.NewErrorEvent("Secret hash validation failed", err, d.apiObject))
 		}
 
+		// Check for LicenseKeySecret
+		if err := d.resources.ValidateLicenseKeySecret(); err != nil {
+			hasError = true
+			d.CreateEvent(k8sutil.NewErrorEvent("License Key Secret invalid", err, d.apiObject))
+		}
+
 		// Is the deployment in a good state?
 		status, _ := d.GetStatus()
 		if status.Conditions.IsTrue(api.ConditionTypeSecretsChanged) {