273 lines
8.3 KiB
Go
273 lines
8.3 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"flag"
|
|
"fmt"
|
|
"log"
|
|
"os"
|
|
"os/signal"
|
|
"strings"
|
|
"syscall"
|
|
"time"
|
|
|
|
"scm.bstein.dev/bstein/hecate/internal/cluster"
|
|
"scm.bstein.dev/bstein/hecate/internal/config"
|
|
"scm.bstein.dev/bstein/hecate/internal/execx"
|
|
"scm.bstein.dev/bstein/hecate/internal/service"
|
|
"scm.bstein.dev/bstein/hecate/internal/state"
|
|
"scm.bstein.dev/bstein/hecate/internal/ups"
|
|
)
|
|
|
|
func main() {
|
|
logger := log.New(os.Stdout, "[hecate] ", log.LstdFlags)
|
|
if len(os.Args) < 2 {
|
|
usage()
|
|
os.Exit(2)
|
|
}
|
|
|
|
sub := os.Args[1]
|
|
switch sub {
|
|
case "startup":
|
|
if err := runStartup(logger, os.Args[2:]); err != nil {
|
|
logger.Printf("startup failed: %v", err)
|
|
os.Exit(1)
|
|
}
|
|
case "shutdown":
|
|
if err := runShutdown(logger, os.Args[2:]); err != nil {
|
|
logger.Printf("shutdown failed: %v", err)
|
|
os.Exit(1)
|
|
}
|
|
case "daemon":
|
|
if err := runDaemon(logger, os.Args[2:]); err != nil {
|
|
logger.Printf("daemon failed: %v", err)
|
|
os.Exit(1)
|
|
}
|
|
case "status":
|
|
if err := runStatus(logger, os.Args[2:]); err != nil {
|
|
logger.Printf("status failed: %v", err)
|
|
os.Exit(1)
|
|
}
|
|
case "help", "-h", "--help":
|
|
usage()
|
|
default:
|
|
logger.Printf("unknown command: %s", sub)
|
|
usage()
|
|
os.Exit(2)
|
|
}
|
|
}
|
|
|
|
func runStartup(logger *log.Logger, args []string) error {
|
|
fs := flag.NewFlagSet("startup", flag.ExitOnError)
|
|
configPath := fs.String("config", "/etc/hecate/hecate.yaml", "Path to config file")
|
|
execute := fs.Bool("execute", false, "Actually execute changes (default dry-run)")
|
|
forceBranch := fs.String("force-flux-branch", "", "Patch Flux source branch before resume")
|
|
skipLocalBootstrap := fs.Bool("skip-local-bootstrap", false, "Skip local fallback bootstrap applies")
|
|
allowPeerStartup := fs.Bool("allow-peer-startup", false, "Allow startup to run on a peer instance")
|
|
allowOnBattery := fs.Bool("allow-on-battery", false, "Allow startup when UPS reports on-battery")
|
|
reason := fs.String("reason", "manual-startup", "Startup reason for run history")
|
|
_ = fs.Parse(args)
|
|
|
|
cfg, orch, err := buildOrchestrator(logger, *configPath, !*execute)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if *execute {
|
|
if cfg.Coordination.Role == "peer" && !*allowPeerStartup {
|
|
return fmt.Errorf("startup blocked: this instance is configured as role=peer (use --allow-peer-startup to override)")
|
|
}
|
|
if cfg.UPS.Enabled && !cfg.Coordination.AllowStartupOnBattery && !*allowOnBattery {
|
|
targets, targetErr := buildUPSTargets(cfg)
|
|
if targetErr != nil {
|
|
return targetErr
|
|
}
|
|
checkCtx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
|
|
defer cancel()
|
|
if err := ensureStartupPowerSafe(checkCtx, targets); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
}
|
|
ctx, cancel := context.WithCancel(context.Background())
|
|
defer cancel()
|
|
|
|
return orch.Startup(ctx, cluster.StartupOptions{
|
|
ForceFluxBranch: *forceBranch,
|
|
SkipLocalBootstrap: *skipLocalBootstrap,
|
|
Reason: *reason,
|
|
})
|
|
}
|
|
|
|
func runShutdown(logger *log.Logger, args []string) error {
|
|
fs := flag.NewFlagSet("shutdown", flag.ExitOnError)
|
|
configPath := fs.String("config", "/etc/hecate/hecate.yaml", "Path to config file")
|
|
execute := fs.Bool("execute", false, "Actually execute changes (default dry-run)")
|
|
skipEtcd := fs.Bool("skip-etcd-snapshot", false, "Skip etcd snapshot")
|
|
skipDrain := fs.Bool("skip-drain", false, "Skip worker drain")
|
|
reason := fs.String("reason", "manual-shutdown", "Shutdown reason for run history")
|
|
_ = fs.Parse(args)
|
|
|
|
_, orch, err := buildOrchestrator(logger, *configPath, !*execute)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
ctx, cancel := context.WithCancel(context.Background())
|
|
defer cancel()
|
|
|
|
return orch.Shutdown(ctx, cluster.ShutdownOptions{
|
|
SkipEtcdSnapshot: *skipEtcd,
|
|
SkipDrain: *skipDrain,
|
|
Reason: *reason,
|
|
})
|
|
}
|
|
|
|
func runDaemon(logger *log.Logger, args []string) error {
|
|
fs := flag.NewFlagSet("daemon", flag.ExitOnError)
|
|
configPath := fs.String("config", "/etc/hecate/hecate.yaml", "Path to config file")
|
|
dryRunActions := fs.Bool("dry-run-actions", false, "Log planned actions without executing")
|
|
_ = fs.Parse(args)
|
|
|
|
cfg, orch, err := buildOrchestrator(logger, *configPath, *dryRunActions)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if !cfg.UPS.Enabled {
|
|
return fmt.Errorf("UPS monitoring is disabled in config")
|
|
}
|
|
targets, err := buildUPSTargets(cfg)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
d := service.NewDaemon(cfg, orch, targets, logger)
|
|
ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
|
|
defer stop()
|
|
if err := d.Run(ctx); err != nil && !errors.Is(err, context.Canceled) {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func runStatus(logger *log.Logger, args []string) error {
|
|
fs := flag.NewFlagSet("status", flag.ExitOnError)
|
|
configPath := fs.String("config", "/etc/hecate/hecate.yaml", "Path to config file")
|
|
_ = fs.Parse(args)
|
|
|
|
cfg, orch, err := buildOrchestrator(logger, *configPath, true)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
recs, err := state.New(cfg.State.RunHistoryPath).Load()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
last := "none"
|
|
if len(recs) > 0 {
|
|
r := recs[len(recs)-1]
|
|
last = fmt.Sprintf("%s success=%t duration=%ds at=%s", r.Action, r.Success, r.DurationSeconds, r.EndedAt.Format(time.RFC3339))
|
|
}
|
|
logger.Printf("expected_flux_branch=%s", cfg.ExpectedFluxBranch)
|
|
logger.Printf("control_planes=%v", cfg.ControlPlanes)
|
|
logger.Printf("estimated_shutdown_budget_seconds=%d", orch.EstimatedShutdownSeconds())
|
|
intent, intentErr := state.ReadIntent(cfg.State.IntentPath)
|
|
if intentErr != nil {
|
|
logger.Printf("intent_read_error=%v", intentErr)
|
|
} else if intent.State == "" {
|
|
logger.Printf("intent=none")
|
|
} else {
|
|
logger.Printf("intent=%s reason=%q source=%s updated_at=%s",
|
|
intent.State, intent.Reason, intent.Source, intent.UpdatedAt.Format(time.RFC3339))
|
|
}
|
|
logger.Printf("last_run=%s", last)
|
|
return nil
|
|
}
|
|
|
|
func buildUPSTargets(cfg config.Config) ([]service.Target, error) {
|
|
targets := make([]service.Target, 0, len(cfg.UPS.Targets)+1)
|
|
switch cfg.UPS.Provider {
|
|
case "nut":
|
|
if len(cfg.UPS.Targets) == 0 {
|
|
target := cfg.UPS.Target
|
|
if target == "" {
|
|
return nil, fmt.Errorf("ups target must be set")
|
|
}
|
|
targets = append(targets, service.Target{
|
|
Name: "primary",
|
|
Target: target,
|
|
Provider: ups.NewNUTProvider(target),
|
|
})
|
|
} else {
|
|
for idx, t := range cfg.UPS.Targets {
|
|
name := t.Name
|
|
if name == "" {
|
|
name = fmt.Sprintf("target-%d", idx+1)
|
|
}
|
|
targets = append(targets, service.Target{
|
|
Name: name,
|
|
Target: t.Target,
|
|
Provider: ups.NewNUTProvider(t.Target),
|
|
})
|
|
}
|
|
}
|
|
default:
|
|
return nil, fmt.Errorf("unsupported UPS provider: %s", cfg.UPS.Provider)
|
|
}
|
|
return targets, nil
|
|
}
|
|
|
|
func ensureStartupPowerSafe(ctx context.Context, targets []service.Target) error {
|
|
onBatteryTargets := []string{}
|
|
for _, t := range targets {
|
|
sample, err := t.Provider.Read(ctx)
|
|
if err != nil {
|
|
return fmt.Errorf("startup blocked: unable to verify UPS target %s (%s): %w", t.Name, t.Target, err)
|
|
}
|
|
if sample.OnBattery {
|
|
onBatteryTargets = append(onBatteryTargets, fmt.Sprintf("%s(status=%s runtime_s=%d)", t.Name, sample.RawStatus, sample.RuntimeSeconds))
|
|
}
|
|
}
|
|
if len(onBatteryTargets) > 0 {
|
|
return fmt.Errorf("startup blocked: UPS is on battery for %s", strings.Join(onBatteryTargets, ", "))
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func buildOrchestrator(logger *log.Logger, cfgPath string, dryRun bool) (config.Config, *cluster.Orchestrator, error) {
|
|
cfg, err := config.Load(cfgPath)
|
|
if err != nil {
|
|
return config.Config{}, nil, err
|
|
}
|
|
if err := state.EnsureDir(cfg.State.Dir); err != nil {
|
|
return config.Config{}, nil, err
|
|
}
|
|
runner := &execx.Runner{
|
|
DryRun: dryRun,
|
|
Kubeconfig: cfg.Kubeconfig,
|
|
Logger: logger,
|
|
}
|
|
store := state.New(cfg.State.RunHistoryPath)
|
|
orch := cluster.New(cfg, runner, store, logger)
|
|
return cfg, orch, nil
|
|
}
|
|
|
|
func usage() {
|
|
fmt.Print(`hecate: staged startup/shutdown + UPS-triggered protection
|
|
|
|
Usage:
|
|
hecate <command> [flags]
|
|
|
|
Commands:
|
|
startup Perform staged cluster startup
|
|
shutdown Perform graceful cluster shutdown
|
|
daemon Monitor UPS and auto-trigger shutdown
|
|
status Print current hecate status and estimates
|
|
|
|
Examples:
|
|
hecate startup --config /etc/hecate/hecate.yaml --execute --force-flux-branch main
|
|
hecate shutdown --config /etc/hecate/hecate.yaml --execute --reason "manual-maintenance"
|
|
hecate daemon --config /etc/hecate/hecate.yaml
|
|
hecate status --config /etc/hecate/hecate.yaml
|
|
`)
|
|
}
|