// Copyright 2020 Google LLC

//

// Licensed under the Apache License, Version 2.0 (the "License");

// you may not use this file except in compliance with the License.

// You may obtain a copy of the License at

//

// http://www.apache.org/licenses/LICENSE-2.0

//

// Unless required by applicable law or agreed to in writing, software

// distributed under the License is distributed on an "AS IS" BASIS,

// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

// See the License for the specific language governing permissions and

// limitations under the License.

package notifiers

import (

"context"

"encoding/json"

"errors"

"flag"

"fmt"

"io"

"io/ioutil"

"net/http"

"net/url"

"os"

"strings"

"time"

secretmanager "cloud.google.com/go/secretmanager/apiv1"

"cloud.google.com/go/storage"

log "github.com/golang/glog"

"github.com/golang/protobuf/proto"

"github.com/google/cel-go/cel"

"github.com/google/cel-go/checker/decls"

smpb "google.golang.org/genproto/googleapis/cloud/secretmanager/v1"

cbpb "google.golang.org/genproto/googleapis/devtools/cloudbuild/v1"

"google.golang.org/protobuf/encoding/protojson"

"gopkg.in/yaml.v2"

)

const (

cloudBuildProtoPkg = "google.devtools.cloudbuild.v1"

cloudBuildTopic = "cloud-builds"

defaultHTTPPort = "8080"

secretRef = "secretRef"

)

var (

// Set of allowed notifier Config `apiVersions`.

allowedYAMLAPIVersions = map[string]bool{

"cloud-build-notifiers/v1": true,

}

)

// Flags.

var (

smoketest = flag.Bool("smoketest", false, "If true, Main will simply log the notifier type and exit.")

setupCheck = flag.Bool("setup_check", false, "If true, the configuration YAML is read from stdin and notifier.SetUp is called in a faked-out way. The smoketest flag takes priority over this one.")

)

// Config is the common type for (YAML-based) configuration files for notifications.

type Config struct {

}

// Metadata is a KRD-compliant data container used for metadata references.

type Metadata struct {

Name string `yaml:"name"`

}

// Spec is the data container for the fields that are relevant to the functionality of the notifier.

type Spec struct {

Notification *Notification `yaml:"notification"`

Secrets []*Secret `yaml:"secrets"`

}

// Notification is the data container for the fields that are relevant to the configuration of sending the notification.

type Notification struct {

}

// SecretConfig is the data container used in a Spec.Notification config for referencing a secret in the Spec.Secrets list.

type SecretConfig struct {

LocalName string `yaml:"secretRef"`

}

// Secret is a data container matching the local name of a secret to its GCP SecretManager resource name.

type Secret struct {

LocalName string `yaml:"name"`

ResourceName string `yaml:"value"`

}

// Copied from https://cloud.google.com/run/docs/tutorials/pubsub#looking_at_the_code.

type pubSubPushMessage struct {

}

type pubSubPushWrapper struct {

Message pubSubPushMessage

Subscription string `json:"subscription"`

}

// Notifier is the interface type that users should implement for usage in Cloud Build notifiers.

type Notifier interface {

SetUp(context.Context, *Config, SecretGetter, BindingResolver) error

SendNotification(context.Context, *cbpb.Build) error

}

// SecretGetter allows for fetching secrets from some key store.

type SecretGetter interface {

GetSecret(context.Context, string) (string, error)

}

// EventFilter is a type that can be used to filter Builds for notifications.

type EventFilter interface {

// Apply returns true iff the EventFilter is able to execute successfully and matches the given Build.

Apply(context.Context, *cbpb.Build) bool

}

// CELPredicate is an EventFilter that uses a CEL program to determine if

// notifications should be sent for a given Pub/Sub message.

type CELPredicate struct {

prg cel.Program

}

// Apply returns true iff the underlying CEL program returns true for the given Build.

func (c *CELPredicate) Apply(_ context.Context, build *cbpb.Build) bool {

}

// Main is a function that can be called by `main()` functions in notifier binaries.

func Main(notifier Notifier) error {

}

type gcsReaderFactory interface {

NewReader(ctx context.Context, bucket, object string) (io.ReadCloser, error)

}

type actualGCSReaderFactory struct {

client *storage.Client

}

func (a *actualGCSReaderFactory) NewReader(ctx context.Context, bucket, object string) (io.ReadCloser, error) {

return a.client.Bucket(bucket).Object(object).NewReader(ctx)

}

type actualSecretManager struct {

client *secretmanager.Client

// TODO(ljr): Do we want any sort of timed cache here?

}

func (a *actualSecretManager) GetSecret(ctx context.Context, name string) (string, error) {

}

// setupCheckSecretGetter is a faked-out SecretGetter that is only used by the setup check functionality in Main.

type setupCheckSecretGetter struct{}

func (c *setupCheckSecretGetter) GetSecret(_ context.Context, name string) (string, error) {

return fmt.Sprintf("[SECRET VALUE FOR %q]", name), nil

}

// getGCSConfig fetches the YAML Config file from the given GCS path and returns the parsed Config.

func getGCSConfig(ctx context.Context, grf gcsReaderFactory, path string) (*Config, error) {

}

func decodeConfig(r io.Reader) (*Config, error) {

}

// validateConfig checks the following (or errors):

// - apiVersion is one of allowedYAMLAPIVersions.

// - user substitution names match the subNamePattern regexp.

func validateConfig(cfg *Config) error {

}

// MakeCELPredicate returns a CELPredicate for the given filter string of CEL code.

func MakeCELPredicate(filter string) (*CELPredicate, error) {

}

// GetEnv fetches, logs, and returns the given environment variable. The returned boolean is true iff the value is non-empty.

func GetEnv(name string) (string, bool) {

}

type receiverParams struct {

ignoreBadMessages bool

}

// newReceiver returns a Pub/Sub push HTTP receiving http.HandlerFunc that calls the given notifier.

func newReceiver(notifier Notifier, params *receiverParams) http.HandlerFunc {

}

// GetSecretRef is a helper function for getting a Secret's local reference name from the given config.

func GetSecretRef(config map[string]interface{}, fieldName string) (string, error) {

}

// FindSecretResourceName is a helper function that returns the Secret's resource name that is associated with the given local reference name.

func FindSecretResourceName(secrets []*Secret, ref string) (string, error) {

}

// UTMMedium is an enum that corresponds to a strict set of values for `utm_medium`.

type UTMMedium string

const (

// EmailMedium is for Build log URLs that are sent via email.

EmailMedium UTMMedium = "email"

// StorageMedium is for Build log URLS that are sent to a storage medium (i.e. BigQuery).

StorageMedium = "storage"

// ChatMedium is for Build log URLs that are sent over chat applications.

ChatMedium = "chat"

// HTTPMedium is for Build log URLs that are sent over HTTP(S) communication (that does not belong to one of the other mediums).

HTTPMedium = "http"

// OtherMedium is for Build log URLs that sent are over a medium that does not correspond to one of the above mediums.

OtherMedium = "other"

)

// AddUTMParams adds UTM campaign tracking parameters to the given Build log URL and returns the new version.

// The UTM parameters are added to any existing ones, so any existing params will not be ovewritten.

func AddUTMParams(logURL string, medium UTMMedium) (string, error) {

}