1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
|
// Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.vespa.hosted.controller;
import com.google.common.collect.BiMap;
import com.google.common.collect.HashBiMap;
import com.google.common.collect.ImmutableBiMap;
import com.yahoo.config.provision.TenantName;
import com.yahoo.security.KeyUtils;
import com.yahoo.vespa.athenz.api.AthenzDomain;
import com.yahoo.vespa.curator.Lock;
import com.yahoo.vespa.hosted.controller.api.identifiers.Property;
import com.yahoo.vespa.hosted.controller.api.identifiers.PropertyId;
import com.yahoo.vespa.hosted.controller.api.integration.organization.Contact;
import com.yahoo.vespa.hosted.controller.tenant.AthenzTenant;
import com.yahoo.vespa.hosted.controller.api.integration.organization.BillingInfo;
import com.yahoo.vespa.hosted.controller.tenant.CloudTenant;
import com.yahoo.vespa.hosted.controller.tenant.Tenant;
import java.security.Principal;
import java.security.PublicKey;
import java.util.Optional;
import static java.util.Objects.requireNonNull;
/**
* A tenant that has been locked for modification. Provides methods for modifying a tenant's fields.
*
* @author mpolden
* @author jonmv
*/
public abstract class LockedTenant {
final TenantName name;
private LockedTenant(TenantName name) {
this.name = requireNonNull(name);
}
static LockedTenant of(Tenant tenant, Lock lock) {
switch (tenant.type()) {
case athenz: return new Athenz((AthenzTenant) tenant);
case cloud: return new Cloud((CloudTenant) tenant);
default: throw new IllegalArgumentException("Unexpected tenant type '" + tenant.getClass().getName() + "'.");
}
}
/** Returns a read-only copy of this */
public abstract Tenant get();
@Override
public String toString() {
return "tenant '" + name + "'";
}
/** A locked AthenzTenant. */
public static class Athenz extends LockedTenant {
private final AthenzDomain domain;
private final Property property;
private final Optional<PropertyId> propertyId;
private final Optional<Contact> contact;
private Athenz(TenantName name, AthenzDomain domain, Property property, Optional<PropertyId> propertyId, Optional<Contact> contact) {
super(name);
this.domain = domain;
this.property = property;
this.propertyId = propertyId;
this.contact = contact;
}
private Athenz(AthenzTenant tenant) {
this(tenant.name(), tenant.domain(), tenant.property(), tenant.propertyId(), tenant.contact());
}
@Override
public AthenzTenant get() {
return new AthenzTenant(name, domain, property, propertyId, contact);
}
public Athenz with(AthenzDomain domain) {
return new Athenz(name, domain, property, propertyId, contact);
}
public Athenz with(Property property) {
return new Athenz(name, domain, property, propertyId, contact);
}
public Athenz with(PropertyId propertyId) {
return new Athenz(name, domain, property, Optional.of(propertyId), contact);
}
public Athenz with(Contact contact) {
return new Athenz(name, domain, property, propertyId, Optional.of(contact));
}
}
/** A locked CloudTenant. */
public static class Cloud extends LockedTenant {
private final BillingInfo billingInfo;
private final BiMap<PublicKey, Principal> developerKeys;
private Cloud(TenantName name, BillingInfo billingInfo, BiMap<PublicKey, Principal> developerKeys) {
super(name);
this.billingInfo = billingInfo;
this.developerKeys = ImmutableBiMap.copyOf(developerKeys);
}
private Cloud(CloudTenant tenant) {
this(tenant.name(), tenant.billingInfo(), tenant.developerKeys());
}
@Override
public CloudTenant get() {
return new CloudTenant(name, billingInfo, developerKeys);
}
public Cloud with(BillingInfo billingInfo) {
return new Cloud(name, billingInfo, developerKeys);
}
public Cloud withDeveloperKey(PublicKey key, Principal principal) {
BiMap<PublicKey, Principal> keys = HashBiMap.create(developerKeys);
if (keys.containsKey(key))
throw new IllegalArgumentException("Key " + KeyUtils.toPem(key) + " is already owned by " + keys.get(key));
keys.put(key, principal);
return new Cloud(name, billingInfo, keys);
}
public Cloud withoutDeveloperKey(PublicKey key) {
BiMap<PublicKey, Principal> keys = HashBiMap.create(developerKeys);
keys.remove(key);
return new Cloud(name, billingInfo, keys);
}
}
}
|
