97 lines
3.3 KiB
Go
97 lines
3.3 KiB
Go
package provision
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"time"
|
|
|
|
"gitea.hostxtra.co.uk/mrhid6/vantage/shared/models"
|
|
"github.com/google/uuid"
|
|
"go.mongodb.org/mongo-driver/v2/bson"
|
|
"go.mongodb.org/mongo-driver/v2/mongo"
|
|
)
|
|
|
|
// ErrNameRejected wraps every reason a name cannot become an instance.
|
|
var ErrNameRejected = errors.New("organisation name rejected")
|
|
|
|
const maxSlugAttempts = 50
|
|
|
|
// CreateInstance inserts an instance under the first free slug derived from name,
|
|
// with a freshly generated ID.
|
|
func CreateInstance(ctx context.Context, db *mongo.Database, name string) (*models.Instance, error) {
|
|
return CreateInstanceWithID(ctx, db, uuid.NewString(), name)
|
|
}
|
|
|
|
// CreateInstanceWithID inserts an instance under the first free slug derived from
|
|
// name, using a caller-supplied instance ID.
|
|
//
|
|
// A caller-supplied ID exists for the paid-cloud flow: a placeholder row is
|
|
// created before payment and provisioning happens on the confirmed-payment
|
|
// webhook. Provisioning with the placeholder's own ID keeps the id stable, so
|
|
// the subscription's custom_data never points at a rewritten row and later
|
|
// webhooks still resolve it. If an instance with this ID already exists — a
|
|
// webhook retried after a partial provision — it is returned as-is rather than
|
|
// duplicated.
|
|
//
|
|
// The count-then-insert loop is racy on its own. It is safe only because
|
|
// instances.slug carries a unique index: a lost race surfaces as a duplicate-key
|
|
// error, which we treat as "that slug is taken" and retry. Do not remove the
|
|
// duplicate-key branch, and do not remove the index.
|
|
func CreateInstanceWithID(ctx context.Context, db *mongo.Database, instanceID, name string) (*models.Instance, error) {
|
|
// Idempotency: a retried provision finds its own instance already present.
|
|
var existing models.Instance
|
|
if err := db.Collection("instances").FindOne(ctx,
|
|
bson.M{"instance_id": instanceID}).Decode(&existing); err == nil {
|
|
return &existing, nil
|
|
}
|
|
|
|
base, err := BaseSlug(name)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("%w: %s", ErrNameRejected, err.Error())
|
|
}
|
|
|
|
for attempt := 1; attempt <= maxSlugAttempts; attempt++ {
|
|
slug := NextSlug(base, attempt)
|
|
|
|
n, err := db.Collection("instances").CountDocuments(ctx, bson.M{"slug": slug})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if n > 0 {
|
|
continue
|
|
}
|
|
|
|
inst := models.Instance{
|
|
InstanceID: instanceID,
|
|
Name: name,
|
|
Slug: slug,
|
|
CreatedAt: time.Now().UTC(),
|
|
}
|
|
if _, err := db.Collection("instances").InsertOne(ctx, inst); err != nil {
|
|
if mongo.IsDuplicateKeyError(err) {
|
|
continue // lost the race; try the next slug
|
|
}
|
|
return nil, err
|
|
}
|
|
return &inst, nil
|
|
}
|
|
return nil, fmt.Errorf("%w: could not find a free slug for %q", ErrNameRejected, name)
|
|
}
|
|
|
|
// RollbackInstance deletes an instance that has no users.
|
|
//
|
|
// It refuses an instance that has users. Rollback exists to clean up a
|
|
// half-finished signup, and an instance with users is not half-finished.
|
|
func RollbackInstance(ctx context.Context, db *mongo.Database, instanceID string) error {
|
|
n, err := db.Collection("users").CountDocuments(ctx, bson.M{"instance_id": instanceID})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if n > 0 {
|
|
return fmt.Errorf("refusing to roll back instance %s: it has %d user(s)", instanceID, n)
|
|
}
|
|
_, err = db.Collection("instances").DeleteOne(ctx, bson.M{"instance_id": instanceID})
|
|
return err
|
|
}
|