-
Notifications
You must be signed in to change notification settings - Fork 6
Expand file tree
/
Copy pathadmissions.py
More file actions
88 lines (75 loc) · 3.09 KB
/
Copy pathadmissions.py
File metadata and controls
88 lines (75 loc) · 3.09 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
from django.db.models import F, Func, Value, JSONField
from rest_framework.request import Request
from api import models
class BaseHandler(object):
def detect(self, request: Request) -> bool:
raise NotImplementedError()
def handle(self, request: Request) -> bool:
raise NotImplementedError()
class JobsStatusHandler(BaseHandler):
def detect(self, request: Request) -> bool:
group = request.get("resource", {}).get("group", None)
resource = "/".join([
request.get("resource", {}).get("resource", None),
request.get("subResource", ""),
])
if (group, resource) == ("batch", "jobs/status"):
return True
return False
def handle(self, request: Request) -> bool:
app_id = request["object"]["metadata"]["namespace"]
ptype = request["object"]["metadata"].get("labels", {}).get("type", "")
if not ptype:
return True
status = request["object"]["status"]
replicas = request["object"]["spec"].get("replicas", 0)
if "active" in status:
replicas += 1
elif "succeeded" in status or "failed" in status:
replicas -= 1
replicas = 0 if replicas < 0 else replicas
# jsonb_set on a single row is atomic at the PostgreSQL level; no lock
# is needed because `replicas` is computed from the request payload
# alone (not read-modify-write of app.structure). Filter touches 0 rows
# if the app no longer exists, which is safe.
models.app.App.objects.filter(id=app_id).update(
structure=Func(
F("structure"),
Value([ptype]),
Value(replicas, JSONField()),
function="jsonb_set",
)
)
return True
class DeploymentsScaleHandler(BaseHandler):
def detect(self, request: Request) -> bool:
group = request.get("resource", {}).get("group", None)
resource = "/".join([
request.get("resource", {}).get("resource", None),
request.get("subResource", ""),
])
if (group, resource) == ("apps", "deployments/scale"):
return True
return False
def handle(self, request: Request) -> bool:
app_id = request["object"]["metadata"]["namespace"]
ptype = None
for item in request["object"]["status"]["selector"].split(","):
key, value = item.split("=")
if key == "type":
ptype = value
if not ptype:
return True
replicas = request["object"]["spec"].get("replicas", 0)
# jsonb_set is an atomic single-row UPDATE in PostgreSQL; no lock is
# needed because `replicas` comes straight from the request payload.
# Filter touches 0 rows if the app no longer exists, which is safe.
models.app.App.objects.filter(id=app_id).update(
structure=Func(
F("structure"),
Value([ptype]),
Value(replicas, JSONField()),
function="jsonb_set",
)
)
return True