Add second implementation option

Signed-off-by: Per G. da Silva <[email protected]>

Author: perdasilva

pkg/controller/registry/reconciler/reconciler.go

@@ -122,7 +122,7 @@ func Pod(source *v1alpha1.CatalogSource, name string, image string, saName strin
 		},
 		Spec: v1.PodSpec{
 			// TODO: Remove this before merging
-			HostNetwork: true,
+			// HostNetwork: true,
 			Containers: []v1.Container{
 				{
 					Name:  name,

pkg/controller/registry/resolver/installabletypes.go

@@ -36,6 +36,11 @@ func (i *BundleInstallable) AddConstraint(c solver.Constraint) {
 	i.constraints = append(i.constraints, c)
 }
 
+func (i *BundleInstallable) AddRuntimeConstraintFailure(message string) {
+	msg := fmt.Sprintf("%s is violates a cluster runtime constraint: %s", i.identifier, message)
+	i.AddConstraint(PrettyConstraint(solver.Prohibited(), msg))
+}
+
 func (i *BundleInstallable) BundleSourceInfo() (string, string, cache.SourceKey, error) {
 	info := strings.Split(i.identifier.String(), "/")
 	// This should be enforced by Kube naming constraints

pkg/controller/registry/resolver/resolver.go

@@ -3,10 +3,14 @@ package resolver
 import (
 	"context"
 	"encoding/json"
+	"errors"
 	"fmt"
+	"os"
 	"sort"
 	"strings"
 
+	"github.com/operator-framework/operator-lifecycle-manager/pkg/controller/registry/resolver/runtime_constraints"
+
 	"github.com/blang/semver/v4"
 	"github.com/sirupsen/logrus"
 	utilerrors "k8s.io/apimachinery/pkg/util/errors"
@@ -20,25 +24,42 @@ import (
 	opregistry "github.com/operator-framework/operator-registry/pkg/registry"
 )
 
+const (
+	runtimeConstraintsFilePath = "runtime_constraints.yaml"
+)
+
 type OperatorResolver interface {
 	SolveOperators(csvs []*v1alpha1.ClusterServiceVersion, subs []*v1alpha1.Subscription, add map[cache.OperatorSourceInfo]struct{}) (cache.OperatorSet, error)
 }
 
 type SatResolver struct {
-	cache cache.OperatorCacheProvider
-	log   logrus.FieldLogger
+	cache                      cache.OperatorCacheProvider
+	log                        logrus.FieldLogger
+	runtimeConstraintsProvider *runtime_constraints.RuntimeConstraintsProvider
 }
 
 func NewDefaultSatResolver(rcp cache.SourceProvider, catsrcLister v1alpha1listers.CatalogSourceLister, logger logrus.FieldLogger) *SatResolver {
-	// Get runtime constraints somehow
-	runtimeConstraints := []cache.Predicate{
-		// Only etcd can be installed on this system!
-		cache.PkgPredicate("etcd"),
+
+	runtimeConstraintProvider, err := runtime_constraints.NewFromFile(runtimeConstraintsFilePath)
+	if err != nil && !errors.Is(err, os.ErrNotExist) {
+		if errors.Is(err, os.ErrNotExist) {
+			logger.Warning("No cluster runtime constraints file found")
+		} else {
+			logger.Errorf("Error creating runtime constraints from file: %s", err)
+			panic(err)
+		}
 	}
 
+	// Two solutions:
+	// #1: Global cache filters
+	// globalFilters := cache.WithGlobalFilters(runtimeConstraintProvider.GetRuntimeConstraints()...)
+
 	return &SatResolver{
-		cache: cache.New(rcp, cache.WithLogger(logger), cache.WithCatalogSourceLister(catsrcLister), cache.WithGlobalFilters(runtimeConstraints...)),
+		cache: cache.New(rcp, cache.WithLogger(logger), cache.WithCatalogSourceLister(catsrcLister) /*, globalFilters*/),
 		log:   logger,
+		// #2: apply constraints in addInvariants
+		runtimeConstraintsProvider: runtimeConstraintProvider, // uncomment when using option #2
+		// runtimeConstraintsProvider: nil                     // uncomment when using option #1
 	}
 }
 
@@ -574,6 +595,16 @@ func (r *SatResolver) addInvariants(namespacedCache cache.MultiCatalogOperatorFi
 			}
 			packageConflictToInstallable[prop.PackageName] = append(packageConflictToInstallable[prop.PackageName], installable.Identifier())
 		}
+
+		// apply runtime constraints to packages that aren't already installed
+		if !catalog.Virtual() && r.runtimeConstraintsProvider != nil {
+			for _, predicate := range r.runtimeConstraintsProvider.GetRuntimeConstraints() {
+				if !predicate.Test(op) {
+					bundleInstallable.AddRuntimeConstraintFailure(predicate.String())
+					break
+				}
+			}
+		}
 	}
 
 	for gvk, is := range gvkConflictToInstallable {

pkg/controller/registry/resolver/runtime_constraints/provider.go

@@ -0,0 +1,76 @@
+package runtime_constraints
+
+import (
+	"encoding/json"
+	"io/ioutil"
+
+	"github.com/operator-framework/operator-lifecycle-manager/pkg/controller/registry/resolver/cache"
+	"github.com/operator-framework/operator-registry/pkg/registry"
+	"github.com/pkg/errors"
+)
+
+const (
+	maxRuntimeConstraints = 10
+)
+
+type RuntimeConstraintsProvider struct {
+	runtimeConstraints []cache.Predicate
+}
+
+func (p *RuntimeConstraintsProvider) GetRuntimeConstraints() []cache.Predicate {
+	return p.runtimeConstraints
+}
+
+func NewFromFile(runtimeConstraintsFilePath string) (*RuntimeConstraintsProvider, error) {
+	propertiesFile, err := readRuntimeConstraintsYaml(runtimeConstraintsFilePath)
+	if err != nil {
+		return nil, err
+	}
+
+	// Using package type to test with
+	// We may only want to allow the generic constraint types once they are readym
+	var constraints = make([]cache.Predicate, 0)
+	for _, property := range propertiesFile.Properties {
+		rawMessage := []byte(property.Value)
+		switch property.Type {
+		case registry.PackageType:
+			dep := registry.PackageDependency{}
+			err := json.Unmarshal(rawMessage, &dep)
+			if err != nil {
+				return nil, err
+			}
+			constraints = append(constraints, cache.PkgPredicate(dep.PackageName))
+		case registry.LabelType:
+			dep := registry.LabelDependency{}
+			err := json.Unmarshal(rawMessage, &dep)
+			if err != nil {
+				return nil, err
+			}
+			constraints = append(constraints, cache.LabelPredicate(dep.Label))
+		}
+		if len(constraints) >= maxRuntimeConstraints {
+			return nil, errors.Errorf("Too many runtime constraints defined (%d/%d)", len(constraints), maxRuntimeConstraints)
+		}
+	}
+
+	return &RuntimeConstraintsProvider{
+		runtimeConstraints: constraints,
+	}, nil
+}
+
+func readRuntimeConstraintsYaml(yamlPath string) (*registry.PropertiesFile, error) {
+	// Read file
+	yamlFile, err := ioutil.ReadFile(yamlPath)
+	if err != nil {
+		return nil, err
+	}
+
+	// Parse yaml
+	var propertiesFile = &registry.PropertiesFile{}
+	err = json.Unmarshal(yamlFile, propertiesFile)
+	if err != nil {
+		return nil, err
+	}
+
+	return propertiesFile, nil
+}