mesh-controller/internal/inventory/health.go

package inventory

import (
	"context"
	"encoding/json"
	"errors"
	"fmt"
	"time"

	"github.com/jackc/pgx/v5"
)

// What each machine says of its long-running resources (novox/hq ADR 0240, to-be 48 §4): the newest
// statement per machine, and per module how many statements in a row said a resource of it was unhealthy.

// ResourceHealth is one long-running resource's state as the node-engine said it.
type ResourceHealth struct {
	Module   string    `json:"module"`
	Resource string    `json:"resource"`
	Kind     string    `json:"kind"`
	Target   string    `json:"target"`
	State    string    `json:"state"`
	Reason   string    `json:"reason,omitempty"`
	Since    time.Time `json:"since"`
	Streak   int       `json:"streak,omitempty"`
	Restarts int       `json:"restarts,omitempty"`
	// Check is the declared check's kind, empty for liveness alone; Needs the provision it exercises
	// (ADR 0240 Phase B, to-be 48 §6).
	Check string `json:"check,omitempty"`
	Needs string `json:"needs,omitempty"`
	// Account is the account whose own service manager runs it, or the account a resource of kind account
	// is (novox/hq ADR 0254).
	Account string `json:"account,omitempty"`
	// Root is "never" on an account verdict that judged whether the account can become root without a
	// person (novox/hq ADR 0266).
	Root string `json:"root,omitempty"`
	// Waits is what a waiting resource waits for the operator to give (novox/hq ADR 0283).
	Waits []Wait `json:"waits,omitempty"`
}

// Wait is one thing a waiting resource waits for the operator to give: exactly one of Secret and Setting
// (novox/hq ADR 0283), as link.Wait carries it.
type Wait struct {
	Part    string `json:"part"`
	Secret  string `json:"secret,omitempty"`
	Setting string `json:"setting,omitempty"`
	// Provision is a provision the module requires whose credential only a person can give and nobody gave yet
	// (novox/hq ADR 0337 §5): a wait names exactly one of Secret, Setting or Provision.
	Provision string `json:"provision,omitempty"`
	What      string `json:"what"`
	// Act is the line that gives a provision's credential, filled by the controller when it excuses the wait
	// (ADR 0337 §7); never said by a machine.
	Act string `json:"act,omitempty"`
}

// NodeHealth is a machine's newest statement, as kept.
type NodeHealth struct {
	Node     string
	Contract int
	// SaidAt is when the engine looked (the machine's clock); HeardAt when this controller heard it.
	SaidAt    time.Time
	HeardAt   time.Time
	Resources []ResourceHealth
	// Streaks is, per module, how many statements in a row said a resource of it was unhealthy.
	Streaks map[string]int
	// Network is the machine's own networking as its engine said it (novox/hq ADR 0241); nil from an
	// engine older than that judging.
	Network *NetworkHealth
	// Units is the machine's service managers as its engine said them (novox/hq issue 315); nil from an
	// engine older than that reading.
	Units *UnitsHealth
}

// UnitsHealth is a machine's service managers as its engine said them (issue 315): running, degraded or
// unknown, and each failed unit no module places.
type UnitsHealth struct {
	State  string       `json:"state"`
	Failed []FailedUnit `json:"failed"`
	Unread []string     `json:"unread,omitempty"`
}

// FailedUnit is one failed unit no module places: the machine's own.
type FailedUnit struct {
	Unit     string    `json:"unit"`
	Scope    string    `json:"scope"`
	Load     string    `json:"load,omitempty"`
	Result   string    `json:"result,omitempty"`
	Resource string    `json:"resource,omitempty"`
	Since    time.Time `json:"since"`
}

// NetworkHealth is a machine's networking as its engine said it (ADR 0241).
type NetworkHealth struct {
	State string        `json:"state"`
	Since time.Time     `json:"since"`
	Parts []NetworkPart `json:"parts"`
}

// NetworkPart is one part of it: resolv-conf, names, tunnel, bus or route.
type NetworkPart struct {
	Part   string    `json:"part"`
	State  string    `json:"state"`
	Reason string    `json:"reason,omitempty"`
	Said   string    `json:"said,omitempty"`
	Writer string    `json:"writer,omitempty"`
	Owner  string    `json:"owner,omitempty"`
	Toward []string  `json:"toward,omitempty"`
	Since  time.Time `json:"since"`
	Streak int       `json:"streak,omitempty"`
}

// HealthOf is a machine's newest statement; false when its node-engine has never stated one.
func (i *Inventory) HealthOf(ctx context.Context, nodeName string) (NodeHealth, bool, error) {
	all, err := i.healths(ctx, nodeName)
	if err != nil {
		return NodeHealth{}, false, err
	}
	h, ok := all[nodeName]
	return h, ok, nil
}

// Healths is every machine's newest statement, by machine. A machine absent never stated one: its
// node-engine is older than the judging, and its health is not known.
func (i *Inventory) Healths(ctx context.Context) (map[string]NodeHealth, error) {
	return i.healths(ctx, "")
}

func (i *Inventory) healths(ctx context.Context, only string) (map[string]NodeHealth, error) {
	rows, err := i.store.Pool().Query(ctx,
		`select n.name, h.contract, h.said_at, h.heard_at, h.resources, h.streaks, h.network, h.units
		 from node_health h join node n on n.id = h.node
		 where $1 = '' or n.name = $1`, only)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	out := map[string]NodeHealth{}
	for rows.Next() {
		var h NodeHealth
		var resources, streaks, network, units []byte
		if err := rows.Scan(&h.Node, &h.Contract, &h.SaidAt, &h.HeardAt, &resources, &streaks, &network, &units); err != nil {
			return nil, err
		}
		if err := json.Unmarshal(resources, &h.Resources); err != nil {
			return nil, fmt.Errorf("%s's health cannot be read: %w", h.Node, err)
		}
		if err := json.Unmarshal(streaks, &h.Streaks); err != nil {
			return nil, fmt.Errorf("%s's health cannot be read: %w", h.Node, err)
		}
		if len(network) > 0 {
			if err := json.Unmarshal(network, &h.Network); err != nil {
				return nil, fmt.Errorf("%s's network health cannot be read: %w", h.Node, err)
			}
		}
		if len(units) > 0 {
			if err := json.Unmarshal(units, &h.Units); err != nil {
				return nil, fmt.Errorf("%s's units cannot be read: %w", h.Node, err)
			}
		}
		out[h.Node] = h
	}
	return out, rows.Err()
}

// RecordHealth keeps a machine's statement in place of the one kept — unless the one kept is newer, by
// when the engine looked: then nothing is written, and false says it was refused as older.
func (i *Inventory) RecordHealth(ctx context.Context, h NodeHealth) (bool, error) {
	if h.Resources == nil {
		h.Resources = []ResourceHealth{}
	}
	if h.Streaks == nil {
		h.Streaks = map[string]int{}
	}
	resources, err := json.Marshal(h.Resources)
	if err != nil {
		return false, err
	}
	streaks, err := json.Marshal(h.Streaks)
	if err != nil {
		return false, err
	}
	var network []byte
	if h.Network != nil {
		if network, err = json.Marshal(h.Network); err != nil {
			return false, err
		}
	}
	var units []byte
	if h.Units != nil {
		if units, err = json.Marshal(h.Units); err != nil {
			return false, err
		}
	}
	heard := h.HeardAt
	if heard.IsZero() {
		heard = time.Now()
	}
	var node string
	err = i.store.Pool().QueryRow(ctx,
		`insert into node_health (node, contract, said_at, heard_at, resources, streaks, network, units)
		 select id, $2, $3, $4, $5, $6, $7, $8 from node where name = $1
		 on conflict (node) do update set contract = excluded.contract, said_at = excluded.said_at,
		     heard_at = excluded.heard_at, resources = excluded.resources, streaks = excluded.streaks,
		     network = excluded.network, units = excluded.units
		   where node_health.said_at <= excluded.said_at
		 returning node`, h.Node, h.Contract, h.SaidAt, heard, resources, streaks, network, units).Scan(&node)
	if errors.Is(err, pgx.ErrNoRows) {
		if _, nerr := i.NodeByName(ctx, h.Node); nerr != nil {
			return false, nerr
		}
		return false, nil
	}
	return err == nil, err
}