servicemesh.go

package profile

import (
	"fmt"
	"time"

	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/apiextensions"
	metav1 "github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/meta/v1"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"k8s.io/apimachinery/pkg/runtime/schema"
)

const (
	istioSystemNamespace = "istio-system"
	istioCNINamespace    = "istio-cni"
)

var (
	istioGVR = schema.GroupVersionResource{
		Group:    "sailoperator.io",
		Version:  "v1",
		Resource: "istios",
	}
	istioCNIGVR = schema.GroupVersionResource{
		Group:    "sailoperator.io",
		Version:  "v1",
		Resource: "istiocnis",
	}
)

func deployServiceMesh(ctx *pulumi.Context, args *DeployArgs) (pulumi.Resource, error) {
	goCtx := ctx.Context()
	rn := func(suffix string) string {
		return fmt.Sprintf("%s-smesh-%s", args.Prefix, suffix)
	}

	nsSystem, err := args.newNamespace(ctx, rn("ns-system"), pulumi.String(istioSystemNamespace), pulumi.DependsOn(args.Deps))
	if err != nil {
		return nil, err
	}

	nsCNI, err := args.newNamespace(ctx, rn("ns-cni"), pulumi.String(istioCNINamespace), pulumi.DependsOn(args.Deps))
	if err != nil {
		return nil, err
	}

	// Install the Service Mesh 3 operator (installs into openshift-operators)
	csvReady, err := installOperator(ctx, args, operatorInstall{
		resourcePrefix: rn(""),
		namespace:      "openshift-operators",
		subName:        "servicemeshoperator3",
		packageName:    "servicemeshoperator3",
		csvPrefix:      "servicemeshoperator3",
		extraDeps:      []pulumi.Resource{nsSystem, nsCNI},
	})
	if err != nil {
		return nil, err
	}

	// Create IstioCNI CR (cluster-scoped)
	istioCNIName := csvReady.ApplyT(func(_ string) string {
		return "default"
	}).(pulumi.StringOutput)

	cni, err := apiextensions.NewCustomResource(ctx, rn("istiocni"),
		&apiextensions.CustomResourceArgs{
			ApiVersion: pulumi.String("sailoperator.io/v1"),
			Kind:       pulumi.String("IstioCNI"),
			Metadata: &metav1.ObjectMetaArgs{
				Name: istioCNIName,
			},
			OtherFields: map[string]interface{}{
				"spec": map[string]interface{}{
					"namespace": istioCNINamespace,
					"profile":   "openshift",
				},
			},
		},
		args.k8sOpts()...)
	if err != nil {
		return nil, err
	}

	// Wait for IstioCNI to be ready
	cniReady := pulumi.All(cni.ID(), args.Kubeconfig).ApplyT(
		func(allArgs []interface{}) (string, error) {
			kc := allArgs[1].(string)
			if err := waitForCRCondition(goCtx, kc, istioCNIGVR,
				"", "default",
				"", "Ready", "True", 20*time.Minute, false); err != nil {
				return "", fmt.Errorf("waiting for IstioCNI: %w", err)
			}
			return "ready", nil
		}).(pulumi.StringOutput)

	// Create Istio CR (cluster-scoped, depends on CNI being ready)
	istioName := cniReady.ApplyT(func(_ string) string {
		return "default"
	}).(pulumi.StringOutput)

	istio, err := apiextensions.NewCustomResource(ctx, rn("istio"),
		&apiextensions.CustomResourceArgs{
			ApiVersion: pulumi.String("sailoperator.io/v1"),
			Kind:       pulumi.String("Istio"),
			Metadata: &metav1.ObjectMetaArgs{
				Name: istioName,
			},
			OtherFields: map[string]interface{}{
				"spec": map[string]interface{}{
					"namespace": istioSystemNamespace,
				},
			},
		},
		args.k8sOpts()...)
	if err != nil {
		return nil, err
	}

	// Wait for Istio to be ready
	istioReady := pulumi.All(istio.ID(), args.Kubeconfig).ApplyT(
		func(allArgs []interface{}) (string, error) {
			kc := allArgs[1].(string)
			if err := waitForCRCondition(goCtx, kc, istioGVR,
				"", "default",
				"", "Ready", "True", 20*time.Minute, false); err != nil {
				return "", fmt.Errorf("waiting for Istio: %w", err)
			}
			return "ready", nil
		}).(pulumi.StringOutput)

	ctx.Export("istioReady", istioReady)

	return istio, nil
}