1aceff7806
Most job subcommands allow for job ID prefix match as a convenience functionality so users don't have to type the full job ID. But this introduces a hard ACL requirement that the token used to run these commands have the `list-jobs` permission, even if the token has enough permission to execute the basic command action and the user passed an exact job ID. This change softens this requirement by not failing the prefix match in case the request results in a permission denied error and instead using the information passed by the user directly.
222 lines
5.9 KiB
Go
222 lines
5.9 KiB
Go
package command
|
|
|
|
import (
|
|
"fmt"
|
|
"io"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/hashicorp/nomad/api"
|
|
flaghelper "github.com/hashicorp/nomad/helper/flags"
|
|
"github.com/posener/complete"
|
|
)
|
|
|
|
type JobDispatchCommand struct {
|
|
Meta
|
|
}
|
|
|
|
func (c *JobDispatchCommand) Help() string {
|
|
helpText := `
|
|
Usage: nomad job dispatch [options] <parameterized job> [input source]
|
|
|
|
Dispatch creates an instance of a parameterized job. A data payload to the
|
|
dispatched instance can be provided via stdin by using "-" or by specifying a
|
|
path to a file. Metadata can be supplied by using the meta flag one or more
|
|
times.
|
|
|
|
An optional idempotency token can be used to prevent more than one instance
|
|
of the job to be dispatched. If an instance with the same token already
|
|
exists, the command returns without any action.
|
|
|
|
Upon successful creation, the dispatched job ID will be printed and the
|
|
triggered evaluation will be monitored. This can be disabled by supplying the
|
|
detach flag.
|
|
|
|
When ACLs are enabled, this command requires a token with the 'dispatch-job'
|
|
capability for the job's namespace. The 'list-jobs' capability is required to
|
|
run the command with a job prefix instead of the exact job ID. The 'read-job'
|
|
capability is required to monitor the resulting evaluation when -detach is
|
|
not used.
|
|
|
|
General Options:
|
|
|
|
` + generalOptionsUsage(usageOptsDefault) + `
|
|
|
|
Dispatch Options:
|
|
|
|
-meta <key>=<value>
|
|
Meta takes a key/value pair separated by "=". The metadata key will be
|
|
merged into the job's metadata. The job may define a default value for the
|
|
key which is overridden when dispatching. The flag can be provided more than
|
|
once to inject multiple metadata key/value pairs. Arbitrary keys are not
|
|
allowed. The parameterized job must allow the key to be merged.
|
|
|
|
-detach
|
|
Return immediately instead of entering monitor mode. After job dispatch,
|
|
the evaluation ID will be printed to the screen, which can be used to
|
|
examine the evaluation using the eval-status command.
|
|
|
|
-idempotency-token
|
|
Optional identifier used to prevent more than one instance of the job from
|
|
being dispatched.
|
|
|
|
-id-prefix-template
|
|
Optional prefix template for dispatched job IDs.
|
|
|
|
-verbose
|
|
Display full information.
|
|
`
|
|
return strings.TrimSpace(helpText)
|
|
}
|
|
|
|
func (c *JobDispatchCommand) Synopsis() string {
|
|
return "Dispatch an instance of a parameterized job"
|
|
}
|
|
|
|
func (c *JobDispatchCommand) AutocompleteFlags() complete.Flags {
|
|
return mergeAutocompleteFlags(c.Meta.AutocompleteFlags(FlagSetClient),
|
|
complete.Flags{
|
|
"-meta": complete.PredictAnything,
|
|
"-detach": complete.PredictNothing,
|
|
"-idempotency-token": complete.PredictAnything,
|
|
"-verbose": complete.PredictNothing,
|
|
})
|
|
}
|
|
|
|
func (c *JobDispatchCommand) AutocompleteArgs() complete.Predictor {
|
|
return complete.PredictFunc(func(a complete.Args) []string {
|
|
client, err := c.Meta.Client()
|
|
if err != nil {
|
|
return nil
|
|
}
|
|
|
|
resp, _, err := client.Jobs().PrefixList(a.Last)
|
|
if err != nil {
|
|
return []string{}
|
|
}
|
|
|
|
// filter by parameterized jobs
|
|
matches := make([]string, 0, len(resp))
|
|
for _, job := range resp {
|
|
if job.ParameterizedJob {
|
|
matches = append(matches, job.ID)
|
|
}
|
|
}
|
|
return matches
|
|
|
|
})
|
|
}
|
|
|
|
func (c *JobDispatchCommand) Name() string { return "job dispatch" }
|
|
|
|
func (c *JobDispatchCommand) Run(args []string) int {
|
|
var detach, verbose bool
|
|
var idempotencyToken string
|
|
var meta []string
|
|
var idPrefixTemplate string
|
|
|
|
flags := c.Meta.FlagSet(c.Name(), FlagSetClient)
|
|
flags.Usage = func() { c.Ui.Output(c.Help()) }
|
|
flags.BoolVar(&detach, "detach", false, "")
|
|
flags.BoolVar(&verbose, "verbose", false, "")
|
|
flags.StringVar(&idempotencyToken, "idempotency-token", "", "")
|
|
flags.Var((*flaghelper.StringFlag)(&meta), "meta", "")
|
|
flags.StringVar(&idPrefixTemplate, "id-prefix-template", "", "")
|
|
|
|
if err := flags.Parse(args); err != nil {
|
|
return 1
|
|
}
|
|
|
|
// Truncate the id unless full length is requested
|
|
length := shortId
|
|
if verbose {
|
|
length = fullId
|
|
}
|
|
|
|
// Check that we got one or two arguments
|
|
args = flags.Args()
|
|
if l := len(args); l < 1 || l > 2 {
|
|
c.Ui.Error("This command takes one or two argument: <parameterized job> [input source]")
|
|
c.Ui.Error(commandErrorText(c))
|
|
return 1
|
|
}
|
|
|
|
var payload []byte
|
|
var readErr error
|
|
|
|
// Read the input
|
|
if len(args) == 2 {
|
|
switch args[1] {
|
|
case "-":
|
|
payload, readErr = io.ReadAll(os.Stdin)
|
|
default:
|
|
payload, readErr = os.ReadFile(args[1])
|
|
}
|
|
if readErr != nil {
|
|
c.Ui.Error(fmt.Sprintf("Error reading input data: %v", readErr))
|
|
return 1
|
|
}
|
|
}
|
|
|
|
// Build the meta
|
|
metaMap := make(map[string]string, len(meta))
|
|
for _, m := range meta {
|
|
split := strings.SplitN(m, "=", 2)
|
|
if len(split) != 2 {
|
|
c.Ui.Error(fmt.Sprintf("Error parsing meta value: %v", m))
|
|
return 1
|
|
}
|
|
|
|
metaMap[split[0]] = split[1]
|
|
}
|
|
|
|
// Get the HTTP client
|
|
client, err := c.Meta.Client()
|
|
if err != nil {
|
|
c.Ui.Error(fmt.Sprintf("Error initializing client: %s", err))
|
|
return 1
|
|
}
|
|
|
|
// Check if the job exists
|
|
jobIDPrefix := strings.TrimSpace(args[0])
|
|
jobID, namespace, err := c.JobIDByPrefix(client, jobIDPrefix, func(j *api.JobListStub) bool {
|
|
return j.ParameterizedJob
|
|
})
|
|
if err != nil {
|
|
c.Ui.Error(err.Error())
|
|
return 1
|
|
}
|
|
|
|
// Dispatch the job
|
|
w := &api.WriteOptions{
|
|
IdempotencyToken: idempotencyToken,
|
|
Namespace: namespace,
|
|
}
|
|
resp, _, err := client.Jobs().Dispatch(jobID, metaMap, payload, idPrefixTemplate, w)
|
|
if err != nil {
|
|
c.Ui.Error(fmt.Sprintf("Failed to dispatch job: %s", err))
|
|
return 1
|
|
}
|
|
|
|
// See if an evaluation was created. If the job is periodic there will be no
|
|
// eval.
|
|
evalCreated := resp.EvalID != ""
|
|
|
|
basic := []string{
|
|
fmt.Sprintf("Dispatched Job ID|%s", resp.DispatchedJobID),
|
|
}
|
|
if evalCreated {
|
|
basic = append(basic, fmt.Sprintf("Evaluation ID|%s", limit(resp.EvalID, length)))
|
|
}
|
|
c.Ui.Output(formatKV(basic))
|
|
|
|
// Nothing to do
|
|
if detach || !evalCreated {
|
|
return 0
|
|
}
|
|
|
|
c.Ui.Output("")
|
|
mon := newMonitor(c.Ui, client, length)
|
|
return mon.monitor(resp.EvalID)
|
|
}
|