mirror of
https://github.com/openziti/zrok.git
synced 2026-08-24 02:34:20 -05:00
86 lines
3.3 KiB
Go
86 lines
3.3 KiB
Go
package controller
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/go-openapi/runtime/middleware"
|
|
"github.com/michaelquigley/df/dl"
|
|
"github.com/openziti/zrok/v2/controller/automation"
|
|
"github.com/openziti/zrok/v2/rest_model_zrok"
|
|
"github.com/openziti/zrok/v2/rest_server_zrok/operations/agent"
|
|
)
|
|
|
|
type agentUnenrollHandler struct{}
|
|
|
|
func newAgentUnenrollHandler() *agentUnenrollHandler {
|
|
return &agentUnenrollHandler{}
|
|
}
|
|
|
|
func (h *agentUnenrollHandler) Handle(params agent.UnenrollParams, principal *rest_model_zrok.Principal) middleware.Responder {
|
|
// start transaction early, if it fails, don't bother creating ziti resources
|
|
trx, err := str.Begin()
|
|
if err != nil {
|
|
dl.Errorf("error starting transaction for '%v': %v", principal.Email, err)
|
|
return agent.NewUnenrollInternalServerError()
|
|
}
|
|
defer trx.Rollback()
|
|
|
|
env, err := str.FindEnvironmentForAccount(params.Body.EnvZID, int(principal.ID), trx)
|
|
if err != nil {
|
|
dl.Errorf("error finding environment '%v' for '%v': %v", params.Body.EnvZID, principal.Email, err)
|
|
return agent.NewUnenrollUnauthorized()
|
|
}
|
|
|
|
ae, err := str.FindAgentEnrollmentForEnvironment(env.Id, trx)
|
|
if err != nil {
|
|
dl.Errorf("error finding agent enrollment for '%v' (%v): %v", params.Body.EnvZID, principal.Email, err)
|
|
return agent.NewUnenrollBadRequest()
|
|
}
|
|
|
|
ziti, err := automation.NewZitiAutomation(cfg.Ziti)
|
|
if err != nil {
|
|
dl.Errorf("error getting automation client for '%v': %v", principal.Email, err)
|
|
return agent.NewUnenrollInternalServerError()
|
|
}
|
|
|
|
// delete service edge router policies for agent remote
|
|
serpFilter := fmt.Sprintf("tags.zrokAgentRemote=\"%v\"", ae.Token)
|
|
if err := ziti.ServiceEdgeRouterPolicies.DeleteWithFilter(serpFilter); err != nil {
|
|
dl.Errorf("error removing agent remote serp for '%v' (%v): %v", env.ZId, principal.Email, err)
|
|
return agent.NewUnenrollInternalServerError()
|
|
}
|
|
|
|
// delete dial service policies for agent remote
|
|
dialFilter := fmt.Sprintf("tags.zrokAgentRemote=\"%v\" and type=1", ae.Token)
|
|
if err := ziti.ServicePolicies.DeleteWithFilter(dialFilter); err != nil {
|
|
dl.Errorf("error removing agent remote dial service policy for '%v' (%v): %v", env.ZId, principal.Email, err)
|
|
return agent.NewUnenrollInternalServerError()
|
|
}
|
|
|
|
// delete bind service policies for agent remote
|
|
bindFilter := fmt.Sprintf("tags.zrokAgentRemote=\"%v\" and type=2", ae.Token)
|
|
if err := ziti.ServicePolicies.DeleteWithFilter(bindFilter); err != nil {
|
|
dl.Errorf("error removing agent remote bind service policy for '%v' (%v): %v", env.ZId, principal.Email, err)
|
|
return agent.NewUnenrollInternalServerError()
|
|
}
|
|
|
|
// find and delete the agent remote service
|
|
serviceFilter := fmt.Sprintf("name=\"%v\"", ae.Token)
|
|
if err := ziti.Services.DeleteWithFilter(serviceFilter); err != nil {
|
|
dl.Errorf("error removing agent remote service for '%v' (%v): %v", env.ZId, principal.Email, err)
|
|
return agent.NewUnenrollInternalServerError()
|
|
}
|
|
|
|
if err := str.DeleteAgentEnrollment(ae.Id, trx); err != nil {
|
|
dl.Errorf("error deleting agent enrollment for '%v' (%v): %v", env.ZId, principal.Email, err)
|
|
return agent.NewUnenrollInternalServerError()
|
|
}
|
|
|
|
if err := trx.Commit(); err != nil {
|
|
dl.Errorf("error committing agent unenrollment for '%v' (%v): %v", env.ZId, principal.Email, err)
|
|
return agent.NewUnenrollInternalServerError()
|
|
}
|
|
|
|
return agent.NewUnenrollOK()
|
|
}
|