apply.go 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735
  1. // Copyright 2016 The etcd Authors
  2. //
  3. // Licensed under the Apache License, Version 2.0 (the "License");
  4. // you may not use this file except in compliance with the License.
  5. // You may obtain a copy of the License at
  6. //
  7. // http://www.apache.org/licenses/LICENSE-2.0
  8. //
  9. // Unless required by applicable law or agreed to in writing, software
  10. // distributed under the License is distributed on an "AS IS" BASIS,
  11. // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. // See the License for the specific language governing permissions and
  13. // limitations under the License.
  14. package etcdserver
  15. import (
  16. "bytes"
  17. "fmt"
  18. "sort"
  19. "time"
  20. pb "github.com/coreos/etcd/etcdserver/etcdserverpb"
  21. "github.com/coreos/etcd/lease"
  22. "github.com/coreos/etcd/mvcc"
  23. "github.com/coreos/etcd/mvcc/mvccpb"
  24. "github.com/coreos/etcd/pkg/types"
  25. "github.com/gogo/protobuf/proto"
  26. "golang.org/x/net/context"
  27. )
  28. const (
  29. // noTxn is an invalid txn ID.
  30. // To apply with independent Range, Put, Delete, you can pass noTxn
  31. // to apply functions instead of a valid txn ID.
  32. noTxn = -1
  33. warnApplyDuration = 10 * time.Millisecond
  34. )
  35. type applyResult struct {
  36. resp proto.Message
  37. err error
  38. // physc signals the physical effect of the request has completed in addition
  39. // to being logically reflected by the node. Currently only used for
  40. // Compaction requests.
  41. physc <-chan struct{}
  42. }
  43. // applierV3 is the interface for processing V3 raft messages
  44. type applierV3 interface {
  45. Apply(r *pb.InternalRaftRequest) *applyResult
  46. Put(txnID int64, p *pb.PutRequest) (*pb.PutResponse, error)
  47. Range(txnID int64, r *pb.RangeRequest) (*pb.RangeResponse, error)
  48. DeleteRange(txnID int64, dr *pb.DeleteRangeRequest) (*pb.DeleteRangeResponse, error)
  49. Txn(rt *pb.TxnRequest) (*pb.TxnResponse, error)
  50. Compaction(compaction *pb.CompactionRequest) (*pb.CompactionResponse, <-chan struct{}, error)
  51. LeaseGrant(lc *pb.LeaseGrantRequest) (*pb.LeaseGrantResponse, error)
  52. LeaseRevoke(lc *pb.LeaseRevokeRequest) (*pb.LeaseRevokeResponse, error)
  53. Alarm(*pb.AlarmRequest) (*pb.AlarmResponse, error)
  54. Authenticate(r *pb.InternalAuthenticateRequest) (*pb.AuthenticateResponse, error)
  55. AuthEnable() (*pb.AuthEnableResponse, error)
  56. AuthDisable() (*pb.AuthDisableResponse, error)
  57. UserAdd(ua *pb.AuthUserAddRequest) (*pb.AuthUserAddResponse, error)
  58. UserDelete(ua *pb.AuthUserDeleteRequest) (*pb.AuthUserDeleteResponse, error)
  59. UserChangePassword(ua *pb.AuthUserChangePasswordRequest) (*pb.AuthUserChangePasswordResponse, error)
  60. UserGrantRole(ua *pb.AuthUserGrantRoleRequest) (*pb.AuthUserGrantRoleResponse, error)
  61. UserGet(ua *pb.AuthUserGetRequest) (*pb.AuthUserGetResponse, error)
  62. UserRevokeRole(ua *pb.AuthUserRevokeRoleRequest) (*pb.AuthUserRevokeRoleResponse, error)
  63. RoleAdd(ua *pb.AuthRoleAddRequest) (*pb.AuthRoleAddResponse, error)
  64. RoleGrantPermission(ua *pb.AuthRoleGrantPermissionRequest) (*pb.AuthRoleGrantPermissionResponse, error)
  65. RoleGet(ua *pb.AuthRoleGetRequest) (*pb.AuthRoleGetResponse, error)
  66. RoleRevokePermission(ua *pb.AuthRoleRevokePermissionRequest) (*pb.AuthRoleRevokePermissionResponse, error)
  67. RoleDelete(ua *pb.AuthRoleDeleteRequest) (*pb.AuthRoleDeleteResponse, error)
  68. UserList(ua *pb.AuthUserListRequest) (*pb.AuthUserListResponse, error)
  69. RoleList(ua *pb.AuthRoleListRequest) (*pb.AuthRoleListResponse, error)
  70. }
  71. type applierV3backend struct {
  72. s *EtcdServer
  73. }
  74. func (s *EtcdServer) newApplierV3() applierV3 {
  75. return newAuthApplierV3(
  76. s.AuthStore(),
  77. newQuotaApplierV3(s, &applierV3backend{s}),
  78. )
  79. }
  80. func (a *applierV3backend) Apply(r *pb.InternalRaftRequest) *applyResult {
  81. ar := &applyResult{}
  82. // call into a.s.applyV3.F instead of a.F so upper appliers can check individual calls
  83. switch {
  84. case r.Range != nil:
  85. ar.resp, ar.err = a.s.applyV3.Range(noTxn, r.Range)
  86. case r.Put != nil:
  87. ar.resp, ar.err = a.s.applyV3.Put(noTxn, r.Put)
  88. case r.DeleteRange != nil:
  89. ar.resp, ar.err = a.s.applyV3.DeleteRange(noTxn, r.DeleteRange)
  90. case r.Txn != nil:
  91. ar.resp, ar.err = a.s.applyV3.Txn(r.Txn)
  92. case r.Compaction != nil:
  93. ar.resp, ar.physc, ar.err = a.s.applyV3.Compaction(r.Compaction)
  94. case r.LeaseGrant != nil:
  95. ar.resp, ar.err = a.s.applyV3.LeaseGrant(r.LeaseGrant)
  96. case r.LeaseRevoke != nil:
  97. ar.resp, ar.err = a.s.applyV3.LeaseRevoke(r.LeaseRevoke)
  98. case r.Alarm != nil:
  99. ar.resp, ar.err = a.s.applyV3.Alarm(r.Alarm)
  100. case r.Authenticate != nil:
  101. ar.resp, ar.err = a.s.applyV3.Authenticate(r.Authenticate)
  102. case r.AuthEnable != nil:
  103. ar.resp, ar.err = a.s.applyV3.AuthEnable()
  104. case r.AuthDisable != nil:
  105. ar.resp, ar.err = a.s.applyV3.AuthDisable()
  106. case r.AuthUserAdd != nil:
  107. ar.resp, ar.err = a.s.applyV3.UserAdd(r.AuthUserAdd)
  108. case r.AuthUserDelete != nil:
  109. ar.resp, ar.err = a.s.applyV3.UserDelete(r.AuthUserDelete)
  110. case r.AuthUserChangePassword != nil:
  111. ar.resp, ar.err = a.s.applyV3.UserChangePassword(r.AuthUserChangePassword)
  112. case r.AuthUserGrantRole != nil:
  113. ar.resp, ar.err = a.s.applyV3.UserGrantRole(r.AuthUserGrantRole)
  114. case r.AuthUserGet != nil:
  115. ar.resp, ar.err = a.s.applyV3.UserGet(r.AuthUserGet)
  116. case r.AuthUserRevokeRole != nil:
  117. ar.resp, ar.err = a.s.applyV3.UserRevokeRole(r.AuthUserRevokeRole)
  118. case r.AuthRoleAdd != nil:
  119. ar.resp, ar.err = a.s.applyV3.RoleAdd(r.AuthRoleAdd)
  120. case r.AuthRoleGrantPermission != nil:
  121. ar.resp, ar.err = a.s.applyV3.RoleGrantPermission(r.AuthRoleGrantPermission)
  122. case r.AuthRoleGet != nil:
  123. ar.resp, ar.err = a.s.applyV3.RoleGet(r.AuthRoleGet)
  124. case r.AuthRoleRevokePermission != nil:
  125. ar.resp, ar.err = a.s.applyV3.RoleRevokePermission(r.AuthRoleRevokePermission)
  126. case r.AuthRoleDelete != nil:
  127. ar.resp, ar.err = a.s.applyV3.RoleDelete(r.AuthRoleDelete)
  128. case r.AuthUserList != nil:
  129. ar.resp, ar.err = a.s.applyV3.UserList(r.AuthUserList)
  130. case r.AuthRoleList != nil:
  131. ar.resp, ar.err = a.s.applyV3.RoleList(r.AuthRoleList)
  132. default:
  133. panic("not implemented")
  134. }
  135. return ar
  136. }
  137. func (a *applierV3backend) Put(txnID int64, p *pb.PutRequest) (*pb.PutResponse, error) {
  138. resp := &pb.PutResponse{}
  139. resp.Header = &pb.ResponseHeader{}
  140. var (
  141. rev int64
  142. err error
  143. )
  144. if txnID != noTxn {
  145. rev, err = a.s.KV().TxnPut(txnID, p.Key, p.Value, lease.LeaseID(p.Lease))
  146. if err != nil {
  147. return nil, err
  148. }
  149. } else {
  150. leaseID := lease.LeaseID(p.Lease)
  151. if leaseID != lease.NoLease {
  152. if l := a.s.lessor.Lookup(leaseID); l == nil {
  153. return nil, lease.ErrLeaseNotFound
  154. }
  155. }
  156. rev = a.s.KV().Put(p.Key, p.Value, leaseID)
  157. }
  158. resp.Header.Revision = rev
  159. return resp, nil
  160. }
  161. func (a *applierV3backend) DeleteRange(txnID int64, dr *pb.DeleteRangeRequest) (*pb.DeleteRangeResponse, error) {
  162. resp := &pb.DeleteRangeResponse{}
  163. resp.Header = &pb.ResponseHeader{}
  164. var (
  165. n int64
  166. rev int64
  167. err error
  168. )
  169. if isGteRange(dr.RangeEnd) {
  170. dr.RangeEnd = []byte{}
  171. }
  172. if txnID != noTxn {
  173. n, rev, err = a.s.KV().TxnDeleteRange(txnID, dr.Key, dr.RangeEnd)
  174. if err != nil {
  175. return nil, err
  176. }
  177. } else {
  178. n, rev = a.s.KV().DeleteRange(dr.Key, dr.RangeEnd)
  179. }
  180. resp.Deleted = n
  181. resp.Header.Revision = rev
  182. return resp, nil
  183. }
  184. func (a *applierV3backend) Range(txnID int64, r *pb.RangeRequest) (*pb.RangeResponse, error) {
  185. resp := &pb.RangeResponse{}
  186. resp.Header = &pb.ResponseHeader{}
  187. var (
  188. kvs []mvccpb.KeyValue
  189. rev int64
  190. err error
  191. )
  192. if isGteRange(r.RangeEnd) {
  193. r.RangeEnd = []byte{}
  194. }
  195. limit := r.Limit
  196. if r.SortOrder != pb.RangeRequest_NONE {
  197. // fetch everything; sort and truncate afterwards
  198. limit = 0
  199. }
  200. if limit > 0 {
  201. // fetch one extra for 'more' flag
  202. limit = limit + 1
  203. }
  204. if txnID != noTxn {
  205. kvs, rev, err = a.s.KV().TxnRange(txnID, r.Key, r.RangeEnd, limit, r.Revision)
  206. if err != nil {
  207. return nil, err
  208. }
  209. } else {
  210. kvs, rev, err = a.s.KV().Range(r.Key, r.RangeEnd, limit, r.Revision)
  211. if err != nil {
  212. return nil, err
  213. }
  214. }
  215. if r.SortOrder != pb.RangeRequest_NONE {
  216. var sorter sort.Interface
  217. switch {
  218. case r.SortTarget == pb.RangeRequest_KEY:
  219. sorter = &kvSortByKey{&kvSort{kvs}}
  220. case r.SortTarget == pb.RangeRequest_VERSION:
  221. sorter = &kvSortByVersion{&kvSort{kvs}}
  222. case r.SortTarget == pb.RangeRequest_CREATE:
  223. sorter = &kvSortByCreate{&kvSort{kvs}}
  224. case r.SortTarget == pb.RangeRequest_MOD:
  225. sorter = &kvSortByMod{&kvSort{kvs}}
  226. case r.SortTarget == pb.RangeRequest_VALUE:
  227. sorter = &kvSortByValue{&kvSort{kvs}}
  228. }
  229. switch {
  230. case r.SortOrder == pb.RangeRequest_ASCEND:
  231. sort.Sort(sorter)
  232. case r.SortOrder == pb.RangeRequest_DESCEND:
  233. sort.Sort(sort.Reverse(sorter))
  234. }
  235. }
  236. if r.Limit > 0 && len(kvs) > int(r.Limit) {
  237. kvs = kvs[:r.Limit]
  238. resp.More = true
  239. }
  240. resp.Header.Revision = rev
  241. for i := range kvs {
  242. resp.Kvs = append(resp.Kvs, &kvs[i])
  243. }
  244. return resp, nil
  245. }
  246. func (a *applierV3backend) Txn(rt *pb.TxnRequest) (*pb.TxnResponse, error) {
  247. ok := true
  248. for _, c := range rt.Compare {
  249. if _, ok = a.applyCompare(c); !ok {
  250. break
  251. }
  252. }
  253. var reqs []*pb.RequestOp
  254. if ok {
  255. reqs = rt.Success
  256. } else {
  257. reqs = rt.Failure
  258. }
  259. if err := a.checkRequestLeases(reqs); err != nil {
  260. return nil, err
  261. }
  262. if err := a.checkRequestRange(reqs); err != nil {
  263. return nil, err
  264. }
  265. revision := a.s.KV().Rev()
  266. // When executing the operations of txn, we need to hold the txn lock.
  267. // So the reader will not see any intermediate results.
  268. txnID := a.s.KV().TxnBegin()
  269. defer func() {
  270. err := a.s.KV().TxnEnd(txnID)
  271. if err != nil {
  272. panic(fmt.Sprint("unexpected error when closing txn", txnID))
  273. }
  274. }()
  275. resps := make([]*pb.ResponseOp, len(reqs))
  276. changedKV := false
  277. for i := range reqs {
  278. if reqs[i].GetRequestRange() == nil {
  279. changedKV = true
  280. }
  281. resps[i] = a.applyUnion(txnID, reqs[i])
  282. }
  283. if changedKV {
  284. revision += 1
  285. }
  286. txnResp := &pb.TxnResponse{}
  287. txnResp.Header = &pb.ResponseHeader{}
  288. txnResp.Header.Revision = revision
  289. txnResp.Responses = resps
  290. txnResp.Succeeded = ok
  291. return txnResp, nil
  292. }
  293. // applyCompare applies the compare request.
  294. // It returns the revision at which the comparison happens. If the comparison
  295. // succeeds, the it returns true. Otherwise it returns false.
  296. func (a *applierV3backend) applyCompare(c *pb.Compare) (int64, bool) {
  297. ckvs, rev, err := a.s.KV().Range(c.Key, nil, 1, 0)
  298. if err != nil {
  299. if err == mvcc.ErrTxnIDMismatch {
  300. panic("unexpected txn ID mismatch error")
  301. }
  302. return rev, false
  303. }
  304. var ckv mvccpb.KeyValue
  305. if len(ckvs) != 0 {
  306. ckv = ckvs[0]
  307. } else {
  308. // Use the zero value of ckv normally. However...
  309. if c.Target == pb.Compare_VALUE {
  310. // Always fail if we're comparing a value on a key that doesn't exist.
  311. // We can treat non-existence as the empty set explicitly, such that
  312. // even a key with a value of length 0 bytes is still a real key
  313. // that was written that way
  314. return rev, false
  315. }
  316. }
  317. // -1 is less, 0 is equal, 1 is greater
  318. var result int
  319. switch c.Target {
  320. case pb.Compare_VALUE:
  321. tv, _ := c.TargetUnion.(*pb.Compare_Value)
  322. if tv != nil {
  323. result = bytes.Compare(ckv.Value, tv.Value)
  324. }
  325. case pb.Compare_CREATE:
  326. tv, _ := c.TargetUnion.(*pb.Compare_CreateRevision)
  327. if tv != nil {
  328. result = compareInt64(ckv.CreateRevision, tv.CreateRevision)
  329. }
  330. case pb.Compare_MOD:
  331. tv, _ := c.TargetUnion.(*pb.Compare_ModRevision)
  332. if tv != nil {
  333. result = compareInt64(ckv.ModRevision, tv.ModRevision)
  334. }
  335. case pb.Compare_VERSION:
  336. tv, _ := c.TargetUnion.(*pb.Compare_Version)
  337. if tv != nil {
  338. result = compareInt64(ckv.Version, tv.Version)
  339. }
  340. }
  341. switch c.Result {
  342. case pb.Compare_EQUAL:
  343. if result != 0 {
  344. return rev, false
  345. }
  346. case pb.Compare_GREATER:
  347. if result != 1 {
  348. return rev, false
  349. }
  350. case pb.Compare_LESS:
  351. if result != -1 {
  352. return rev, false
  353. }
  354. }
  355. return rev, true
  356. }
  357. func (a *applierV3backend) applyUnion(txnID int64, union *pb.RequestOp) *pb.ResponseOp {
  358. switch tv := union.Request.(type) {
  359. case *pb.RequestOp_RequestRange:
  360. if tv.RequestRange != nil {
  361. resp, err := a.Range(txnID, tv.RequestRange)
  362. if err != nil {
  363. panic("unexpected error during txn")
  364. }
  365. return &pb.ResponseOp{Response: &pb.ResponseOp_ResponseRange{ResponseRange: resp}}
  366. }
  367. case *pb.RequestOp_RequestPut:
  368. if tv.RequestPut != nil {
  369. resp, err := a.Put(txnID, tv.RequestPut)
  370. if err != nil {
  371. panic("unexpected error during txn")
  372. }
  373. return &pb.ResponseOp{Response: &pb.ResponseOp_ResponsePut{ResponsePut: resp}}
  374. }
  375. case *pb.RequestOp_RequestDeleteRange:
  376. if tv.RequestDeleteRange != nil {
  377. resp, err := a.DeleteRange(txnID, tv.RequestDeleteRange)
  378. if err != nil {
  379. panic("unexpected error during txn")
  380. }
  381. return &pb.ResponseOp{Response: &pb.ResponseOp_ResponseDeleteRange{ResponseDeleteRange: resp}}
  382. }
  383. default:
  384. // empty union
  385. return nil
  386. }
  387. return nil
  388. }
  389. func (a *applierV3backend) Compaction(compaction *pb.CompactionRequest) (*pb.CompactionResponse, <-chan struct{}, error) {
  390. resp := &pb.CompactionResponse{}
  391. resp.Header = &pb.ResponseHeader{}
  392. ch, err := a.s.KV().Compact(compaction.Revision)
  393. if err != nil {
  394. return nil, ch, err
  395. }
  396. // get the current revision. which key to get is not important.
  397. _, resp.Header.Revision, _ = a.s.KV().Range([]byte("compaction"), nil, 1, 0)
  398. return resp, ch, err
  399. }
  400. func (a *applierV3backend) LeaseGrant(lc *pb.LeaseGrantRequest) (*pb.LeaseGrantResponse, error) {
  401. l, err := a.s.lessor.Grant(lease.LeaseID(lc.ID), lc.TTL)
  402. resp := &pb.LeaseGrantResponse{}
  403. if err == nil {
  404. resp.ID = int64(l.ID)
  405. resp.TTL = l.TTL
  406. resp.Header = &pb.ResponseHeader{Revision: a.s.KV().Rev()}
  407. }
  408. return resp, err
  409. }
  410. func (a *applierV3backend) LeaseRevoke(lc *pb.LeaseRevokeRequest) (*pb.LeaseRevokeResponse, error) {
  411. err := a.s.lessor.Revoke(lease.LeaseID(lc.ID))
  412. return &pb.LeaseRevokeResponse{Header: &pb.ResponseHeader{Revision: a.s.KV().Rev()}}, err
  413. }
  414. func (a *applierV3backend) Alarm(ar *pb.AlarmRequest) (*pb.AlarmResponse, error) {
  415. resp := &pb.AlarmResponse{}
  416. oldCount := len(a.s.alarmStore.Get(ar.Alarm))
  417. switch ar.Action {
  418. case pb.AlarmRequest_GET:
  419. resp.Alarms = a.s.alarmStore.Get(ar.Alarm)
  420. case pb.AlarmRequest_ACTIVATE:
  421. m := a.s.alarmStore.Activate(types.ID(ar.MemberID), ar.Alarm)
  422. if m == nil {
  423. break
  424. }
  425. resp.Alarms = append(resp.Alarms, m)
  426. activated := oldCount == 0 && len(a.s.alarmStore.Get(m.Alarm)) == 1
  427. if !activated {
  428. break
  429. }
  430. switch m.Alarm {
  431. case pb.AlarmType_NOSPACE:
  432. plog.Warningf("alarm raised %+v", m)
  433. a.s.applyV3 = newApplierV3Capped(a)
  434. default:
  435. plog.Errorf("unimplemented alarm activation (%+v)", m)
  436. }
  437. case pb.AlarmRequest_DEACTIVATE:
  438. m := a.s.alarmStore.Deactivate(types.ID(ar.MemberID), ar.Alarm)
  439. if m == nil {
  440. break
  441. }
  442. resp.Alarms = append(resp.Alarms, m)
  443. deactivated := oldCount > 0 && len(a.s.alarmStore.Get(ar.Alarm)) == 0
  444. if !deactivated {
  445. break
  446. }
  447. switch m.Alarm {
  448. case pb.AlarmType_NOSPACE:
  449. plog.Infof("alarm disarmed %+v", ar)
  450. a.s.applyV3 = a.s.newApplierV3()
  451. default:
  452. plog.Errorf("unimplemented alarm deactivation (%+v)", m)
  453. }
  454. default:
  455. return nil, nil
  456. }
  457. return resp, nil
  458. }
  459. type applierV3Capped struct {
  460. applierV3
  461. q backendQuota
  462. }
  463. // newApplierV3Capped creates an applyV3 that will reject Puts and transactions
  464. // with Puts so that the number of keys in the store is capped.
  465. func newApplierV3Capped(base applierV3) applierV3 { return &applierV3Capped{applierV3: base} }
  466. func (a *applierV3Capped) Put(txnID int64, p *pb.PutRequest) (*pb.PutResponse, error) {
  467. return nil, ErrNoSpace
  468. }
  469. func (a *applierV3Capped) Txn(r *pb.TxnRequest) (*pb.TxnResponse, error) {
  470. if a.q.Cost(r) > 0 {
  471. return nil, ErrNoSpace
  472. }
  473. return a.applierV3.Txn(r)
  474. }
  475. func (a *applierV3Capped) LeaseGrant(lc *pb.LeaseGrantRequest) (*pb.LeaseGrantResponse, error) {
  476. return nil, ErrNoSpace
  477. }
  478. func (a *applierV3backend) AuthEnable() (*pb.AuthEnableResponse, error) {
  479. err := a.s.AuthStore().AuthEnable()
  480. if err != nil {
  481. return nil, err
  482. }
  483. return &pb.AuthEnableResponse{}, nil
  484. }
  485. func (a *applierV3backend) AuthDisable() (*pb.AuthDisableResponse, error) {
  486. a.s.AuthStore().AuthDisable()
  487. return &pb.AuthDisableResponse{}, nil
  488. }
  489. func (a *applierV3backend) Authenticate(r *pb.InternalAuthenticateRequest) (*pb.AuthenticateResponse, error) {
  490. ctx := context.WithValue(context.WithValue(context.TODO(), "index", a.s.consistIndex.ConsistentIndex()), "simpleToken", r.SimpleToken)
  491. return a.s.AuthStore().Authenticate(ctx, r.Name, r.Password)
  492. }
  493. func (a *applierV3backend) UserAdd(r *pb.AuthUserAddRequest) (*pb.AuthUserAddResponse, error) {
  494. return a.s.AuthStore().UserAdd(r)
  495. }
  496. func (a *applierV3backend) UserDelete(r *pb.AuthUserDeleteRequest) (*pb.AuthUserDeleteResponse, error) {
  497. return a.s.AuthStore().UserDelete(r)
  498. }
  499. func (a *applierV3backend) UserChangePassword(r *pb.AuthUserChangePasswordRequest) (*pb.AuthUserChangePasswordResponse, error) {
  500. return a.s.AuthStore().UserChangePassword(r)
  501. }
  502. func (a *applierV3backend) UserGrantRole(r *pb.AuthUserGrantRoleRequest) (*pb.AuthUserGrantRoleResponse, error) {
  503. return a.s.AuthStore().UserGrantRole(r)
  504. }
  505. func (a *applierV3backend) UserGet(r *pb.AuthUserGetRequest) (*pb.AuthUserGetResponse, error) {
  506. return a.s.AuthStore().UserGet(r)
  507. }
  508. func (a *applierV3backend) UserRevokeRole(r *pb.AuthUserRevokeRoleRequest) (*pb.AuthUserRevokeRoleResponse, error) {
  509. return a.s.AuthStore().UserRevokeRole(r)
  510. }
  511. func (a *applierV3backend) RoleAdd(r *pb.AuthRoleAddRequest) (*pb.AuthRoleAddResponse, error) {
  512. return a.s.AuthStore().RoleAdd(r)
  513. }
  514. func (a *applierV3backend) RoleGrantPermission(r *pb.AuthRoleGrantPermissionRequest) (*pb.AuthRoleGrantPermissionResponse, error) {
  515. return a.s.AuthStore().RoleGrantPermission(r)
  516. }
  517. func (a *applierV3backend) RoleGet(r *pb.AuthRoleGetRequest) (*pb.AuthRoleGetResponse, error) {
  518. return a.s.AuthStore().RoleGet(r)
  519. }
  520. func (a *applierV3backend) RoleRevokePermission(r *pb.AuthRoleRevokePermissionRequest) (*pb.AuthRoleRevokePermissionResponse, error) {
  521. return a.s.AuthStore().RoleRevokePermission(r)
  522. }
  523. func (a *applierV3backend) RoleDelete(r *pb.AuthRoleDeleteRequest) (*pb.AuthRoleDeleteResponse, error) {
  524. return a.s.AuthStore().RoleDelete(r)
  525. }
  526. func (a *applierV3backend) UserList(r *pb.AuthUserListRequest) (*pb.AuthUserListResponse, error) {
  527. return a.s.AuthStore().UserList(r)
  528. }
  529. func (a *applierV3backend) RoleList(r *pb.AuthRoleListRequest) (*pb.AuthRoleListResponse, error) {
  530. return a.s.AuthStore().RoleList(r)
  531. }
  532. type quotaApplierV3 struct {
  533. applierV3
  534. q Quota
  535. }
  536. func newQuotaApplierV3(s *EtcdServer, app applierV3) applierV3 {
  537. return &quotaApplierV3{app, NewBackendQuota(s)}
  538. }
  539. func (a *quotaApplierV3) Put(txnID int64, p *pb.PutRequest) (*pb.PutResponse, error) {
  540. ok := a.q.Available(p)
  541. resp, err := a.applierV3.Put(txnID, p)
  542. if err == nil && !ok {
  543. err = ErrNoSpace
  544. }
  545. return resp, err
  546. }
  547. func (a *quotaApplierV3) Txn(rt *pb.TxnRequest) (*pb.TxnResponse, error) {
  548. ok := a.q.Available(rt)
  549. resp, err := a.applierV3.Txn(rt)
  550. if err == nil && !ok {
  551. err = ErrNoSpace
  552. }
  553. return resp, err
  554. }
  555. func (a *quotaApplierV3) LeaseGrant(lc *pb.LeaseGrantRequest) (*pb.LeaseGrantResponse, error) {
  556. ok := a.q.Available(lc)
  557. resp, err := a.applierV3.LeaseGrant(lc)
  558. if err == nil && !ok {
  559. err = ErrNoSpace
  560. }
  561. return resp, err
  562. }
  563. type kvSort struct{ kvs []mvccpb.KeyValue }
  564. func (s *kvSort) Swap(i, j int) {
  565. t := s.kvs[i]
  566. s.kvs[i] = s.kvs[j]
  567. s.kvs[j] = t
  568. }
  569. func (s *kvSort) Len() int { return len(s.kvs) }
  570. type kvSortByKey struct{ *kvSort }
  571. func (s *kvSortByKey) Less(i, j int) bool {
  572. return bytes.Compare(s.kvs[i].Key, s.kvs[j].Key) < 0
  573. }
  574. type kvSortByVersion struct{ *kvSort }
  575. func (s *kvSortByVersion) Less(i, j int) bool {
  576. return (s.kvs[i].Version - s.kvs[j].Version) < 0
  577. }
  578. type kvSortByCreate struct{ *kvSort }
  579. func (s *kvSortByCreate) Less(i, j int) bool {
  580. return (s.kvs[i].CreateRevision - s.kvs[j].CreateRevision) < 0
  581. }
  582. type kvSortByMod struct{ *kvSort }
  583. func (s *kvSortByMod) Less(i, j int) bool {
  584. return (s.kvs[i].ModRevision - s.kvs[j].ModRevision) < 0
  585. }
  586. type kvSortByValue struct{ *kvSort }
  587. func (s *kvSortByValue) Less(i, j int) bool {
  588. return bytes.Compare(s.kvs[i].Value, s.kvs[j].Value) < 0
  589. }
  590. func (a *applierV3backend) checkRequestLeases(reqs []*pb.RequestOp) error {
  591. for _, requ := range reqs {
  592. tv, ok := requ.Request.(*pb.RequestOp_RequestPut)
  593. if !ok {
  594. continue
  595. }
  596. preq := tv.RequestPut
  597. if preq == nil || lease.LeaseID(preq.Lease) == lease.NoLease {
  598. continue
  599. }
  600. if l := a.s.lessor.Lookup(lease.LeaseID(preq.Lease)); l == nil {
  601. return lease.ErrLeaseNotFound
  602. }
  603. }
  604. return nil
  605. }
  606. func (a *applierV3backend) checkRequestRange(reqs []*pb.RequestOp) error {
  607. for _, requ := range reqs {
  608. tv, ok := requ.Request.(*pb.RequestOp_RequestRange)
  609. if !ok {
  610. continue
  611. }
  612. greq := tv.RequestRange
  613. if greq == nil || greq.Revision == 0 {
  614. continue
  615. }
  616. if greq.Revision > a.s.KV().Rev() {
  617. return mvcc.ErrFutureRev
  618. }
  619. if greq.Revision < a.s.KV().FirstRev() {
  620. return mvcc.ErrCompacted
  621. }
  622. }
  623. return nil
  624. }
  625. func compareInt64(a, b int64) int {
  626. switch {
  627. case a < b:
  628. return -1
  629. case a > b:
  630. return 1
  631. default:
  632. return 0
  633. }
  634. }
  635. // isGteRange determines if the range end is a >= range. This works around grpc
  636. // sending empty byte strings as nil; >= is encoded in the range end as '\0'.
  637. func isGteRange(rangeEnd []byte) bool {
  638. return len(rangeEnd) == 1 && rangeEnd[0] == 0
  639. }