All checks were successful
Check / check (push) Successful in 4s
Bumps golangci-lint from v2.10.1 to v2.12.2 everywhere it is pinned and installs the canonical `.golangci.yml`, then fixes every finding the new linter surfaces so `make check` is green. ## Version pins - `Dockerfile` lint stage: `golangci/golangci-lint:v2.12.2` (Debian-based), tag plus digest pin - `script/bootstrap`: `GOLANGCI_LINT_VERSION=2.12.2` with updated `linux-amd64`/`linux-arm64` release-archive sha256 pins ## Config `.golangci.yml` replaced with the canonical config. Material change: the old file declared `version: "2"` but kept settings under the legacy top-level `linters-settings` key, which golangci-lint v2 ignores — so the intended thresholds (`lll` 88, `funlen` 80/50, `cyclop` 15, `dupl` 100) were not being applied. The canonical file moves them under `linters.settings` and drops `issues.exclude-use-default`. ## Lint fixes (216 findings) - `lll` (96): wrapped lines to the 88-column limit - `noctx` (46): `httptest.NewRequestWithContext` with `t.Context()` throughout the tests - `goconst` (24): shared constants for template/JSON keys in `internal/handlers` and repeated test literals - `gosec` (23): app-page redirects now go through a `redirectToApp` helper that path-escapes the app ID (G710 open redirect); `http.ServeFile` of the internally derived deployment log path annotated like the adjacent `os.Stat` (G703) - `dupl` (22): extracted a generic `findAllByAppID` in `internal/models`, a `deleteAppResource` helper in `internal/handlers`, a shared `parsePush` in `internal/service/webhook`, and table-driven/helper-based dedup in tests - `nolintlint` (5): removed `//nolint:funlen` directives made obsolete by the new limits (plus one more that became obsolete after refactoring) - `nilerr` (3, surfaced during fixing): resource-delete lookups now propagate the find error to the caller No behavior changes intended; all tests pass and `make check` is green. Note: golangci-lint v2.12 warns that `gomodguard` is deprecated in favor of `gomodguard_v2` — a future canonical-config update should address this centrally. Co-authored-by: sneak <sneak@sneak.berlin> Reviewed-on: #187 Co-authored-by: clawbot <clawbot@noreply.example.org> Co-committed-by: clawbot <clawbot@noreply.example.org>
135 lines
2.8 KiB
Go
135 lines
2.8 KiB
Go
package models
|
|
|
|
import (
|
|
"context"
|
|
"database/sql"
|
|
"errors"
|
|
"fmt"
|
|
|
|
"sneak.berlin/go/upaas/internal/database"
|
|
)
|
|
|
|
// Volume represents a volume mount for an app container.
|
|
type Volume struct {
|
|
db *database.Database
|
|
|
|
ID int64
|
|
AppID string
|
|
HostPath string
|
|
ContainerPath string
|
|
ReadOnly bool
|
|
}
|
|
|
|
// NewVolume creates a new Volume with a database reference.
|
|
func NewVolume(db *database.Database) *Volume {
|
|
return &Volume{db: db}
|
|
}
|
|
|
|
// Save inserts or updates the volume in the database.
|
|
func (v *Volume) Save(ctx context.Context) error {
|
|
if v.ID == 0 {
|
|
return v.insert(ctx)
|
|
}
|
|
|
|
return v.update(ctx)
|
|
}
|
|
|
|
// Delete removes the volume from the database.
|
|
func (v *Volume) Delete(ctx context.Context) error {
|
|
_, err := v.db.Exec(ctx, "DELETE FROM app_volumes WHERE id = ?", v.ID)
|
|
|
|
return err
|
|
}
|
|
|
|
func (v *Volume) insert(ctx context.Context) error {
|
|
query := `
|
|
INSERT INTO app_volumes (app_id, host_path, container_path, readonly)
|
|
VALUES (?, ?, ?, ?)`
|
|
|
|
result, err := v.db.Exec(ctx, query,
|
|
v.AppID, v.HostPath, v.ContainerPath, v.ReadOnly,
|
|
)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
id, err := result.LastInsertId()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
v.ID = id
|
|
|
|
return nil
|
|
}
|
|
|
|
func (v *Volume) update(ctx context.Context) error {
|
|
query := `
|
|
UPDATE app_volumes SET host_path = ?, container_path = ?, readonly = ?
|
|
WHERE id = ?`
|
|
|
|
_, err := v.db.Exec(ctx, query, v.HostPath, v.ContainerPath, v.ReadOnly, v.ID)
|
|
|
|
return err
|
|
}
|
|
|
|
// FindVolume finds a volume by ID.
|
|
//
|
|
//nolint:nilnil // returning nil,nil is idiomatic for "not found" in Active Record
|
|
func FindVolume(
|
|
ctx context.Context,
|
|
db *database.Database,
|
|
id int64,
|
|
) (*Volume, error) {
|
|
vol := NewVolume(db)
|
|
|
|
query := `
|
|
SELECT id, app_id, host_path, container_path, readonly
|
|
FROM app_volumes WHERE id = ?`
|
|
|
|
row := db.QueryRow(ctx, query, id)
|
|
|
|
err := row.Scan(
|
|
&vol.ID, &vol.AppID, &vol.HostPath, &vol.ContainerPath, &vol.ReadOnly,
|
|
)
|
|
if err != nil {
|
|
if errors.Is(err, sql.ErrNoRows) {
|
|
return nil, nil
|
|
}
|
|
|
|
return nil, fmt.Errorf("scanning volume: %w", err)
|
|
}
|
|
|
|
return vol, nil
|
|
}
|
|
|
|
func (v *Volume) scanDest() []any {
|
|
return []any{
|
|
&v.ID, &v.AppID, &v.HostPath, &v.ContainerPath, &v.ReadOnly,
|
|
}
|
|
}
|
|
|
|
// FindVolumesByAppID finds all volumes for an app.
|
|
func FindVolumesByAppID(
|
|
ctx context.Context,
|
|
db *database.Database,
|
|
appID string,
|
|
) ([]*Volume, error) {
|
|
query := `
|
|
SELECT id, app_id, host_path, container_path, readonly
|
|
FROM app_volumes WHERE app_id = ? ORDER BY container_path`
|
|
|
|
return findAllByAppID(ctx, db, query, appID, "volumes", NewVolume)
|
|
}
|
|
|
|
// DeleteVolumesByAppID deletes all volumes for an app.
|
|
func DeleteVolumesByAppID(
|
|
ctx context.Context,
|
|
db *database.Database,
|
|
appID string,
|
|
) error {
|
|
_, err := db.Exec(ctx, "DELETE FROM app_volumes WHERE app_id = ?", appID)
|
|
|
|
return err
|
|
}
|