1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75
|
package main
import (
"context"
"time"
"github.com/lxc/incus/v6/internal/server/db/operationtype"
"github.com/lxc/incus/v6/internal/server/operations"
"github.com/lxc/incus/v6/internal/server/state"
"github.com/lxc/incus/v6/internal/server/task"
"github.com/lxc/incus/v6/shared/logger"
)
func autoRemoveExpiredTokens(ctx context.Context, s *state.State) {
expiredTokenOps := make([]*operations.Operation, 0)
for _, op := range operations.Clone() {
// Only consider token operations
if op.Type() != operationtype.ClusterJoinToken && op.Type() != operationtype.CertificateAddToken {
continue
}
// Instead of cancelling the operation here, we add it to a list of expired token operations.
// This allows us to only show log messages if there are expired tokens.
expiry, ok := op.Metadata()["expiresAt"].(time.Time)
if ok && time.Now().After(expiry) {
expiredTokenOps = append(expiredTokenOps, op)
}
}
if len(expiredTokenOps) == 0 {
return
}
opRun := func(op *operations.Operation) error {
for _, op := range expiredTokenOps {
_, err := op.Cancel()
if err != nil {
logger.Debug("Failed removing expired token", logger.Ctx{"err": err, "id": op.ID()})
}
}
return nil
}
op, err := operations.OperationCreate(s, "", operations.OperationClassTask, operationtype.RemoveExpiredTokens, nil, nil, opRun, nil, nil, nil)
if err != nil {
logger.Error("Failed creating remove expired tokens operation", logger.Ctx{"err": err})
return
}
logger.Info("Removing expired tokens")
err = op.Start()
if err != nil {
logger.Error("Failed starting remove expired tokens operation", logger.Ctx{"err": err})
return
}
err = op.Wait(ctx)
if err != nil {
logger.Error("Failed removing expired tokens", logger.Ctx{"err": err})
return
}
logger.Debug("Done removing expired tokens")
}
func autoRemoveExpiredTokensTask(d *Daemon) (task.Func, task.Schedule) {
f := func(ctx context.Context) {
autoRemoveExpiredTokens(ctx, d.State())
}
return f, task.Every(time.Minute)
}
|