plugin.go

package main

import (
	"context"
	"errors"
	"log"
	"os"
	"path/filepath"
	"strings"

	"github.com/aws/aws-sdk-go/aws"
	"github.com/aws/aws-sdk-go/aws/awserr"
	"github.com/aws/aws-sdk-go/aws/credentials"
	"github.com/aws/aws-sdk-go/aws/request"
	"github.com/aws/aws-sdk-go/aws/session"
	"github.com/aws/aws-sdk-go/service/lambda"
	"github.com/gookit/goutil/dump"
	"github.com/mholt/archiver/v3"
)

type (
	// Config for the plugin.
	Config struct {
		Region          string
		AccessKey       string
		SecretKey       string
		Profile         string
		FunctionName    string
		ReversionID     string
		S3Bucket        string
		S3Key           string
		S3ObjectVersion string
		DryRun          bool
		ZipFile         string
		Source          []string
		Debug           bool
		Publish         bool
		MemorySize      int64
		Timeout         int64
		Handler         string
		Role            string
		Runtime         string
		Environment     []string
		ImageURI        string
		Subnets         []string
		SecurityGroups  []string
		Description     string
		Layers          []string
		SessionToken    string
		TracingMode     string
		MaxAttempts     int
		Architectures   []string
		IP6DualStack    bool
	}

	// Commit information.
	Commit struct {
		Sha    string
		Author string
	}

	// Plugin values.
	Plugin struct {
		Config Config
		Commit Commit
	}
)

func getEnvironment(envs []string) map[string]string {
	output := make(map[string]string)
	for _, e := range envs {
		pair := strings.SplitN(e, "=", 2)
		if len(pair) != 2 {
			continue
		}
		output[pair[0]] = pair[1]
	}
	return output
}

func (p Plugin) loadEnvironment(envs []string) *lambda.Environment {
	return &lambda.Environment{
		Variables: aws.StringMap(getEnvironment(envs)),
	}
}

// Exec executes the plugin.
func (p Plugin) Exec(ctx context.Context) error { //nolint:gocyclo
	p.dump(p.Config)

	if p.Config.FunctionName == "" {
		return errors.New("missing lambda function name")
	}

	sources := trimValues(p.Config.Source)
	if p.Config.S3Bucket == "" &&
		p.Config.S3Key == "" &&
		len(sources) == 0 &&
		p.Config.ZipFile == "" &&
		p.Config.ImageURI == "" {
		return errors.New("missing zip source or s3 bucket/key or image uri")
	}

	// Create Lambda service client
	sess := session.Must(session.NewSessionWithOptions(session.Options{
		SharedConfigState: session.SharedConfigEnable,
	}))

	config := &aws.Config{
		Region: aws.String(p.Config.Region),
	}

	if p.Config.Profile != "" {
		config.Credentials = credentials.NewSharedCredentials("", p.Config.Profile)
	}

	if p.Config.AccessKey != "" && p.Config.SecretKey != "" {
		config.Credentials = credentials.NewStaticCredentials(p.Config.AccessKey, p.Config.SecretKey, p.Config.SessionToken)
	}

	if p.Config.DryRun {
		p.Config.Publish = false
	} else {
		p.Config.Publish = true
	}

	input := &lambda.UpdateFunctionCodeInput{}
	input.SetDryRun(p.Config.DryRun)
	input.SetFunctionName(p.Config.FunctionName)
	input.SetPublish(p.Config.Publish)

	if p.Config.ImageURI != "" {
		input.SetImageUri(p.Config.ImageURI)
	}

	if p.Config.ReversionID != "" {
		input.SetRevisionId(p.Config.ReversionID)
	}

	if p.Config.S3Bucket != "" && p.Config.S3Key != "" {
		input.SetS3Key(p.Config.S3Key)
		input.SetS3Bucket(p.Config.S3Bucket)

		if p.Config.S3ObjectVersion != "" {
			input.SetS3ObjectVersion(p.Config.S3ObjectVersion)
		}
	}

	//
	if len(p.Config.Architectures) != 0 {
		input.SetArchitectures(aws.StringSlice(p.Config.Architectures))
	}

	if len(sources) != 0 {
		files := globList(sources)
		path := os.TempDir() + "/output.zip"
		zip := archiver.NewZip()
		if len(files) != 0 {
			if err := zip.Archive(files, path); err != nil {
				return err
			}

			p.Config.ZipFile = path
		}
	}

	if p.Config.ZipFile != "" {
		contents, err := os.ReadFile(p.Config.ZipFile)
		if err != nil {
			return err
		}

		input.SetZipFile(contents)
	}

	isUpdateConfig := false
	cfg := &lambda.UpdateFunctionConfigurationInput{}
	cfg.SetFunctionName(p.Config.FunctionName)
	if p.Config.MemorySize > 0 {
		isUpdateConfig = true
		cfg.SetMemorySize(p.Config.MemorySize)
	}
	if p.Config.Timeout > 0 {
		isUpdateConfig = true
		cfg.SetTimeout(p.Config.Timeout)
	}
	if len(p.Config.Handler) > 0 {
		isUpdateConfig = true
		cfg.SetHandler(p.Config.Handler)
	}
	if len(p.Config.Role) > 0 {
		isUpdateConfig = true
		cfg.SetRole(p.Config.Role)
	}
	if len(p.Config.Runtime) > 0 {
		isUpdateConfig = true
		cfg.SetRuntime(p.Config.Runtime)
	}
	if p.Config.Description != "" {
		isUpdateConfig = true
		cfg.SetDescription(p.Config.Description)
	}
	if len(p.Config.Layers) > 0 {
		isUpdateConfig = true
		cfg.SetLayers(aws.StringSlice(p.Config.Layers))
	}

	envs := trimValues(p.Config.Environment)
	if len(envs) > 0 {
		isUpdateConfig = true
		cfg.SetEnvironment(p.loadEnvironment(envs))
	}

	subnets := trimValues(p.Config.Subnets)
	securityGroups := trimValues(p.Config.SecurityGroups)
	if len(subnets) > 0 || len(securityGroups) > 0 {
		isUpdateConfig = true
		cfg.SetVpcConfig(&lambda.VpcConfig{
			Ipv6AllowedForDualStack: aws.Bool(p.Config.IP6DualStack),
			SubnetIds:               aws.StringSlice(subnets),
			SecurityGroupIds:        aws.StringSlice(securityGroups),
		})
	}

	if p.Config.TracingMode != "" {
		isUpdateConfig = true
		cfg.SetTracingConfig(&lambda.TracingConfig{
			Mode: aws.String(p.Config.TracingMode),
		})
	}

	svc := lambda.New(sess, config)

	if isUpdateConfig {
		// UpdateFunctionConfiguration API operation for AWS Lambda.
		log.Println("Update function configuration ...")
		if err := p.checkStatus(svc); err != nil {
			return err
		}
		lambdaConfig, err := svc.UpdateFunctionConfigurationWithContext(ctx, cfg)
		if err != nil {
			if aerr, ok := err.(awserr.Error); ok {
				switch aerr.Code() {
				case lambda.ErrCodeServiceException:
					log.Println(lambda.ErrCodeServiceException, aerr.Error())
				case lambda.ErrCodeResourceNotFoundException:
					log.Println(lambda.ErrCodeResourceNotFoundException, aerr.Error())
				case lambda.ErrCodeInvalidParameterValueException:
					log.Println(lambda.ErrCodeInvalidParameterValueException, aerr.Error())
				case lambda.ErrCodeTooManyRequestsException:
					log.Println(lambda.ErrCodeTooManyRequestsException, aerr.Error())
				case lambda.ErrCodeResourceConflictException:
					log.Println(lambda.ErrCodeResourceConflictException, aerr.Error())
				case lambda.ErrCodePreconditionFailedException:
					log.Println(lambda.ErrCodePreconditionFailedException, aerr.Error())
				default:
					log.Println(aerr.Error())
				}
			} else {
				// Print the error, cast err to awserr.Error to get the Code and
				// Message from an error.
				log.Println(err.Error())
			}
			return err
		}

		p.dump(lambdaConfig)
	}

	log.Println("Update function code ...")
	if err := p.checkStatus(svc); err != nil {
		return err
	}
	lambdaConfig, err := svc.UpdateFunctionCodeWithContext(ctx, input)
	if err != nil {
		if aerr, ok := err.(awserr.Error); ok {
			switch aerr.Code() {
			case lambda.ErrCodeServiceException:
				log.Println(lambda.ErrCodeServiceException, aerr.Error())
			case lambda.ErrCodeResourceNotFoundException:
				log.Println(lambda.ErrCodeResourceNotFoundException, aerr.Error())
			case lambda.ErrCodeInvalidParameterValueException:
				log.Println(lambda.ErrCodeInvalidParameterValueException, aerr.Error())
			case lambda.ErrCodeTooManyRequestsException:
				log.Println(lambda.ErrCodeTooManyRequestsException, aerr.Error())
			case lambda.ErrCodeCodeStorageExceededException:
				log.Println(lambda.ErrCodeCodeStorageExceededException, aerr.Error())
			case lambda.ErrCodeResourceConflictException:
				log.Println(lambda.ErrCodeResourceConflictException, aerr.Error())
			case lambda.ErrCodeResourceNotReadyException:
				log.Println(lambda.ErrCodeResourceNotReadyException, aerr.Error())
			default:
				log.Println(aerr.Error())
			}
		} else {
			// Print the error, cast err to awserr.Error to get the Code and
			// Message from an error.
			log.Println(err.Error())
		}
		return err
	}

	p.dump(lambdaConfig)

	return nil
}

func (p *Plugin) checkStatus(svc *lambda.Lambda) error {
	// Check Lambda function states
	// see https://docs.aws.amazon.com/lambda/latest/dg/functions-states.html
	lambdaConfig, err := svc.GetFunctionConfiguration(&lambda.GetFunctionConfigurationInput{
		FunctionName: aws.String(p.Config.FunctionName),
	})
	if err != nil {
		return err
	}
	log.Println("Current State:", aws.StringValue(lambdaConfig.State))
	if aws.StringValue(lambdaConfig.State) != lambda.StateActive {
		log.Println("Current State Reason:", aws.StringValue(lambdaConfig.StateReason))
		log.Println("Current State Reason Code:", aws.StringValue(lambdaConfig.StateReasonCode))
		log.Println("Waiting for Lambda function states to be active...")
		if err := svc.WaitUntilFunctionActiveV2WithContext(
			aws.BackgroundContext(),
			&lambda.GetFunctionInput{
				FunctionName: aws.String(p.Config.FunctionName),
			},
			request.WithWaiterMaxAttempts(p.Config.MaxAttempts),
		); err != nil {
			log.Println(err.Error())
			return err
		}
	}

	log.Println("Last Update Status:", aws.StringValue(lambdaConfig.LastUpdateStatus))
	if aws.StringValue(lambdaConfig.LastUpdateStatus) != lambda.LastUpdateStatusSuccessful {
		log.Println("Last Update Status Reason:", aws.StringValue(lambdaConfig.LastUpdateStatusReason))
		log.Println("Last Update Status ReasonCode:", aws.StringValue(lambdaConfig.LastUpdateStatusReasonCode))
		log.Println("Waiting for Last Update Status to be successful ...")
		if err := svc.WaitUntilFunctionUpdatedV2WithContext(
			aws.BackgroundContext(),
			&lambda.GetFunctionInput{
				FunctionName: aws.String(p.Config.FunctionName),
			},
			request.WithWaiterMaxAttempts(p.Config.MaxAttempts),
		); err != nil {
			log.Println(err.Error())
			return err
		}
	}

	return nil
}

func (p *Plugin) dump(val ...any) {
	if !p.Config.Debug {
		return
	}

	dump.P(val)
}

func trimValues(keys []string) []string {
	var newKeys []string

	for _, value := range keys {
		value = strings.TrimSpace(value)
		if len(value) == 0 {
			continue
		}

		newKeys = append(newKeys, value)
	}

	return newKeys
}

func globList(paths []string) []string {
	var newPaths []string

	for _, pattern := range paths {
		pattern = strings.Trim(pattern, " ")
		matches, err := filepath.Glob(pattern)
		if err != nil {
			log.Printf("Glob error for %q: %s\n", pattern, err)
			continue
		}

		newPaths = append(newPaths, matches...)
	}

	return newPaths
}