* refactor: extract object store code into windmill-object-store crate with filesystem backend Consolidate all object_store-dependent code from windmill-common into a new windmill-object-store crate. Add a filesystem-backed object store implementation using LocalFileSystem for dev/testing without cloud credentials. Includes 30 comprehensive tests covering render_endpoint, lfs_to_object_store_resource, duckdb_connection_settings, error mapping, and filesystem-backed integration tests. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * all * all * all * all * fix: fix raw_app hardcoded path, add missing ObjectStoreResource import, and add tests Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * refactor: move S3ModeFormat to windmill-types, make windmill-parser-sql optional, restore debug logs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * all --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1561 lines
51 KiB
Rust
1561 lines
51 KiB
Rust
use async_recursion::async_recursion;
|
|
|
|
use itertools::Itertools;
|
|
use lazy_static::lazy_static;
|
|
use process_wrap::tokio::TokioChildWrapper;
|
|
use regex::Regex;
|
|
use reqwest::Client;
|
|
use serde::{Deserialize, Serialize};
|
|
use serde_json::value::RawValue;
|
|
use serde_json::{json, Value};
|
|
use sha2::Digest;
|
|
use sqlx::types::Json;
|
|
use sqlx::{Pool, Postgres};
|
|
use tokio::process::Command;
|
|
use tokio::{fs::File, io::AsyncReadExt};
|
|
|
|
use windmill_common::flows::Step;
|
|
#[cfg(feature = "parquet")]
|
|
use windmill_types::s3::{LargeFileStorage, ObjectStoreResource, S3Object};
|
|
#[cfg(feature = "parquet")]
|
|
use windmill_object_store::get_etag_or_empty;
|
|
use windmill_common::variables::{build_crypt_with_key_suffix, decrypt};
|
|
use windmill_common::worker::{
|
|
to_raw_value, update_ping_for_failed_init_script_query, write_file, Connection, Ping, PingType,
|
|
CLOUD_HOSTED, ROOT_CACHE_DIR, WORKER_CONFIG,
|
|
};
|
|
use windmill_common::workspace_dependencies::WorkspaceDependenciesPrefetched;
|
|
use windmill_common::{
|
|
cache::{Cache, RawData},
|
|
error::{self, Error},
|
|
scripts::ScriptHash,
|
|
utils::configure_client,
|
|
variables::ContextualVariable,
|
|
};
|
|
|
|
use anyhow::{anyhow, Result};
|
|
use windmill_parser_sql::{s3_mode_extension, S3ModeArgs, S3ModeFormat};
|
|
use windmill_queue::{MiniCompletedJob, MiniPulledJob};
|
|
|
|
use std::collections::HashSet;
|
|
use std::path::Path;
|
|
use std::{collections::HashMap, sync::Arc, time::Duration};
|
|
|
|
use uuid::Uuid;
|
|
use windmill_common::{variables, DB};
|
|
|
|
use tokio::{io::AsyncWriteExt, time::Instant};
|
|
|
|
use crate::agent_workers::UPDATE_PING_URL;
|
|
use crate::{JOB_DEFAULT_TIMEOUT, MAX_RESULT_SIZE, MAX_TIMEOUT_DURATION, PATH_ENV};
|
|
use windmill_common::client::AuthedClient;
|
|
|
|
/// Additional nsjail config for development. Currently used for nix flake.
|
|
#[cfg(debug_assertions)]
|
|
pub const DEV_CONF_NSJAIL: &str = r#"
|
|
mount {
|
|
src: "/nix/store"
|
|
dst: "/nix/store"
|
|
is_bind: true
|
|
mandatory: false
|
|
}
|
|
"#;
|
|
|
|
#[cfg(not(debug_assertions))]
|
|
pub const DEV_CONF_NSJAIL: &str = "";
|
|
|
|
pub async fn build_args_map<'a>(
|
|
job: &'a MiniPulledJob,
|
|
client: &AuthedClient,
|
|
conn: &Connection,
|
|
) -> error::Result<Option<HashMap<String, Box<RawValue>>>> {
|
|
if let Some(args) = &job.args {
|
|
return transform_json(client, &job.workspace_id, &args.0, &job, conn).await;
|
|
}
|
|
return Ok(None);
|
|
}
|
|
|
|
pub fn check_executor_binary_exists(
|
|
executor: &str,
|
|
executor_path: &str,
|
|
language: &str,
|
|
) -> Result<(), Error> {
|
|
if !Path::new(executor_path).exists() {
|
|
#[cfg(feature = "enterprise")]
|
|
let msg = format!("Couldn't find {executor} at {}. This probably means that you are not using the windmill-ee-full image. Please use the image `ghcr.io/windmill-labs/windmill-ee-full` for your instance in order to run {language} jobs.", executor_path);
|
|
|
|
#[cfg(not(feature = "enterprise"))]
|
|
let msg = format!("Couldn't find {executor} at {}. This probably means that you are not using the windmill-full image. Please use the image `ghcr.io/windmill-labs/windmill-full` for your instance in order to run {language} jobs.", executor_path);
|
|
return Err(Error::NotFound(msg));
|
|
}
|
|
|
|
Ok(())
|
|
}
|
|
|
|
pub async fn build_args_values(
|
|
job: &MiniPulledJob,
|
|
client: &AuthedClient,
|
|
conn: &Connection,
|
|
) -> error::Result<HashMap<String, serde_json::Value>> {
|
|
if let Some(args) = &job.args {
|
|
transform_json_as_values(client, &job.workspace_id, &args.0, job, conn).await
|
|
} else {
|
|
Ok(HashMap::new())
|
|
}
|
|
}
|
|
|
|
#[tracing::instrument(level = "trace", skip_all)]
|
|
pub async fn create_args_and_out_file(
|
|
client: &AuthedClient,
|
|
job: &MiniPulledJob,
|
|
job_dir: &str,
|
|
conn: &Connection,
|
|
) -> Result<(), Error> {
|
|
if let Some(args) = job.args.as_ref() {
|
|
if let Some(x) = transform_json(client, &job.workspace_id, &args.0, job, conn).await? {
|
|
write_file(
|
|
job_dir,
|
|
"args.json",
|
|
&serde_json::to_string(&x).unwrap_or_else(|_| "{}".to_string()),
|
|
)?;
|
|
} else {
|
|
write_file(
|
|
job_dir,
|
|
"args.json",
|
|
&serde_json::to_string(&args).unwrap_or_else(|_| "{}".to_string()),
|
|
)?;
|
|
}
|
|
} else {
|
|
write_file(job_dir, "args.json", "{}")?;
|
|
};
|
|
|
|
write_file(job_dir, "result.json", "")?;
|
|
Ok(())
|
|
}
|
|
|
|
pub async fn write_file_binary(dir: &str, path: &str, content: &[u8]) -> error::Result<File> {
|
|
let path = format!("{}/{}", dir, path);
|
|
let mut file = File::create(&path).await?;
|
|
file.write_all(content).await?;
|
|
file.flush().await?;
|
|
Ok(file)
|
|
}
|
|
|
|
lazy_static::lazy_static! {
|
|
static ref RE_RES_VAR: Regex = Regex::new(r#"\$(?:var|res|encrypted)\:"#).unwrap();
|
|
}
|
|
|
|
pub async fn transform_json<'a>(
|
|
client: &AuthedClient,
|
|
workspace: &str,
|
|
vs: &'a HashMap<String, Box<RawValue>>,
|
|
job: &MiniPulledJob,
|
|
db: &Connection,
|
|
) -> error::Result<Option<HashMap<String, Box<RawValue>>>> {
|
|
let mut has_match = false;
|
|
for (_, v) in vs {
|
|
let inner_vs = v.get();
|
|
if (*RE_RES_VAR).is_match(inner_vs) {
|
|
has_match = true;
|
|
break;
|
|
}
|
|
}
|
|
if !has_match {
|
|
return Ok(None);
|
|
}
|
|
let mut r = HashMap::new();
|
|
for (k, v) in vs {
|
|
let inner_vs = v.get();
|
|
if (*RE_RES_VAR).is_match(inner_vs) {
|
|
let value = serde_json::from_str(inner_vs).map_err(|e| {
|
|
error::Error::internal_err(format!("Error while parsing inner arg: {e:#}"))
|
|
})?;
|
|
let transformed =
|
|
transform_json_value(&k, &client, workspace, value, job, db, 0).await?;
|
|
let as_raw = serde_json::from_value(transformed).map_err(|e| {
|
|
error::Error::internal_err(format!("Error while parsing inner arg: {e:#}"))
|
|
})?;
|
|
r.insert(k.to_string(), as_raw);
|
|
} else {
|
|
r.insert(k.to_string(), v.to_owned());
|
|
}
|
|
}
|
|
Ok(Some(r))
|
|
}
|
|
|
|
pub async fn transform_json_as_values<'a>(
|
|
client: &AuthedClient,
|
|
workspace: &str,
|
|
vs: &'a HashMap<String, Box<RawValue>>,
|
|
job: &MiniPulledJob,
|
|
db: &Connection,
|
|
) -> error::Result<HashMap<String, serde_json::Value>> {
|
|
let mut r: HashMap<String, serde_json::Value> = HashMap::new();
|
|
for (k, v) in vs {
|
|
let inner_vs = v.get();
|
|
if (*RE_RES_VAR).is_match(inner_vs) {
|
|
let value = serde_json::from_str(inner_vs).map_err(|e| {
|
|
error::Error::internal_err(format!("Error while parsing inner arg: {e:#}"))
|
|
})?;
|
|
let transformed =
|
|
transform_json_value(&k, &client, workspace, value, job, db, 0).await?;
|
|
let as_raw = serde_json::from_value(transformed).map_err(|e| {
|
|
error::Error::internal_err(format!("Error while parsing inner arg: {e:#}"))
|
|
})?;
|
|
r.insert(k.to_string(), as_raw);
|
|
} else {
|
|
r.insert(
|
|
k.to_string(),
|
|
serde_json::from_str(v.get()).unwrap_or_else(|_| serde_json::Value::Null),
|
|
);
|
|
}
|
|
}
|
|
Ok(r)
|
|
}
|
|
|
|
pub fn parse_npm_config(s: &str) -> (String, Option<String>) {
|
|
let (url, token_opt) = if s.contains(":_authToken=") {
|
|
let split_url = s.split(":_authToken=").collect::<Vec<&str>>();
|
|
let url = split_url
|
|
.get(0)
|
|
.map(|u| u.to_string())
|
|
.unwrap_or("".to_string());
|
|
let token = split_url
|
|
.get(1)
|
|
.map(|t| t.to_string())
|
|
.unwrap_or("".to_string());
|
|
(url, Some(token))
|
|
} else {
|
|
(s.to_owned(), None)
|
|
};
|
|
return (url, token_opt);
|
|
}
|
|
|
|
#[async_recursion]
|
|
pub async fn transform_json_value(
|
|
name: &str,
|
|
client: &AuthedClient,
|
|
workspace: &str,
|
|
v: Value,
|
|
job: &MiniPulledJob,
|
|
conn: &Connection,
|
|
depth: u8,
|
|
) -> error::Result<Value> {
|
|
match v {
|
|
Value::String(y) if y.starts_with("$var:") => {
|
|
let path = y.strip_prefix("$var:").unwrap();
|
|
client
|
|
.get_variable_value(path)
|
|
.await
|
|
.map(|x| json!(x))
|
|
.map_err(|e| {
|
|
Error::NotFound(format!("Variable {path} not found for `{name}`: {e:#}"))
|
|
})
|
|
}
|
|
Value::String(y) if y.starts_with("$res:") => {
|
|
let path = y.strip_prefix("$res:").unwrap();
|
|
|
|
if path.split("/").count() < 2 && !path.starts_with("CUSTOM_INSTANCE_DB/") {
|
|
return Err(Error::internal_err(format!(
|
|
"Argument `{name}` is an invalid resource path: {path}",
|
|
)));
|
|
}
|
|
client
|
|
.get_resource_value_interpolated::<serde_json::Value>(
|
|
path,
|
|
Some(job.id.to_string()),
|
|
)
|
|
.await
|
|
.map_err(|e| {
|
|
Error::NotFound(format!("Resource {path} not found for `{name}`: {e:#}"))
|
|
})
|
|
}
|
|
Value::String(y) if y.starts_with("$encrypted:") => {
|
|
match conn {
|
|
Connection::Sql(db) => {
|
|
let encrypted = y.strip_prefix("$encrypted:").unwrap();
|
|
|
|
let root_job_id = get_root_job_id(&job);
|
|
let mc = build_crypt_with_key_suffix(
|
|
&db,
|
|
&job.workspace_id,
|
|
&root_job_id.to_string(),
|
|
)
|
|
.await?;
|
|
decrypt(&mc, encrypted.to_string()).and_then(|x| {
|
|
serde_json::from_str(&x).map_err(|e| {
|
|
Error::internal_err(format!(
|
|
"Failed to decrypt '$encrypted:' value: {e}"
|
|
))
|
|
})
|
|
})
|
|
}
|
|
Connection::Http(_) => {
|
|
Err(Error::NotFound("Http connection not supported".to_string()))
|
|
}
|
|
}
|
|
|
|
// let path = y.strip_prefix("$res:").unwrap();
|
|
}
|
|
Value::String(y) if y.starts_with("$") => {
|
|
let variables = get_reserved_variables(job, &client.token, conn, None).await?;
|
|
|
|
let name = y.strip_prefix("$").unwrap();
|
|
|
|
let value = variables
|
|
.iter()
|
|
.find(|x| x.0 == name)
|
|
.map(|x| x.1.clone())
|
|
.unwrap_or_else(|| y);
|
|
Ok(json!(value))
|
|
}
|
|
Value::Array(mut arr) if depth <= 2 && arr.len() <= 1000 => {
|
|
for i in 0..arr.len() {
|
|
let val = std::mem::take(&mut arr[i]);
|
|
arr[i] = transform_json_value(name, client, workspace, val, job, conn, depth + 1)
|
|
.await?;
|
|
}
|
|
Ok(Value::Array(arr))
|
|
}
|
|
Value::Array(arr) => {
|
|
if arr.len() > 1000 {
|
|
tracing::warn!(
|
|
"Array with {} items exceeds 1000 item limit for variable/resource resolution, skipping",
|
|
arr.len()
|
|
);
|
|
}
|
|
Ok(Value::Array(arr))
|
|
}
|
|
Value::Object(mut m) => {
|
|
for (a, b) in m.clone().into_iter() {
|
|
m.insert(
|
|
a.clone(),
|
|
transform_json_value(&a, client, workspace, b, job, conn, depth + 1).await?,
|
|
);
|
|
}
|
|
Ok(Value::Object(m))
|
|
}
|
|
a @ _ => Ok(a),
|
|
}
|
|
}
|
|
|
|
pub async fn read_file_content(path: &str) -> error::Result<String> {
|
|
let mut file = File::open(path).await?;
|
|
let mut content = "".to_string();
|
|
file.read_to_string(&mut content).await?;
|
|
Ok(content)
|
|
}
|
|
|
|
pub async fn read_file_bytes(path: &str) -> error::Result<Vec<u8>> {
|
|
let mut file = File::open(path).await?;
|
|
let mut content = Vec::new();
|
|
file.read_to_end(&mut content).await?;
|
|
Ok(content)
|
|
}
|
|
|
|
pub use windmill_common::utils::unsafe_raw;
|
|
|
|
fn check_result_too_big(size: usize) -> error::Result<()> {
|
|
if *CLOUD_HOSTED && size > MAX_RESULT_SIZE {
|
|
return Err(error::Error::ExecutionErr("Result is too large for the cloud app (limit 2MB).
|
|
We highly recommend using object to store and pass heavy data (https://www.windmill.dev/docs/core_concepts/object_storage_in_windmill#read-a-file-from-s3-within-a-script)
|
|
Alternatively, if using this script as part of a flow, activate shared folder and use the shared folder to pass heavy data between steps.".to_owned()));
|
|
};
|
|
Ok(())
|
|
}
|
|
|
|
/// This function assumes that the file contains valid json and will result in UB if it isn't. If
|
|
/// the file is user generated or otherwise not guaranteed to be valid used the
|
|
/// `read_and_check_file` instead
|
|
pub async fn read_file(path: &str) -> error::Result<Box<RawValue>> {
|
|
let content = read_file_content(path).await?;
|
|
|
|
check_result_too_big(content.len())?;
|
|
|
|
let r = unsafe_raw(content);
|
|
return Ok(r);
|
|
}
|
|
|
|
pub async fn merge_result_stream(
|
|
result: error::Result<Box<RawValue>>,
|
|
result_stream: Option<String>,
|
|
) -> error::Result<Box<RawValue>> {
|
|
if let Some(result_stream) = result_stream {
|
|
result.and_then(|x| {
|
|
let mut value: Value = serde_json::from_str(x.get())?;
|
|
|
|
// Insert the string at the "wm_stream" field
|
|
if let Value::Object(ref mut map) = value {
|
|
map.insert("wm_stream".to_string(), Value::String(result_stream));
|
|
} else if value.is_null() {
|
|
// return Ok(unsafe_raw(json))
|
|
return Ok(to_raw_value(&json!(result_stream)));
|
|
} else {
|
|
return Ok(x);
|
|
}
|
|
|
|
// Convert back to RawValue
|
|
let json_string = serde_json::to_string(&value)?;
|
|
Ok(RawValue::from_string(json_string)?)
|
|
})
|
|
} else {
|
|
result
|
|
}
|
|
}
|
|
/// Read the `result.json` file. This function assumes that the file contains valid json and will
|
|
/// result in undefined behaviour if it isn't. If the result.json is user generated or otherwise
|
|
/// not guaranteed to be valid, use `read_and_check_result`
|
|
pub async fn read_result(
|
|
job_dir: &str,
|
|
result_stream: Option<String>,
|
|
) -> error::Result<Box<RawValue>> {
|
|
let rf = read_file(&format!("{job_dir}/result.json")).await;
|
|
merge_result_stream(rf, result_stream).await
|
|
}
|
|
|
|
pub async fn read_and_check_file(path: &str) -> error::Result<Box<RawValue>> {
|
|
let content = read_file_content(path).await?;
|
|
|
|
check_result_too_big(content.len())?;
|
|
|
|
let raw_value: Box<RawValue> =
|
|
serde_json::from_str(&content).map_err(|e| anyhow!("{} is not valid json: {}", path, e))?;
|
|
Ok(raw_value)
|
|
}
|
|
|
|
/// Use this to read `result.json` that were user-generated
|
|
pub async fn read_and_check_result(job_dir: &str) -> error::Result<Box<RawValue>> {
|
|
let result_path = format!("{job_dir}/result.json");
|
|
|
|
if let Ok(metadata) = tokio::fs::metadata(&result_path).await {
|
|
if metadata.len() > 0 {
|
|
return read_and_check_file(&result_path)
|
|
.await
|
|
.map_err(|e| anyhow!("Failed to read result: {}", e).into());
|
|
}
|
|
}
|
|
Ok(to_raw_value(&json!("null")))
|
|
}
|
|
|
|
pub fn capitalize(s: &str) -> String {
|
|
let mut c = s.chars();
|
|
match c.next() {
|
|
None => String::new(),
|
|
Some(f) => f.to_uppercase().collect::<String>() + c.as_str(),
|
|
}
|
|
}
|
|
|
|
#[tracing::instrument(level = "trace", skip_all)]
|
|
pub async fn get_reserved_variables(
|
|
job: &MiniPulledJob,
|
|
token: &str,
|
|
db: &Connection,
|
|
parent_runnable_path: Option<String>,
|
|
) -> Result<HashMap<String, String>, Error> {
|
|
let flow_path = if parent_runnable_path.is_some() {
|
|
parent_runnable_path
|
|
} else if let Some(uuid) = job.parent_job {
|
|
match db {
|
|
Connection::Sql(db) => {
|
|
sqlx::query_scalar!("SELECT runnable_path FROM v2_job WHERE id = $1", uuid)
|
|
.fetch_optional(db)
|
|
.await?
|
|
.flatten()
|
|
}
|
|
Connection::Http(_) => None,
|
|
}
|
|
} else {
|
|
None
|
|
};
|
|
|
|
let variables = variables::get_reserved_variables(
|
|
db,
|
|
&job.workspace_id,
|
|
token,
|
|
&job.permissioned_as_email,
|
|
&job.created_by,
|
|
&job.id.to_string(),
|
|
&job.permissioned_as,
|
|
job.runnable_path.clone(),
|
|
job.parent_job.map(|x| x.to_string()),
|
|
flow_path,
|
|
job.schedule_path(),
|
|
job.flow_step_id.clone(),
|
|
job.flow_innermost_root_job.clone().map(|x| x.to_string()),
|
|
Some(get_root_job_id(job).to_string()),
|
|
Some(job.scheduled_for.clone()),
|
|
job.runnable_id,
|
|
job.permissioned_as_end_user_email.clone(),
|
|
)
|
|
.await
|
|
.to_vec();
|
|
|
|
Ok(build_envs_map(variables).await)
|
|
}
|
|
|
|
pub async fn build_envs_map(context: Vec<ContextualVariable>) -> HashMap<String, String> {
|
|
let mut r: HashMap<String, String> =
|
|
context.into_iter().map(|rv| (rv.name, rv.value)).collect();
|
|
|
|
let envs = WORKER_CONFIG.read().await.clone().env_vars;
|
|
for env in envs {
|
|
r.insert(env.0.clone(), env.1.clone());
|
|
}
|
|
|
|
r
|
|
}
|
|
|
|
pub fn sizeof_val(v: &serde_json::Value) -> usize {
|
|
std::mem::size_of::<serde_json::Value>()
|
|
+ match v {
|
|
serde_json::Value::Null => 0,
|
|
serde_json::Value::Bool(_) => 0,
|
|
serde_json::Value::Number(_) => 4, // Incorrect if arbitrary_precision is enabled. oh well
|
|
serde_json::Value::String(s) => s.capacity(),
|
|
serde_json::Value::Array(a) => a.iter().map(sizeof_val).sum(),
|
|
serde_json::Value::Object(o) => o
|
|
.iter()
|
|
.map(|(k, v)| {
|
|
std::mem::size_of::<String>()
|
|
+ k.capacity()
|
|
+ sizeof_val(v)
|
|
+ std::mem::size_of::<usize>() * 3
|
|
})
|
|
.sum(),
|
|
}
|
|
}
|
|
|
|
pub async fn update_worker_ping_for_failed_init_script(
|
|
conn: &Connection,
|
|
worker_name: &str,
|
|
last_job_id: Uuid,
|
|
) {
|
|
match conn {
|
|
Connection::Sql(db) => {
|
|
if let Err(e) =
|
|
update_ping_for_failed_init_script_query(worker_name, last_job_id, db).await
|
|
{
|
|
tracing::error!("Error updating worker ping for failed init script: {e:?}");
|
|
}
|
|
}
|
|
Connection::Http(client) => {
|
|
if let Err(e) = client
|
|
.post::<_, ()>(
|
|
UPDATE_PING_URL,
|
|
None,
|
|
&Ping {
|
|
last_job_executed: Some(last_job_id),
|
|
last_job_workspace_id: None,
|
|
worker_instance: None,
|
|
ip: None,
|
|
tags: None,
|
|
dw: None,
|
|
dws: None,
|
|
jobs_executed: None,
|
|
occupancy_rate: None,
|
|
occupancy_rate_15s: None,
|
|
occupancy_rate_5m: None,
|
|
occupancy_rate_30m: None,
|
|
version: None,
|
|
vcpus: None,
|
|
memory: None,
|
|
memory_usage: None,
|
|
wm_memory_usage: None,
|
|
job_isolation: None,
|
|
native_mode: None,
|
|
ping_type: PingType::InitScript,
|
|
},
|
|
)
|
|
.await
|
|
{
|
|
tracing::error!("Error updating worker ping for failed init script: {e:?}");
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
#[derive(Clone)]
|
|
pub struct OccupancyMetrics {
|
|
pub running_job_started_at: Option<Instant>,
|
|
pub total_duration_of_running_jobs: f32,
|
|
pub worker_occupancy_rate_history: Vec<(f32, f32)>,
|
|
pub start_time: Instant,
|
|
}
|
|
|
|
pub struct OccupancyResult {
|
|
pub occupancy_rate: f32,
|
|
pub occupancy_rate_15s: Option<f32>,
|
|
pub occupancy_rate_5m: Option<f32>,
|
|
pub occupancy_rate_30m: Option<f32>,
|
|
}
|
|
|
|
impl OccupancyMetrics {
|
|
pub fn new(start_time: Instant) -> Self {
|
|
OccupancyMetrics {
|
|
running_job_started_at: None,
|
|
total_duration_of_running_jobs: 0.0,
|
|
worker_occupancy_rate_history: Vec::new(),
|
|
start_time,
|
|
}
|
|
}
|
|
|
|
pub fn update_occupancy_metrics(&mut self) -> OccupancyResult {
|
|
let metrics = self;
|
|
let current_occupied_duration = metrics
|
|
.running_job_started_at
|
|
.map(|started_at| started_at.elapsed().as_secs_f32())
|
|
.unwrap_or(0.0);
|
|
let total_occupation = metrics.total_duration_of_running_jobs + current_occupied_duration;
|
|
|
|
let elapsed = metrics.start_time.elapsed().as_secs_f32();
|
|
|
|
let (occupancy_rate_15s, occupancy_rate_5m, occupancy_rate_30m) =
|
|
if !metrics.worker_occupancy_rate_history.is_empty() {
|
|
let mut total_occupation_15s = 0.0;
|
|
let mut total_occupation_5m = 0.0;
|
|
let mut total_occupation_30m = 0.0;
|
|
let mut index30m = 0;
|
|
for (i, (past_total_occupation, time)) in
|
|
metrics.worker_occupancy_rate_history.iter().enumerate()
|
|
{
|
|
let diff = elapsed - time;
|
|
if diff < 1800.0 && total_occupation_30m == 0.0 {
|
|
total_occupation_30m = (total_occupation - past_total_occupation) / diff;
|
|
index30m = i;
|
|
}
|
|
if diff < 300.0 && total_occupation_5m == 0.0 {
|
|
total_occupation_5m = (total_occupation - past_total_occupation) / diff;
|
|
}
|
|
if diff < 15.0 {
|
|
total_occupation_15s = (total_occupation - past_total_occupation) / diff;
|
|
break;
|
|
}
|
|
}
|
|
|
|
//drop all elements before the oldest one in 30m windows
|
|
metrics.worker_occupancy_rate_history.drain(..index30m);
|
|
|
|
// Only report occupancy for a window if the worker has been running
|
|
// long enough to have meaningful data for that window. Otherwise,
|
|
// short-lived workers would report misleadingly high occupancy rates.
|
|
(
|
|
if elapsed >= 15.0 {
|
|
Some(total_occupation_15s)
|
|
} else {
|
|
None
|
|
},
|
|
if elapsed >= 300.0 {
|
|
Some(total_occupation_5m)
|
|
} else {
|
|
None
|
|
},
|
|
if elapsed >= 1800.0 {
|
|
Some(total_occupation_30m)
|
|
} else {
|
|
None
|
|
},
|
|
)
|
|
} else {
|
|
(None, None, None)
|
|
};
|
|
let occupancy_rate = total_occupation / elapsed;
|
|
|
|
//push the current occupancy rate and the timestamp
|
|
metrics
|
|
.worker_occupancy_rate_history
|
|
.push((total_occupation, elapsed));
|
|
|
|
OccupancyResult {
|
|
occupancy_rate,
|
|
occupancy_rate_15s,
|
|
occupancy_rate_5m,
|
|
occupancy_rate_30m,
|
|
}
|
|
}
|
|
}
|
|
|
|
lazy_static! {
|
|
static ref DISABLE_PROCESS_GROUP: bool = std::env::var("DISABLE_PROCESS_GROUP").is_ok();
|
|
}
|
|
|
|
pub fn build_command_with_isolation(program: &str, args: &[&str]) -> Command {
|
|
use tokio::process::Command;
|
|
|
|
if crate::is_unshare_enabled() {
|
|
if let Some(unshare_path) = crate::UNSHARE_PATH.as_ref() {
|
|
let mut cmd = Command::new(unshare_path);
|
|
|
|
let flags = crate::UNSHARE_ISOLATION_FLAGS.as_str();
|
|
for flag in flags.split_whitespace() {
|
|
cmd.arg(flag);
|
|
}
|
|
|
|
// If tini is available, use it for proper PID 1 signal handling
|
|
// (especially OOM exit codes which return 137 instead of sigprocmask errors).
|
|
// Note: --fork should already be in the flags for proper namespace setup.
|
|
if let Some(tini_path) = crate::TINI_AVAILABLE.as_ref() {
|
|
cmd.arg("--");
|
|
cmd.arg(tini_path);
|
|
cmd.arg("-s");
|
|
cmd.arg("--");
|
|
} else {
|
|
// Without tini, just run the command directly (--fork is in flags)
|
|
cmd.arg("--");
|
|
}
|
|
|
|
cmd.arg(program);
|
|
cmd.args(args);
|
|
cmd
|
|
} else {
|
|
panic!(
|
|
"BUG: unshare isolation is enabled but UNSHARE_PATH is None. \
|
|
This should have been caught at worker startup."
|
|
);
|
|
}
|
|
} else {
|
|
let mut cmd = Command::new(program);
|
|
cmd.args(args);
|
|
cmd
|
|
}
|
|
}
|
|
|
|
pub async fn start_child_process(
|
|
cmd: Command,
|
|
executable: &str,
|
|
disable_process_group: bool,
|
|
) -> Result<Box<dyn TokioChildWrapper>, Error> {
|
|
use process_wrap::tokio::*;
|
|
let mut cmd = TokioCommandWrap::from(cmd);
|
|
|
|
if !*DISABLE_PROCESS_GROUP && !disable_process_group {
|
|
#[cfg(unix)]
|
|
{
|
|
use process_wrap::tokio::ProcessGroup;
|
|
|
|
cmd.wrap(ProcessGroup::leader());
|
|
}
|
|
#[cfg(windows)]
|
|
{
|
|
cmd.wrap(JobObject);
|
|
}
|
|
}
|
|
|
|
return cmd
|
|
.spawn()
|
|
.map_err(|err| tentatively_improve_error(err.into(), executable));
|
|
}
|
|
|
|
pub async fn resolve_job_timeout(
|
|
_conn: &Connection,
|
|
_w_id: &str,
|
|
_job_id: Uuid,
|
|
custom_timeout_secs: Option<i32>,
|
|
) -> (Duration, Option<String>, bool) {
|
|
let mut warn_msg: Option<String> = None;
|
|
#[cfg(feature = "cloud")]
|
|
let cloud_premium_workspace =
|
|
*CLOUD_HOSTED
|
|
&& windmill_common::workspaces::get_team_plan_status(
|
|
_conn.as_sql().expect("cloud cannot use http connection"),
|
|
_w_id,
|
|
)
|
|
.await
|
|
.inspect_err(|err| tracing::error!("Failed to get team plan status to resolve job timeout for workspace {_w_id}: {err:#}"))
|
|
.map(|s| s.premium)
|
|
.unwrap_or(true);
|
|
#[cfg(not(feature = "cloud"))]
|
|
let cloud_premium_workspace = false;
|
|
|
|
// compute global max timeout
|
|
let global_max_timeout_duration = if cloud_premium_workspace {
|
|
*MAX_TIMEOUT_DURATION * 6 //30mins
|
|
} else {
|
|
*MAX_TIMEOUT_DURATION
|
|
};
|
|
|
|
match custom_timeout_secs {
|
|
Some(timeout_secs)
|
|
if Duration::from_secs(timeout_secs as u64) < global_max_timeout_duration =>
|
|
{
|
|
(Duration::from_secs(timeout_secs as u64), warn_msg, true)
|
|
}
|
|
Some(timeout_secs) => {
|
|
warn_msg = Some(format!("WARNING: Custom job timeout of {timeout_secs} seconds was greater than the maximum timeout. It will be ignored and the max timeout will be used instead"));
|
|
tracing::warn!(warn_msg);
|
|
(global_max_timeout_duration, warn_msg, false)
|
|
}
|
|
None => {
|
|
// fallback to default timeout or max if not set
|
|
let default_timeout = match JOB_DEFAULT_TIMEOUT.read().await.clone() {
|
|
None => global_max_timeout_duration,
|
|
Some(default_timeout_secs)
|
|
if Duration::from_secs(default_timeout_secs as u64)
|
|
< global_max_timeout_duration =>
|
|
{
|
|
Duration::from_secs(default_timeout_secs as u64)
|
|
}
|
|
Some(default_timeout_secs) => {
|
|
warn_msg = Some(format!("WARNING: Default job timeout of {default_timeout_secs} seconds was greater than the maximum timeout. It will be ignored and the global max timeout will be used instead"));
|
|
tracing::warn!(warn_msg);
|
|
global_max_timeout_duration
|
|
}
|
|
};
|
|
(default_timeout, warn_msg, false)
|
|
}
|
|
}
|
|
}
|
|
|
|
async fn hash_args(
|
|
#[allow(unused)] db: &DB,
|
|
#[allow(unused)] client: &AuthedClient,
|
|
#[allow(unused)] workspace_id: &str,
|
|
v: &Option<Json<HashMap<String, Box<RawValue>>>>,
|
|
hasher: &mut sha2::Sha256,
|
|
#[allow(unused)] job_id: &Uuid,
|
|
#[allow(unused)] ignore_s3_path: bool,
|
|
) {
|
|
if let Some(Json(hm)) = v {
|
|
for k in hm.keys().sorted() {
|
|
hasher.update(k.as_bytes());
|
|
let arg_value = hm.get(k).unwrap();
|
|
|
|
#[cfg(feature = "parquet")]
|
|
let etag = match serde_json::from_str::<S3Object>(arg_value.get()).ok() {
|
|
Some(s3_object) => {
|
|
let s3_resource = get_workspace_s3_resource_path(
|
|
db,
|
|
client,
|
|
workspace_id,
|
|
s3_object.storage.as_ref(),
|
|
job_id,
|
|
)
|
|
.await
|
|
.ok()
|
|
.flatten();
|
|
match s3_resource {
|
|
Some(s3_resource) => get_etag_or_empty(&s3_resource, s3_object).await,
|
|
None => None,
|
|
}
|
|
}
|
|
None => None,
|
|
};
|
|
|
|
#[cfg(feature = "parquet")]
|
|
if let Some(etag) = etag {
|
|
hasher.update(etag.as_bytes());
|
|
if ignore_s3_path {
|
|
continue;
|
|
}
|
|
}
|
|
hasher.update(arg_value.get().as_bytes());
|
|
}
|
|
}
|
|
}
|
|
|
|
pub async fn cached_result_path(
|
|
db: &DB,
|
|
client: &AuthedClient,
|
|
job: &MiniPulledJob,
|
|
raw_data: Option<&RawData>,
|
|
) -> String {
|
|
let mut hasher = sha2::Sha256::new();
|
|
hasher.update(&[job.kind as u8]);
|
|
if let Some(ScriptHash(hash)) = job.runnable_id {
|
|
hasher.update(&hash.to_le_bytes())
|
|
} else {
|
|
job.runnable_path
|
|
.as_ref()
|
|
.inspect(|x| hasher.update(x.as_bytes()));
|
|
match raw_data {
|
|
Some(RawData::Flow(data)) => hasher.update(data.raw_flow.get()),
|
|
Some(RawData::Script(data)) => hasher.update(&data.code),
|
|
_ => {}
|
|
}
|
|
}
|
|
hash_args(
|
|
db,
|
|
client,
|
|
&job.workspace_id,
|
|
&job.args,
|
|
&mut hasher,
|
|
&job.id,
|
|
job.cache_ignore_s3_path.unwrap_or(false),
|
|
)
|
|
.await;
|
|
format!("g/results/{:064x}", hasher.finalize())
|
|
}
|
|
|
|
#[cfg(feature = "parquet")]
|
|
async fn get_workspace_s3_resource_path(
|
|
db: &DB,
|
|
client: &AuthedClient,
|
|
workspace_id: &str,
|
|
storage: Option<&String>,
|
|
job_id: &Uuid,
|
|
) -> windmill_common::error::Result<Option<ObjectStoreResource>> {
|
|
use windmill_object_store::job_s3_helpers_oss::get_s3_resource_internal;
|
|
use windmill_types::s3::StorageResourceType;
|
|
|
|
let raw_lfs_opt = if let Some(storage) = storage {
|
|
sqlx::query_scalar!(
|
|
"SELECT large_file_storage->'secondary_storage'->$2 FROM workspace_settings WHERE workspace_id = $1",
|
|
workspace_id,
|
|
storage
|
|
)
|
|
.fetch_optional(db)
|
|
.await?
|
|
.flatten()
|
|
} else {
|
|
sqlx::query_scalar!(
|
|
"SELECT large_file_storage FROM workspace_settings WHERE workspace_id = $1",
|
|
workspace_id
|
|
)
|
|
.fetch_optional(db)
|
|
.await?
|
|
.flatten()
|
|
};
|
|
let raw_lfs_opt = raw_lfs_opt
|
|
.map(|val| serde_json::from_value::<LargeFileStorage>(val).ok())
|
|
.flatten();
|
|
|
|
let (rt, path) = match raw_lfs_opt {
|
|
Some(LargeFileStorage::S3Storage(s3_storage)) => {
|
|
let resource_path = s3_storage.s3_resource_path.trim_start_matches("$res:");
|
|
(StorageResourceType::S3, resource_path.to_string())
|
|
}
|
|
Some(LargeFileStorage::AzureBlobStorage(azure_blob_storage)) => {
|
|
let resource_path = azure_blob_storage
|
|
.azure_blob_resource_path
|
|
.trim_start_matches("$res:");
|
|
(StorageResourceType::AzureBlob, resource_path.to_string())
|
|
}
|
|
Some(LargeFileStorage::S3AwsOidc(s3_aws_oidc)) => {
|
|
let resource_path = s3_aws_oidc.s3_resource_path.trim_start_matches("$res:");
|
|
(StorageResourceType::S3AwsOidc, resource_path.to_string())
|
|
}
|
|
Some(LargeFileStorage::AzureWorkloadIdentity(azure)) => {
|
|
let resource_path = azure.azure_blob_resource_path.trim_start_matches("$res:");
|
|
(
|
|
StorageResourceType::AzureWorkloadIdentity,
|
|
resource_path.to_string(),
|
|
)
|
|
}
|
|
Some(LargeFileStorage::GoogleCloudStorage(gcs)) => {
|
|
let resource_path = gcs.gcs_resource_path.trim_start_matches("$res:");
|
|
(
|
|
StorageResourceType::GoogleCloudStorage,
|
|
resource_path.to_string(),
|
|
)
|
|
}
|
|
Some(LargeFileStorage::FilesystemStorage(fs)) => {
|
|
(StorageResourceType::Filesystem, fs.root_path.clone())
|
|
}
|
|
None => {
|
|
return Ok(None);
|
|
}
|
|
};
|
|
|
|
let s3_resource_value_raw = client
|
|
.get_resource_value_interpolated::<serde_json::Value>(
|
|
path.as_str(),
|
|
Some(job_id.to_string()),
|
|
)
|
|
.await?;
|
|
let object_store_resource = get_s3_resource_internal(
|
|
rt,
|
|
s3_resource_value_raw,
|
|
windmill_object_store::job_s3_helpers_oss::TokenGenerator::AsClient(client),
|
|
db,
|
|
)
|
|
.await?;
|
|
|
|
// Check bucket workspace restrictions
|
|
use windmill_object_store::ObjectStoreResource;
|
|
let bucket_name = match &object_store_resource {
|
|
ObjectStoreResource::S3(s3_resource) => Some(&s3_resource.bucket),
|
|
ObjectStoreResource::Azure(azure_resource) => Some(&azure_resource.container_name),
|
|
ObjectStoreResource::Gcs(gcs_resource) => Some(&gcs_resource.bucket),
|
|
ObjectStoreResource::Filesystem(_) => None,
|
|
};
|
|
|
|
if let Some(bucket) = bucket_name {
|
|
windmill_object_store::check_bucket_workspace_restriction(bucket, workspace_id)?;
|
|
}
|
|
|
|
Ok(Some(object_store_resource))
|
|
}
|
|
|
|
#[derive(Deserialize, Serialize)]
|
|
struct CachedResource {
|
|
expire: i64,
|
|
value: Arc<Box<RawValue>>,
|
|
}
|
|
|
|
impl CachedResource {
|
|
fn expired(&self) -> bool {
|
|
self.expire <= chrono::Utc::now().timestamp()
|
|
}
|
|
}
|
|
|
|
lazy_static! {
|
|
/// In-memory cache for resources.
|
|
static ref CACHED_RESULTS: Cache<String, Arc<CachedResource>> = Cache::new(1000);
|
|
}
|
|
|
|
pub async fn get_cached_resource_value_if_valid(
|
|
_db: &DB,
|
|
client: &AuthedClient,
|
|
_workspace_id: &str,
|
|
cached_res_path: &str,
|
|
) -> Option<Arc<Box<RawValue>>> {
|
|
let resource = match CACHED_RESULTS
|
|
.get_value_or_guard_async(cached_res_path)
|
|
.await
|
|
{
|
|
// check for cache expiration.
|
|
Ok(resource) if resource.expired() => {
|
|
let _ = CACHED_RESULTS.remove(cached_res_path);
|
|
return None;
|
|
}
|
|
// resource is in cache and not expired, return it.
|
|
Ok(resource) => resource,
|
|
// resource is not in cache, fetch it from the database.
|
|
Err(entry) => match client
|
|
.get_resource_value::<CachedResource>(cached_res_path)
|
|
.await
|
|
.ok()
|
|
{
|
|
None => return None,
|
|
// check for cache expiration.
|
|
Some(resource) if resource.expired() => return None,
|
|
Some(resource) => {
|
|
let resource = Arc::new(resource);
|
|
let _ = entry.insert(resource.clone());
|
|
resource
|
|
}
|
|
},
|
|
};
|
|
|
|
Some(resource.value.clone())
|
|
}
|
|
|
|
pub async fn save_in_cache(
|
|
db: &Pool<Postgres>,
|
|
_client: &AuthedClient,
|
|
job: &MiniCompletedJob,
|
|
cached_path: String,
|
|
r: Arc<Box<RawValue>>,
|
|
) {
|
|
let expire = chrono::Utc::now().timestamp() + job.cache_ttl.unwrap() as i64;
|
|
|
|
let store_cache_resource = CachedResource { expire, value: r };
|
|
let raw_json = Json(&store_cache_resource);
|
|
|
|
if let Err(e) = sqlx::query!(
|
|
"INSERT INTO resource
|
|
(workspace_id, path, value, resource_type, created_by, edited_at)
|
|
VALUES ($1, $2, $3, $4, $5, now()) ON CONFLICT (workspace_id, path)
|
|
DO UPDATE SET value = EXCLUDED.value, edited_at = now()",
|
|
job.workspace_id,
|
|
&cached_path,
|
|
raw_json as Json<&CachedResource>,
|
|
"cache",
|
|
job.created_by
|
|
)
|
|
.execute(db)
|
|
.await
|
|
{
|
|
tracing::error!("Error creating cache resource {e:#}")
|
|
}
|
|
|
|
// Cache result in-memory.
|
|
CACHED_RESULTS.insert(cached_path, Arc::new(store_cache_resource));
|
|
}
|
|
|
|
fn tentatively_improve_error(err: Error, executable: &str) -> Error {
|
|
#[cfg(unix)]
|
|
let err_msgs = vec!["os error 2", "os error 3", "No such file or directory"];
|
|
|
|
#[cfg(windows)]
|
|
let err_msgs = vec!["program not found", "os error 2", "os error 3"];
|
|
|
|
if err_msgs.iter().any(|msg| err.to_string().contains(msg)) {
|
|
return Error::internal_err(format!(
|
|
"Executable {executable} not found on worker. PATH: {}",
|
|
*PATH_ENV
|
|
));
|
|
}
|
|
return Error::ExecutionErr(format!("Error executing {executable}: {err:#}"));
|
|
}
|
|
|
|
pub async fn clean_cache() -> error::Result<()> {
|
|
tracing::info!("Started cleaning cache");
|
|
tokio::fs::remove_dir_all(ROOT_CACHE_DIR).await?;
|
|
tracing::info!("Finished cleaning cache");
|
|
Ok(())
|
|
}
|
|
|
|
lazy_static::lazy_static! {
|
|
static ref RE_FLOW_ROOT: Regex = Regex::new(r"(?i)(.*?)(?:/branchone-\d+/|/branchall-\d+/|/loop-\d+|/forloop-\d+/)").unwrap();
|
|
|
|
}
|
|
|
|
pub fn use_flow_root_path(flow_path: &str) -> String {
|
|
if let Some(captures) = RE_FLOW_ROOT.captures(flow_path) {
|
|
return captures
|
|
.get(1)
|
|
.map(|m| format!("{}/flow", m.as_str()))
|
|
.unwrap_or_else(|| flow_path.to_string());
|
|
} else {
|
|
return flow_path.to_string();
|
|
}
|
|
}
|
|
|
|
pub fn build_http_client(timeout_duration: std::time::Duration) -> error::Result<Client> {
|
|
configure_client(
|
|
reqwest::ClientBuilder::new()
|
|
.user_agent("windmill/beta")
|
|
.timeout(timeout_duration)
|
|
.connect_timeout(std::time::Duration::from_secs(10)),
|
|
)
|
|
.build()
|
|
.map_err(|e| Error::internal_err(format!("Error building http client: {e:#}")))
|
|
}
|
|
|
|
pub fn get_root_job_id(job: &MiniPulledJob) -> uuid::Uuid {
|
|
job.root_job
|
|
.or(job.flow_innermost_root_job)
|
|
.or(job.parent_job)
|
|
.unwrap_or(job.id)
|
|
}
|
|
|
|
#[derive(Clone)]
|
|
pub struct StreamNotifier {
|
|
db: DB,
|
|
job_id: uuid::Uuid,
|
|
parent_job: uuid::Uuid,
|
|
root_job: uuid::Uuid,
|
|
flow_step_id: Option<String>,
|
|
}
|
|
|
|
// Helper struct to hold parent job information
|
|
#[derive(Debug)]
|
|
struct JobInfo {
|
|
flow_step_id: Option<String>,
|
|
step: Option<i32>,
|
|
len: Option<i32>,
|
|
is_branch_one: Option<bool>,
|
|
next_parent: Option<Uuid>,
|
|
}
|
|
|
|
// Shared helper function to fetch parent job info with flow status
|
|
async fn get_job_info(db: &DB, job_id: Uuid) -> error::Result<JobInfo> {
|
|
sqlx::query_as!(
|
|
JobInfo,
|
|
r#"SELECT
|
|
flow_step_id,
|
|
(flow_status->'step')::integer as step,
|
|
jsonb_array_length(flow_status->'modules') as len,
|
|
runnable_path ~ '/branchone-\d+$' as is_branch_one,
|
|
parent_job as next_parent
|
|
FROM v2_job
|
|
LEFT JOIN v2_job_status USING (id)
|
|
WHERE v2_job.id = $1"#,
|
|
job_id
|
|
)
|
|
.fetch_one(db)
|
|
.await
|
|
.map_err(|e| Error::internal_err(format!("fetching parent job info: {e:#}")))
|
|
}
|
|
|
|
async fn check_if_last_step(
|
|
db: &DB,
|
|
mut next_parent: Option<Uuid>,
|
|
root_job: Uuid,
|
|
) -> error::Result<bool> {
|
|
let mut visited = HashSet::new();
|
|
loop {
|
|
// Get parent of current job
|
|
let Some(parent_job) = next_parent else {
|
|
return Ok(false);
|
|
};
|
|
|
|
// Check for cycles
|
|
if !visited.insert(parent_job) {
|
|
return Ok(false);
|
|
}
|
|
|
|
let parent_info = get_job_info(db, parent_job).await?;
|
|
|
|
if let Some(step) = parent_info.step {
|
|
let step = Step::from_i32_and_len(step, parent_info.len.unwrap_or(0) as usize);
|
|
if step.is_last_step() {
|
|
if parent_job == root_job {
|
|
return Ok(true);
|
|
} else if parent_info.is_branch_one.unwrap_or(false) {
|
|
next_parent = parent_info.next_parent;
|
|
continue;
|
|
}
|
|
}
|
|
}
|
|
|
|
return Ok(false);
|
|
}
|
|
}
|
|
|
|
// Iterative implementation to avoid stack overflow from async_recursion
|
|
// Checks if we're at last step in nested branches AND if any parent's flow_step_id matches early_return_id
|
|
async fn check_if_early_return_or_last_in_early_return_parent(
|
|
db: &DB,
|
|
mut next_parent: Option<Uuid>,
|
|
mut step_id: Option<String>,
|
|
early_return_id: &str,
|
|
root_job: Uuid,
|
|
) -> error::Result<bool> {
|
|
let mut visited = HashSet::new();
|
|
loop {
|
|
if step_id.is_none() {
|
|
return Ok(false);
|
|
}
|
|
|
|
let Some(parent_job) = next_parent else {
|
|
return Ok(false);
|
|
};
|
|
|
|
// Check for cycles
|
|
if !visited.insert(parent_job) {
|
|
return Ok(false);
|
|
}
|
|
|
|
// If the parent's flow_step_id matches early_return_id, we found it!
|
|
if step_id.as_deref() == Some(early_return_id) && parent_job == root_job {
|
|
return Ok(true);
|
|
} else {
|
|
let parent_info = get_job_info(db, parent_job).await?;
|
|
if let Some(step) = parent_info.step {
|
|
let step = Step::from_i32_and_len(step, parent_info.len.unwrap_or(0) as usize);
|
|
// we only continue if we are at the last step and the parent is a branch one
|
|
if step.is_last_step() && parent_info.is_branch_one.unwrap_or(false) {
|
|
next_parent = parent_info.next_parent;
|
|
step_id = parent_info.flow_step_id;
|
|
continue;
|
|
}
|
|
}
|
|
return Ok(false);
|
|
}
|
|
}
|
|
}
|
|
|
|
impl StreamNotifier {
|
|
pub fn new(conn: &Connection, job: &MiniPulledJob) -> Option<Self> {
|
|
let root_job = get_root_job_id(job);
|
|
if job.is_flow_step() && job.parent_job.is_some() {
|
|
match conn {
|
|
Connection::Sql(db) => Some(Self {
|
|
db: db.clone(),
|
|
parent_job: job.parent_job.unwrap(),
|
|
job_id: job.id,
|
|
root_job,
|
|
flow_step_id: job.flow_step_id.clone(),
|
|
}),
|
|
Connection::Http(_) => {
|
|
tracing::warn!(
|
|
"Flow job streaming is only supported for workers connected to a database"
|
|
);
|
|
None
|
|
}
|
|
}
|
|
} else {
|
|
None
|
|
}
|
|
}
|
|
|
|
async fn update_flow_status_with_stream_job_inner(
|
|
db: DB,
|
|
parent_job: Uuid,
|
|
job_id: Uuid,
|
|
root_job: Uuid,
|
|
flow_step_id: Option<String>,
|
|
) -> Result<(), Error> {
|
|
// Check if early_return is set at the flow level
|
|
let early_return_node_id = sqlx::query_scalar!(
|
|
r#"
|
|
SELECT fv.value->>'early_return' as "early_return"
|
|
FROM v2_job j
|
|
INNER JOIN flow_version fv ON fv.id = j.runnable_id
|
|
WHERE j.id = $1
|
|
"#,
|
|
root_job
|
|
)
|
|
.fetch_optional(&db)
|
|
.await?
|
|
.flatten();
|
|
|
|
let should_set_stream_job = if let Some(ref early_return_id) = early_return_node_id {
|
|
check_if_early_return_or_last_in_early_return_parent(
|
|
&db,
|
|
Some(parent_job),
|
|
flow_step_id,
|
|
early_return_id,
|
|
root_job,
|
|
)
|
|
.await?
|
|
} else {
|
|
check_if_last_step(&db, Some(parent_job), root_job).await?
|
|
};
|
|
|
|
if should_set_stream_job {
|
|
sqlx::query!(r#"
|
|
UPDATE v2_job_status
|
|
SET flow_status = jsonb_set(flow_status, array['stream_job'], to_jsonb($1::UUID::TEXT))
|
|
WHERE id = $2"#,
|
|
job_id,
|
|
root_job
|
|
)
|
|
.execute(&db)
|
|
.await?;
|
|
}
|
|
|
|
Ok(())
|
|
}
|
|
|
|
pub fn update_flow_status_with_stream_job(&self) -> () {
|
|
let db = self.db.clone();
|
|
let parent_job = self.parent_job;
|
|
let job_id = self.job_id;
|
|
let root_job = self.root_job;
|
|
let flow_step_id = self.flow_step_id.clone();
|
|
tokio::spawn(async move {
|
|
if let Err(err) = Self::update_flow_status_with_stream_job_inner(
|
|
db,
|
|
parent_job,
|
|
job_id,
|
|
root_job,
|
|
flow_step_id,
|
|
)
|
|
.await
|
|
{
|
|
tracing::error!("Could not notify about stream job {}: {err:#?}", parent_job);
|
|
}
|
|
});
|
|
}
|
|
}
|
|
|
|
#[derive(Clone)]
|
|
pub struct S3ModeWorkerData {
|
|
pub client: AuthedClient,
|
|
pub object_key: String,
|
|
pub format: S3ModeFormat,
|
|
pub storage: Option<String>,
|
|
pub workspace_id: String,
|
|
}
|
|
|
|
impl S3ModeWorkerData {
|
|
pub async fn upload<S>(&self, stream: S) -> anyhow::Result<()>
|
|
where
|
|
S: futures::stream::TryStream + Send + 'static,
|
|
S::Error: Into<Box<dyn std::error::Error + Send + Sync>>,
|
|
bytes::Bytes: From<S::Ok>,
|
|
{
|
|
self.client
|
|
.upload_s3_file(
|
|
self.workspace_id.as_str(),
|
|
self.object_key.clone(),
|
|
self.storage.clone(),
|
|
stream,
|
|
)
|
|
.await
|
|
}
|
|
|
|
pub fn to_return_s3_obj(&self) -> windmill_types::s3::S3Object {
|
|
windmill_types::s3::S3Object {
|
|
s3: self.object_key.clone(),
|
|
storage: self.storage.clone(),
|
|
..Default::default()
|
|
}
|
|
}
|
|
}
|
|
|
|
pub fn s3_mode_args_to_worker_data(
|
|
s3: S3ModeArgs,
|
|
client: AuthedClient,
|
|
job: &MiniPulledJob,
|
|
) -> S3ModeWorkerData {
|
|
S3ModeWorkerData {
|
|
client,
|
|
storage: s3.storage,
|
|
format: s3.format,
|
|
object_key: format!(
|
|
"{}/{}.{}",
|
|
s3.prefix.unwrap_or_else(|| format!(
|
|
"wmill_datalake/{}",
|
|
job.runnable_path
|
|
.as_ref()
|
|
.map(|s| s.as_str())
|
|
.unwrap_or("unknown_script")
|
|
)),
|
|
job.id,
|
|
s3_mode_extension(s3.format)
|
|
),
|
|
workspace_id: job.workspace_id.clone(),
|
|
}
|
|
}
|
|
|
|
#[derive(Debug)]
|
|
pub enum MaybeLock {
|
|
/// Deployed Scripts
|
|
Resolved { lock: String },
|
|
/// Previews
|
|
Unresolved { workspace_dependencies: WorkspaceDependenciesPrefetched },
|
|
}
|
|
|
|
impl MaybeLock {
|
|
pub fn map_unresolved<B, F>(&self, mut f: F) -> Option<B>
|
|
where
|
|
Self: Sized,
|
|
F: FnMut(&WorkspaceDependenciesPrefetched) -> B,
|
|
{
|
|
self.get_workspace_dependencies().map(|wd| f(wd))
|
|
}
|
|
|
|
pub fn get_workspace_dependencies(&self) -> Option<&WorkspaceDependenciesPrefetched> {
|
|
match self {
|
|
MaybeLock::Resolved { .. } => None,
|
|
MaybeLock::Unresolved { ref workspace_dependencies } => Some(workspace_dependencies),
|
|
}
|
|
}
|
|
|
|
pub fn get_lock(&self) -> Option<&String> {
|
|
match self {
|
|
MaybeLock::Resolved { ref lock } => Some(lock),
|
|
MaybeLock::Unresolved { .. } => None,
|
|
}
|
|
}
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
use super::*;
|
|
use serde_json::json;
|
|
use windmill_common::client::AuthedClient;
|
|
|
|
fn test_client() -> AuthedClient {
|
|
AuthedClient::new(
|
|
"http://localhost:0".to_string(),
|
|
"test".to_string(),
|
|
"test-token".to_string(),
|
|
None,
|
|
)
|
|
}
|
|
|
|
fn test_job() -> MiniPulledJob {
|
|
MiniPulledJob {
|
|
workspace_id: "test".to_string(),
|
|
id: uuid::Uuid::nil(),
|
|
args: None,
|
|
parent_job: None,
|
|
created_by: "test".to_string(),
|
|
scheduled_for: chrono::Utc::now(),
|
|
started_at: None,
|
|
runnable_path: None,
|
|
kind: windmill_common::jobs::JobKind::Noop,
|
|
runnable_id: None,
|
|
canceled_reason: None,
|
|
canceled_by: None,
|
|
permissioned_as: "test".to_string(),
|
|
permissioned_as_email: "test@test.com".to_string(),
|
|
flow_status: None,
|
|
tag: "test".to_string(),
|
|
script_lang: None,
|
|
same_worker: false,
|
|
pre_run_error: None,
|
|
concurrent_limit: None,
|
|
concurrency_time_window_s: None,
|
|
flow_innermost_root_job: None,
|
|
root_job: None,
|
|
timeout: None,
|
|
flow_step_id: None,
|
|
cache_ttl: None,
|
|
cache_ignore_s3_path: None,
|
|
priority: None,
|
|
preprocessed: None,
|
|
script_entrypoint_override: None,
|
|
trigger: None,
|
|
trigger_kind: None,
|
|
visible_to_owner: false,
|
|
permissioned_as_end_user_email: None,
|
|
runnable_settings_handle: None,
|
|
}
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn test_transform_array_over_1000_passthrough() {
|
|
let db_url = std::env::var("DATABASE_URL")
|
|
.unwrap_or("postgres://postgres:changeme@localhost:5432/windmill".to_string());
|
|
let pool = sqlx::PgPool::connect(&db_url).await.unwrap();
|
|
let conn = Connection::Sql(pool);
|
|
let client = test_client();
|
|
let job = test_job();
|
|
|
|
let arr: Vec<Value> = (0..1001).map(|i| json!(format!("$var:x/{i}"))).collect();
|
|
let input = Value::Array(arr.clone());
|
|
|
|
let result = transform_json_value("test", &client, "test", input, &job, &conn, 0)
|
|
.await
|
|
.unwrap();
|
|
|
|
assert_eq!(result, Value::Array(arr));
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn test_transform_array_non_matching_strings_passthrough() {
|
|
let db_url = std::env::var("DATABASE_URL")
|
|
.unwrap_or("postgres://postgres:changeme@localhost:5432/windmill".to_string());
|
|
let pool = sqlx::PgPool::connect(&db_url).await.unwrap();
|
|
let conn = Connection::Sql(pool);
|
|
let client = test_client();
|
|
let job = test_job();
|
|
|
|
let input = json!(["hello", "world", 42, true, null, {"key": "val"}]);
|
|
|
|
let result = transform_json_value("test", &client, "test", input.clone(), &job, &conn, 0)
|
|
.await
|
|
.unwrap();
|
|
|
|
assert_eq!(result, input);
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn test_transform_array_resolved_inside_object() {
|
|
let db_url = std::env::var("DATABASE_URL")
|
|
.unwrap_or("postgres://postgres:changeme@localhost:5432/windmill".to_string());
|
|
let pool = sqlx::PgPool::connect(&db_url).await.unwrap();
|
|
let conn = Connection::Sql(pool);
|
|
let client = test_client();
|
|
let job = test_job();
|
|
|
|
let input = json!({"urls": ["$var:u/test/nonexistent", "plain"]});
|
|
|
|
let result = transform_json_value("test", &client, "test", input, &job, &conn, 0).await;
|
|
|
|
assert!(result.is_err());
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn test_transform_array_attempts_matching_items() {
|
|
let db_url = std::env::var("DATABASE_URL")
|
|
.unwrap_or("postgres://postgres:changeme@localhost:5432/windmill".to_string());
|
|
let pool = sqlx::PgPool::connect(&db_url).await.unwrap();
|
|
let conn = Connection::Sql(pool);
|
|
let client = test_client();
|
|
let job = test_job();
|
|
|
|
let input = json!(["$var:u/test/nonexistent", "plain"]);
|
|
|
|
let result = transform_json_value("test", &client, "test", input, &job, &conn, 0).await;
|
|
|
|
assert!(result.is_err());
|
|
}
|
|
}
|
|
|