Merge pull request #179 from devsapp/handler-role

Handler role

Author: heimanba

dist/build/Release/cpufeatures.node

@@ -95,5 +95,6 @@ export declare class FcTrigger extends FcDeploy<TriggerConfig> {
     isTimerTrigger(): boolean;
     makeInvocationRole(): Promise<string>;
     generateSystemDomain(): Promise<string>;
+    handlerEbSlr(): Promise<void>;
     makeTrigger(): Promise<TriggerConfig>;
 }

dist/index.js

@@ -19,6 +19,12 @@ export declare function isAutoGeneratedRole(role: any): boolean;
 export declare class AlicloudRam extends AlicloudClient {
     genRamComponentProp(roleName: string, resourceName?: string, assumeRolePolicy?: any, attachedPolicies?: Array<string | CustomPolicyConfig>, description?: string): any;
     makeRole(roleName: string, serviceName: string, args?: string, description?: string, resourceName?: string, assumeRolePolicy?: any, attachedPolicies?: Array<string | CustomPolicyConfig>): Promise<string>;
+    checkRoleExist({ arn }: {
+        arn: any;
+    }): Promise<any>;
+    createServiceLinkedRole({ serviceName }: {
+        serviceName: any;
+    }): Promise<any>;
 }
 export declare function extractRoleNameFromArn(roleArn: string): string;
 export declare function checkRoleArnFormat(roleArn: string): void;

dist/lib/fc/trigger.d.ts

@@ -67,7 +67,8 @@ Object.defineProperties(global, {
 	global: {value: global, writable: true, configurable: true, enumerable: true},
 	globalThis: {value: global, writable: true, configurable: true},
 	GLOBAL: {value: global, writable: true, configurable: true},
-	root: {value: global, writable: true, configurable: true}
+	root: {value: global, writable: true, configurable: true},
+	Error: {value: LocalError}
 });
 
 if (!localReflectDefineProperty(global, 'VMError', {

dist/lib/protocol/crypto/build/Release/sshcrypto.node

@@ -5,7 +5,6 @@
   "dependencies": {
     "@alicloud/fc2": "^2.3.0",
     "@alicloud/pop-core": "^1.7.10",
-    "@alicloud/ram": "^1.0.0",
     "@serverless-devs/core": "latest",
     "ali-oss": "^6.1.1",
     "deep-object-diff": "^1.1.0",

dist/lib/resource/ram.d.ts

@@ -2,7 +2,7 @@ Type: Component
 Name: fc-deploy
 Provider:
   - 阿里云
-Version: 0.0.90
+Version: 0.0.91
 Description: 阿里云函数计算基础组件
 HomePage: https://github.com/devsapp/fc-base
 Tags:

dist/setup-sandbox.js

@@ -1,4 +1,4 @@
-import * as _ from 'lodash';
+import { lodash as _, CatchableError } from '@serverless-devs/core';
 import { generateRamResourceName, CustomPolicyConfig, AlicloudRam } from '../resource/ram';
 import { DESCRIPTION } from '../static';
 import { ServerlessProfile, ICredentials, getFcEndpoint } from '../profile';
@@ -355,7 +355,7 @@ export class FcTrigger extends FcDeploy<TriggerConfig> {
         assumeRolePolicy,
         null,
         '  ',
-      )}, policy: ${policyConf}`,
+      )}, policy: ${JSON.stringify(policyConf)}`,
     );
     const alicloudRam = new AlicloudRam(
       this.serverlessProfile,
@@ -381,6 +381,42 @@ export class FcTrigger extends FcDeploy<TriggerConfig> {
     return `${endpoint}/2016-08-15/proxy/${this.serviceName}/${this.functionName}/`;
   }
 
+  async handlerEbSlr() {
+    const eventSourceType = _.get(this.localConfig, 'config.eventSourceConfig.eventSourceType');
+    if (_.isEmpty(eventSourceType) || !_.isString(eventSourceType)) {
+      throw new CatchableError('Eventbridge trigger config.eventSourceConfig.eventSourceType (required)');
+    }
+    const alicloudRam = new AlicloudRam(
+      this.serverlessProfile,
+      this.credentials,
+      this.region,
+      this.curPath,
+    );
+    try {
+      await alicloudRam.createServiceLinkedRole({ serviceName: 'sendevent-fc.eventbridge.aliyuncs.com' });
+      this.logger.debug('createServiceLinkedRole: SendToFC success');
+    } catch (ex) {
+      this.logger.debug(`handler SendToFC error: ${ex}`);
+    }
+
+    try {
+      const SOURCE_TYPE = {
+        Default: ['source-cms.eventbridge.aliyuncs.com', 'source-actiontrail.eventbridge.aliyuncs.com'],
+        MNS: ['sendevent-mns.eventbridge.aliyuncs.com'],
+        RocketMQ: ['source-rocketmq.eventbridge.aliyuncs.com'],
+        RabbitMQ: ['source-rabbitmq.eventbridge.aliyuncs.com'],
+        Kafka: ['source-kafka.eventbridge.aliyuncs.com'],
+      };
+      const sourceType = _.get(SOURCE_TYPE, eventSourceType, []);
+      for (const serviceName of sourceType) {
+        await alicloudRam.createServiceLinkedRole({ serviceName });
+        this.logger.debug(`createServiceLinkedRole ${serviceName} success`);
+      }
+    } catch (ex) {
+      this.logger.debug(`handler Eb Slr error: ${ex}`);
+    }
+  }
+
   async makeTrigger(): Promise<TriggerConfig> {
     if (this.useRemote) {
       this.statefulConfig = _.cloneDeep(this.remoteConfig);
@@ -409,9 +445,37 @@ export class FcTrigger extends FcDeploy<TriggerConfig> {
       delete remoteConfig.lastModifiedTime;
     }
 
-    if (!_.isNil(this.localConfig.role) || this.isEBTrigger() || this.isHttpTrigger() || this.isTimerTrigger()) {
+    if (this.isEBTrigger()) {
+      // TODO: https://github.com/devsapp/fc/issues/827
+      await this.handlerEbSlr();
+      return resolvedTriggerConf;
+    }
+
+    if (this.isHttpTrigger() || this.isTimerTrigger()) {
       return resolvedTriggerConf;
     }
+
+    // check role ( https://github.com/devsapp/fc/issues/805 )
+    if (!_.isNil(this.localConfig.role)) {
+      try {
+        const arn = this.localConfig.role;
+        const alicloudRam = new AlicloudRam(
+          this.serverlessProfile,
+          this.credentials,
+          this.region,
+          this.curPath,
+        );
+        const roleExist = await alicloudRam.checkRoleExist({ arn });
+        if (!roleExist) {
+          this.logger.log('');
+          this.logger.warn(`It is detected that the role(${arn}) configured by the trigger does not exist. Please go to the ram console(https://ram.console.aliyun.com/roles) reconfirm`);
+        }
+      } catch (ex) {
+        this.logger.debug(`Check role exist error: ${ex}`);
+      }
+      return resolvedTriggerConf;
+    }
+
     const role = await this.makeInvocationRole();
     Object.assign(resolvedTriggerConf, {
       role,

package.json

@@ -111,6 +111,42 @@ export class AlicloudRam extends AlicloudClient {
     const roleArn = await ramComponentIns.deploy(ramComponentInputs);
     return roleArn;
   }
+
+  async checkRoleExist({ arn }): Promise<any> {
+    const roleName = extractRoleNameFromArn(arn);
+    const ramComponent = new RamComponent(
+      this.serverlessProfile,
+      { roleName } as any,
+      this.region,
+      this.credentials,
+      this.curPath,
+    );
+    const ramComponentInputs = ramComponent.genComponentInputs('ram', '');
+    logger.spinner?.stop();
+    const ramComponentIns = await core.loadComponent('devsapp/ram');
+    logger.spinner?.start();
+    const roleExist = await ramComponentIns.check(ramComponentInputs);
+    this.logger.debug(`roleExist: ${roleExist}`);
+    return roleExist;
+  }
+
+  // 此 serviceName 不是fc的服务，而是ram的服务关联角色的云服务的服务 说明链接 https://help.aliyun.com/document_detail/160674.htm?spm=a2c4g.11186623.0.0.6a0c315chezXDu
+  async createServiceLinkedRole({ serviceName }): Promise<any> {
+    const ramComponent = new RamComponent(
+      this.serverlessProfile,
+      { serviceName } as any,
+      this.region,
+      this.credentials,
+      this.curPath,
+    );
+    const ramComponentInputs = ramComponent.genComponentInputs('ram', '');
+    logger.spinner?.stop();
+    const ramComponentIns = await core.loadComponent('devsapp/ram');
+    logger.spinner?.start();
+    const roleExist = await ramComponentIns.createServiceLinkedRole(ramComponentInputs);
+    this.logger.debug(`roleExist: ${roleExist}`);
+    return roleExist;
+  }
 }
 
 export function extractRoleNameFromArn(roleArn: string): string {