func()

in pkg/deploy/generator/templates_rp.go [24:191]

• 155 lines of code
• 15 McCabe index (conditional complexity)

func (g *generator) rpTemplate() *arm.Template {
	t := templateStanza()

	params := []string{
		"clusterParentDomainName",
		"databaseAccountName",
		"fpServicePrincipalId",
		"rpServicePrincipalId",
	}
	if g.production {
		params = append(params,
			"acrResourceId",
			"adminApiCaBundle",
			"adminApiClientCertCommonName",
			"armApiCaBundle",
			"armApiClientCertCommonName",
			"armClientId",
			"azureCloudName",
			"azureSecPackQualysUrl",
			"azureSecPackVSATenantId",
			"clusterMdmAccount",
			"clusterMdsdAccount",
			"clusterMdsdConfigVersion",
			"clusterMdsdNamespace",
			"cosmosDB",
			"disableCosmosDBFirewall",
			"fluentbitImage",
			"fpClientId",
			"fpTenantId",
			"fpServicePrincipalId",
			"ipRules",
			"keyvaultPrefix",
			"keyvaultDNSSuffix",
			"gatewayDomains",
			"gatewayResourceGroupName",
			"gatewayServicePrincipalId",
			"globalDevopsServicePrincipalId",
			"ipRules",
			"mdmFrontendUrl",
			"mdsdEnvironment",
			"miseValidAudiences",
			"miseValidAppIDs",
			"nonZonalRegions",
			"portalAccessGroupIds",
			"portalClientId",
			"portalElevatedGroupIds",
			"rpFeatures",
			"rpImage",
			"rpMdmAccount",
			"rpMdsdAccount",
			"rpMdsdConfigVersion",
			"rpMdsdNamespace",
			"rpParentDomainName",
			"rpVmssCapacity",
			"sshPublicKey",
			"subscriptionResourceGroupName",
			"vmSize",
			"vmssCleanupEnabled",
			"vmssName",
			"oidcStorageAccountName",
			"otelAuditQueueSize",
			"msiRpEndpoint",

			// TODO: Replace with Live Service Configuration in KeyVault
			"clustersInstallViaHive",
			"clusterDefaultInstallerPullspec",
			"clustersAdoptByHive",
		)
	}

	for _, param := range params {
		p := &arm.TemplateParameter{Type: "string"}
		switch param {
		case "disableCosmosDBFirewall":
			p.Type = "bool"
			p.DefaultValue = false
		case "ipRules":
			p.Type = "array"
		case "armApiCaBundle",
			"armApiClientCertCommonName",
			"armClientId",
			"gatewayDomains",
			"rpFeatures":
			p.DefaultValue = ""
		case "vmSize":
			p.DefaultValue = "Standard_D2s_v3"
		case "vmssCleanupEnabled":
			p.Type = "bool"
			p.DefaultValue = true
		case "cosmosDB":
			p.Type = "object"
			p.DefaultValue = map[string]int{
				"standardProvisionedThroughput": 1000,
				"portalProvisionedThroughput":   400,
				"gatewayProvisionedThroughput":  400,
			}
		case "rpVmssCapacity":
			p.Type = "int"
			p.DefaultValue = 3
		case "miseValidAudiences":
			p.Type = "array"
		case "miseValidAppIDs":
			p.Type = "array"
		case "nonZonalRegions":
			p.Type = "array"
			p.DefaultValue = []string{
				"eastasia",
				"centralindia",
				"centraluseuap",
				"koreacentral",
				"southcentralus",
				"canadacentral",
				"germanywestcentral",
				"norwayeast",
				"switzerlandnorth",
				"brazilsouth",
				"southafricanorth",
				"northcentralus",
				"uaenorth",
				"westus",
				"japanwest",
			}

		// TODO: Replace with Live Service Configuration in KeyVault
		case "clustersInstallViaHive",
			"clustersAdoptByHive",
			"clusterDefaultInstallerPullspec":
			p.DefaultValue = ""
		}
		t.Parameters[param] = p
	}

	if g.production {
		t.Variables = map[string]interface{}{
			"rpCosmoDbVirtualNetworkRules": &[]mgmtdocumentdb.VirtualNetworkRule{
				{
					ID: to.StringPtr("[resourceId('Microsoft.Network/virtualNetworks/subnets', 'rp-vnet', 'rp-subnet')]"),
				},
				{
					ID: to.StringPtr("[resourceId(parameters('gatewayResourceGroupName'), 'Microsoft.Network/virtualNetworks/subnets', 'gateway-vnet', 'gateway-subnet')]"),
				},
				{
					ID: to.StringPtr("[resourceId('Microsoft.Network/virtualNetworks/subnets', 'aks-net', 'ClusterSubnet-001')]"),
					// TODO: AKS Sharding: add rules for additional AKS shards for this RP instance. Currently only shard 1, which has subnet ClusterSubnet-001, is set above.
					// AKS subnet design: https://docs.google.com/document/d/1gTGSW5S4uN1vB2hqVFKYr-qp6n62WbkdQMrKg-qvPbE
				},
			},
		}

		t.Resources = append(t.Resources,
			g.publicIPAddress("rp-pip"),
			g.publicIPAddress("portal-pip"),
			g.rpLB(),
			g.rpVMSS(),
			g.rpLBAlert(30.0, 2, "rp-availability-alert", "PT5M", "PT15M", "DipAvailability"), // triggers on all 3 RPs being down for 10min, can't be >=0.3 due to deploys going down to 32% at times.
			g.rpLBAlert(67.0, 3, "rp-degraded-alert", "PT15M", "PT6H", "DipAvailability"),     // 1/3 backend down for 1h or 2/3 down for 3h in the last 6h
			g.rpLBAlert(33.0, 2, "rp-vnet-alert", "PT5M", "PT5M", "VipAvailability"))          // this will trigger only if the Azure network infrastructure between the loadBalancers and VMs is down for 3.5min
		// more on alerts https://msazure.visualstudio.com/AzureRedHatOpenShift/_wiki/wikis/ARO.wiki/53765/WIP-Alerting
	}

	t.Resources = append(t.Resources, g.rpDNSZone(),
		g.virtualNetworkPeering("rp-vnet/peering-rp-pe-vnet-001", "[resourceId('Microsoft.Network/virtualNetworks', 'rp-pe-vnet-001')]", false, false, nil),
		g.virtualNetworkPeering("rp-pe-vnet-001/peering-rp-vnet", "[resourceId('Microsoft.Network/virtualNetworks', 'rp-vnet')]", false, false, nil))
	t.Resources = append(t.Resources, g.rpCosmosDB()...)
	t.Resources = append(t.Resources, g.rpRBAC()...)

	return t
}