Fredrik Appelros 2eb5744ed0 plugins/bundle: use unique temporary files (#4786) ...

In order to use the feature to persist activated bundles to disk in a
cloud environment with shared storage, e.g. Kubernetes with the Amazon
EFS storage driver, each instance of OPA needs to either synchronize
their access to the temporary file using advisory file locks, or use
unique temporary files. If not, then the following situation may occur:

p1: open and trunc tmp file
p1: write to tmp file
p2: open and trunc tmp file
p1: rename tmp file to dst
p2: write to tmp file
p2: rename tmp file to dst

This may then lead to the persisted bundle being truncated or corrupted.

Here the approach of using unique temporary files is chosen because it
avoids the overhead of introducing file locks, and the additional
dependency since Go lacks any such mechanisms in the standard library.

This solution should avoid truncated or corrupt bundles as `rename()` is
guaranteed to be atomic, even in file systems like NFS.

Fixes: #4782

Signed-off-by: Fredrik Appelros <fredrik.appelros@sinch.com>

2022-07-12 15:05:35 +02:00

..

config_test.go

plugins/bundle: ignore service errors for file:// resources

2021-12-22 17:46:37 +01:00

config.go

plugins/bundle: ignore service errors for file:// resources

2021-12-22 17:46:37 +01:00

plugin_test.go

plugins/bundle: use unique temporary files (#4786)

2022-07-12 15:05:35 +02:00

plugin.go

plugins/bundle: use unique temporary files (#4786)

2022-07-12 15:05:35 +02:00

status.go

bundle/status: Include bundle type in status information

2022-04-27 15:43:06 -07:00