mongo-charms-single-kernel 1.7.2__tar.gz → 1.8.19__tar.gz

{mongo_charms_single_kernel-1.7.2 → mongo_charms_single_kernel-1.8.19}/PKG-INFO

@@ -1,8 +1,9 @@
-Metadata-Version: 2.3
+Metadata-Version: 2.4
 Name: mongo-charms-single-kernel
-Version: 1.7.2
+Version: 1.8.19
 Summary: Shared and reusable code for Mongo-related charms
-License: Apache-2.0
+License-Expression: Apache-2.0
+License-File: LICENSE
 Author: Neha Oudin
 Author-email: neha@oudin.red
 Requires-Python: >=3.10,<4.0
@@ -11,6 +12,7 @@ Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: System Administrators
 Classifier: Operating System :: POSIX :: Linux
 Requires-Dist: boto3 (>=1.37.12,<1.38.0)
+Requires-Dist: charm-refresh (>=3.1.0.2,<4.0.0.0)
 Requires-Dist: cosl
 Requires-Dist: cryptography
 Requires-Dist: dacite (>=1.9.0,<1.10.0)

{mongo_charms_single_kernel-1.7.2 → mongo_charms_single_kernel-1.8.19}/pyproject.toml

@@ -37,9 +37,10 @@ dependencies = [
     "deepmerge (>=2.0)",
     "boto3 (~=1.37.12)",
     "mypy-boto3-s3 (~=1.37.0)",
-    "python-ldap"
+    "python-ldap",
+    "charm-refresh (>=3.1.0.2,<4.0.0.0)"
 ]
-version = "1.7.2"
+version = "1.8.19"
 
 [project.urls]
 homepage = "https://github.com/canonical/mongo-single-kernel-library"
@@ -135,6 +136,8 @@ more_itertools = "*"
 httpx = "*"
 boto3 = "^1.37.12"
 mypy-boto3-s3 = "^1.37.0"
+tomli = '*'
+tomli-w = '*'
 
 [tool.ruff]
 target-version = "py310"
@@ -205,7 +208,8 @@ exclude = [
     "^single_kernel_mongo/lib/*",
     "tests/charms/*",
     "tests/integration/*",
-    "tests/unit/*"
+    "tests/unit/*",
+    "typings[\\/].*"
 ]
 # https://mypy.readthedocs.io/en/stable/command_line.html#cmdoption-mypy-ignore-missing-imports
 ignore_missing_imports = true

{mongo_charms_single_kernel-1.7.2 → mongo_charms_single_kernel-1.8.19}/single_kernel_mongo/abstract_charm.py

@@ -26,15 +26,16 @@ a DB Engine and storage), and the main peer relation name will be
 import logging
 from typing import ClassVar, Generic, TypeVar
 
+import ops.log
 from data_platform_helpers.advanced_statuses.handler import StatusHandler
 from data_platform_helpers.advanced_statuses.models import StatusObject
 from data_platform_helpers.advanced_statuses.protocol import ManagerStatusProtocol
 from data_platform_helpers.advanced_statuses.types import Scope
 from ops.charm import CharmBase
 
-from single_kernel_mongo.config.literals import Substrates
+from single_kernel_mongo.config.literals import CharmKind, Substrates
 from single_kernel_mongo.config.relations import PeerRelationNames
-from single_kernel_mongo.config.statuses import CharmStatuses
+from single_kernel_mongo.config.statuses import CharmStatuses, MongoDBStatuses
 from single_kernel_mongo.core.operator import OperatorProtocol
 from single_kernel_mongo.core.structured_config import MongoConfigModel, MongoDBRoles
 from single_kernel_mongo.events.lifecycle import LifecycleEventsHandler
@@ -43,6 +44,8 @@ T = TypeVar("T", bound=MongoConfigModel)
 U = TypeVar("U", bound=OperatorProtocol)
 
 logger = logging.getLogger(__name__)
+logging.getLogger("httpx").setLevel(logging.WARNING)
+logging.getLogger("httpcore").setLevel(logging.WARNING)
 
 
 class AbstractMongoCharm(ManagerStatusProtocol, Generic[T, U], CharmBase):
@@ -69,6 +72,11 @@ class AbstractMongoCharm(ManagerStatusProtocol, Generic[T, U], CharmBase):
         # Init the Juju object Object
         super(Generic, self).__init__(*args)
 
+        root_logger = logging.getLogger()
+        for handler in root_logger.handlers:
+            if isinstance(handler, ops.log.JujuLogHandler):
+                handler.setFormatter(logging.Formatter("{name}:{message}", style="{"))
+
         # Create the operator instance (one of MongoDBOperator or MongosOperator)
         self.operator = self.operator_type(self)
         self.state = self.operator.state
@@ -104,11 +112,19 @@ class AbstractMongoCharm(ManagerStatusProtocol, Generic[T, U], CharmBase):
             )
             self.workload.install()
 
-    def on_leader_elected(self, _):
+    def on_leader_elected(self, event):
         """First leader elected handler."""
         # Sets the role in the databag: when the charm is first created, its
         # role won't exist in the databag. We save it in the databag because we
         # don't allow role changing yet.
+        if (
+            self.operator.name == CharmKind.MONGOD
+            and self.parsed_config.role == MongoDBRoles.INVALID
+        ):
+            self.status_handler.set_running_status(MongoDBStatuses.INVALID_ROLE.value, scope="app")
+            event.defer()
+            return
+
         if self.operator.state.app_peer_data.role == MongoDBRoles.UNKNOWN:
             self.operator.state.app_peer_data.role = MongoDBRoles(self.parsed_config.role)
 

{mongo_charms_single_kernel-1.7.2 → mongo_charms_single_kernel-1.8.19}/single_kernel_mongo/config/literals.py

@@ -34,6 +34,13 @@ class Scope(str, Enum):
     UNIT = "unit"
 
 
+class TLSType(str, Enum):
+    """TLS types."""
+
+    PEER = "peer"
+    CLIENT = "client"
+
+
 class MongoPorts(IntEnum):
     """The default Mongo ports."""
 
@@ -41,37 +48,18 @@ class MongoPorts(IntEnum):
     MONGOS_PORT = 27018
 
 
-class InternalUsers(str, Enum):
-    """The three allowed internal users."""
-
-    OPERATOR = "operator"
-    BACKUP = "backup"
-    MONITOR = "monitor"
-    LOGROTATE = "logrotate"
-
-
-class UnitState(str, Enum):
-    """Unit upgrade state."""
+class InternalUsernames(str, Enum):
+    """The allowed internal usernames."""
 
-    HEALTHY = "healthy"
-    RESTARTING = "restarting"  # Kubernetes only
-    UPGRADING = "upgrading"  # Machines only
-    OUTDATED = "outdated"  # Machines only
-
-
-SECRETS_APP = [f"{user}-password" for user in InternalUsers] + ["keyfile"]
-
-
-@dataclass(frozen=True)
-class Snap:
-    """The Snap related information."""
+    CHARMED_OPERATOR = "charmed-operator"
+    CHARMED_BACKUP = "charmed-backup"
+    CHARMED_STATS = "charmed-stats"
+    CHARMED_LOGROTATE = "charmed-logrotate"
 
-    name: str = "charmed-mongodb"
-    channel: str = "8-transition/edge"
-    revision: str = "132"
 
+SECRETS_APP = [f"{username}-password" for username in InternalUsernames] + ["keyfile"]
 
-SNAP = Snap(channel="8-transition/edge", revision="132")
+VERSIONS_FILE = Path("refresh_versions.toml")
 
 T = TypeVar("T", bound=str | int)
 
@@ -109,12 +97,10 @@ MAX_PASSWORD_LENGTH = 4096
 
 PBM_RESTART_DELAY = 5
 
-FEATURE_VERSION = "7.0"
+FEATURE_VERSION = "8.0"
 
 
-OS_REQUIREMENTS = {
-    "vm.max_map_count": "262144",
-}
+OS_REQUIREMENTS = {"vm.max_map_count": "262144", "vm.overcommit_memory": "1"}
 
 TRUST_STORE_PATH = Path("/usr/local/share/ca-certificates")
 

{mongo_charms_single_kernel-1.7.2 → mongo_charms_single_kernel-1.8.19}/single_kernel_mongo/config/models.py

@@ -13,8 +13,11 @@ from importlib import resources as impresources
 from importlib.abc import Traversable
 from pathlib import Path
 
+from data_platform_helpers.advanced_statuses.models import StatusObject
+
 from single_kernel_mongo import observability_rules, templates
 from single_kernel_mongo.config.literals import CharmKind, Substrates
+from single_kernel_mongo.config.statuses import PasswordManagementStatuses
 
 TEMPLATE_DIRECTORY = impresources.files(templates)
 OBSERVABILITY_DIRECTORY = impresources.files(observability_rules)
@@ -59,6 +62,18 @@ class LdapConfig:
 LDAP_CONFIG = LdapConfig()
 
 
+@dataclass(frozen=True)
+class THPConfig:
+    """Configuration for transparent huge tables."""
+
+    service_template: Traversable = TEMPLATE_DIRECTORY / "enable-transparent-huge-pages.service.j2"
+    service_file_path: Path = Path("/etc/systemd/system/enable-transparent-huge-pages.service")
+    service_name = "enable-transparent-huge-pages"
+
+
+THP_CONFIG = THPConfig()
+
+
 @dataclass(frozen=True)
 class AuditLogConfig:
     """Audit log related configuration."""
@@ -89,6 +104,7 @@ VM_PATH = {
         "BIN": "/snap/bin",
         "SHELL": "/snap/bin/charmed-mongodb.mongosh",
         "LICENSES": f"/snap/{SNAP_NAME}/current/licenses",
+        "TEMP": "/tmp",
     }
 }
 K8S_PATH = {
@@ -102,6 +118,7 @@ K8S_PATH = {
         "BIN": "/usr/bin/",
         "SHELL": "/usr/bin/mongosh",
         "LICENSES": "/licenses",
+        "TEMP": "/tmp",
     }
 }
 
@@ -148,3 +165,46 @@ class BackupState(Enum):
     WAITING_TO_SYNC = auto()
     FAILED_TO_CREATE_BUCKET = auto()
     ACTIVE = auto()
+
+
+class PasswordManagementState(Enum):
+    """Password management state that can be mapped to a status."""
+
+    EMPTY = auto()
+    NOT_LEADER = auto()
+    PASSWORD_ON_SHARD = auto()
+    UPGRADE_RUNNING = auto()
+    BACKUP_RUNNING = auto()
+    SECRET_NOT_FOUND = auto()
+    SECRET_NOT_GRANTED = auto()
+    INVALID_CONTENT = auto()
+    NEED_PASSWORD_UPDATE = auto()
+
+
+@dataclass
+class PasswordManagementContext:
+    """Represents the current context of password management for internal users.
+
+    Attributes:
+        state (PasswordManagementState): The state of password management,
+        message (str): Optional human-readable message providing context about the state,
+        system_users (dict[str, str]): A mapping of usernames to passwords if the
+            system-users secret is valid. Empty otherwise.
+    """
+
+    state: PasswordManagementState
+    message: str = ""
+    system_users: dict[str, str] = field(default_factory=dict)
+
+    def map_state_to_status(self) -> list[StatusObject]:
+        """Map from password management state to password management status."""
+        match self.state:
+            case PasswordManagementState.PASSWORD_ON_SHARD:
+                return [PasswordManagementStatuses.PASSWORD_ON_SHARD.value]
+            case PasswordManagementState.SECRET_NOT_GRANTED:
+                return [PasswordManagementStatuses.SECRET_NOT_GRANTED.value]
+            case PasswordManagementState.SECRET_NOT_FOUND:
+                return [PasswordManagementStatuses.SECRET_NOT_FOUND.value]
+            case PasswordManagementState.INVALID_CONTENT:
+                return [PasswordManagementStatuses.INVALID_SYSTEM_USERS.value]
+        return []

{mongo_charms_single_kernel-1.7.2 → mongo_charms_single_kernel-1.8.19}/single_kernel_mongo/config/relations.py

@@ -23,7 +23,6 @@ class RelationNames(str, Enum):
     CONFIG_SERVER = "config-server"
     CLUSTER = "cluster"
     MONGOS_PROXY = "mongos_proxy"
-    UPGRADE_VERSION = "upgrade-version-a"
 
 
 class Scopes(str, Enum):
@@ -36,7 +35,8 @@ class Scopes(str, Enum):
 class ExternalRequirerRelations(str, Enum):
     """The relations we require externally."""
 
-    TLS = "certificates"
+    CLIENT_TLS = "client-certificates"
+    PEER_TLS = "peer-certificates"
     S3_CREDENTIALS = "s3-credentials"
     LDAP = "ldap"
     LDAP_CERT = "ldap-certificate-transfer"