add template update plumbing

sreya · sreya · commit f6a08b15aacd · 2023-10-11T23:21:21.000Z
diff --git a/coderd/database/modelmethods.go b/coderd/database/modelmethods.go
@@ -170,7 +170,7 @@ func (w Workspace) ApplicationConnectRBAC() rbac.Object {
 }
 
 func (w Workspace) WorkspaceBuildRBAC(transition WorkspaceTransition) rbac.Object {
-	// If a workspace is locked it cannot be built.
+	// If a workspace is dormant it cannot be built.
 	// However we need to allow stopping a workspace by a caller once a workspace
 	// is locked (e.g. for autobuild). Additionally, if a user wants to delete
 	// a locked workspace, they shouldn't have to have it unlocked first.
diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go
diff --git a/coderd/database/queries/templates.sql b/coderd/database/queries/templates.sql
@@ -122,7 +122,8 @@ SET
 	autostop_requirement_weeks = $8,
 	failure_ttl = $9,
 	time_til_dormant = $10,
-	time_til_dormant_autodelete = $11
+	time_til_dormant_autodelete = $11,
+    require_promoted_version = $12
 WHERE
 	id = $1
 ;
diff --git a/coderd/schedule/template.go b/coderd/schedule/template.go
@@ -118,6 +118,7 @@ type TemplateScheduleOptions struct {
 	// workspaces whose dormant_at field violates the new template time_til_dormant_autodelete
 	// threshold.
 	UpdateWorkspaceDormantAt bool `json:"update_workspace_dormant_at"`
+	RequirePromotedVersion   bool `json:"require_promoted_version"`
 }
 
 // TemplateScheduleStore provides an interface for retrieving template
@@ -163,6 +164,7 @@ func (*agplTemplateScheduleStore) Get(ctx context.Context, db database.Store, te
 		FailureTTL:               0,
 		TimeTilDormant:           0,
 		TimeTilDormantAutoDelete: 0,
+		RequirePromotedVersion:   false,
 	}, nil
 }
 
@@ -177,6 +179,9 @@ func (*agplTemplateScheduleStore) Set(ctx context.Context, db database.Store, tp
 
 	var template database.Template
 	err := db.InTx(func(db database.Store) error {
+		// TODO (JonA): This seems ripe for a bug. Should we not
+		// be reading the template as part of the tx and then also
+		// setting our isolation level to repeatable read?
 		err := db.UpdateTemplateScheduleByID(ctx, database.UpdateTemplateScheduleByIDParams{
 			ID:         tpl.ID,
 			UpdatedAt:  dbtime.Now(),
@@ -191,6 +196,7 @@ func (*agplTemplateScheduleStore) Set(ctx context.Context, db database.Store, tp
 			FailureTTL:                    tpl.FailureTTL,
 			TimeTilDormant:                tpl.TimeTilDormant,
 			TimeTilDormantAutoDelete:      tpl.TimeTilDormantAutoDelete,
+			RequirePromotedVersion:        tpl.RequirePromotedVersion,
 		})
 		if err != nil {
 			return xerrors.Errorf("update template schedule: %w", err)
diff --git a/codersdk/templates.go b/codersdk/templates.go
@@ -212,6 +212,10 @@ type UpdateTemplateMeta struct {
 	// from the template. This is useful for preventing dormant workspaces being immediately
 	// deleted when updating the dormant_ttl field to a new, shorter value.
 	UpdateWorkspaceDormantAt bool `json:"update_workspace_dormant_at"`
+	// RequirePromotedVersion mandates workspaces built using this template
+	// use the latest promoted version of the template. This option has no
+	// effect on template admins.
+	RequirePromotedVersion bool `json:"require_promoted_version"`
 }
 
 type TemplateExample struct {
diff --git a/enterprise/coderd/schedule/template.go b/enterprise/coderd/schedule/template.go
@@ -139,6 +139,7 @@ func (s *EnterpriseTemplateScheduleStore) Set(ctx context.Context, db database.S
 			FailureTTL:                    int64(opts.FailureTTL),
 			TimeTilDormant:                int64(opts.TimeTilDormant),
 			TimeTilDormantAutoDelete:      int64(opts.TimeTilDormantAutoDelete),
+			RequirePromotedVersion:        opts.RequirePromotedVersion,
 		})
 		if err != nil {
 			return xerrors.Errorf("update template schedule: %w", err)

Original file line number	Diff line number	Diff line change
`@@ -170,7 +170,7 @@ func (w Workspace) ApplicationConnectRBAC() rbac.Object {`
`170`	`170`	`}`
`171`	`171`
`172`	`172`	`func (w Workspace) WorkspaceBuildRBAC(transition WorkspaceTransition) rbac.Object {`
`173`		`- // If a workspace is locked it cannot be built.`
	`173`	`+ // If a workspace is dormant it cannot be built.`
`174`	`174`	`// However we need to allow stopping a workspace by a caller once a workspace`
`175`	`175`	`// is locked (e.g. for autobuild). Additionally, if a user wants to delete`
`176`	`176`	`// a locked workspace, they shouldn't have to have it unlocked first.`