Method start

src/slave/csi_server.cpp:299–362

Future<Nothing> CSIServerProcess::start(const SlaveID& _agentId)
{
  // NOTE: It's possible that the agent receives multiple
  // `SlaveRegisteredMessage`s and detects a disconnection in between.
  // In that case, `start` will be called multiple times from
  // `Slave::registered`.
  if (agentId.isSome()) {
    CHECK_EQ(agentId.get(), _agentId)
      << "Cannot start CSI server with agent ID " << _agentId
      << " (expected: " << agentId.get() << ")";

    return Nothing();
  }

  agentId = _agentId;

  Future<Nothing> result = Nothing();

  if (secretGenerator) {
    // The contents of this principal are arbitrary. We choose to avoid a
    // principal with a 'value' string so that we do not unintentionally collide
    // with another real principal with restricted permissions.
    Principal principal(
        Option<string>::none(),
        {{"cid_prefix", DEFAULT_CSI_CONTAINER_PREFIX}});

    result = secretGenerator->generate(principal)
      .then(defer(self(), [=](const Secret& secret) -> Future<Nothing> {
        Option<Error> error = common::validation::validateSecret(secret);
        if (error.isSome()) {
          return Failure(
              "CSI server failed to validate generated secret: " +
              error->message);
        }

        if (secret.type() != Secret::VALUE) {
          return Failure(
              "CSI server expecting generated secret to be of VALUE type "
              "instead of " + stringify(secret.type()) + " type; " +
              "only VALUE type secrets are supported at this time");
        }

        CHECK(secret.has_value());

        authToken = secret.value().data();

        return Nothing();
    }));
  }

  return result
    .then(defer(self(), [=]() -> Future<Nothing> {
      // Load all CSI plugin configurations found.
      // NOTE: `initializePlugin()` requires that the `authToken` has already
      // been set, so the order of these continuations matters.
      Try<Nothing> init = initializePlugin();
      if (init.isError()) {
        return Failure(