control: add network management via ir control

New `neofs-cli control notary` with `list`, `request` and `sign` commands.
- `list` - get list of all notary requests from notary pool.
- `request` - send a notary request with one of the following methods:
`newEpoch`, `setConfig` and `removeNode`.
- `sign` - sign the notary request using a hash.

Closes #2088, #1866.

Signed-off-by: Andrey Butusov <[email protected]>

CHANGELOG.md

@@ -4,6 +4,7 @@ Changelog for NeoFS Node
 ## [Unreleased]
 
 ### Added
+- `neofs-cli control notary` with `list`, `request` and `sign` commands (#3059)
 
 ### Fixed
 

cmd/neofs-cli/modules/control/notary.go

@@ -0,0 +1,20 @@
+package control
+
+import (
+	"github.com/spf13/cobra"
+)
+
+var notaryCmd = &cobra.Command{
+	Use:   "notary",
+	Short: "Commands with notary request with alphabet key of inner ring node",
+}
+
+func initControlNotaryCmd() {
+	notaryCmd.AddCommand(listNotaryCmd)
+	notaryCmd.AddCommand(notaryRequestCmd)
+	notaryCmd.AddCommand(notarySignCmd)
+
+	initControlNotaryListCmd()
+	initControlNotaryRequestCmd()
+	initControlNotarySignCmd()
+}

cmd/neofs-cli/modules/control/notary_list.go

@@ -0,0 +1,67 @@
+package control
+
+import (
+	"fmt"
+
+	rawclient "github.com/nspcc-dev/neofs-api-go/v2/rpc/client"
+	"github.com/nspcc-dev/neofs-node/cmd/neofs-cli/internal/commonflags"
+	"github.com/nspcc-dev/neofs-node/cmd/neofs-cli/internal/key"
+	ircontrol "github.com/nspcc-dev/neofs-node/pkg/services/control/ir"
+	ircontrolsrv "github.com/nspcc-dev/neofs-node/pkg/services/control/ir/server"
+	"github.com/spf13/cobra"
+)
+
+var listNotaryCmd = &cobra.Command{
+	Use:   "list",
+	Short: "Get list of all notary requests in network",
+	Long:  "Get list of all notary requests in network",
+	Args:  cobra.NoArgs,
+	RunE:  listNotary,
+}
+
+func initControlNotaryListCmd() {
+	initControlFlags(listNotaryCmd)
+}
+
+func listNotary(cmd *cobra.Command, _ []string) error {
+	ctx, cancel := commonflags.GetCommandContext(cmd)
+	defer cancel()
+
+	pk, err := key.Get(cmd)
+	if err != nil {
+		return err
+	}
+
+	cli, err := getClient(ctx)
+	if err != nil {
+		return err
+	}
+
+	req := new(ircontrol.NotaryListRequest)
+
+	req.SetBody(new(ircontrol.NotaryListRequest_Body))
+
+	err = ircontrolsrv.SignMessage(pk, req)
+	if err != nil {
+		return fmt.Errorf("could not sign request: %w", err)
+	}
+
+	var resp *ircontrol.NotaryListResponse
+	err = cli.ExecRaw(func(client *rawclient.Client) error {
+		resp, err = ircontrol.NotaryList(client, req)
+		return err
+	})
+	if err != nil {
+		return fmt.Errorf("rpc error: %w", err)
+	}
+
+	err = verifyResponse(resp.GetSignature(), resp.GetBody())
+	if err != nil {
+		return err
+	}
+
+	hashes := resp.GetBody().GetTransactions()
+
+	cmd.Printf("Hashes: %s\n", hashes)
+	return nil
+}

cmd/neofs-cli/modules/control/notary_request.go

@@ -0,0 +1,118 @@
+package control
+
+import (
+	"errors"
+	"fmt"
+	"strings"
+
+	rawclient "github.com/nspcc-dev/neofs-api-go/v2/rpc/client"
+	"github.com/nspcc-dev/neofs-node/cmd/neofs-cli/internal/commonflags"
+	"github.com/nspcc-dev/neofs-node/cmd/neofs-cli/internal/key"
+	ircontrol "github.com/nspcc-dev/neofs-node/pkg/services/control/ir"
+	ircontrolsrv "github.com/nspcc-dev/neofs-node/pkg/services/control/ir/server"
+	"github.com/spf13/cobra"
+)
+
+const notaryMethodFlag = "method"
+
+var notaryRequestCmd = &cobra.Command{
+	Use:   "request",
+	Short: "Create and send a notary request",
+	Long: "Create and send a notary request with one of the following methods:\n" +
+		"- newEpoch, transaction for creating of new NeoFS epoch event in FS chain, no args\n" +
+		"- setConfig, transaction to add/update global config value in the NeoFS network, args in the form key1=val1\n" +
+		"- removeNode, transaction to move nodes to the Offline state in the candidates list, args are the public keys of the nodes",
+	RunE: notaryRequest,
+}
+
+func initControlNotaryRequestCmd() {
+	initControlFlags(notaryRequestCmd)
+
+	flags := notaryRequestCmd.Flags()
+	flags.String(notaryMethodFlag, "", "Requested method")
+}
+
+func notaryRequest(cmd *cobra.Command, args []string) error {
+	ctx, cancel := commonflags.GetCommandContext(cmd)
+	defer cancel()
+
+	pk, err := key.Get(cmd)
+	if err != nil {
+		return err
+	}
+
+	cli, err := getClient(ctx)
+	if err != nil {
+		return err
+	}
+
+	req := new(ircontrol.NotaryRequestRequest)
+	body := new(ircontrol.NotaryRequestRequest_Body)
+	req.SetBody(body)
+
+	method, _ := cmd.Flags().GetString(notaryMethodFlag)
+	body.SetMethod(method)
+
+	switch method {
+	case "newEpoch":
+		if len(args) > 0 {
+			cmd.Println("method 'newEpoch', but the args provided, they will be ignored")
+		}
+	case "setConfig":
+		if len(args) == 0 {
+			return fmt.Errorf("no arguments provided for 'setConfig'")
+		}
+
+		bodyArgs := make([]string, 0, len(args)*2)
+		for _, arg := range args {
+			k, v, err := parseConfigPair(arg)
+			if err != nil {
+				return err
+			}
+
+			bodyArgs = append(bodyArgs, k, fmt.Sprint(v))
+		}
+		body.SetArgs(bodyArgs)
+	case "removeNode":
+		if len(args) == 0 {
+			return errors.New("method 'removeNode', at least 1 argument must be provided - the public key of the node")
+		}
+		body.SetArgs(args)
+	}
+
+	err = ircontrolsrv.SignMessage(pk, req)
+	if err != nil {
+		return fmt.Errorf("could not sign request: %w", err)
+	}
+
+	var resp *ircontrol.NotaryRequestResponse
+	err = cli.ExecRaw(func(client *rawclient.Client) error {
+		resp, err = ircontrol.NotaryRequest(client, req)
+		return err
+	})
+	if err != nil {
+		return fmt.Errorf("rpc error: %w", err)
+	}
+
+	err = verifyResponse(resp.GetSignature(), resp.GetBody())
+	if err != nil {
+		return err
+	}
+
+	hashes := resp.GetBody().GetHash()
+
+	cmd.Printf("Tx Hash: %s\n", hashes)
+	return nil
+}
+
+func parseConfigPair(kvStr string) (key string, val string, err error) {
+	kv := strings.SplitN(kvStr, "=", 2)
+	if len(kv) != 2 {
+		return "", "", fmt.Errorf("invalid parameter format: must be 'key=val', got: %s", kvStr)
+	}
+
+	key = kv[0]
+	val = kv[1]
+
+	return
+}

cmd/neofs-cli/modules/control/notary_sign.go

@@ -0,0 +1,70 @@
+package control
+
+import (
+	"fmt"
+
+	rawclient "github.com/nspcc-dev/neofs-api-go/v2/rpc/client"
+	"github.com/nspcc-dev/neofs-node/cmd/neofs-cli/internal/commonflags"
+	"github.com/nspcc-dev/neofs-node/cmd/neofs-cli/internal/key"
+	ircontrol "github.com/nspcc-dev/neofs-node/pkg/services/control/ir"
+	ircontrolsrv "github.com/nspcc-dev/neofs-node/pkg/services/control/ir/server"
+	"github.com/spf13/cobra"
+)
+
+var notarySignHashFlag string
+
+var notarySignCmd = &cobra.Command{
+	Use:   "sign",
+	Short: "Sign notary request by its hash",
+	Long:  "Sign notary request by its hash",
+	Args:  cobra.NoArgs,
+	RunE:  notarySign,
+}
+
+func initControlNotarySignCmd() {
+	initControlFlags(notarySignCmd)
+
+	flags := notarySignCmd.Flags()
+	flags.StringVar(&notarySignHashFlag, "hash", "", "hash of the notary request")
+}
+
+func notarySign(cmd *cobra.Command, _ []string) error {
+	ctx, cancel := commonflags.GetCommandContext(cmd)
+	defer cancel()
+
+	pk, err := key.Get(cmd)
+	if err != nil {
+		return err
+	}
+
+	cli, err := getClient(ctx)
+	if err != nil {
+		return err
+	}
+
+	req := new(ircontrol.NotarySignRequest)
+	body := new(ircontrol.NotarySignRequest_Body)
+	req.SetBody(body)
+	body.SetHash([]byte(notarySignHashFlag))
+
+	err = ircontrolsrv.SignMessage(pk, req)
+	if err != nil {
+		return fmt.Errorf("could not sign request: %w", err)
+	}
+
+	var resp *ircontrol.NotarySignResponse
+	err = cli.ExecRaw(func(client *rawclient.Client) error {
+		resp, err = ircontrol.NotarySign(client, req)
+		return err
+	})
+	if err != nil {
+		return fmt.Errorf("rpc error: %w", err)
+	}
+
+	err = verifyResponse(resp.GetSignature(), resp.GetBody())
+	if err != nil {
+		return err
+	}
+
+	return nil
+}

cmd/neofs-cli/modules/control/root.go

@@ -34,6 +34,7 @@ func init() {
 		shardsCmd,
 		synchronizeTreeCmd,
 		objectCmd,
+		notaryCmd,
 	)
 
 	initControlHealthCheckCmd()
@@ -42,4 +43,5 @@ func init() {
 	initControlShardsCmd()
 	initControlSynchronizeTreeCmd()
 	initControlObjectsCmd()
+	initControlNotaryCmd()
 }

docs/cli-commands/neofs-cli_control.md

@@ -24,6 +24,7 @@ Operations with storage node
 * [neofs-cli](neofs-cli.md)	 - Command Line Tool to work with NeoFS
 * [neofs-cli control drop-objects](neofs-cli_control_drop-objects.md)	 - Drop objects from the node's local storage
 * [neofs-cli control healthcheck](neofs-cli_control_healthcheck.md)	 - Health check of the NeoFS node
+* [neofs-cli control notary](neofs-cli_control_notary.md)	 - Commands with notary request with alphabet key of inner ring node
 * [neofs-cli control object](neofs-cli_control_object.md)	 - Direct object operations with storage engine
 * [neofs-cli control set-status](neofs-cli_control_set-status.md)	 - Set status of the storage node in NeoFS network map
 * [neofs-cli control shards](neofs-cli_control_shards.md)	 - Operations with storage node's shards

docs/cli-commands/neofs-cli_control_notary.md

@@ -0,0 +1,24 @@
+## neofs-cli control notary
+
+Commands with notary request with alphabet key of inner ring node
+
+### Options
+
+```
+  -h, --help   help for notary
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config string   Config file (default is $HOME/.config/neofs-cli/config.yaml)
+  -v, --verbose         Verbose output
+```
+
+### SEE ALSO
+
+* [neofs-cli control](neofs-cli_control.md)	 - Operations with storage node
+* [neofs-cli control notary list](neofs-cli_control_notary_list.md)	 - Get list of all notary requests in network
+* [neofs-cli control notary request](neofs-cli_control_notary_request.md)	 - Create and send a notary request
+* [neofs-cli control notary sign](neofs-cli_control_notary_sign.md)	 - Sign notary request by its hash
+

docs/cli-commands/neofs-cli_control_notary_list.md

@@ -0,0 +1,33 @@
+## neofs-cli control notary list
+
+Get list of all notary requests in network
+
+### Synopsis
+
+Get list of all notary requests in network
+
+```
+neofs-cli control notary list [flags]
+```
+
+### Options
+
+```
+      --address string     Address of wallet account
+      --endpoint string    Remote node control address (as 'multiaddr' or '<host>:<port>')
+  -h, --help               help for list
+  -t, --timeout duration   Timeout for the operation (default 15s)
+  -w, --wallet string      Path to the wallet
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config string   Config file (default is $HOME/.config/neofs-cli/config.yaml)
+  -v, --verbose         Verbose output
+```
+
+### SEE ALSO
+
+* [neofs-cli control notary](neofs-cli_control_notary.md)	 - Commands with notary request with alphabet key of inner ring node
+