sfa/managers/slice_manager_pl.py

   1 #
   2 import sys
   3 import time,datetime
   4 from StringIO import StringIO
   5 from types import StringTypes
   6 from copy import deepcopy
   7 from copy import copy
   8 from lxml import etree
   9
  10 from sfa.util.sfalogging import logger
  11 from sfa.util.rspecHelper import merge_rspecs
  12 from sfa.util.xrn import Xrn, urn_to_hrn, hrn_to_urn
  13 from sfa.util.plxrn import hrn_to_pl_slicename
  14 from sfa.util.rspec import *
  15 from sfa.util.specdict import *
  16 from sfa.util.faults import *
  17 from sfa.util.record import SfaRecord
  18 from sfa.rspecs.pg_rspec import PGRSpec
  19 from sfa.rspecs.sfa_rspec import SfaRSpec
  20 from sfa.rspecs.rspec_converter import RSpecConverter
  21 from sfa.rspecs.rspec_parser import parse_rspec
  22 from sfa.rspecs.rspec_version import RSpecVersion
  23 from sfa.rspecs.sfa_rspec import sfa_rspec_version
  24 from sfa.rspecs.pg_rspec import pg_rspec_ad_version, pg_rspec_request_version
  25 from sfa.util.policy import Policy
  26 from sfa.util.prefixTree import prefixTree
  27 from sfa.util.sfaticket import *
  28 from sfa.trust.credential import Credential
  29 from sfa.util.threadmanager import ThreadManager
  30 import sfa.util.xmlrpcprotocol as xmlrpcprotocol
  31 import sfa.plc.peers as peers
  32 from sfa.util.version import version_core
  33 from sfa.util.callids import Callids
  34
  35
  36 def _call_id_supported(api, server):
  37     """
  38     Returns true if server support the optional call_id arg, false otherwise.
  39     """
  40     server_version = api.get_cached_server_version(server)
  41
  42     if 'sfa' in server_version:
  43         code_tag = server_version['code_tag']
  44         code_tag_parts = code_tag.split("-")
  45
  46         version_parts = code_tag_parts[0].split(".")
  47         major, minor = version_parts[0:2]
  48         rev = code_tag_parts[1]
  49         if int(major) > 1:
  50             if int(minor) > 0 or int(rev) > 20:
  51                 return True
  52     return False
  53
  54 # we have specialized xmlrpclib.ServerProxy to remember the input url
  55 # OTOH it's not clear if we're only dealing with XMLRPCServerProxy instances
  56 def get_serverproxy_url (server):
  57     try:
  58         return server.url
  59     except:
  60         logger.warning("GetVersion, falling back to xmlrpclib.ServerProxy internals")
  61         return server._ServerProxy__host + server._ServerProxy__handler
  62
  63 def GetVersion(api):
  64     # peers explicitly in aggregates.xml
  65     peers =dict ([ (peername,get_serverproxy_url(v)) for (peername,v) in api.aggregates.iteritems()
  66                    if peername != api.hrn])
  67     xrn=Xrn (api.hrn)
  68     request_rspec_versions = [dict(pg_rspec_request_version), dict(sfa_rspec_version)]
  69     ad_rspec_versions = [dict(pg_rspec_ad_version), dict(sfa_rspec_version)]
  70     version_more = {'interface':'slicemgr',
  71                     'hrn' : xrn.get_hrn(),
  72                     'urn' : xrn.get_urn(),
  73                     'peers': peers,
  74                     'request_rspec_versions': request_rspec_versions,
  75                     'ad_rspec_versions': ad_rspec_versions,
  76                     'default_ad_rspec': dict(sfa_rspec_version)
  77                     }
  78     sm_version=version_core(version_more)
  79     # local aggregate if present needs to have localhost resolved
  80     if api.hrn in api.aggregates:
  81         local_am_url=get_serverproxy_url(api.aggregates[api.hrn])
  82         sm_version['peers'][api.hrn]=local_am_url.replace('localhost',sm_version['hostname'])
  83     return sm_version
  84
  85
  86 def ListResources(api, creds, options, call_id):
  87     def _ListResources(server, credential, my_opts, call_id):
  88         args = [credential, my_opts]
  89         if _call_id_supported(api, server):
  90             args.append(call_id)
  91         try:
  92             return server.ListResources(*args)
  93         except Exception, e:
  94             api.logger.warn("ListResources failed at %s: %s" %(server.url, str(e)))
  95
  96     if Callids().already_handled(call_id): return ""
  97
  98     # get slice's hrn from options
  99     xrn = options.get('geni_slice_urn', '')
 100     (hrn, type) = urn_to_hrn(xrn)
 101     my_opts = copy(options)
 102     my_opts['geni_compressed'] = False
 103     if 'rspec_version' in my_opts:
 104         del my_opts['rspec_version']
 105
 106     # get the rspec's return format from options
 107     rspec_version = RSpecVersion(options.get('rspec_version'))
 108     version_string = "rspec_%s" % (rspec_version.get_version_name())
 109
 110     # look in cache first
 111     if caching and api.cache and not xrn:
 112         rspec =  api.cache.get(version_string)
 113         if rspec:
 114             return rspec
 115
 116     # get the callers hrn
 117     valid_cred = api.auth.checkCredentials(creds, 'listnodes', hrn)[0]
 118     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 119
 120     # attempt to use delegated credential first
 121     credential = api.getDelegatedCredential(creds)
 122     if not credential:
 123         credential = api.getCredential()
 124     credentials = [credential]
 125     threads = ThreadManager()
 126     for aggregate in api.aggregates:
 127         # prevent infinite loop. Dont send request back to caller
 128         # unless the caller is the aggregate's SM
 129         if caller_hrn == aggregate and aggregate != api.hrn:
 130             continue
 131
 132         # get the rspec from the aggregate
 133         server = api.aggregates[aggregate]
 134         #threads.run(server.ListResources, credentials, my_opts, call_id)
 135         threads.run(_ListResources, server, credentials, my_opts, call_id)
 136
 137     results = threads.get_results()
 138     rspec_version = RSpecVersion(my_opts.get('rspec_version'))
 139     if rspec_version['type'] == pg_rspec_ad_version['type']:
 140         rspec = PGRSpec()
 141     else:
 142         rspec = SfaRSpec()
 143     for result in results:
 144         try:
 145             rspec.merge(result)
 146         except:
 147             api.logger.info("SM.ListResources: Failed to merge aggregate rspec")
 148
 149     # cache the result
 150     if caching and api.cache and not xrn:
 151         api.cache.add(version_string, rspec.toxml())
 152
 153     return rspec.toxml()
 154
 155
 156 def CreateSliver(api, xrn, creds, rspec_str, users, call_id):
 157
 158     def _CreateSliver(server, xrn, credential, rspec, users, call_id):
 159         try:
 160             # Need to call GetVersion at an aggregate to determine the supported
 161             # rspec type/format beofre calling CreateSliver at an Aggregate.
 162             server_version = api.get_cached_server_version(server)
 163             if 'sfa' not in server_version and 'geni_api' in server_version:
 164                 # sfa aggregtes support both sfa and pg rspecs, no need to convert
 165                 # if aggregate supports sfa rspecs. otherwise convert to pg rspec
 166                 rspec = RSpecConverter.to_pg_rspec(rspec)
 167             args = [xrn, credential, rspec, users]
 168             if _call_id_supported(api, server):
 169                 args.append(call_id)
 170             return server.CreateSliver(*args)
 171         except:
 172             logger.log_exc('Something wrong in _CreateSliver with URL %s'%server.url)
 173
 174     if Callids().already_handled(call_id): return ""
 175     # Validate the RSpec against PlanetLab's schema --disabled for now
 176     # The schema used here needs to aggregate the PL and VINI schemas
 177     # schema = "/var/www/html/schemas/pl.rng"
 178     rspec = parse_rspec(rspec_str)
 179     schema = None
 180     if schema:
 181         rspec.validate(schema)
 182
 183     # attempt to use delegated credential first
 184     credential = api.getDelegatedCredential(creds)
 185     if not credential:
 186         credential = api.getCredential()
 187
 188     # get the callers hrn
 189     hrn, type = urn_to_hrn(xrn)
 190     valid_cred = api.auth.checkCredentials(creds, 'createsliver', hrn)[0]
 191     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 192     threads = ThreadManager()
 193     for aggregate in api.aggregates:
 194         # prevent infinite loop. Dont send request back to caller
 195         # unless the caller is the aggregate's SM
 196         if caller_hrn == aggregate and aggregate != api.hrn:
 197             continue
 198         server = api.aggregates[aggregate]
 199         # Just send entire RSpec to each aggregate
 200         threads.run(_CreateSliver, server, xrn, credential, rspec.toxml(), users, call_id)
 201
 202     results = threads.get_results()
 203     rspec = SfaRSpec()
 204     for result in results:
 205         rspec.merge(result)
 206     return rspec.toxml()
 207
 208 def RenewSliver(api, xrn, creds, expiration_time, call_id):
 209     def _RenewSliver(server, xrn, creds, expiration_time, call_id):
 210         server_version = _get_server_version(api, server)
 211         args =  [xrn, creds, expiration_time, call_id]
 212         if _call_id_supported(api, server):
 213             args.append(call_id)
 214         return server.RenewSliver(*args)
 215
 216     if Callids().already_handled(call_id): return True
 217
 218     (hrn, type) = urn_to_hrn(xrn)
 219     # get the callers hrn
 220     valid_cred = api.auth.checkCredentials(creds, 'renewsliver', hrn)[0]
 221     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 222
 223     # attempt to use delegated credential first
 224     credential = api.getDelegatedCredential(creds)
 225     if not credential:
 226         credential = api.getCredential()
 227     threads = ThreadManager()
 228     for aggregate in api.aggregates:
 229         # prevent infinite loop. Dont send request back to caller
 230         # unless the caller is the aggregate's SM
 231         if caller_hrn == aggregate and aggregate != api.hrn:
 232             continue
 233         server = api.aggregates[aggregate]
 234         threads.run(_RenewSliver, server, xrn, [credential], expiration_time, call_id)
 235     # 'and' the results
 236     return reduce (lambda x,y: x and y, threads.get_results() , True)
 237
 238 def DeleteSliver(api, xrn, creds, call_id):
 239     def _DeleteSliver(server, xrn, creds, call_id):
 240         server_version = _get_server_version(api, server)
 241         args =  [xrn, creds]
 242         if _call_id_supported(api, server):
 243             args.append(call_id)
 244         return server.DeleteSliver(*args)
 245
 246     if Callids().already_handled(call_id): return ""
 247     (hrn, type) = urn_to_hrn(xrn)
 248     # get the callers hrn
 249     valid_cred = api.auth.checkCredentials(creds, 'deletesliver', hrn)[0]
 250     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 251
 252     # attempt to use delegated credential first
 253     credential = api.getDelegatedCredential(creds)
 254     if not credential:
 255         credential = api.getCredential()
 256     threads = ThreadManager()
 257     for aggregate in api.aggregates:
 258         # prevent infinite loop. Dont send request back to caller
 259         # unless the caller is the aggregate's SM
 260         if caller_hrn == aggregate and aggregate != api.hrn:
 261             continue
 262         server = api.aggregates[aggregate]
 263         threads.run(_DeleteSliver, server, xrn, credential, call_id)
 264     threads.get_results()
 265     return 1
 266
 267
 268 # first draft at a merging SliverStatus
 269 def SliverStatus(api, slice_xrn, creds, call_id):
 270     def _SliverStatus(server, xrn, creds, call_id):
 271         server_version = _get_server_version(api, server)
 272         args =  [xrn, creds]
 273         if _call_id_supported(api, server):
 274             args.append(call_id)
 275         return server.SliverStatus(*args)
 276
 277     if Callids().already_handled(call_id): return {}
 278     # attempt to use delegated credential first
 279     credential = api.getDelegatedCredential(creds)
 280     if not credential:
 281         credential = api.getCredential()
 282     threads = ThreadManager()
 283     for aggregate in api.aggregates:
 284         server = api.aggregates[aggregate]
 285         threads.run (_SliverStatus, server, slice_xrn, credential, call_id)
 286     results = threads.get_results()
 287
 288     # get rid of any void result - e.g. when call_id was hit where by convention we return {}
 289     results = [ result for result in results if result and result['geni_resources']]
 290
 291     # do not try to combine if there's no result
 292     if not results : return {}
 293
 294     # otherwise let's merge stuff
 295     overall = {}
 296
 297     # mmh, it is expected that all results carry the same urn
 298     overall['geni_urn'] = results[0]['geni_urn']
 299     overall['pl_login'] = results[0]['pl_login']
 300     # append all geni_resources
 301     overall['geni_resources'] = \
 302         reduce (lambda x,y: x+y, [ result['geni_resources'] for result in results] , [])
 303     overall['status'] = 'unknown'
 304     if overall['geni_resources']:
 305         overall['status'] = 'ready'
 306
 307     return overall
 308
 309 caching=True
 310 #caching=False
 311 def ListSlices(api, creds, call_id):
 312     def _ListSlices(server, creds, call_id):
 313         server_version = _get_server_version(api, server)
 314         args =  [creds]
 315         if _call_id_supported(api, server):
 316             args.append(call_id)
 317         return server.ListSlices(*args)
 318
 319     if Callids().already_handled(call_id): return []
 320
 321     # look in cache first
 322     if caching and api.cache:
 323         slices = api.cache.get('slices')
 324         if slices:
 325             return slices
 326
 327     # get the callers hrn
 328     valid_cred = api.auth.checkCredentials(creds, 'listslices', None)[0]
 329     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 330
 331     # attempt to use delegated credential first
 332     credential = api.getDelegatedCredential(creds)
 333     if not credential:
 334         credential = api.getCredential()
 335     threads = ThreadManager()
 336     # fetch from aggregates
 337     for aggregate in api.aggregates:
 338         # prevent infinite loop. Dont send request back to caller
 339         # unless the caller is the aggregate's SM
 340         if caller_hrn == aggregate and aggregate != api.hrn:
 341             continue
 342         server = api.aggregates[aggregate]
 343         threads.run(_ListSlices, server, credential, call_id)
 344
 345     # combime results
 346     results = threads.get_results()
 347     slices = []
 348     for result in results:
 349         slices.extend(result)
 350
 351     # cache the result
 352     if caching and api.cache:
 353         api.cache.add('slices', slices)
 354
 355     return slices
 356
 357
 358 def get_ticket(api, xrn, creds, rspec, users):
 359     slice_hrn, type = urn_to_hrn(xrn)
 360     # get the netspecs contained within the clients rspec
 361     aggregate_rspecs = {}
 362     tree= etree.parse(StringIO(rspec))
 363     elements = tree.findall('./network')
 364     for element in elements:
 365         aggregate_hrn = element.values()[0]
 366         aggregate_rspecs[aggregate_hrn] = rspec
 367
 368     # get the callers hrn
 369     valid_cred = api.auth.checkCredentials(creds, 'getticket', slice_hrn)[0]
 370     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 371
 372     # attempt to use delegated credential first
 373     credential = api.getDelegatedCredential(creds)
 374     if not credential:
 375         credential = api.getCredential()
 376     threads = ThreadManager()
 377     for (aggregate, aggregate_rspec) in aggregate_rspecs.iteritems():
 378         # prevent infinite loop. Dont send request back to caller
 379         # unless the caller is the aggregate's SM
 380         if caller_hrn == aggregate and aggregate != api.hrn:
 381             continue
 382         server = None
 383         if aggregate in api.aggregates:
 384             server = api.aggregates[aggregate]
 385         else:
 386             net_urn = hrn_to_urn(aggregate, 'authority')
 387             # we may have a peer that knows about this aggregate
 388             for agg in api.aggregates:
 389                 target_aggs = api.aggregates[agg].get_aggregates(credential, net_urn)
 390                 if not target_aggs or not 'hrn' in target_aggs[0]:
 391                     continue
 392                 # send the request to this address
 393                 url = target_aggs[0]['url']
 394                 server = xmlrpcprotocol.get_server(url, api.key_file, api.cert_file)
 395                 # aggregate found, no need to keep looping
 396                 break
 397         if server is None:
 398             continue
 399         threads.run(server.GetTicket, xrn, credential, aggregate_rspec, users)
 400
 401     results = threads.get_results()
 402
 403     # gather information from each ticket
 404     rspecs = []
 405     initscripts = []
 406     slivers = []
 407     object_gid = None
 408     for result in results:
 409         agg_ticket = SfaTicket(string=result)
 410         attrs = agg_ticket.get_attributes()
 411         if not object_gid:
 412             object_gid = agg_ticket.get_gid_object()
 413         rspecs.append(agg_ticket.get_rspec())
 414         initscripts.extend(attrs.get('initscripts', []))
 415         slivers.extend(attrs.get('slivers', []))
 416
 417     # merge info
 418     attributes = {'initscripts': initscripts,
 419                  'slivers': slivers}
 420     merged_rspec = merge_rspecs(rspecs)
 421
 422     # create a new ticket
 423     ticket = SfaTicket(subject = slice_hrn)
 424     ticket.set_gid_caller(api.auth.client_gid)
 425     ticket.set_issuer(key=api.key, subject=api.hrn)
 426     ticket.set_gid_object(object_gid)
 427     ticket.set_pubkey(object_gid.get_pubkey())
 428     #new_ticket.set_parent(api.auth.hierarchy.get_auth_ticket(auth_hrn))
 429     ticket.set_attributes(attributes)
 430     ticket.set_rspec(merged_rspec)
 431     ticket.encode()
 432     ticket.sign()
 433     return ticket.save_to_string(save_parents=True)
 434
 435 def start_slice(api, xrn, creds):
 436     hrn, type = urn_to_hrn(xrn)
 437
 438     # get the callers hrn
 439     valid_cred = api.auth.checkCredentials(creds, 'startslice', hrn)[0]
 440     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 441
 442     # attempt to use delegated credential first
 443     credential = api.getDelegatedCredential(creds)
 444     if not credential:
 445         credential = api.getCredential()
 446     threads = ThreadManager()
 447     for aggregate in api.aggregates:
 448         # prevent infinite loop. Dont send request back to caller
 449         # unless the caller is the aggregate's SM
 450         if caller_hrn == aggregate and aggregate != api.hrn:
 451             continue
 452         server = api.aggregates[aggregate]
 453         threads.run(server.Start, xrn, credential)
 454     threads.get_results()
 455     return 1
 456
 457 def stop_slice(api, xrn, creds):
 458     hrn, type = urn_to_hrn(xrn)
 459
 460     # get the callers hrn
 461     valid_cred = api.auth.checkCredentials(creds, 'stopslice', hrn)[0]
 462     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 463
 464     # attempt to use delegated credential first
 465     credential = api.getDelegatedCredential(creds)
 466     if not credential:
 467         credential = api.getCredential()
 468     threads = ThreadManager()
 469     for aggregate in api.aggregates:
 470         # prevent infinite loop. Dont send request back to caller
 471         # unless the caller is the aggregate's SM
 472         if caller_hrn == aggregate and aggregate != api.hrn:
 473             continue
 474         server = api.aggregates[aggregate]
 475         threads.run(server.Stop, xrn, credential)
 476     threads.get_results()
 477     return 1
 478
 479 def reset_slice(api, xrn):
 480     """
 481     Not implemented
 482     """
 483     return 1
 484
 485 def shutdown(api, xrn, creds):
 486     """
 487     Not implemented
 488     """
 489     return 1
 490
 491 def status(api, xrn, creds):
 492     """
 493     Not implemented
 494     """
 495     return 1
 496
 497 def main():
 498     r = RSpec()
 499     r.parseFile(sys.argv[1])
 500     rspec = r.toDict()
 501     CreateSliver(None,'plc.princeton.tmacktestslice',rspec,'create-slice-tmacktestslice')
 502
 503 if __name__ == "__main__":
 504     main()
 505