planetstack/openstack_observer/steps/sync_controller_users.py

   1 import os
   2 import base64
   3 import hashlib
   4 from collections import defaultdict
   5 from django.db.models import F, Q
   6 from planetstack.config import Config
   7 from observer.openstacksyncstep import OpenStackSyncStep
   8 from core.models.site import Controller, SiteDeployments
   9 from core.models.user import User
  10 from core.models.controllerusers import ControllerUsers
  11 from util.logger import Logger, logging
  12
  13 from observer.ansible import *
  14
  15 logger = Logger(level=logging.INFO)
  16
  17 class SyncControllerUsers(OpenStackSyncStep):
  18     provides=[ControllerUsers, User]
  19     requested_interval=0
  20
  21     def fetch_pending(self, deleted):
  22
  23         if (deleted):
  24             return ControllerUsers.deleted_objects.all()
  25         else:
  26             return ControllerUsers.objects.filter(Q(enacted__lt=F('updated')) | Q(enacted=None))
  27
  28     def sync_record(self, controller_user):
  29         logger.info("sync'ing user %s at controller %s" % (controller_user.user, controller_user.controller))
  30
  31         if not controller_user.controller.admin_user:
  32             logger.info("controller %r has no admin_user, skipping" % controller_user.controller)
  33             return
  34
  35         template = os_template_env.get_template('sync_controller_users.yaml')
  36
  37         name = controller_user.user.email[:controller_user.user.email.find('@')]
  38
  39         roles = ['user']
  40         if controller_user.user.is_admin:
  41             roles.append('admin')
  42         else:
  43             raise Exception('Internal error. Missing controller for user %s'%controller_user.user.email)
  44
  45         # setup user home site roles at controller
  46         if not controller_user.user.site:
  47             raise Exception('Siteless user %s'%controller_user.user.email)
  48         else:
  49             # look up tenant id for the user's site at the controller
  50             ctrl_site_deployments = ControllerSiteDeployments.objects.filter(
  51               site_deployment__site=controller_user.user.site,
  52               controller=controller_user.controller)
  53
  54             if ctrl_site_deployments:
  55                 # need the correct tenant id for site at the controller
  56                 tenant_id = ctrl_site_deployments[0].tenant_id
  57                 tenant_name = ctrl_site_deployment[0].site_deployment.site.login_base
  58
  59                 user_fields = {'endpoint':controller_user.controller.auth_url,
  60                        'name': controller_user.user.email,
  61                        'email': controller_user.user.email,
  62                        'password': hashlib.md5(controller_user.user.password).hexdigest()[:6],
  63                        'admin_user': controller_user.controller.admin_user,
  64                        'admin_password': controller_user.controller.admin_password,
  65                        'admin_tenant': 'admin',
  66                        'roles':roles,
  67                        'tenant':tenant_name}
  68
  69                 rendered = template.render(user_fields)
  70                 res = run_template('sync_controller_users.yaml', user_fields)
  71
  72                 # results is an array in which each element corresponds to an
  73                 # "ok" string received per operation. If we get as many oks as
  74                 # the number of operations we issued, that means a grand success.
  75                 # Otherwise, the number of oks tell us which operation failed.
  76                 expected_length = len(roles) + 1
  77                 if (len(res)==expected_length):
  78                     controller_user.kuser_id = res[0]['id']
  79                     controller_user.save()
  80                 elif (len(res)):
  81                     raise Exception('Could not assign roles for user %s'%user_fields['name'])
  82                 else:
  83                     raise Exception('Could not create or update user %s'%user_fields['name'])
  84
  85     def delete_record(self, controller_user):
  86         if controller_user.kuser_id:
  87             driver = self.driver.admin_driver(controller=controller_user.controller)
  88             driver.delete_user(controller_user.kuser_id)