sfa/managers/slice_manager_pl.py

   1 #
   2 import sys
   3 import time,datetime
   4 from StringIO import StringIO
   5 from types import StringTypes
   6 from copy import deepcopy
   7 from copy import copy
   8 from lxml import etree
   9
  10 from sfa.util.sfalogging import logger
  11 from sfa.util.rspecHelper import merge_rspecs
  12 from sfa.util.xrn import Xrn, urn_to_hrn, hrn_to_urn
  13 from sfa.util.plxrn import hrn_to_pl_slicename
  14 from sfa.util.rspec import *
  15 from sfa.util.specdict import *
  16 from sfa.util.faults import *
  17 from sfa.util.record import SfaRecord
  18 from sfa.rspecs.pg_rspec import PGRSpec
  19 from sfa.rspecs.sfa_rspec import SfaRSpec
  20 from sfa.rspecs.rspec_converter import RSpecConverter
  21 from sfa.rspecs.rspec_parser import parse_rspec
  22 from sfa.rspecs.rspec_version import RSpecVersion
  23 from sfa.rspecs.sfa_rspec import sfa_rspec_version
  24 from sfa.rspecs.pg_rspec import pg_rspec_ad_version, pg_rspec_request_version
  25 from sfa.util.policy import Policy
  26 from sfa.util.prefixTree import prefixTree
  27 from sfa.util.sfaticket import *
  28 from sfa.trust.credential import Credential
  29 from sfa.util.threadmanager import ThreadManager
  30 import sfa.util.xmlrpcprotocol as xmlrpcprotocol
  31 import sfa.plc.peers as peers
  32 from sfa.util.version import version_core
  33 from sfa.util.callids import Callids
  34
  35
  36 def _call_id_supported(api, server):
  37     """
  38     Returns true if server support the optional call_id arg, false otherwise.
  39     """
  40     server_version = api.get_cached_server_version(server)
  41
  42     if 'sfa' in server_version:
  43         code_tag = server_version['code_tag']
  44         code_tag_parts = code_tag.split("-")
  45
  46         version_parts = code_tag_parts[0].split(".")
  47         major, minor = version_parts[0], version_parts[1]
  48         rev = code_tag_parts[1]
  49         if int(major) > 1:
  50             if int(minor) > 0 or int(rev) > 20:
  51                 return True
  52     return False
  53
  54 # we have specialized xmlrpclib.ServerProxy to remember the input url
  55 # OTOH it's not clear if we're only dealing with XMLRPCServerProxy instances
  56 def get_serverproxy_url (server):
  57     try:
  58         return server.url
  59     except:
  60         logger.warning("GetVersion, falling back to xmlrpclib.ServerProxy internals")
  61         return server._ServerProxy__host + server._ServerProxy__handler
  62
  63 def GetVersion(api):
  64     # peers explicitly in aggregates.xml
  65     peers =dict ([ (peername,get_serverproxy_url(v)) for (peername,v) in api.aggregates.iteritems()
  66                    if peername != api.hrn])
  67     xrn=Xrn (api.hrn)
  68     request_rspec_versions = [dict(pg_rspec_request_version), dict(sfa_rspec_version)]
  69     ad_rspec_versions = [dict(pg_rspec_ad_version), dict(sfa_rspec_version)]
  70     version_more = {'interface':'slicemgr',
  71                     'hrn' : xrn.get_hrn(),
  72                     'urn' : xrn.get_urn(),
  73                     'peers': peers,
  74                     'request_rspec_versions': request_rspec_versions,
  75                     'ad_rspec_versions': ad_rspec_versions,
  76                     'default_ad_rspec': dict(sfa_rspec_version)
  77                     }
  78     sm_version=version_core(version_more)
  79     # local aggregate if present needs to have localhost resolved
  80     if api.hrn in api.aggregates:
  81         local_am_url=get_serverproxy_url(api.aggregates[api.hrn])
  82         sm_version['peers'][api.hrn]=local_am_url.replace('localhost',sm_version['hostname'])
  83     return sm_version
  84
  85
  86 def ListResources(api, creds, options, call_id):
  87     def _ListResources(server, credential, my_opts, call_id):
  88         args = [credential, my_opts]
  89         if _call_id_supported(api, server):
  90             args.append(call_id)
  91         try:
  92             return server.ListResources(*args)
  93         except Exception, e:
  94             api.logger.warn("ListResources failed at %s: %s" %(server.url, str(e)))
  95
  96     if Callids().already_handled(call_id): return ""
  97
  98     # get slice's hrn from options
  99     xrn = options.get('geni_slice_urn', '')
 100     (hrn, type) = urn_to_hrn(xrn)
 101     my_opts = copy(options)
 102     my_opts['geni_compressed'] = False
 103     if 'rspec_version' in my_opts:
 104         del my_opts['rspec_version']
 105
 106     # get the rspec's return format from options
 107     rspec_version = RSpecVersion(options.get('rspec_version'))
 108     version_string = "rspec_%s" % (rspec_version.get_version_name())
 109
 110     # look in cache first
 111     if caching and api.cache and not xrn:
 112         rspec =  api.cache.get(version_string)
 113         if rspec:
 114             return rspec
 115
 116     # get the callers hrn
 117     valid_cred = api.auth.checkCredentials(creds, 'listnodes', hrn)[0]
 118     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 119
 120     # attempt to use delegated credential first
 121     credential = api.getDelegatedCredential(creds)
 122     if not credential:
 123         credential = api.getCredential()
 124     credentials = [credential]
 125     threads = ThreadManager()
 126     for aggregate in api.aggregates:
 127         # prevent infinite loop. Dont send request back to caller
 128         # unless the caller is the aggregate's SM
 129         if caller_hrn == aggregate and aggregate != api.hrn:
 130             continue
 131         # get the rspec from the aggregate
 132         server = api.aggregates[aggregate]
 133         #threads.run(server.ListResources, credentials, my_opts, call_id)
 134         threads.run(_ListResources, server, credentials, my_opts, call_id)
 135
 136     results = threads.get_results()
 137     rspec_version = RSpecVersion(my_opts.get('rspec_version'))
 138     if rspec_version['type'] == pg_rspec_ad_version['type']:
 139         rspec = PGRSpec()
 140     else:
 141         rspec = SfaRSpec()
 142     for result in results:
 143         try:
 144             rspec.merge(result)
 145         except:
 146             api.logger.info("SM.ListResources: Failed to merge aggregate rspec")
 147
 148     # cache the result
 149     if caching and api.cache and not xrn:
 150         api.cache.add(version_string, rspec.toxml())
 151
 152     return rspec.toxml()
 153
 154
 155 def CreateSliver(api, xrn, creds, rspec_str, users, call_id):
 156
 157     def _CreateSliver(server, xrn, credential, rspec, users, call_id):
 158             # Need to call GetVersion at an aggregate to determine the supported
 159             # rspec type/format beofre calling CreateSliver at an Aggregate.
 160             server_version = _get_server_version(api, server)
 161             if 'sfa' not in aggregate_version and 'geni_api' in aggregate_version:
 162                 # sfa aggregtes support both sfa and pg rspecs, no need to convert
 163                 # if aggregate supports sfa rspecs. othewise convert to pg rspec
 164                 rspec = RSpecConverter.to_pg_rspec(rspec)
 165             args = [xrn, credential, rspec, users]
 166             if _call_id_supported(api, server):
 167                 args.append(call_id)
 168             try:
 169                 return server.CreateSliver(*args)
 170             except Exception, e:
 171                 api.logger.warn("CreateSliver failed at %s: %s" %(server.url, str(e)))
 172
 173     if Callids().already_handled(call_id): return ""
 174     # Validate the RSpec against PlanetLab's schema --disabled for now
 175     # The schema used here needs to aggregate the PL and VINI schemas
 176     # schema = "/var/www/html/schemas/pl.rng"
 177     rspec = parse_rspec(rspec_str)
 178     schema = None
 179     if schema:
 180         rspec.validate(schema)
 181
 182     # attempt to use delegated credential first
 183     credential = api.getDelegatedCredential(creds)
 184     if not credential:
 185         credential = api.getCredential()
 186
 187     # get the callers hrn
 188     hrn, type = urn_to_hrn(xrn)
 189     valid_cred = api.auth.checkCredentials(creds, 'createsliver', hrn)[0]
 190     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 191     threads = ThreadManager()
 192     for aggregate in api.aggregates:
 193         # prevent infinite loop. Dont send request back to caller
 194         # unless the caller is the aggregate's SM
 195         if caller_hrn == aggregate and aggregate != api.hrn:
 196             continue
 197         server = api.aggregates[aggregate]
 198         # Just send entire RSpec to each aggregate
 199         threads.run(_CreateSliver, server, xrn, credential, rspec.toxml(), users, call_id)
 200
 201     results = threads.get_results()
 202     rspec = SfaRSpec()
 203     for result in results:
 204         rspec.merge(result)
 205     return rspec.toxml()
 206
 207 def RenewSliver(api, xrn, creds, expiration_time, call_id):
 208     def _RenewSliver(server, xrn, creds, expiration_time, call_id):
 209         server_version = _get_server_version(api, server)
 210         args =  [xrn, creds, expiration_time, call_id]
 211         if _call_id_supported(api, server):
 212             args.append(call_id)
 213         return server.RenewSliver(*args)
 214
 215     if Callids().already_handled(call_id): return True
 216
 217     (hrn, type) = urn_to_hrn(xrn)
 218     # get the callers hrn
 219     valid_cred = api.auth.checkCredentials(creds, 'renewsliver', hrn)[0]
 220     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 221
 222     # attempt to use delegated credential first
 223     credential = api.getDelegatedCredential(creds)
 224     if not credential:
 225         credential = api.getCredential()
 226     threads = ThreadManager()
 227     for aggregate in api.aggregates:
 228         # prevent infinite loop. Dont send request back to caller
 229         # unless the caller is the aggregate's SM
 230         if caller_hrn == aggregate and aggregate != api.hrn:
 231             continue
 232         server = api.aggregates[aggregate]
 233         threads.run(_RenewSliver, server, xrn, [credential], expiration_time, call_id)
 234     # 'and' the results
 235     return reduce (lambda x,y: x and y, threads.get_results() , True)
 236
 237 def DeleteSliver(api, xrn, creds, call_id):
 238     def _DeleteSliver(server, xrn, creds, call_id):
 239         server_version = _get_server_version(api, server)
 240         args =  [xrn, creds]
 241         if _call_id_supported(api, server):
 242             args.append(call_id)
 243         return server.DeleteSliver(*args)
 244
 245     if Callids().already_handled(call_id): return ""
 246     (hrn, type) = urn_to_hrn(xrn)
 247     # get the callers hrn
 248     valid_cred = api.auth.checkCredentials(creds, 'deletesliver', hrn)[0]
 249     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 250
 251     # attempt to use delegated credential first
 252     credential = api.getDelegatedCredential(creds)
 253     if not credential:
 254         credential = api.getCredential()
 255     threads = ThreadManager()
 256     for aggregate in api.aggregates:
 257         # prevent infinite loop. Dont send request back to caller
 258         # unless the caller is the aggregate's SM
 259         if caller_hrn == aggregate and aggregate != api.hrn:
 260             continue
 261         server = api.aggregates[aggregate]
 262         threads.run(_DeleteSliver, server, xrn, credential, call_id)
 263     threads.get_results()
 264     return 1
 265
 266
 267 # first draft at a merging SliverStatus
 268 def SliverStatus(api, slice_xrn, creds, call_id):
 269     def _SliverStatus(server, xrn, creds, call_id):
 270         server_version = _get_server_version(api, server)
 271         args =  [xrn, creds]
 272         if _call_id_supported(api, server):
 273             args.append(call_id)
 274         return server.SliverStatus(*args)
 275
 276     if Callids().already_handled(call_id): return {}
 277     # attempt to use delegated credential first
 278     credential = api.getDelegatedCredential(creds)
 279     if not credential:
 280         credential = api.getCredential()
 281     threads = ThreadManager()
 282     for aggregate in api.aggregates:
 283         server = api.aggregates[aggregate]
 284         threads.run (_SliverStatus, server, slice_xrn, credential, call_id)
 285     results = threads.get_results()
 286
 287     # get rid of any void result - e.g. when call_id was hit where by convention we return {}
 288     results = [ result for result in results if result and result['geni_resources']]
 289
 290     # do not try to combine if there's no result
 291     if not results : return {}
 292
 293     # otherwise let's merge stuff
 294     overall = {}
 295
 296     # mmh, it is expected that all results carry the same urn
 297     overall['geni_urn'] = results[0]['geni_urn']
 298     overall['pl_login'] = results[0]['pl_login']
 299     # append all geni_resources
 300     overall['geni_resources'] = \
 301         reduce (lambda x,y: x+y, [ result['geni_resources'] for result in results] , [])
 302     overall['status'] = 'unknown'
 303     if overall['geni_resources']:
 304         overall['status'] = 'ready'
 305
 306     return overall
 307
 308 caching=True
 309 #caching=False
 310 def ListSlices(api, creds, call_id):
 311     def _ListSlices(server, creds, call_id):
 312         server_version = _get_server_version(api, server)
 313         args =  [creds]
 314         if _call_id_supported(api, server):
 315             args.append(call_id)
 316         return server.ListSlices(*args)
 317
 318     if Callids().already_handled(call_id): return []
 319
 320     # look in cache first
 321     if caching and api.cache:
 322         slices = api.cache.get('slices')
 323         if slices:
 324             return slices
 325
 326     # get the callers hrn
 327     valid_cred = api.auth.checkCredentials(creds, 'listslices', None)[0]
 328     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 329
 330     # attempt to use delegated credential first
 331     credential = api.getDelegatedCredential(creds)
 332     if not credential:
 333         credential = api.getCredential()
 334     threads = ThreadManager()
 335     # fetch from aggregates
 336     for aggregate in api.aggregates:
 337         # prevent infinite loop. Dont send request back to caller
 338         # unless the caller is the aggregate's SM
 339         if caller_hrn == aggregate and aggregate != api.hrn:
 340             continue
 341         server = api.aggregates[aggregate]
 342         threads.run(_ListSlices, server, credential, call_id)
 343
 344     # combime results
 345     results = threads.get_results()
 346     slices = []
 347     for result in results:
 348         slices.extend(result)
 349
 350     # cache the result
 351     if caching and api.cache:
 352         api.cache.add('slices', slices)
 353
 354     return slices
 355
 356
 357 def get_ticket(api, xrn, creds, rspec, users):
 358     slice_hrn, type = urn_to_hrn(xrn)
 359     # get the netspecs contained within the clients rspec
 360     aggregate_rspecs = {}
 361     tree= etree.parse(StringIO(rspec))
 362     elements = tree.findall('./network')
 363     for element in elements:
 364         aggregate_hrn = element.values()[0]
 365         aggregate_rspecs[aggregate_hrn] = rspec
 366
 367     # get the callers hrn
 368     valid_cred = api.auth.checkCredentials(creds, 'getticket', slice_hrn)[0]
 369     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 370
 371     # attempt to use delegated credential first
 372     credential = api.getDelegatedCredential(creds)
 373     if not credential:
 374         credential = api.getCredential()
 375     threads = ThreadManager()
 376     for (aggregate, aggregate_rspec) in aggregate_rspecs.iteritems():
 377         # prevent infinite loop. Dont send request back to caller
 378         # unless the caller is the aggregate's SM
 379         if caller_hrn == aggregate and aggregate != api.hrn:
 380             continue
 381         server = None
 382         if aggregate in api.aggregates:
 383             server = api.aggregates[aggregate]
 384         else:
 385             net_urn = hrn_to_urn(aggregate, 'authority')
 386             # we may have a peer that knows about this aggregate
 387             for agg in api.aggregates:
 388                 target_aggs = api.aggregates[agg].get_aggregates(credential, net_urn)
 389                 if not target_aggs or not 'hrn' in target_aggs[0]:
 390                     continue
 391                 # send the request to this address
 392                 url = target_aggs[0]['url']
 393                 server = xmlrpcprotocol.get_server(url, api.key_file, api.cert_file)
 394                 # aggregate found, no need to keep looping
 395                 break
 396         if server is None:
 397             continue
 398         threads.run(server.GetTicket, xrn, credential, aggregate_rspec, users)
 399
 400     results = threads.get_results()
 401
 402     # gather information from each ticket
 403     rspecs = []
 404     initscripts = []
 405     slivers = []
 406     object_gid = None
 407     for result in results:
 408         agg_ticket = SfaTicket(string=result)
 409         attrs = agg_ticket.get_attributes()
 410         if not object_gid:
 411             object_gid = agg_ticket.get_gid_object()
 412         rspecs.append(agg_ticket.get_rspec())
 413         initscripts.extend(attrs.get('initscripts', []))
 414         slivers.extend(attrs.get('slivers', []))
 415
 416     # merge info
 417     attributes = {'initscripts': initscripts,
 418                  'slivers': slivers}
 419     merged_rspec = merge_rspecs(rspecs)
 420
 421     # create a new ticket
 422     ticket = SfaTicket(subject = slice_hrn)
 423     ticket.set_gid_caller(api.auth.client_gid)
 424     ticket.set_issuer(key=api.key, subject=api.hrn)
 425     ticket.set_gid_object(object_gid)
 426     ticket.set_pubkey(object_gid.get_pubkey())
 427     #new_ticket.set_parent(api.auth.hierarchy.get_auth_ticket(auth_hrn))
 428     ticket.set_attributes(attributes)
 429     ticket.set_rspec(merged_rspec)
 430     ticket.encode()
 431     ticket.sign()
 432     return ticket.save_to_string(save_parents=True)
 433
 434 def start_slice(api, xrn, creds):
 435     hrn, type = urn_to_hrn(xrn)
 436
 437     # get the callers hrn
 438     valid_cred = api.auth.checkCredentials(creds, 'startslice', hrn)[0]
 439     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 440
 441     # attempt to use delegated credential first
 442     credential = api.getDelegatedCredential(creds)
 443     if not credential:
 444         credential = api.getCredential()
 445     threads = ThreadManager()
 446     for aggregate in api.aggregates:
 447         # prevent infinite loop. Dont send request back to caller
 448         # unless the caller is the aggregate's SM
 449         if caller_hrn == aggregate and aggregate != api.hrn:
 450             continue
 451         server = api.aggregates[aggregate]
 452         threads.run(server.Start, xrn, credential)
 453     threads.get_results()
 454     return 1
 455
 456 def stop_slice(api, xrn, creds):
 457     hrn, type = urn_to_hrn(xrn)
 458
 459     # get the callers hrn
 460     valid_cred = api.auth.checkCredentials(creds, 'stopslice', hrn)[0]
 461     caller_hrn = Credential(string=valid_cred).get_gid_caller().get_hrn()
 462
 463     # attempt to use delegated credential first
 464     credential = api.getDelegatedCredential(creds)
 465     if not credential:
 466         credential = api.getCredential()
 467     threads = ThreadManager()
 468     for aggregate in api.aggregates:
 469         # prevent infinite loop. Dont send request back to caller
 470         # unless the caller is the aggregate's SM
 471         if caller_hrn == aggregate and aggregate != api.hrn:
 472             continue
 473         server = api.aggregates[aggregate]
 474         threads.run(server.Stop, xrn, credential)
 475     threads.get_results()
 476     return 1
 477
 478 def reset_slice(api, xrn):
 479     """
 480     Not implemented
 481     """
 482     return 1
 483
 484 def shutdown(api, xrn, creds):
 485     """
 486     Not implemented
 487     """
 488     return 1
 489
 490 def status(api, xrn, creds):
 491     """
 492     Not implemented
 493     """
 494     return 1
 495
 496 def main():
 497     r = RSpec()
 498     r.parseFile(sys.argv[1])
 499     rspec = r.toDict()
 500     CreateSliver(None,'plc.princeton.tmacktestslice',rspec,'create-slice-tmacktestslice')
 501
 502 if __name__ == "__main__":
 503     main()
 504