sfa/openstack/osaggregate.py

   1
   2 import os
   3 import socket
   4 import base64
   5 import string
   6 import random
   7 from collections import defaultdict
   8 from nova.exception import ImageNotFound
   9 from nova.api.ec2.cloud import CloudController
  10 from sfa.util.faults import SfaAPIError
  11 from sfa.rspecs.rspec import RSpec
  12 from sfa.rspecs.elements.hardware_type import HardwareType
  13 from sfa.rspecs.elements.node import Node
  14 from sfa.rspecs.elements.sliver import Sliver
  15 from sfa.rspecs.elements.login import Login
  16 from sfa.rspecs.elements.disk_image import DiskImage
  17 from sfa.rspecs.elements.services import Services
  18 from sfa.rspecs.elements.interface import Interface
  19 from sfa.util.xrn import Xrn
  20 from sfa.planetlab.plxrn import PlXrn
  21 from sfa.openstack.osxrn import OSXrn, hrn_to_os_slicename
  22 from sfa.rspecs.version_manager import VersionManager
  23 from sfa.openstack.security_group import SecurityGroup
  24 from sfa.util.sfalogging import logger
  25
  26 def pubkeys_to_user_data(pubkeys):
  27     user_data = "#!/bin/bash\n\n"
  28     for pubkey in pubkeys:
  29         pubkey = pubkey.replace('\n', '')
  30         user_data += "echo %s >> /root/.ssh/authorized_keys" % pubkey
  31         user_data += "\n"
  32         user_data += "echo >> /root/.ssh/authorized_keys"
  33         user_data += "\n"
  34     return user_data
  35
  36 def instance_to_sliver(instance, slice_xrn=None):
  37     sliver_id = None
  38     if slice_xrn:
  39         xrn = Xrn(slice_xrn, 'slice')
  40         sliver_id = xrn.get_sliver_id(instance.project_id, instance.hostname, instance.id)
  41
  42     sliver = Sliver({'slice_id': sliver_id,
  43                      'name': instance.name,
  44                      'type': instance.name,
  45                      'cpus': str(instance.vcpus),
  46                      'memory': str(instance.ram),
  47                      'storage':  str(instance.disk)})
  48     return sliver
  49
  50 def image_to_rspec_disk_image(image):
  51     img = DiskImage()
  52     img['name'] = image['name']
  53     img['description'] = image['name']
  54     img['os'] = image['name']
  55     img['version'] = image['name']
  56     return img
  57
  58 class OSAggregate:
  59
  60     def __init__(self, driver):
  61         self.driver = driver
  62
  63     def get_availability_zones(self):
  64         zones = self.driver.shell.nova_manager.dns_domains.domains()
  65         if not zones:
  66             zones = ['cloud']
  67         else:
  68             zones = [zone.name for zone in zones]
  69         return zones
  70
  71
  72     def describe(self, urns, version=None, options={}):
  73
  74         return {}
  75
  76     def list_resources(self, version=None, options={}):
  77         version_manager = VersionManager()
  78         version = version_manager.get_version(version)
  79         rspec_version = version_manager._get_version(version.type, version.version, 'ad')
  80         rspec = RSpec(version=version, user_options=options)
  81         nodes = self.get_aggregate_nodes()
  82         rspec.version.add_nodes(nodes)
  83         return rspec.toxml()
  84
  85     def describe(self, urns, version=None, options={}):
  86         version_manager = VersionManager()
  87         version = version_manager.get_version(version)
  88         rspec_version = version_manager._get_version(version.type, version.version, 'manifest')
  89         rspec = RSpec(version=version, user_options=options)
  90         nodes = self.get_slice_nodes(slice_xrn)
  91         rspec.version.add_nodes(nodes)
  92         result = {'geni_urn': '',
  93                   'geni_rspec': rspec.toxml(),
  94                   'geni_slivers': []}
  95
  96         return result
  97
  98     def get_slice_nodes(self, slice_xrn):
  99         # update nova connection
 100         tenant_name = OSXrn(xrn=slice_xrn, type='slice').get_tenant_name()
 101         self.driver.shell.nova_manager.connect(tenant=tenant_name)
 102
 103         zones = self.get_availability_zones()
 104         name = hrn_to_os_slicename(slice_xrn)
 105         instances = self.driver.shell.nova_manager.servers.findall(name=name)
 106         rspec_nodes = []
 107         for instance in instances:
 108             rspec_node = Node()
 109             #TODO: find a way to look up an instances availability zone in essex
 110             #if instance.availability_zone:
 111             #    node_xrn = OSXrn(instance.availability_zone, 'node')
 112             #else:
 113             #    node_xrn = OSXrn('cloud', 'node')
 114             node_xrn = instance.metadata.get('component_id')
 115             node_xrn
 116             if not node_xrn:
 117                 node_xrn = OSXrn('cloud', type='node')
 118             else:
 119                 node_xrn = OSXrn(xrn=node_xrn, type='node')
 120
 121             rspec_node['component_id'] = node_xrn.urn
 122             rspec_node['component_name'] = node_xrn.name
 123             rspec_node['component_manager_id'] = Xrn(self.driver.hrn, 'authority+cm').get_urn()
 124             flavor = self.driver.shell.nova_manager.flavors.find(id=instance.flavor['id'])
 125             sliver = instance_to_sliver(flavor)
 126             rspec_node['slivers'] = [sliver]
 127             image = self.driver.shell.image_manager.get_images(id=instance.image['id'])
 128             if isinstance(image, list) and len(image) > 0:
 129                 image = image[0]
 130             disk_image = image_to_rspec_disk_image(image)
 131             sliver['disk_image'] = [disk_image]
 132
 133             # build interfaces
 134             rspec_node['services'] = []
 135             rspec_node['interfaces'] = []
 136             addresses = instance.addresses
 137             # HACK: public ips are stored in the list of private, but
 138             # this seems wrong. Assume pub ip is the last in the list of
 139             # private ips until openstack bug is fixed.
 140             if addresses.get('private'):
 141                 login = Login({'authentication': 'ssh-keys',
 142                                'hostname': addresses.get('private')[-1]['addr'],
 143                                'port':'22', 'username': 'root'})
 144                 service = Services({'login': login})
 145                 rspec_node['services'].append(service)
 146
 147             for private_ip in addresses.get('private', []):
 148                 if_xrn = PlXrn(auth=self.driver.hrn,
 149                                interface='node%s:eth0' % (instance.hostId))
 150                 interface = Interface({'component_id': if_xrn.urn})
 151                 interface['ips'] =  [{'address': private_ip['addr'],
 152                                      #'netmask': private_ip['network'],
 153                                      'type': private_ip['version']}]
 154                 rspec_node['interfaces'].append(interface)
 155
 156             # slivers always provide the ssh service
 157             for public_ip in addresses.get('public', []):
 158                 login = Login({'authentication': 'ssh-keys',
 159                                'hostname': public_ip['addr'],
 160                                'port':'22', 'username': 'root'})
 161                 service = Services({'login': login})
 162                 rspec_node['services'].append(service)
 163             rspec_nodes.append(rspec_node)
 164         return rspec_nodes
 165
 166     def get_aggregate_nodes(self):
 167         zones = self.get_availability_zones()
 168         # available sliver/instance/vm types
 169         instances = self.driver.shell.nova_manager.flavors.list()
 170         if isinstance(instances, dict):
 171             instances = instances.values()
 172         # available images
 173         images = self.driver.shell.image_manager.get_images_detailed()
 174         disk_images  = [image_to_rspec_disk_image(img) for img in images if img['container_format'] in ['ami', 'ovf']]
 175         rspec_nodes = []
 176         for zone in zones:
 177             rspec_node = Node()
 178             xrn = OSXrn(zone, type='node')
 179             rspec_node['component_id'] = xrn.urn
 180             rspec_node['component_name'] = xrn.name
 181             rspec_node['component_manager_id'] = Xrn(self.driver.hrn, 'authority+cm').get_urn()
 182             rspec_node['exclusive'] = 'false'
 183             rspec_node['hardware_types'] = [HardwareType({'name': 'plos-pc'}),
 184                                                 HardwareType({'name': 'pc'})]
 185             slivers = []
 186             for instance in instances:
 187                 sliver = instance_to_sliver(instance)
 188                 sliver['disk_image'] = disk_images
 189                 slivers.append(sliver)
 190
 191             rspec_node['slivers'] = slivers
 192             rspec_nodes.append(rspec_node)
 193
 194         return rspec_nodes
 195
 196
 197     def create_tenant(self, tenant_name):
 198         tenants = self.driver.shell.auth_manager.tenants.findall(name=tenant_name)
 199         if not tenants:
 200             self.driver.shell.auth_manager.tenants.create(tenant_name, tenant_name)
 201             tenant = self.driver.shell.auth_manager.tenants.find(name=tenant_name)
 202         else:
 203             tenant = tenants[0]
 204         return tenant
 205
 206
 207     def create_instance_key(self, slice_hrn, user):
 208         slice_name = Xrn(slice_hrn).leaf
 209         user_name = Xrn(user['urn']).leaf
 210         key_name = "%s_%s" % (slice_name, user_name)
 211         pubkey = user['keys'][0]
 212         key_found = False
 213         existing_keys = self.driver.shell.nova_manager.keypairs.findall(name=key_name)
 214         for existing_key in existing_keys:
 215             if existing_key.public_key != pubkey:
 216                 self.driver.shell.nova_manager.keypairs.delete(existing_key)
 217             elif existing_key.public_key == pubkey:
 218                 key_found = True
 219
 220         if not key_found:
 221             self.driver.shell.nova_manager.keypairs.create(key_name, pubkey)
 222         return key_name
 223
 224
 225     def create_security_group(self, slicename, fw_rules=[]):
 226         # use default group by default
 227         group_name = 'default'
 228         if isinstance(fw_rules, list) and fw_rules:
 229             # Each sliver get's its own security group.
 230             # Keep security group names unique by appending some random
 231             # characters on end.
 232             random_name = "".join([random.choice(string.letters+string.digits)
 233                                            for i in xrange(6)])
 234             group_name = slicename + random_name
 235             security_group = SecurityGroup(self.driver)
 236             security_group.create_security_group(group_name)
 237             for rule in fw_rules:
 238                 security_group.add_rule_to_group(group_name,
 239                                              protocol = rule.get('protocol'),
 240                                              cidr_ip = rule.get('cidr_ip'),
 241                                              port_range = rule.get('port_range'),
 242                                              icmp_type_code = rule.get('icmp_type_code'))
 243         return group_name
 244
 245     def add_rule_to_security_group(self, group_name, **kwds):
 246         security_group = SecurityGroup(self.driver)
 247         security_group.add_rule_to_group(group_name=group_name,
 248                                          protocol=kwds.get('protocol'),
 249                                          cidr_ip =kwds.get('cidr_ip'),
 250                                          icmp_type_code = kwds.get('icmp_type_code'))
 251
 252
 253
 254     def run_instances(self, instance_name, tenant_name, rspec, key_name, pubkeys):
 255         #logger.debug('Reserving an instance: image: %s, flavor: ' \
 256         #            '%s, key: %s, name: %s' % \
 257         #            (image_id, flavor_id, key_name, slicename))
 258
 259         # make sure a tenant exists for this slice
 260         tenant = self.create_tenant(tenant_name)
 261
 262         # add the sfa admin user to this tenant and update our nova client connection
 263         # to use these credentials for the rest of this session. This emsures that the instances
 264         # we create will be assigned to the correct tenant.
 265         sfa_admin_user = self.driver.shell.auth_manager.users.find(name=self.driver.shell.auth_manager.opts['OS_USERNAME'])
 266         user_role = self.driver.shell.auth_manager.roles.find(name='user')
 267         admin_role = self.driver.shell.auth_manager.roles.find(name='admin')
 268         self.driver.shell.auth_manager.roles.add_user_role(sfa_admin_user, admin_role, tenant)
 269         self.driver.shell.auth_manager.roles.add_user_role(sfa_admin_user, user_role, tenant)
 270         self.driver.shell.nova_manager.connect(tenant=tenant.name)
 271
 272         authorized_keys = "\n".join(pubkeys)
 273         files = {'/root/.ssh/authorized_keys': authorized_keys}
 274         rspec = RSpec(rspec)
 275         requested_instances = defaultdict(list)
 276         # iterate over clouds/zones/nodes
 277         for node in rspec.version.get_nodes_with_slivers():
 278             instances = node.get('slivers', [])
 279             if not instances:
 280                 continue
 281             for instance in instances:
 282                 try:
 283                     metadata = {}
 284                     flavor_id = self.driver.shell.nova_manager.flavors.find(name=instance['name'])
 285                     image = instance.get('disk_image')
 286                     if image and isinstance(image, list):
 287                         image = image[0]
 288                     image_id = self.driver.shell.nova_manager.images.find(name=image['name'])
 289                     fw_rules = instance.get('fw_rules', [])
 290                     group_name = self.create_security_group(instance_name, fw_rules)
 291                     metadata['security_groups'] = group_name
 292                     if node.get('component_id'):
 293                         metadata['component_id'] = node['component_id']
 294                     self.driver.shell.nova_manager.servers.create(flavor=flavor_id,
 295                                                             image=image_id,
 296                                                             key_name = key_name,
 297                                                             security_groups = [group_name],
 298                                                             files=files,
 299                                                             meta=metadata,
 300                                                             name=instance_name)
 301                 except Exception, err:
 302                     logger.log_exc(err)
 303
 304
 305
 306     def delete_instances(self, instance_name, tenant_name):
 307         self.driver.shell.nova_manager.connect(tenant=tenant_name)
 308         instances = self.driver.shell.nova_manager.servers.findall(name=instance_name)
 309         security_group_manager = SecurityGroup(self.driver)
 310         for instance in instances:
 311             # deleate this instance's security groups
 312             security_group = instance.metadata.get('security_groups', '')
 313             if security_group:
 314                 # dont delete the default security group
 315                 if security_group != 'default':
 316                     security_group_manager.delete_security_group(security_group)
 317             # destroy instance
 318             self.driver.shell.nova_manager.servers.delete(instance)
 319         return 1
 320
 321     def stop_instances(self, instance_name, tenant_name):
 322         self.driver.shell.nova_manager.connect(tenant=tenant_name)
 323         instances = self.driver.shell.nova_manager.servers.findall(name=instance_name)
 324         for instance in instances:
 325             self.driver.shell.nova_manager.servers.pause(instance)
 326         return 1
 327
 328     def update_instances(self, project_name):
 329         pass