delete an instances security groups when deleting the instance
[sfa.git] / sfa / openstack / osaggregate.py
1
2 import os
3 import socket
4 import base64
5 import string
6 import random    
7 from collections import defaultdict
8 from nova.exception import ImageNotFound
9 from nova.api.ec2.cloud import CloudController
10 from sfa.util.faults import SfaAPIError
11 from sfa.rspecs.rspec import RSpec
12 from sfa.rspecs.elements.hardware_type import HardwareType
13 from sfa.rspecs.elements.node import Node
14 from sfa.rspecs.elements.sliver import Sliver
15 from sfa.rspecs.elements.login import Login
16 from sfa.rspecs.elements.disk_image import DiskImage
17 from sfa.rspecs.elements.services import Services
18 from sfa.rspecs.elements.interface import Interface
19 from sfa.util.xrn import Xrn
20 from sfa.planetlab.plxrn import PlXrn 
21 from sfa.openstack.osxrn import OSXrn, hrn_to_os_slicename
22 from sfa.rspecs.version_manager import VersionManager
23 from sfa.openstack.security_group import SecurityGroup
24 from sfa.util.sfalogging import logger
25
26 def pubkeys_to_user_data(pubkeys):
27     user_data = "#!/bin/bash\n\n"
28     for pubkey in pubkeys:
29         pubkey = pubkey.replace('\n', '')
30         user_data += "echo %s >> /root/.ssh/authorized_keys" % pubkey
31         user_data += "\n"
32         user_data += "echo >> /root/.ssh/authorized_keys"
33         user_data += "\n"
34     return user_data
35
36 def instance_to_sliver(instance, slice_xrn=None):
37     sliver_id = None
38     if slice_xrn:
39         xrn = Xrn(slice_xrn, 'slice')
40         sliver_id = xrn.get_sliver_id(instance.project_id, instance.hostname, instance.id)
41
42     sliver = Sliver({'slice_id': sliver_id,
43                      'name': instance.name,
44                      'type': instance.name,
45                      'cpus': str(instance.vcpus),
46                      'memory': str(instance.ram),
47                      'storage':  str(instance.disk)})
48     return sliver
49
50 def image_to_rspec_disk_image(image):
51     img = DiskImage()
52     img['name'] = image['name']
53     img['description'] = image['name']
54     img['os'] = image['name']
55     img['version'] = image['name']    
56     return img
57     
58 class OSAggregate:
59
60     def __init__(self, driver):
61         self.driver = driver
62
63     def get_rspec(self, slice_xrn=None, version=None, options={}):
64         version_manager = VersionManager()
65         version = version_manager.get_version(version)
66         if not slice_xrn:
67             rspec_version = version_manager._get_version(version.type, version.version, 'ad')
68             nodes = self.get_aggregate_nodes()
69         else:
70             rspec_version = version_manager._get_version(version.type, version.version, 'manifest')
71             nodes = self.get_slice_nodes(slice_xrn)
72         rspec = RSpec(version=rspec_version, user_options=options)
73         rspec.version.add_nodes(nodes)
74         return rspec.toxml()
75
76     def get_availability_zones(self):
77         # essex release
78         zones = self.driver.shell.nova_manager.dns_domains.domains()
79
80         if not zones:
81             zones = ['cloud']
82         else:
83             zones = [zone.name for zone in zones]
84         return zones
85
86     def get_slice_nodes(self, slice_xrn):
87         # update nova connection
88         tenant_name = OSXrn(xrn=slice_xrn, type='slice').get_tenant_name()
89         self.driver.shell.nova_manager.connect(tenant=tenant_name)    
90         
91         zones = self.get_availability_zones()
92         name = hrn_to_os_slicename(slice_xrn)
93         instances = self.driver.shell.nova_manager.servers.findall(name=name)
94         rspec_nodes = []
95         for instance in instances:
96             rspec_node = Node()
97             
98             #TODO: find a way to look up an instances availability zone in essex
99             #if instance.availability_zone:
100             #    node_xrn = OSXrn(instance.availability_zone, 'node')
101             #else:
102             #    node_xrn = OSXrn('cloud', 'node')
103             node_xrn = instance.metadata.get('component_id')
104             node_xrn
105             if not node_xrn:
106                 node_xrn = OSXrn('cloud', type='node')
107             else:
108                 node_xrn = OSXrn(xrn=node_xrn, type='node') 
109
110             rspec_node['component_id'] = node_xrn.urn
111             rspec_node['component_name'] = node_xrn.name
112             rspec_node['component_manager_id'] = Xrn(self.driver.hrn, 'authority+cm').get_urn()
113             flavor = self.driver.shell.nova_manager.flavors.find(id=instance.flavor['id'])
114             sliver = instance_to_sliver(flavor)
115             rspec_node['slivers'] = [sliver]
116             image = self.driver.shell.image_manager.get_images(id=instance.image['id'])
117             if isinstance(image, list) and len(image) > 0:
118                 image = image[0]
119             disk_image = image_to_rspec_disk_image(image)
120             sliver['disk_image'] = [disk_image]
121
122             # build interfaces            
123             interfaces = []
124             addresses = instance.addresses
125             for private_ip in addresses.get('private', []):
126                 if_xrn = PlXrn(auth=self.driver.hrn, 
127                                interface='node%s:eth0' % (instance.hostId)) 
128                 interface = Interface({'component_id': if_xrn.urn})
129                 interface['ips'] =  [{'address': private_ip['addr'],
130                                      #'netmask': private_ip['network'],
131                                      'type': private_ip['version']}]
132                 interfaces.append(interface)
133             rspec_node['interfaces'] = interfaces 
134             
135             # slivers always provide the ssh service
136             rspec_node['services'] = []
137             for public_ip in addresses.get('public', []):
138                 login = Login({'authentication': 'ssh-keys', 
139                                'hostname': public_ip['addr'], 
140                                'port':'22', 'username': 'root'})
141                 service = Services({'login': login})
142                 rspec_node['services'].append(service)
143             rspec_nodes.append(rspec_node)
144         return rspec_nodes
145
146     def get_aggregate_nodes(self):
147         zones = self.get_availability_zones()
148         # available sliver/instance/vm types
149         instances = self.driver.shell.nova_manager.flavors.list()
150         if isinstance(instances, dict):
151             instances = instances.values()
152         # available images
153         images = self.driver.shell.image_manager.get_images_detailed()
154         disk_images  = [image_to_rspec_disk_image(img) for img in images if img['container_format'] in ['ami', 'ovf']]
155         rspec_nodes = []
156         for zone in zones:
157             rspec_node = Node()
158             xrn = OSXrn(zone, type='node')
159             rspec_node['component_id'] = xrn.urn
160             rspec_node['component_name'] = xrn.name
161             rspec_node['component_manager_id'] = Xrn(self.driver.hrn, 'authority+cm').get_urn()
162             rspec_node['exclusive'] = 'false'
163             rspec_node['hardware_types'] = [HardwareType({'name': 'plos-pc'}),
164                                                 HardwareType({'name': 'pc'})]
165             slivers = []
166             for instance in instances:
167                 sliver = instance_to_sliver(instance)
168                 sliver['disk_image'] = disk_images
169                 slivers.append(sliver)
170         
171             rspec_node['slivers'] = slivers
172             rspec_nodes.append(rspec_node) 
173
174         return rspec_nodes 
175
176
177     def create_tenant(self, tenant_name):
178         tenants = self.driver.shell.auth_manager.tenants.findall(name=tenant_name)
179         if not tenants:
180             self.driver.shell.auth_manager.tenants.create(tenant_name, tenant_name)
181             tenant = self.driver.shell.auth_manager.tenants.find(name=tenant_name)
182         else:
183             tenant = tenants[0]
184         return tenant
185             
186
187     def create_instance_key(self, slice_hrn, user):
188         slice_name = Xrn(slice_hrn).leaf
189         user_name = Xrn(user['urn']).leaf
190         key_name = "%s_%s" % (slice_name, user_name)
191         pubkey = user['keys'][0]
192         key_found = False
193         existing_keys = self.driver.shell.nova_manager.keypairs.findall(name=key_name)
194         for existing_key in existing_keys:
195             if existing_key.public_key != pubkey:
196                 self.driver.shell.nova_manager.keypairs.delete(existing_key)
197             elif existing_key.public_key == pubkey:
198                 key_found = True
199
200         if not key_found:
201             self.driver.shell.nova_manager.keypairs.create(key_name, pubkey)
202         return key_name       
203         
204
205     def create_security_group(self, slicename, fw_rules=[]):
206         # use default group by default
207         group_name = 'default' 
208         if isinstance(fw_rules, list) and fw_rules:
209             # Each sliver get's its own security group.
210             # Keep security group names unique by appending some random
211             # characters on end.
212             random_name = "".join([random.choice(string.letters+string.digits)
213                                            for i in xrange(6)])
214             group_name = slicename + random_name 
215             security_group = SecurityGroup(self.driver)
216             security_group.create_security_group(group_name)
217             for rule in fw_rules:
218                 security_group.add_rule_to_group(group_name, 
219                                              protocol = rule.get('protocol'), 
220                                              cidr_ip = rule.get('cidr_ip'), 
221                                              port_range = rule.get('port_range'), 
222                                              icmp_type_code = rule.get('icmp_type_code'))
223         return group_name
224
225     def add_rule_to_security_group(self, group_name, **kwds):
226         security_group = SecurityGroup(self.driver)
227         security_group.add_rule_to_group(group_name=group_name, 
228                                          protocol=kwds.get('protocol'), 
229                                          cidr_ip =kwds.get('cidr_ip'), 
230                                          icmp_type_code = kwds.get('icmp_type_code'))
231
232  
233
234     def run_instances(self, instance_name, tenant_name, rspec, key_name, pubkeys):
235         #logger.debug('Reserving an instance: image: %s, flavor: ' \
236         #            '%s, key: %s, name: %s' % \
237         #            (image_id, flavor_id, key_name, slicename))
238
239         # make sure a tenant exists for this slice
240         tenant = self.create_tenant(tenant_name)  
241
242         # add the sfa admin user to this tenant and update our nova client connection
243         # to use these credentials for the rest of this session. This emsures that the instances
244         # we create will be assigned to the correct tenant.
245         sfa_admin_user = self.driver.shell.auth_manager.users.find(name=self.driver.shell.auth_manager.opts['OS_USERNAME'])
246         user_role = self.driver.shell.auth_manager.roles.find(name='user')
247         admin_role = self.driver.shell.auth_manager.roles.find(name='admin')
248         self.driver.shell.auth_manager.roles.add_user_role(sfa_admin_user, admin_role, tenant)
249         self.driver.shell.auth_manager.roles.add_user_role(sfa_admin_user, user_role, tenant)
250         self.driver.shell.nova_manager.connect(tenant=tenant.name)  
251
252         authorized_keys = "\n".join(pubkeys)
253         files = {'/root/.ssh/authorized_keys': authorized_keys}
254         rspec = RSpec(rspec)
255         requested_instances = defaultdict(list)
256         # iterate over clouds/zones/nodes
257         for node in rspec.version.get_nodes_with_slivers():
258             instances = node.get('slivers', [])
259             if not instances:
260                 continue
261             for instance in instances:
262                 try: 
263                     metadata = {}
264                     flavor_id = self.driver.shell.nova_manager.flavors.find(name=instance['name'])
265                     image = instance.get('disk_image')
266                     if image and isinstance(image, list):
267                         image = image[0]
268                     image_id = self.driver.shell.nova_manager.images.find(name=image['name'])
269                     fw_rules = instance.get('fw_rules', [])
270                     group_name = self.create_security_group(instance_name, fw_rules)
271                     metadata['security_groups'] = group_name
272                     if node.get('component_id'):
273                         metadata['component_id'] = node['component_id']
274                     self.driver.shell.nova_manager.servers.create(flavor=flavor_id,
275                                                             image=image_id,
276                                                             key_name = key_name,
277                                                             security_group = group_name,
278                                                             files=files,
279                                                             meta=metadata, 
280                                                             name=instance_name)
281                 except Exception, err:    
282                     logger.log_exc(err)                                
283                            
284
285
286     def delete_instances(self, instance_name, tenant_name):
287         self.driver.shell.nova_manager.connect(tenant=tenant_name)
288         instances = self.driver.shell.nova_manager.servers.findall(name=instance_name)
289         security_group_manager = SecurityGroup(self.driver)
290         for instance in instances:
291             # deleate this instance's security groups
292             security_group = instance.metadata.get('security_groups', '')
293             if security_group:
294                 # dont delete the default security group
295                 if security_group != 'default': 
296                     security_group_manager.delete_security_group(security_group)
297             # destroy instance
298             self.driver.shell.nova_manager.servers.delete(instance)
299         return 1
300
301     def stop_instances(self, instance_name, tenant_name):
302         self.driver.shell.nova_manager.connect(tenant=tenant_name)
303         instances = self.driver.shell.nova_manager.servers.findall(name=instance_name)
304         for instance in instances:
305             self.driver.shell.nova_manager.servers.pause(instance)
306         return 1
307
308     def update_instances(self, project_name):
309         pass