1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
|
##############################################################################
# Copyright (c) 2018 Sawyer Bergeron, Parker Berberian, and others.
#
# All rights reserved. This program and the accompanying materials
# are made available under the terms of the Apache License, Version 2.0
# which accompanies this distribution, and is available at
# http://www.apache.org/licenses/LICENSE-2.0
##############################################################################
from django.template.loader import get_template
from django.http import HttpResponse
from django.utils import timezone
import yaml
import requests
from workflow.forms import ConfirmationForm
from api.models import JobFactory
from dashboard.exceptions import ResourceAvailabilityException, ModelValidationException
from resource_inventory.models import Image, OPNFVConfig, ResourceOPNFVConfig, NetworkRole
from resource_inventory.resource_manager import ResourceManager
from resource_inventory.pdf_templater import PDFTemplater
from notifier.manager import NotificationHandler
from booking.models import Booking
class BookingAuthManager():
"""
Verifies Booking Authorization.
Class to verify that the user is allowed to book the requested resource
The user must input a url to the INFO.yaml file to prove that they are the ptl of
an approved project if they are booking a multi-node pod.
This class parses the url and checks the logged in user against the info file.
"""
LFN_PROJECTS = ["opnfv"] # TODO
def parse_github_url(self, url):
project_leads = []
try:
parts = url.split("/")
if "http" in parts[0]: # the url include http(s)://
parts = parts[2:]
if parts[-1] != "INFO.yaml":
return None
if parts[0] not in ["github.com", "raw.githubusercontent.com"]:
return None
if parts[1] not in self.LFN_PROJECTS:
return None
# now to download and parse file
if parts[3] == "blob":
parts[3] = "raw"
url = "https://" + "/".join(parts)
info_file = requests.get(url, timeout=15).text
info_parsed = yaml.load(info_file)
ptl = info_parsed.get('project_lead')
if ptl:
project_leads.append(ptl)
sub_ptl = info_parsed.get("subproject_lead")
if sub_ptl:
project_leads.append(sub_ptl)
except Exception:
pass
return project_leads
def parse_gerrit_url(self, url):
project_leads = []
try:
halfs = url.split("?")
parts = halfs[0].split("/")
args = halfs[1].split(";")
if "http" in parts[0]: # the url include http(s)://
parts = parts[2:]
if "f=INFO.yaml" not in args:
return None
if "gerrit.opnfv.org" not in parts[0]:
return None
try:
i = args.index("a=blob")
args[i] = "a=blob_plain"
except ValueError:
pass
# recreate url
halfs[1] = ";".join(args)
halfs[0] = "/".join(parts)
# now to download and parse file
url = "https://" + "?".join(halfs)
info_file = requests.get(url, timeout=15).text
info_parsed = yaml.load(info_file)
ptl = info_parsed.get('project_lead')
if ptl:
project_leads.append(ptl)
sub_ptl = info_parsed.get("subproject_lead")
if sub_ptl:
project_leads.append(sub_ptl)
except Exception:
return None
return project_leads
def parse_opnfv_git_url(self, url):
project_leads = []
try:
parts = url.split("/")
if "http" in parts[0]: # the url include http(s)://
parts = parts[2:]
if "INFO.yaml" not in parts[-1]:
return None
if "git.opnfv.org" not in parts[0]:
return None
if parts[-2] == "tree":
parts[-2] = "plain"
# now to download and parse file
url = "https://" + "/".join(parts)
info_file = requests.get(url, timeout=15).text
info_parsed = yaml.load(info_file)
ptl = info_parsed.get('project_lead')
if ptl:
project_leads.append(ptl)
sub_ptl = info_parsed.get("subproject_lead")
if sub_ptl:
project_leads.append(sub_ptl)
except Exception:
return None
return project_leads
def parse_url(self, info_url):
"""
Parse the project URL.
Gets the INFO.yaml file from the project and returns the PTL info.
"""
if "github" in info_url:
return self.parse_github_url(info_url)
if "gerrit.opnfv.org" in info_url:
return self.parse_gerrit_url(info_url)
if "git.opnfv.org" in info_url:
return self.parse_opnfv_git_url(info_url)
def booking_allowed(self, booking, repo):
"""
Assert the current Booking Policy.
This is the method that will have to change whenever the booking policy changes in the Infra
group / LFN. This is a nice isolation of that administration crap
currently checks if the booking uses multiple servers. if it does, then the owner must be a PTL,
which is checked using the provided info file
"""
if booking.owner.userprofile.booking_privledge:
return True # admin override for this user
if Booking.objects.filter(owner=booking.owner, end__gt=timezone.now()).count() >= 3:
return False
if len(booking.resource.template.getResources()) < 2:
return True # if they only have one server, we dont care
if repo.BOOKING_INFO_FILE not in repo.el:
return False # INFO file not provided
ptl_info = self.parse_url(repo.el.get(repo.BOOKING_INFO_FILE))
for ptl in ptl_info:
if ptl['email'] == booking.owner.userprofile.email_addr:
return True
return False
class WorkflowStepStatus(object):
"""
Poor man's enum for the status of a workflow step.
The steps in a workflow are not completed (UNTOUCHED)
or they have been completed correctly (VALID) or they were filled out
incorrectly (INVALID)
"""
UNTOUCHED = 0
INVALID = 100
VALID = 200
class WorkflowStep(object):
template = 'bad_request.html'
title = "Generic Step"
description = "You were led here by mistake"
short_title = "error"
metastep = None
# phasing out metastep:
valid = WorkflowStepStatus.UNTOUCHED
message = ""
enabled = True
def cleanup(self):
raise Exception("WorkflowStep subclass of type " + str(type(self)) + " has no concrete implemented cleanup() method")
def enable(self):
if not self.enabled:
self.enabled = True
def disable(self):
if self.enabled:
self.cleanup()
self.enabled = False
def set_invalid(self, message, code=WorkflowStepStatus.INVALID):
self.valid = code
self.message = message
def set_valid(self, message, code=WorkflowStepStatus.VALID):
self.valid = code
self.message = message
def to_json(self):
return {
'title': self.short_title,
'enabled': self.enabled,
'valid': self.valid,
'message': self.message,
}
def __init__(self, id, repo=None):
self.repo = repo
self.id = id
def get_context(self):
context = {}
context['step_number'] = self.repo_get('steps')
context['active_step'] = self.repo_get('active_step')
context['render_correct'] = "true"
context['step_title'] = self.title
context['description'] = self.description
return context
def render(self, request):
return HttpResponse(self.render_to_string(request))
def render_to_string(self, request):
template = get_template(self.template)
return template.render(self.get_context(), request)
def post(self, post_content, user):
raise Exception("WorkflowStep subclass of type " + str(type(self)) + " has no concrete post() method")
def validate(self, request):
pass
def repo_get(self, key, default=None):
return self.repo.get(key, default, self.id)
def repo_put(self, key, value):
return self.repo.put(key, value, self.id)
"""
subclassing notes:
subclasses have to define the following class attributes:
self.select_repo_key: where the selected "object" or "bundle" is to be placed in the repo
self.form: the form to be used
alert_bundle_missing(): what message to display if a user does not select/selects an invalid object
get_form_queryset(): generate a queryset to be used to filter available items for the field
get_page_context(): return simple context such as page header and other info
"""
class AbstractSelectOrCreate(WorkflowStep):
template = 'dashboard/genericselect.html'
title = "Select a Bundle"
short_title = "select"
description = "Generic bundle selector step"
select_repo_key = None
form = None # subclasses are expected to use a form that is a subclass of SearchableSelectGenericForm
def alert_bundle_missing(self): # override in subclasses to change message if field isn't filled out
self.set_invalid("Please select a valid bundle")
def post(self, post_data, user):
form = self.form(post_data, queryset=self.get_form_queryset())
if form.is_valid():
bundle = form.get_validated_bundle()
if not bundle:
self.alert_bundle_missing()
return
self.repo_put(self.select_repo_key, bundle)
self.put_confirm_info(bundle)
self.set_valid("Step Completed")
else:
self.alert_bundle_missing()
def get_context(self):
default = []
bundle = self.repo_get(self.select_repo_key, False)
if bundle:
default.append(bundle)
form = self.form(queryset=self.get_form_queryset(), initial=default)
context = {'form': form, **self.get_page_context()}
context.update(super().get_context())
return context
def get_page_context():
return {
'select_type': 'generic',
'select_type_title': 'Generic Bundle'
}
class Confirmation_Step(WorkflowStep):
template = 'workflow/confirm.html'
title = "Confirm Changes"
description = "Does this all look right?"
short_title = "confirm"
def get_context(self):
context = super(Confirmation_Step, self).get_context()
context['form'] = ConfirmationForm()
context['confirmation_info'] = yaml.dump(
self.repo_get(self.repo.CONFIRMATION),
default_flow_style=False
).strip()
if self.valid == WorkflowStepStatus.VALID:
context["confirm_succeeded"] = "true"
return context
def flush_to_db(self):
errors = self.repo.make_models()
if errors:
return errors
def post(self, post_data, user):
form = ConfirmationForm(post_data)
if form.is_valid():
data = form.cleaned_data['confirm']
if data == "True":
errors = self.flush_to_db()
if errors:
self.set_invalid("ERROR OCCURRED: " + errors)
else:
self.set_valid("Confirmed")
elif data == "False":
self.repo.cancel()
self.set_valid("Canceled")
else:
self.set_invalid("Bad Form Contents")
else:
self.set_invalid("Bad Form Contents")
class Repository():
EDIT = "editing"
MODELS = "models"
RESOURCE_SELECT = "resource_select"
CONFIRMATION = "confirmation"
SELECTED_RESOURCE_TEMPLATE = "selected resource template pk"
SELECTED_CONFIG_BUNDLE = "selected config bundle pk"
SELECTED_OPNFV_CONFIG = "selected opnfv deployment config"
RESOURCE_TEMPLATE_MODELS = "generic_resource_template_models"
RESOURCE_TEMPLATE_INFO = "generic_resource_template_info"
BOOKING = "booking"
LAB = "lab"
RCONFIG_LAST_HOSTLIST = "resource_configuration_network_previous_hostlist"
BOOKING_FORMS = "booking_forms"
SWCONF_HOSTS = "swconf_hosts"
BOOKING_MODELS = "booking models"
CONFIG_MODELS = "configuration bundle models"
OPNFV_MODELS = "opnfv configuration models"
SESSION_USER = "session owner user account"
SESSION_MANAGER = "session manager for current session"
VALIDATED_MODEL_GRB = "valid grb config model instance in db"
VALIDATED_MODEL_CONFIG = "valid config model instance in db"
VALIDATED_MODEL_BOOKING = "valid booking model instance in db"
VLANS = "a list of vlans"
SNAPSHOT_MODELS = "the models for snapshotting"
SNAPSHOT_BOOKING_ID = "the booking id for snapshotting"
SNAPSHOT_NAME = "the name of the snapshot"
SNAPSHOT_DESC = "description of the snapshot"
BOOKING_INFO_FILE = "the INFO.yaml file for this user's booking"
# new keys for migration to using ResourceTemplates:
RESOURCE_TEMPLATE_MODELS = "current working model of resource template"
# migratory elements of segmented workflow
# each of these is the end result of a different workflow.
HAS_RESULT = "whether or not workflow has a result"
RESULT_KEY = "key for target index that result will be put into in parent"
RESULT = "result object from workflow"
def get_child_defaults(self):
return_tuples = []
for key in [self.SELECTED_RESOURCE_TEMPLATE, self.SESSION_USER]:
return_tuples.append((key, self.el.get(key)))
return return_tuples
def set_defaults(self, defaults):
for key, value in defaults:
self.el[key] = value
def get(self, key, default, id):
self.add_get_history(key, id)
return self.el.get(key, default)
def put(self, key, val, id):
self.add_put_history(key, id)
self.el[key] = val
def add_get_history(self, key, id):
self.add_history(key, id, self.get_history)
def add_put_history(self, key, id):
self.add_history(key, id, self.put_history)
def add_history(self, key, id, history):
if key not in history:
history[key] = [id]
else:
history[key].append(id)
def cancel(self):
if self.RESOURCE_TEMPLATE_MODELS in self.el:
models = self.el[self.RESOURCE_TEMPLATE_MODELS]
if models['template'].temporary:
models['template'].delete()
# deleting current template should cascade delete all
# necessary related models
def make_models(self):
if self.SNAPSHOT_MODELS in self.el:
errors = self.make_snapshot()
if errors:
return errors
# if GRB WF, create it
if self.RESOURCE_TEMPLATE_MODELS in self.el:
errors = self.make_generic_resource_bundle()
if errors:
return errors
else:
self.el[self.HAS_RESULT] = True
self.el[self.RESULT_KEY] = self.SELECTED_RESOURCE_TEMPLATE
return
if self.CONFIG_MODELS in self.el:
errors = self.make_software_config_bundle()
if errors:
return errors
else:
self.el[self.HAS_RESULT] = True
self.el[self.RESULT_KEY] = self.SELECTED_CONFIG_BUNDLE
return
if self.OPNFV_MODELS in self.el:
errors = self.make_opnfv_config()
if errors:
return errors
else:
self.el[self.HAS_RESULT] = True
self.el[self.RESULT_KEY] = self.SELECTED_OPNFV_CONFIG
if self.BOOKING_MODELS in self.el:
errors = self.make_booking()
if errors:
return errors
# create notification
booking = self.el[self.BOOKING_MODELS]['booking']
NotificationHandler.notify_new_booking(booking)
def make_snapshot(self):
owner = self.el[self.SESSION_USER]
models = self.el[self.SNAPSHOT_MODELS]
image = models.get('snapshot', Image())
booking_id = self.el.get(self.SNAPSHOT_BOOKING_ID)
if not booking_id:
return "SNAP, No booking ID provided"
booking = Booking.objects.get(pk=booking_id)
if booking.start > timezone.now() or booking.end < timezone.now():
return "Booking is not active"
name = self.el.get(self.SNAPSHOT_NAME)
if not name:
return "SNAP, no name provided"
host = models.get('host')
if not host:
return "SNAP, no host provided"
description = self.el.get(self.SNAPSHOT_DESC, "")
image.from_lab = booking.lab
image.name = name
image.description = description
image.public = False
image.lab_id = -1
image.owner = owner
image.host_type = host.profile
image.save()
try:
current_image = host.config.image
image.os = current_image.os
image.save()
except Exception:
pass
JobFactory.makeSnapshotTask(image, booking, host)
self.el[self.RESULT] = image
self.el[self.HAS_RESULT] = True
def make_generic_resource_bundle(self):
owner = self.el[self.SESSION_USER]
if self.RESOURCE_TEMPLATE_MODELS in self.el:
models = self.el[self.RESOURCE_TEMPLATE_MODELS]
models['template'].owner = owner
models['template'].temporary = False
models['template'].save()
self.el[self.RESULT] = models['template']
self.el[self.HAS_RESULT] = True
return False
else:
return "GRB no models given. CODE:0x0001"
def make_software_config_bundle(self):
models = self.el[self.CONFIG_MODELS]
if 'bundle' in models:
bundle = models['bundle']
bundle.bundle = self.el[self.SELECTED_RESOURCE_TEMPLATE]
try:
bundle.save()
except Exception as e:
return "SWC, saving bundle generated exception: " + str(e) + "CODE:0x0007"
else:
return "SWC, no bundle in models. CODE:0x0006"
if 'host_configs' in models:
host_configs = models['host_configs']
for host_config in host_configs:
host_config.template = host_config.template
host_config.profile = host_config.profile
try:
host_config.save()
except Exception as e:
return "SWC, saving host configs generated exception: " + str(e) + "CODE:0x0009"
else:
return "SWC, no host configs in models. CODE:0x0008"
if 'opnfv' in models:
opnfvconfig = models['opnfv']
opnfvconfig.bundle = opnfvconfig.bundle
if opnfvconfig.scenario not in opnfvconfig.installer.sup_scenarios.all():
return "SWC, scenario not supported by installer. CODE:0x000d"
try:
opnfvconfig.save()
except Exception as e:
return "SWC, saving opnfv config generated exception: " + str(e) + "CODE:0x000b"
else:
pass
self.el[self.RESULT] = bundle
return False
def make_booking(self):
models = self.el[self.BOOKING_MODELS]
owner = self.el[self.SESSION_USER]
if 'booking' in models:
booking = models['booking']
else:
return "BOOK, no booking model exists. CODE:0x000f"
selected_grb = None
if self.SELECTED_RESOURCE_TEMPLATE in self.el:
selected_grb = self.el[self.SELECTED_RESOURCE_TEMPLATE]
else:
return "BOOK, no selected resource. CODE:0x000e"
if self.SELECTED_CONFIG_BUNDLE not in self.el:
return "BOOK, no selected config bundle. CODE:0x001f"
booking.config_bundle = self.el[self.SELECTED_CONFIG_BUNDLE]
if not booking.start:
return "BOOK, booking has no start. CODE:0x0010"
if not booking.end:
return "BOOK, booking has no end. CODE:0x0011"
if booking.end <= booking.start:
return "BOOK, end before/same time as start. CODE:0x0012"
if 'collaborators' in models:
collaborators = models['collaborators']
else:
return "BOOK, collaborators not defined. CODE:0x0013"
try:
resource_bundle = ResourceManager.getInstance().convertResourceBundle(selected_grb, config=booking.config_bundle)
except ResourceAvailabilityException as e:
return "BOOK, requested resources are not available. Exception: " + str(e) + " CODE:0x0014"
except ModelValidationException as e:
return "Error encountered when saving bundle. " + str(e) + " CODE: 0x001b"
booking.resource = resource_bundle
booking.owner = owner
booking.lab = selected_grb.lab
is_allowed = BookingAuthManager().booking_allowed(booking, self)
if not is_allowed:
return "BOOK, you are not allowed to book the requested resources"
try:
booking.save()
except Exception as e:
return "BOOK, saving booking generated exception: " + str(e) + " CODE:0x0015"
for collaborator in collaborators:
booking.collaborators.add(collaborator)
try:
booking.pdf = PDFTemplater.makePDF(booking)
booking.save()
except Exception as e:
return "BOOK, failed to create Pod Desriptor File: " + str(e)
try:
JobFactory.makeCompleteJob(booking)
except Exception as e:
return "BOOK, serializing for api generated exception: " + str(e) + " CODE:0xFFFF"
try:
booking.save()
except Exception as e:
return "BOOK, saving booking generated exception: " + str(e) + " CODE:0x0016"
self.el[self.RESULT] = booking
self.el[self.HAS_RESULT] = True
def make_opnfv_config(self):
opnfv_models = self.el[self.OPNFV_MODELS]
config_bundle = self.el[self.SELECTED_CONFIG_BUNDLE]
if not config_bundle:
return "No Configuration bundle selected"
info = opnfv_models.get("meta", {})
name = info.get("name", False)
desc = info.get("description", False)
if not (name and desc):
return "No name or description given"
installer = opnfv_models['installer_chosen']
if not installer:
return "No OPNFV Installer chosen"
scenario = opnfv_models['scenario_chosen']
if not scenario:
return "No OPNFV Scenario chosen"
opnfv_config = OPNFVConfig.objects.create(
bundle=config_bundle,
name=name,
description=desc,
installer=installer,
scenario=scenario
)
network_roles = opnfv_models['network_roles']
for net_role in network_roles:
opnfv_config.networks.add(
NetworkRole.objects.create(
name=net_role['role'],
network=net_role['network']
)
)
host_roles = opnfv_models['host_roles']
for host_role in host_roles:
config = config_bundle.hostConfigurations.get(
host__resource__name=host_role['host_name']
)
ResourceOPNFVConfig.objects.create(
role=host_role['role'],
host_config=config,
opnfv_config=opnfv_config
)
self.el[self.RESULT] = opnfv_config
self.el[self.HAS_RESULT] = True
def __init__(self):
self.el = {}
self.el[self.CONFIRMATION] = {}
self.el["active_step"] = 0
self.el[self.HAS_RESULT] = False
self.el[self.RESULT] = None
self.get_history = {}
self.put_history = {}
|