194 lines
6.3 KiB
Python
194 lines
6.3 KiB
Python
# Copyright 2012 OpenStack Foundation
|
|
# Copyright 2013 Hewlett-Packard Development Company, L.P.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import copy
|
|
import itertools
|
|
import random
|
|
|
|
from oslo_log import log
|
|
from oslo_serialization import jsonutils
|
|
from oslo_utils import timeutils
|
|
from oslo_utils import uuidutils
|
|
import six
|
|
import six.moves.urllib.parse as urlparse
|
|
|
|
from ironic.common import exception
|
|
from ironic.common import image_service
|
|
from ironic.conf import CONF
|
|
|
|
|
|
LOG = log.getLogger(__name__)
|
|
|
|
_GLANCE_API_SERVER = None
|
|
""" iterator that cycles (indefinitely) over glance API servers. """
|
|
|
|
|
|
def _extract_attributes(image):
|
|
# TODO(pas-ha) in Queens unify these once GlanceV1 is no longer supported
|
|
IMAGE_ATTRIBUTES = ['size', 'disk_format', 'owner',
|
|
'container_format', 'checksum', 'id',
|
|
'name', 'created_at', 'updated_at',
|
|
'deleted_at', 'deleted', 'status',
|
|
'min_disk', 'min_ram', 'is_public']
|
|
|
|
IMAGE_ATTRIBUTES_V2 = ['tags', 'visibility', 'protected',
|
|
'file', 'schema']
|
|
|
|
output = {}
|
|
for attr in IMAGE_ATTRIBUTES:
|
|
output[attr] = getattr(image, attr, None)
|
|
|
|
output['properties'] = getattr(image, 'properties', {})
|
|
|
|
if hasattr(image, 'schema') and 'v2' in image['schema']:
|
|
IMAGE_ATTRIBUTES = IMAGE_ATTRIBUTES + IMAGE_ATTRIBUTES_V2
|
|
for attr in IMAGE_ATTRIBUTES_V2:
|
|
output[attr] = getattr(image, attr, None)
|
|
output['schema'] = image['schema']
|
|
|
|
for image_property in set(image.keys()) - set(IMAGE_ATTRIBUTES):
|
|
output['properties'][image_property] = image[image_property]
|
|
|
|
return output
|
|
|
|
|
|
def _convert_timestamps_to_datetimes(image_meta):
|
|
"""Convert timestamps to datetime objects
|
|
|
|
Returns image metadata with timestamp fields converted to naive UTC
|
|
datetime objects.
|
|
"""
|
|
for attr in ['created_at', 'updated_at', 'deleted_at']:
|
|
if image_meta.get(attr):
|
|
image_meta[attr] = timeutils.normalize_time(
|
|
timeutils.parse_isotime(image_meta[attr]))
|
|
return image_meta
|
|
|
|
_CONVERT_PROPS = ('block_device_mapping', 'mappings')
|
|
|
|
|
|
def _convert(metadata):
|
|
metadata = copy.deepcopy(metadata)
|
|
properties = metadata.get('properties')
|
|
if properties:
|
|
for attr in _CONVERT_PROPS:
|
|
if attr in properties:
|
|
prop = properties[attr]
|
|
if isinstance(prop, six.string_types):
|
|
properties[attr] = jsonutils.loads(prop)
|
|
return metadata
|
|
|
|
|
|
def parse_image_id(image_href):
|
|
"""Parse an image id from image href.
|
|
|
|
:param image_href: href of an image
|
|
:returns: image id parsed from image_href
|
|
|
|
:raises InvalidImageRef: when input image href is invalid
|
|
"""
|
|
image_href = six.text_type(image_href)
|
|
if uuidutils.is_uuid_like(image_href):
|
|
image_id = image_href
|
|
elif image_href.startswith('glance://'):
|
|
image_id = image_href.split('/')[-1]
|
|
if not uuidutils.is_uuid_like(image_id):
|
|
raise exception.InvalidImageRef(image_href=image_href)
|
|
else:
|
|
raise exception.InvalidImageRef(image_href=image_href)
|
|
return image_id
|
|
|
|
|
|
# TODO(pas-ha) remove in Rocky
|
|
def get_glance_api_server(image_href):
|
|
"""Construct a glance API url from config options
|
|
|
|
Returns a random server from the CONF.glance.glance_api_servers list
|
|
of servers.
|
|
|
|
:param image_href: href of an image
|
|
:returns: glance API URL
|
|
|
|
:raises InvalidImageRef: when input image href is invalid
|
|
"""
|
|
image_href = six.text_type(image_href)
|
|
if not is_glance_image(image_href):
|
|
raise exception.InvalidImageRef(image_href=image_href)
|
|
global _GLANCE_API_SERVER
|
|
if not _GLANCE_API_SERVER:
|
|
_GLANCE_API_SERVER = itertools.cycle(
|
|
random.sample(CONF.glance.glance_api_servers,
|
|
len(CONF.glance.glance_api_servers)))
|
|
return six.next(_GLANCE_API_SERVER)
|
|
|
|
|
|
def translate_from_glance(image):
|
|
image_meta = _extract_attributes(image)
|
|
image_meta = _convert_timestamps_to_datetimes(image_meta)
|
|
image_meta = _convert(image_meta)
|
|
return image_meta
|
|
|
|
|
|
def is_image_available(context, image):
|
|
"""Check image availability.
|
|
|
|
This check is needed in case Nova and Glance are deployed
|
|
without authentication turned on.
|
|
"""
|
|
# The presence of an auth token implies this is an authenticated
|
|
# request and we need not handle the noauth use-case.
|
|
if hasattr(context, 'auth_token') and context.auth_token:
|
|
return True
|
|
|
|
if ((getattr(image, 'is_public', None) or
|
|
getattr(image, 'visibility', None) == 'public') or context.is_admin):
|
|
return True
|
|
properties = image.properties
|
|
if context.project_id and ('owner_id' in properties):
|
|
return str(properties['owner_id']) == str(context.project_id)
|
|
|
|
if context.project_id and ('project_id' in properties):
|
|
return str(properties['project_id']) == str(context.project_id)
|
|
|
|
try:
|
|
user_id = properties['user_id']
|
|
except KeyError:
|
|
return False
|
|
|
|
return str(user_id) == str(context.user_id)
|
|
|
|
|
|
def is_glance_image(image_href):
|
|
if not isinstance(image_href, six.string_types):
|
|
return False
|
|
return (image_href.startswith('glance://') or
|
|
uuidutils.is_uuid_like(image_href))
|
|
|
|
|
|
def is_image_href_ordinary_file_name(image_href):
|
|
"""Check if image_href is a ordinary file name.
|
|
|
|
This method judges if image_href is a ordinary file name or not,
|
|
which is a file supposed to be stored in share file system.
|
|
The ordinary file name is neither glance image href
|
|
nor image service href.
|
|
|
|
:returns: True if image_href is ordinary file name, False otherwise.
|
|
"""
|
|
return not (is_glance_image(image_href) or
|
|
urlparse.urlparse(image_href).scheme.lower() in
|
|
image_service.protocol_mapping)
|