Project purge would delete the servers and volumes for the project the user is currently authenticated for, regardless of the --project flag. Note: This change means that no server at all will be deleted if the logged in user doesn't have the get_all_tenants permission set in the Nova policy (default: admin_api). This doesn't appear to be an issue with Cinder as the default rule appears to be admin_or_owner. Change-Id: If1c54e24e1482438b81c3c32fd5fc9fdd7a7be04 Story: 1747988 Task: 13854
		
			
				
	
	
		
			176 lines
		
	
	
		
			6.3 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
			
		
		
	
	
			176 lines
		
	
	
		
			6.3 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
#   Copyright 2012 OpenStack Foundation
 | 
						|
#
 | 
						|
#   Licensed under the Apache License, Version 2.0 (the "License"); you may
 | 
						|
#   not use this file except in compliance with the License. You may obtain
 | 
						|
#   a copy of the License at
 | 
						|
#
 | 
						|
#        http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
#
 | 
						|
#   Unless required by applicable law or agreed to in writing, software
 | 
						|
#   distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 | 
						|
#   WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
 | 
						|
#   License for the specific language governing permissions and limitations
 | 
						|
#   under the License.
 | 
						|
#
 | 
						|
 | 
						|
import logging
 | 
						|
 | 
						|
from osc_lib.command import command
 | 
						|
from osc_lib import utils
 | 
						|
 | 
						|
from openstackclient.i18n import _
 | 
						|
from openstackclient.identity import common as identity_common
 | 
						|
 | 
						|
 | 
						|
LOG = logging.getLogger(__name__)
 | 
						|
 | 
						|
 | 
						|
class ProjectPurge(command.Command):
 | 
						|
    _description = _("Clean resources associated with a project")
 | 
						|
 | 
						|
    def get_parser(self, prog_name):
 | 
						|
        parser = super(ProjectPurge, self).get_parser(prog_name)
 | 
						|
        parser.add_argument(
 | 
						|
            '--dry-run',
 | 
						|
            action='store_true',
 | 
						|
            help=_("List a project's resources"),
 | 
						|
        )
 | 
						|
        parser.add_argument(
 | 
						|
            '--keep-project',
 | 
						|
            action='store_true',
 | 
						|
            help=_("Clean project resources, but don't delete the project"),
 | 
						|
        )
 | 
						|
        project_group = parser.add_mutually_exclusive_group(required=True)
 | 
						|
        project_group.add_argument(
 | 
						|
            '--auth-project',
 | 
						|
            action='store_true',
 | 
						|
            help=_('Delete resources of the project used to authenticate'),
 | 
						|
        )
 | 
						|
        project_group.add_argument(
 | 
						|
            '--project',
 | 
						|
            metavar='<project>',
 | 
						|
            help=_('Project to clean (name or ID)'),
 | 
						|
        )
 | 
						|
        identity_common.add_project_domain_option_to_parser(parser)
 | 
						|
        return parser
 | 
						|
 | 
						|
    def take_action(self, parsed_args):
 | 
						|
        identity_client = self.app.client_manager.identity
 | 
						|
 | 
						|
        if parsed_args.auth_project:
 | 
						|
            project_id = self.app.client_manager.auth_ref.project_id
 | 
						|
        elif parsed_args.project:
 | 
						|
            try:
 | 
						|
                project_id = identity_common.find_project(
 | 
						|
                    identity_client,
 | 
						|
                    parsed_args.project,
 | 
						|
                    parsed_args.project_domain,
 | 
						|
                ).id
 | 
						|
            except AttributeError:  # using v2 auth and supplying a domain
 | 
						|
                project_id = utils.find_resource(
 | 
						|
                    identity_client.tenants,
 | 
						|
                    parsed_args.project,
 | 
						|
                ).id
 | 
						|
 | 
						|
        # delete all non-identity resources
 | 
						|
        self.delete_resources(parsed_args.dry_run, project_id)
 | 
						|
 | 
						|
        # clean up the project
 | 
						|
        if not parsed_args.keep_project:
 | 
						|
            LOG.warning(_('Deleting project: %s'), project_id)
 | 
						|
            if not parsed_args.dry_run:
 | 
						|
                identity_client.projects.delete(project_id)
 | 
						|
 | 
						|
    def delete_resources(self, dry_run, project_id):
 | 
						|
        # servers
 | 
						|
        try:
 | 
						|
            compute_client = self.app.client_manager.compute
 | 
						|
            search_opts = {'tenant_id': project_id, 'all_tenants': True}
 | 
						|
            data = compute_client.servers.list(search_opts=search_opts)
 | 
						|
            self.delete_objects(
 | 
						|
                compute_client.servers.delete, data, 'server', dry_run)
 | 
						|
        except Exception:
 | 
						|
            pass
 | 
						|
 | 
						|
        # images
 | 
						|
        try:
 | 
						|
            image_client = self.app.client_manager.image
 | 
						|
            api_version = int(image_client.version)
 | 
						|
            if api_version == 1:
 | 
						|
                data = image_client.images.list(owner=project_id)
 | 
						|
            elif api_version == 2:
 | 
						|
                kwargs = {'filters': {'owner': project_id}}
 | 
						|
                data = image_client.images.list(**kwargs)
 | 
						|
            else:
 | 
						|
                raise NotImplementedError
 | 
						|
            self.delete_objects(
 | 
						|
                image_client.images.delete, data, 'image', dry_run)
 | 
						|
        except Exception:
 | 
						|
            pass
 | 
						|
 | 
						|
        # volumes, snapshots, backups
 | 
						|
        volume_client = self.app.client_manager.volume
 | 
						|
        search_opts = {'project_id': project_id, 'all_tenants': True}
 | 
						|
        try:
 | 
						|
            data = volume_client.volume_snapshots.list(search_opts=search_opts)
 | 
						|
            self.delete_objects(
 | 
						|
                self.delete_one_volume_snapshot,
 | 
						|
                data,
 | 
						|
                'volume snapshot',
 | 
						|
                dry_run)
 | 
						|
        except Exception:
 | 
						|
            pass
 | 
						|
        try:
 | 
						|
            data = volume_client.backups.list(search_opts=search_opts)
 | 
						|
            self.delete_objects(
 | 
						|
                self.delete_one_volume_backup,
 | 
						|
                data,
 | 
						|
                'volume backup',
 | 
						|
                dry_run)
 | 
						|
        except Exception:
 | 
						|
            pass
 | 
						|
        try:
 | 
						|
            data = volume_client.volumes.list(search_opts=search_opts)
 | 
						|
            self.delete_objects(
 | 
						|
                volume_client.volumes.force_delete, data, 'volume', dry_run)
 | 
						|
        except Exception:
 | 
						|
            pass
 | 
						|
 | 
						|
    def delete_objects(self, func_delete, data, resource, dry_run):
 | 
						|
        result = 0
 | 
						|
        for i in data:
 | 
						|
            LOG.warning(_('Deleting %(resource)s : %(id)s') %
 | 
						|
                        {'resource': resource, 'id': i.id})
 | 
						|
            if not dry_run:
 | 
						|
                try:
 | 
						|
                    func_delete(i.id)
 | 
						|
                except Exception as e:
 | 
						|
                    result += 1
 | 
						|
                    LOG.error(_("Failed to delete %(resource)s with "
 | 
						|
                                "ID '%(id)s': %(e)s")
 | 
						|
                              % {'resource': resource, 'id': i.id, 'e': e})
 | 
						|
        if result > 0:
 | 
						|
            total = len(data)
 | 
						|
            msg = (_("%(result)s of %(total)s %(resource)ss failed "
 | 
						|
                   "to delete.") %
 | 
						|
                   {'result': result,
 | 
						|
                    'total': total,
 | 
						|
                    'resource': resource})
 | 
						|
            LOG.error(msg)
 | 
						|
 | 
						|
    def delete_one_volume_snapshot(self, snapshot_id):
 | 
						|
        volume_client = self.app.client_manager.volume
 | 
						|
        try:
 | 
						|
            volume_client.volume_snapshots.delete(snapshot_id)
 | 
						|
        except Exception:
 | 
						|
            # Only volume v2 support deleting by force
 | 
						|
            volume_client.volume_snapshots.delete(snapshot_id, force=True)
 | 
						|
 | 
						|
    def delete_one_volume_backup(self, backup_id):
 | 
						|
        volume_client = self.app.client_manager.volume
 | 
						|
        try:
 | 
						|
            volume_client.backups.delete(backup_id)
 | 
						|
        except Exception:
 | 
						|
            # Only volume v2 support deleting by force
 | 
						|
            volume_client.backups.delete(backup_id, force=True)
 |