
Now, admin user could list/show/delete/update most of qinling resources, except function deletion. Because function deletion needs to delete the trust created for qinling service by its owner, only end user has the authority to delete their trust. Implements: blueprint qinling-admin-operations Change-Id: I9ec4df59fbf8ac50c96d9677dd74c54677b307a5
233 lines
6.6 KiB
Python
233 lines
6.6 KiB
Python
# Copyright 2017 Catalyst IT Limited
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
import importlib
|
|
import json
|
|
import logging
|
|
from multiprocessing import Manager
|
|
from multiprocessing import Process
|
|
import os
|
|
import sys
|
|
import time
|
|
import traceback
|
|
|
|
from flask import Flask
|
|
from flask import request
|
|
from flask import Response
|
|
from keystoneauth1.identity import generic
|
|
from keystoneauth1 import session
|
|
import requests
|
|
|
|
app = Flask(__name__)
|
|
downloaded = False
|
|
downloading = False
|
|
|
|
DOWNLOAD_ERROR = "Failed to download function package from %s, error: %s"
|
|
INVOKE_ERROR = "Function execution failed because of too much resource " \
|
|
"consumption"
|
|
|
|
|
|
def setup_logger(loglevel):
|
|
global app
|
|
root = logging.getLogger()
|
|
root.setLevel(loglevel)
|
|
ch = logging.StreamHandler(sys.stdout)
|
|
ch.setLevel(loglevel)
|
|
ch.setFormatter(
|
|
logging.Formatter('%(asctime)s - %(levelname)s - %(message)s')
|
|
)
|
|
app.logger.addHandler(ch)
|
|
|
|
|
|
def _print_trace():
|
|
exc_type, exc_value, exc_traceback = sys.exc_info()
|
|
lines = traceback.format_exception(exc_type, exc_value, exc_traceback)
|
|
print(''.join(line for line in lines))
|
|
|
|
|
|
def _get_responce(output, duration, logs, success, code):
|
|
return Response(
|
|
response=json.dumps(
|
|
{
|
|
'output': output,
|
|
'duration': duration,
|
|
'logs': logs,
|
|
'success': success
|
|
}
|
|
),
|
|
status=code,
|
|
mimetype='application/json'
|
|
)
|
|
|
|
|
|
def _download_package(url, zip_file, token=None):
|
|
app.logger.info('Downloading function, download_url:%s' % url)
|
|
|
|
headers = {}
|
|
if token:
|
|
headers = {'X-Auth-Token': token}
|
|
|
|
try:
|
|
r = requests.get(url, headers=headers, stream=True, timeout=5,
|
|
verify=False)
|
|
if r.status_code != 200:
|
|
return False, _get_responce(
|
|
DOWNLOAD_ERROR % (url, r.content), 0, '', False, 500
|
|
)
|
|
|
|
with open(zip_file, 'wb') as fd:
|
|
for chunk in r.iter_content(chunk_size=65535):
|
|
fd.write(chunk)
|
|
except Exception as e:
|
|
return False, _get_responce(
|
|
DOWNLOAD_ERROR % (url, str(e)), 0, '', False, 500
|
|
)
|
|
|
|
app.logger.info('Downloaded function package to %s' % zip_file)
|
|
|
|
return True, None
|
|
|
|
|
|
def _invoke_function(execution_id, zip_file, module_name, method, arg, input,
|
|
return_dict):
|
|
"""Thie function is supposed to be running in a child process."""
|
|
sys.path.insert(0, zip_file)
|
|
sys.stdout = open("%s.out" % execution_id, "w", 0)
|
|
|
|
print('Start execution: %s' % execution_id)
|
|
|
|
try:
|
|
module = importlib.import_module(module_name)
|
|
func = getattr(module, method)
|
|
return_dict['result'] = func(arg, **input) if arg else func(**input)
|
|
return_dict['success'] = True
|
|
except Exception as e:
|
|
_print_trace()
|
|
|
|
if isinstance(e, OSError) and 'Resource' in str(e):
|
|
sys.exit(1)
|
|
|
|
return_dict['result'] = str(e)
|
|
return_dict['success'] = False
|
|
finally:
|
|
print('Finished execution: %s' % execution_id)
|
|
|
|
|
|
@app.route('/execute', methods=['POST'])
|
|
def execute():
|
|
"""Invoke function.
|
|
|
|
Several things need to handle in this function:
|
|
- Save the function log
|
|
- Capture the function internal exception
|
|
- Deal with process execution error (The process may be killed for some
|
|
reason, e.g. unlimited memory allocation)
|
|
- Deal with os error for process (e.g. Resource temporarily unavailable)
|
|
"""
|
|
global downloading
|
|
global downloaded
|
|
|
|
params = request.get_json() or {}
|
|
input = params.get('input') or {}
|
|
execution_id = params['execution_id']
|
|
download_url = params.get('download_url')
|
|
function_id = params.get('function_id')
|
|
entry = params.get('entry')
|
|
request_id = params.get('request_id')
|
|
trust_id = params.get('trust_id')
|
|
auth_url = params.get('auth_url')
|
|
username = params.get('username')
|
|
password = params.get('password')
|
|
zip_file = '%s.zip' % function_id
|
|
|
|
function_module, function_method = 'main', 'main'
|
|
if entry:
|
|
function_module, function_method = tuple(entry.rsplit('.', 1))
|
|
|
|
app.logger.info(
|
|
'Request received, request_id: %s, execution_id: %s, input: %s, '
|
|
'auth_url: %s' %
|
|
(request_id, execution_id, input, auth_url)
|
|
)
|
|
|
|
while downloading:
|
|
time.sleep(3)
|
|
|
|
if not downloading and not downloaded:
|
|
downloading = True
|
|
|
|
ret, resp = _download_package(download_url, zip_file,
|
|
params.get('token'))
|
|
if not ret:
|
|
return resp
|
|
|
|
downloading = False
|
|
downloaded = True
|
|
|
|
# Provide an openstack session to user's function
|
|
os_session = None
|
|
if auth_url:
|
|
auth = generic.Password(
|
|
username=username,
|
|
password=password,
|
|
auth_url=auth_url,
|
|
trust_id=trust_id,
|
|
user_domain_name='Default'
|
|
)
|
|
os_session = session.Session(auth=auth, verify=False)
|
|
input.update({'context': {'os_session': os_session}})
|
|
|
|
manager = Manager()
|
|
return_dict = manager.dict()
|
|
return_dict['success'] = False
|
|
start = time.time()
|
|
|
|
# Run the function in a separate process to avoid messing up the log
|
|
p = Process(
|
|
target=_invoke_function,
|
|
args=(execution_id, zip_file, function_module, function_method,
|
|
input.pop('__function_input', None), input, return_dict)
|
|
)
|
|
p.start()
|
|
p.join()
|
|
|
|
duration = round(time.time() - start, 3)
|
|
|
|
# Process was killed unexpectedly or finished with error.
|
|
if p.exitcode != 0:
|
|
output = INVOKE_ERROR
|
|
success = False
|
|
else:
|
|
output = return_dict.get('result')
|
|
success = return_dict['success']
|
|
|
|
# Execution log
|
|
with open('%s.out' % execution_id) as f:
|
|
logs = f.read()
|
|
os.remove('%s.out' % execution_id)
|
|
|
|
return _get_responce(output, duration, logs, success, 200)
|
|
|
|
|
|
@app.route('/ping')
|
|
def ping():
|
|
return 'pong'
|
|
|
|
|
|
setup_logger(logging.DEBUG)
|
|
app.logger.info("Starting server")
|
|
|
|
# Just for testing purpose
|
|
app.run(host='0.0.0.0', port=9090, threaded=True)
|