openshift_facts.py 41 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125
  1. #!/usr/bin/python
  2. # pylint: disable=too-many-lines
  3. # -*- coding: utf-8 -*-
  4. # vim: expandtab:tabstop=4:shiftwidth=4
  5. # Reason: Disable pylint too-many-lines because we don't want to split up this file.
  6. # Status: Permanently disabled to keep this module as self-contained as possible.
  7. """Ansible module for retrieving and setting openshift related facts"""
  8. DOCUMENTATION = '''
  9. ---
  10. module: openshift_facts
  11. short_description: Cluster Facts
  12. author: Jason DeTiberus
  13. requirements: [ ]
  14. '''
  15. EXAMPLES = '''
  16. '''
  17. import ConfigParser
  18. import copy
  19. import os
  20. from distutils.util import strtobool
  21. from distutils.version import LooseVersion
  22. from netaddr import IPNetwork
  23. def hostname_valid(hostname):
  24. """ Test if specified hostname should be considered valid
  25. Args:
  26. hostname (str): hostname to test
  27. Returns:
  28. bool: True if valid, otherwise False
  29. """
  30. if (not hostname or
  31. hostname.startswith('localhost') or
  32. hostname.endswith('localdomain') or
  33. len(hostname.split('.')) < 2):
  34. return False
  35. return True
  36. def choose_hostname(hostnames=None, fallback=''):
  37. """ Choose a hostname from the provided hostnames
  38. Given a list of hostnames and a fallback value, choose a hostname to
  39. use. This function will prefer fqdns if they exist (excluding any that
  40. begin with localhost or end with localdomain) over ip addresses.
  41. Args:
  42. hostnames (list): list of hostnames
  43. fallback (str): default value to set if hostnames does not contain
  44. a valid hostname
  45. Returns:
  46. str: chosen hostname
  47. """
  48. hostname = fallback
  49. if hostnames is None:
  50. return hostname
  51. ip_regex = r'\A\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\Z'
  52. ips = [i for i in hostnames
  53. if (i is not None and isinstance(i, basestring)
  54. and re.match(ip_regex, i))]
  55. hosts = [i for i in hostnames
  56. if i is not None and i != '' and i not in ips]
  57. for host_list in (hosts, ips):
  58. for host in host_list:
  59. if hostname_valid(host):
  60. return host
  61. return hostname
  62. def query_metadata(metadata_url, headers=None, expect_json=False):
  63. """ Return metadata from the provided metadata_url
  64. Args:
  65. metadata_url (str): metadata url
  66. headers (dict): headers to set for metadata request
  67. expect_json (bool): does the metadata_url return json
  68. Returns:
  69. dict or list: metadata request result
  70. """
  71. result, info = fetch_url(module, metadata_url, headers=headers)
  72. if info['status'] != 200:
  73. raise OpenShiftFactsMetadataUnavailableError("Metadata unavailable")
  74. if expect_json:
  75. return module.from_json(result.read())
  76. else:
  77. return [line.strip() for line in result.readlines()]
  78. def walk_metadata(metadata_url, headers=None, expect_json=False):
  79. """ Walk the metadata tree and return a dictionary of the entire tree
  80. Args:
  81. metadata_url (str): metadata url
  82. headers (dict): headers to set for metadata request
  83. expect_json (bool): does the metadata_url return json
  84. Returns:
  85. dict: the result of walking the metadata tree
  86. """
  87. metadata = dict()
  88. for line in query_metadata(metadata_url, headers, expect_json):
  89. if line.endswith('/') and not line == 'public-keys/':
  90. key = line[:-1]
  91. metadata[key] = walk_metadata(metadata_url + line,
  92. headers, expect_json)
  93. else:
  94. results = query_metadata(metadata_url + line, headers,
  95. expect_json)
  96. if len(results) == 1:
  97. # disable pylint maybe-no-member because overloaded use of
  98. # the module name causes pylint to not detect that results
  99. # is an array or hash
  100. # pylint: disable=maybe-no-member
  101. metadata[line] = results.pop()
  102. else:
  103. metadata[line] = results
  104. return metadata
  105. def get_provider_metadata(metadata_url, supports_recursive=False,
  106. headers=None, expect_json=False):
  107. """ Retrieve the provider metadata
  108. Args:
  109. metadata_url (str): metadata url
  110. supports_recursive (bool): does the provider metadata api support
  111. recursion
  112. headers (dict): headers to set for metadata request
  113. expect_json (bool): does the metadata_url return json
  114. Returns:
  115. dict: the provider metadata
  116. """
  117. try:
  118. if supports_recursive:
  119. metadata = query_metadata(metadata_url, headers,
  120. expect_json)
  121. else:
  122. metadata = walk_metadata(metadata_url, headers,
  123. expect_json)
  124. except OpenShiftFactsMetadataUnavailableError:
  125. metadata = None
  126. return metadata
  127. def normalize_gce_facts(metadata, facts):
  128. """ Normalize gce facts
  129. Args:
  130. metadata (dict): provider metadata
  131. facts (dict): facts to update
  132. Returns:
  133. dict: the result of adding the normalized metadata to the provided
  134. facts dict
  135. """
  136. for interface in metadata['instance']['networkInterfaces']:
  137. int_info = dict(ips=[interface['ip']], network_type='gce')
  138. int_info['public_ips'] = [ac['externalIp'] for ac
  139. in interface['accessConfigs']]
  140. int_info['public_ips'].extend(interface['forwardedIps'])
  141. _, _, network_id = interface['network'].rpartition('/')
  142. int_info['network_id'] = network_id
  143. facts['network']['interfaces'].append(int_info)
  144. _, _, zone = metadata['instance']['zone'].rpartition('/')
  145. facts['zone'] = zone
  146. # Default to no sdn for GCE deployments
  147. facts['use_openshift_sdn'] = False
  148. # GCE currently only supports a single interface
  149. facts['network']['ip'] = facts['network']['interfaces'][0]['ips'][0]
  150. pub_ip = facts['network']['interfaces'][0]['public_ips'][0]
  151. facts['network']['public_ip'] = pub_ip
  152. facts['network']['hostname'] = metadata['instance']['hostname']
  153. # TODO: attempt to resolve public_hostname
  154. facts['network']['public_hostname'] = facts['network']['public_ip']
  155. return facts
  156. def normalize_aws_facts(metadata, facts):
  157. """ Normalize aws facts
  158. Args:
  159. metadata (dict): provider metadata
  160. facts (dict): facts to update
  161. Returns:
  162. dict: the result of adding the normalized metadata to the provided
  163. facts dict
  164. """
  165. for interface in sorted(
  166. metadata['network']['interfaces']['macs'].values(),
  167. key=lambda x: x['device-number']
  168. ):
  169. int_info = dict()
  170. var_map = {'ips': 'local-ipv4s', 'public_ips': 'public-ipv4s'}
  171. for ips_var, int_var in var_map.iteritems():
  172. ips = interface.get(int_var)
  173. if isinstance(ips, basestring):
  174. int_info[ips_var] = [ips]
  175. else:
  176. int_info[ips_var] = ips
  177. if 'vpc-id' in interface:
  178. int_info['network_type'] = 'vpc'
  179. else:
  180. int_info['network_type'] = 'classic'
  181. if int_info['network_type'] == 'vpc':
  182. int_info['network_id'] = interface['subnet-id']
  183. else:
  184. int_info['network_id'] = None
  185. facts['network']['interfaces'].append(int_info)
  186. facts['zone'] = metadata['placement']['availability-zone']
  187. # TODO: actually attempt to determine default local and public ips
  188. # by using the ansible default ip fact and the ipv4-associations
  189. # from the ec2 metadata
  190. facts['network']['ip'] = metadata.get('local-ipv4')
  191. facts['network']['public_ip'] = metadata.get('public-ipv4')
  192. # TODO: verify that local hostname makes sense and is resolvable
  193. facts['network']['hostname'] = metadata.get('local-hostname')
  194. # TODO: verify that public hostname makes sense and is resolvable
  195. facts['network']['public_hostname'] = metadata.get('public-hostname')
  196. return facts
  197. def normalize_openstack_facts(metadata, facts):
  198. """ Normalize openstack facts
  199. Args:
  200. metadata (dict): provider metadata
  201. facts (dict): facts to update
  202. Returns:
  203. dict: the result of adding the normalized metadata to the provided
  204. facts dict
  205. """
  206. # openstack ec2 compat api does not support network interfaces and
  207. # the version tested on did not include the info in the openstack
  208. # metadata api, should be updated if neutron exposes this.
  209. facts['zone'] = metadata['availability_zone']
  210. local_ipv4 = metadata['ec2_compat']['local-ipv4'].split(',')[0]
  211. facts['network']['ip'] = local_ipv4
  212. facts['network']['public_ip'] = metadata['ec2_compat']['public-ipv4']
  213. # TODO: verify local hostname makes sense and is resolvable
  214. facts['network']['hostname'] = metadata['hostname']
  215. # TODO: verify that public hostname makes sense and is resolvable
  216. pub_h = metadata['ec2_compat']['public-hostname']
  217. facts['network']['public_hostname'] = pub_h
  218. return facts
  219. def normalize_provider_facts(provider, metadata):
  220. """ Normalize provider facts
  221. Args:
  222. provider (str): host provider
  223. metadata (dict): provider metadata
  224. Returns:
  225. dict: the normalized provider facts
  226. """
  227. if provider is None or metadata is None:
  228. return {}
  229. # TODO: test for ipv6_enabled where possible (gce, aws do not support)
  230. # and configure ipv6 facts if available
  231. # TODO: add support for setting user_data if available
  232. facts = dict(name=provider, metadata=metadata,
  233. network=dict(interfaces=[], ipv6_enabled=False))
  234. if provider == 'gce':
  235. facts = normalize_gce_facts(metadata, facts)
  236. elif provider == 'ec2':
  237. facts = normalize_aws_facts(metadata, facts)
  238. elif provider == 'openstack':
  239. facts = normalize_openstack_facts(metadata, facts)
  240. return facts
  241. def set_fluentd_facts_if_unset(facts):
  242. """ Set fluentd facts if not already present in facts dict
  243. dict: the facts dict updated with the generated fluentd facts if
  244. missing
  245. Args:
  246. facts (dict): existing facts
  247. Returns:
  248. dict: the facts dict updated with the generated fluentd
  249. facts if they were not already present
  250. """
  251. if 'common' in facts:
  252. if 'use_fluentd' not in facts['common']:
  253. use_fluentd = False
  254. facts['common']['use_fluentd'] = use_fluentd
  255. return facts
  256. def set_node_schedulability(facts):
  257. """ Set schedulable facts if not already present in facts dict
  258. Args:
  259. facts (dict): existing facts
  260. Returns:
  261. dict: the facts dict updated with the generated schedulable
  262. facts if they were not already present
  263. """
  264. if 'node' in facts:
  265. if 'schedulable' not in facts['node']:
  266. if 'master' in facts:
  267. facts['node']['schedulable'] = False
  268. else:
  269. facts['node']['schedulable'] = True
  270. return facts
  271. def set_master_selectors(facts):
  272. """ Set selectors facts if not already present in facts dict
  273. Args:
  274. facts (dict): existing facts
  275. Returns:
  276. dict: the facts dict updated with the generated selectors
  277. facts if they were not already present
  278. """
  279. if 'master' in facts:
  280. if 'infra_nodes' in facts['master']:
  281. deployment_type = facts['common']['deployment_type']
  282. if deployment_type == 'online':
  283. selector = "type=infra"
  284. else:
  285. selector = "region=infra"
  286. if 'router_selector' not in facts['master']:
  287. facts['master']['router_selector'] = selector
  288. if 'registry_selector' not in facts['master']:
  289. facts['master']['registry_selector'] = selector
  290. return facts
  291. def set_metrics_facts_if_unset(facts):
  292. """ Set cluster metrics facts if not already present in facts dict
  293. dict: the facts dict updated with the generated cluster metrics facts if
  294. missing
  295. Args:
  296. facts (dict): existing facts
  297. Returns:
  298. dict: the facts dict updated with the generated cluster metrics
  299. facts if they were not already present
  300. """
  301. if 'common' in facts:
  302. if 'use_cluster_metrics' not in facts['common']:
  303. use_cluster_metrics = False
  304. facts['common']['use_cluster_metrics'] = use_cluster_metrics
  305. return facts
  306. def set_project_cfg_facts_if_unset(facts):
  307. """ Set Project Configuration facts if not already present in facts dict
  308. dict:
  309. Args:
  310. facts (dict): existing facts
  311. Returns:
  312. dict: the facts dict updated with the generated Project Configuration
  313. facts if they were not already present
  314. """
  315. config = {
  316. 'default_node_selector': '',
  317. 'project_request_message': '',
  318. 'project_request_template': '',
  319. 'mcs_allocator_range': 's0:/2',
  320. 'mcs_labels_per_project': 5,
  321. 'uid_allocator_range': '1000000000-1999999999/10000'
  322. }
  323. if 'master' in facts:
  324. for key, value in config.items():
  325. if key not in facts['master']:
  326. facts['master'][key] = value
  327. return facts
  328. def set_identity_providers_if_unset(facts):
  329. """ Set identity_providers fact if not already present in facts dict
  330. Args:
  331. facts (dict): existing facts
  332. Returns:
  333. dict: the facts dict updated with the generated identity providers
  334. facts if they were not already present
  335. """
  336. if 'master' in facts:
  337. deployment_type = facts['common']['deployment_type']
  338. if 'identity_providers' not in facts['master']:
  339. identity_provider = dict(
  340. name='allow_all', challenge=True, login=True,
  341. kind='AllowAllPasswordIdentityProvider'
  342. )
  343. if deployment_type in ['enterprise', 'atomic-enterprise', 'openshift-enterprise']:
  344. identity_provider = dict(
  345. name='deny_all', challenge=True, login=True,
  346. kind='DenyAllPasswordIdentityProvider'
  347. )
  348. facts['master']['identity_providers'] = [identity_provider]
  349. return facts
  350. def set_url_facts_if_unset(facts):
  351. """ Set url facts if not already present in facts dict
  352. Args:
  353. facts (dict): existing facts
  354. Returns:
  355. dict: the facts dict updated with the generated url facts if they
  356. were not already present
  357. """
  358. if 'master' in facts:
  359. api_use_ssl = facts['master']['api_use_ssl']
  360. api_port = facts['master']['api_port']
  361. console_use_ssl = facts['master']['console_use_ssl']
  362. console_port = facts['master']['console_port']
  363. console_path = facts['master']['console_path']
  364. etcd_use_ssl = facts['master']['etcd_use_ssl']
  365. etcd_hosts = facts['master']['etcd_hosts']
  366. etcd_port = facts['master']['etcd_port']
  367. hostname = facts['common']['hostname']
  368. public_hostname = facts['common']['public_hostname']
  369. cluster_hostname = facts['master'].get('cluster_hostname')
  370. cluster_public_hostname = facts['master'].get('cluster_public_hostname')
  371. if 'etcd_urls' not in facts['master']:
  372. etcd_urls = []
  373. if etcd_hosts != '':
  374. facts['master']['etcd_port'] = etcd_port
  375. facts['master']['embedded_etcd'] = False
  376. for host in etcd_hosts:
  377. etcd_urls.append(format_url(etcd_use_ssl, host,
  378. etcd_port))
  379. else:
  380. etcd_urls = [format_url(etcd_use_ssl, hostname,
  381. etcd_port)]
  382. facts['master']['etcd_urls'] = etcd_urls
  383. if 'api_url' not in facts['master']:
  384. api_hostname = cluster_hostname if cluster_hostname else hostname
  385. facts['master']['api_url'] = format_url(api_use_ssl, api_hostname,
  386. api_port)
  387. if 'public_api_url' not in facts['master']:
  388. api_public_hostname = cluster_public_hostname if cluster_public_hostname else public_hostname
  389. facts['master']['public_api_url'] = format_url(api_use_ssl,
  390. api_public_hostname,
  391. api_port)
  392. if 'console_url' not in facts['master']:
  393. console_hostname = cluster_hostname if cluster_hostname else hostname
  394. facts['master']['console_url'] = format_url(console_use_ssl,
  395. console_hostname,
  396. console_port,
  397. console_path)
  398. if 'public_console_url' not in facts['master']:
  399. console_public_hostname = cluster_public_hostname if cluster_public_hostname else public_hostname
  400. facts['master']['public_console_url'] = format_url(console_use_ssl,
  401. console_public_hostname,
  402. console_port,
  403. console_path)
  404. return facts
  405. def set_aggregate_facts(facts):
  406. """ Set aggregate facts
  407. Args:
  408. facts (dict): existing facts
  409. Returns:
  410. dict: the facts dict updated with aggregated facts
  411. """
  412. all_hostnames = set()
  413. internal_hostnames = set()
  414. if 'common' in facts:
  415. all_hostnames.add(facts['common']['hostname'])
  416. all_hostnames.add(facts['common']['public_hostname'])
  417. all_hostnames.add(facts['common']['ip'])
  418. all_hostnames.add(facts['common']['public_ip'])
  419. internal_hostnames.add(facts['common']['hostname'])
  420. internal_hostnames.add(facts['common']['ip'])
  421. if 'master' in facts:
  422. # FIXME: not sure why but facts['dns']['domain'] fails
  423. cluster_domain = 'cluster.local'
  424. if 'cluster_hostname' in facts['master']:
  425. all_hostnames.add(facts['master']['cluster_hostname'])
  426. if 'cluster_public_hostname' in facts['master']:
  427. all_hostnames.add(facts['master']['cluster_public_hostname'])
  428. svc_names = ['openshift', 'openshift.default', 'openshift.default.svc',
  429. 'openshift.default.svc.' + cluster_domain, 'kubernetes', 'kubernetes.default',
  430. 'kubernetes.default.svc', 'kubernetes.default.svc.' + cluster_domain]
  431. all_hostnames.update(svc_names)
  432. internal_hostnames.update(svc_names)
  433. first_svc_ip = str(IPNetwork(facts['master']['portal_net'])[1])
  434. all_hostnames.add(first_svc_ip)
  435. internal_hostnames.add(first_svc_ip)
  436. if facts['master']['embedded_etcd']:
  437. facts['master']['etcd_data_dir'] = os.path.join(
  438. facts['common']['data_dir'], 'openshift.local.etcd')
  439. else:
  440. facts['master']['etcd_data_dir'] = '/var/lib/etcd'
  441. facts['common']['all_hostnames'] = list(all_hostnames)
  442. facts['common']['internal_hostnames'] = list(internal_hostnames)
  443. return facts
  444. def set_deployment_facts_if_unset(facts):
  445. """ Set Facts that vary based on deployment_type. This currently
  446. includes common.service_type, common.config_base, master.registry_url,
  447. node.registry_url, node.storage_plugin_deps
  448. Args:
  449. facts (dict): existing facts
  450. Returns:
  451. dict: the facts dict updated with the generated deployment_type
  452. facts
  453. """
  454. # disabled to avoid breaking up facts related to deployment type into
  455. # multiple methods for now.
  456. # pylint: disable=too-many-statements, too-many-branches
  457. if 'common' in facts:
  458. deployment_type = facts['common']['deployment_type']
  459. if 'service_type' not in facts['common']:
  460. service_type = 'atomic-openshift'
  461. if deployment_type == 'origin':
  462. service_type = 'origin'
  463. elif deployment_type in ['enterprise', 'online']:
  464. service_type = 'openshift'
  465. facts['common']['service_type'] = service_type
  466. if 'config_base' not in facts['common']:
  467. config_base = '/etc/origin'
  468. if deployment_type in ['enterprise', 'online']:
  469. config_base = '/etc/openshift'
  470. facts['common']['config_base'] = config_base
  471. if 'data_dir' not in facts['common']:
  472. data_dir = '/var/lib/origin'
  473. if deployment_type in ['enterprise', 'online']:
  474. data_dir = '/var/lib/openshift'
  475. facts['common']['data_dir'] = data_dir
  476. for role in ('master', 'node'):
  477. if role in facts:
  478. deployment_type = facts['common']['deployment_type']
  479. if 'registry_url' not in facts[role]:
  480. registry_url = 'openshift/origin-${component}:${version}'
  481. if deployment_type in ['enterprise', 'online', 'openshift-enterprise']:
  482. registry_url = 'openshift3/ose-${component}:${version}'
  483. elif deployment_type == 'atomic-enterprise':
  484. registry_url = 'aep3/aep-${component}:${version}'
  485. facts[role]['registry_url'] = registry_url
  486. if 'master' in facts:
  487. deployment_type = facts['common']['deployment_type']
  488. openshift_features = ['Builder', 'S2IBuilder', 'WebConsole']
  489. if 'disabled_features' in facts['master']:
  490. if deployment_type == 'atomic-enterprise':
  491. curr_disabled_features = set(facts['master']['disabled_features'])
  492. facts['master']['disabled_features'] = list(curr_disabled_features.union(openshift_features))
  493. else:
  494. if deployment_type == 'atomic-enterprise':
  495. facts['master']['disabled_features'] = openshift_features
  496. if 'node' in facts:
  497. deployment_type = facts['common']['deployment_type']
  498. if 'storage_plugin_deps' not in facts['node']:
  499. if deployment_type in ['openshift-enterprise', 'atomic-enterprise']:
  500. facts['node']['storage_plugin_deps'] = ['ceph', 'glusterfs']
  501. else:
  502. facts['node']['storage_plugin_deps'] = []
  503. return facts
  504. def set_version_facts_if_unset(facts):
  505. """ Set version facts. This currently includes common.version and
  506. common.version_greater_than_3_1_or_1_1.
  507. Args:
  508. facts (dict): existing facts
  509. Returns:
  510. dict: the facts dict updated with version facts.
  511. """
  512. if 'common' in facts:
  513. deployment_type = facts['common']['deployment_type']
  514. facts['common']['version'] = version = get_openshift_version()
  515. if version is not None:
  516. if deployment_type == 'origin':
  517. version_gt_3_1_or_1_1 = LooseVersion(version) > LooseVersion('1.0.6')
  518. else:
  519. version_gt_3_1_or_1_1 = LooseVersion(version) > LooseVersion('3.0.2.900')
  520. else:
  521. version_gt_3_1_or_1_1 = True
  522. facts['common']['version_greater_than_3_1_or_1_1'] = version_gt_3_1_or_1_1
  523. return facts
  524. def set_sdn_facts_if_unset(facts, system_facts):
  525. """ Set sdn facts if not already present in facts dict
  526. Args:
  527. facts (dict): existing facts
  528. system_facts (dict): ansible_facts
  529. Returns:
  530. dict: the facts dict updated with the generated sdn facts if they
  531. were not already present
  532. """
  533. if 'common' in facts:
  534. use_sdn = facts['common']['use_openshift_sdn']
  535. if not (use_sdn == '' or isinstance(use_sdn, bool)):
  536. facts['common']['use_openshift_sdn'] = bool(strtobool(str(use_sdn)))
  537. if 'sdn_network_plugin_name' not in facts['common']:
  538. plugin = 'redhat/openshift-ovs-subnet' if use_sdn else ''
  539. facts['common']['sdn_network_plugin_name'] = plugin
  540. if 'master' in facts:
  541. if 'sdn_cluster_network_cidr' not in facts['master']:
  542. facts['master']['sdn_cluster_network_cidr'] = '10.1.0.0/16'
  543. if 'sdn_host_subnet_length' not in facts['master']:
  544. facts['master']['sdn_host_subnet_length'] = '8'
  545. if 'node' in facts and 'sdn_mtu' not in facts['node']:
  546. node_ip = facts['common']['ip']
  547. # default MTU if interface MTU cannot be detected
  548. facts['node']['sdn_mtu'] = '1450'
  549. for val in system_facts.itervalues():
  550. if isinstance(val, dict) and 'mtu' in val:
  551. mtu = val['mtu']
  552. if 'ipv4' in val and val['ipv4'].get('address') == node_ip:
  553. facts['node']['sdn_mtu'] = str(mtu - 50)
  554. return facts
  555. def format_url(use_ssl, hostname, port, path=''):
  556. """ Format url based on ssl flag, hostname, port and path
  557. Args:
  558. use_ssl (bool): is ssl enabled
  559. hostname (str): hostname
  560. port (str): port
  561. path (str): url path
  562. Returns:
  563. str: The generated url string
  564. """
  565. scheme = 'https' if use_ssl else 'http'
  566. netloc = hostname
  567. if (use_ssl and port != '443') or (not use_ssl and port != '80'):
  568. netloc += ":%s" % port
  569. return urlparse.urlunparse((scheme, netloc, path, '', '', ''))
  570. def get_current_config(facts):
  571. """ Get current openshift config
  572. Args:
  573. facts (dict): existing facts
  574. Returns:
  575. dict: the facts dict updated with the current openshift config
  576. """
  577. current_config = dict()
  578. roles = [role for role in facts if role not in ['common', 'provider']]
  579. for role in roles:
  580. if 'roles' in current_config:
  581. current_config['roles'].append(role)
  582. else:
  583. current_config['roles'] = [role]
  584. # TODO: parse the /etc/sysconfig/openshift-{master,node} config to
  585. # determine the location of files.
  586. # TODO: I suspect this isn't working right now, but it doesn't prevent
  587. # anything from working properly as far as I can tell, perhaps because
  588. # we override the kubeconfig path everywhere we use it?
  589. # Query kubeconfig settings
  590. kubeconfig_dir = '/var/lib/origin/openshift.local.certificates'
  591. if role == 'node':
  592. kubeconfig_dir = os.path.join(
  593. kubeconfig_dir, "node-%s" % facts['common']['hostname']
  594. )
  595. kubeconfig_path = os.path.join(kubeconfig_dir, '.kubeconfig')
  596. if (os.path.isfile('/usr/bin/openshift')
  597. and os.path.isfile(kubeconfig_path)):
  598. try:
  599. _, output, _ = module.run_command(
  600. ["/usr/bin/openshift", "ex", "config", "view", "-o",
  601. "json", "--kubeconfig=%s" % kubeconfig_path],
  602. check_rc=False
  603. )
  604. config = json.loads(output)
  605. cad = 'certificate-authority-data'
  606. try:
  607. for cluster in config['clusters']:
  608. config['clusters'][cluster][cad] = 'masked'
  609. except KeyError:
  610. pass
  611. try:
  612. for user in config['users']:
  613. config['users'][user][cad] = 'masked'
  614. config['users'][user]['client-key-data'] = 'masked'
  615. except KeyError:
  616. pass
  617. current_config['kubeconfig'] = config
  618. # override pylint broad-except warning, since we do not want
  619. # to bubble up any exceptions if oc config view
  620. # fails
  621. # pylint: disable=broad-except
  622. except Exception:
  623. pass
  624. return current_config
  625. def get_openshift_version():
  626. """ Get current version of openshift on the host
  627. Returns:
  628. version: the current openshift version
  629. """
  630. version = None
  631. if os.path.isfile('/usr/bin/openshift'):
  632. _, output, _ = module.run_command(['/usr/bin/openshift', 'version'])
  633. versions = dict(e.split(' v') for e in output.splitlines() if ' v' in e)
  634. version = versions.get('openshift', '')
  635. #TODO: acknowledge the possility of a containerized install
  636. return version
  637. def apply_provider_facts(facts, provider_facts):
  638. """ Apply provider facts to supplied facts dict
  639. Args:
  640. facts (dict): facts dict to update
  641. provider_facts (dict): provider facts to apply
  642. roles: host roles
  643. Returns:
  644. dict: the merged facts
  645. """
  646. if not provider_facts:
  647. return facts
  648. use_openshift_sdn = provider_facts.get('use_openshift_sdn')
  649. if isinstance(use_openshift_sdn, bool):
  650. facts['common']['use_openshift_sdn'] = use_openshift_sdn
  651. common_vars = [('hostname', 'ip'), ('public_hostname', 'public_ip')]
  652. for h_var, ip_var in common_vars:
  653. ip_value = provider_facts['network'].get(ip_var)
  654. if ip_value:
  655. facts['common'][ip_var] = ip_value
  656. facts['common'][h_var] = choose_hostname(
  657. [provider_facts['network'].get(h_var)],
  658. facts['common'][ip_var]
  659. )
  660. facts['provider'] = provider_facts
  661. return facts
  662. def merge_facts(orig, new):
  663. """ Recursively merge facts dicts
  664. Args:
  665. orig (dict): existing facts
  666. new (dict): facts to update
  667. Returns:
  668. dict: the merged facts
  669. """
  670. facts = dict()
  671. for key, value in orig.iteritems():
  672. if key in new:
  673. if isinstance(value, dict) and isinstance(new[key], dict):
  674. facts[key] = merge_facts(value, new[key])
  675. else:
  676. facts[key] = copy.copy(new[key])
  677. else:
  678. facts[key] = copy.deepcopy(value)
  679. new_keys = set(new.keys()) - set(orig.keys())
  680. for key in new_keys:
  681. facts[key] = copy.deepcopy(new[key])
  682. return facts
  683. def save_local_facts(filename, facts):
  684. """ Save local facts
  685. Args:
  686. filename (str): local facts file
  687. facts (dict): facts to set
  688. """
  689. try:
  690. fact_dir = os.path.dirname(filename)
  691. if not os.path.exists(fact_dir):
  692. os.makedirs(fact_dir)
  693. with open(filename, 'w') as fact_file:
  694. fact_file.write(module.jsonify(facts))
  695. except (IOError, OSError) as ex:
  696. raise OpenShiftFactsFileWriteError(
  697. "Could not create fact file: %s, error: %s" % (filename, ex)
  698. )
  699. def get_local_facts_from_file(filename):
  700. """ Retrieve local facts from fact file
  701. Args:
  702. filename (str): local facts file
  703. Returns:
  704. dict: the retrieved facts
  705. """
  706. local_facts = dict()
  707. try:
  708. # Handle conversion of INI style facts file to json style
  709. ini_facts = ConfigParser.SafeConfigParser()
  710. ini_facts.read(filename)
  711. for section in ini_facts.sections():
  712. local_facts[section] = dict()
  713. for key, value in ini_facts.items(section):
  714. local_facts[section][key] = value
  715. except (ConfigParser.MissingSectionHeaderError,
  716. ConfigParser.ParsingError):
  717. try:
  718. with open(filename, 'r') as facts_file:
  719. local_facts = json.load(facts_file)
  720. except (ValueError, IOError):
  721. pass
  722. return local_facts
  723. class OpenShiftFactsUnsupportedRoleError(Exception):
  724. """Origin Facts Unsupported Role Error"""
  725. pass
  726. class OpenShiftFactsFileWriteError(Exception):
  727. """Origin Facts File Write Error"""
  728. pass
  729. class OpenShiftFactsMetadataUnavailableError(Exception):
  730. """Origin Facts Metadata Unavailable Error"""
  731. pass
  732. class OpenShiftFacts(object):
  733. """ Origin Facts
  734. Attributes:
  735. facts (dict): facts for the host
  736. Args:
  737. role (str): role for setting local facts
  738. filename (str): local facts file to use
  739. local_facts (dict): local facts to set
  740. Raises:
  741. OpenShiftFactsUnsupportedRoleError:
  742. """
  743. known_roles = ['common', 'master', 'node', 'master_sdn', 'node_sdn', 'dns']
  744. def __init__(self, role, filename, local_facts):
  745. self.changed = False
  746. self.filename = filename
  747. if role not in self.known_roles:
  748. raise OpenShiftFactsUnsupportedRoleError(
  749. "Role %s is not supported by this module" % role
  750. )
  751. self.role = role
  752. self.system_facts = ansible_facts(module)
  753. self.facts = self.generate_facts(local_facts)
  754. def generate_facts(self, local_facts):
  755. """ Generate facts
  756. Args:
  757. local_facts (dict): local_facts for overriding generated
  758. defaults
  759. Returns:
  760. dict: The generated facts
  761. """
  762. local_facts = self.init_local_facts(local_facts)
  763. roles = local_facts.keys()
  764. defaults = self.get_defaults(roles)
  765. provider_facts = self.init_provider_facts()
  766. facts = apply_provider_facts(defaults, provider_facts)
  767. facts = merge_facts(facts, local_facts)
  768. facts['current_config'] = get_current_config(facts)
  769. facts = set_url_facts_if_unset(facts)
  770. facts = set_project_cfg_facts_if_unset(facts)
  771. facts = set_fluentd_facts_if_unset(facts)
  772. facts = set_node_schedulability(facts)
  773. facts = set_master_selectors(facts)
  774. facts = set_metrics_facts_if_unset(facts)
  775. facts = set_identity_providers_if_unset(facts)
  776. facts = set_sdn_facts_if_unset(facts, self.system_facts)
  777. facts = set_deployment_facts_if_unset(facts)
  778. facts = set_version_facts_if_unset(facts)
  779. facts = set_aggregate_facts(facts)
  780. return dict(openshift=facts)
  781. def get_defaults(self, roles):
  782. """ Get default fact values
  783. Args:
  784. roles (list): list of roles for this host
  785. Returns:
  786. dict: The generated default facts
  787. """
  788. defaults = dict()
  789. ip_addr = self.system_facts['default_ipv4']['address']
  790. exit_code, output, _ = module.run_command(['hostname', '-f'])
  791. hostname_f = output.strip() if exit_code == 0 else ''
  792. hostname_values = [hostname_f, self.system_facts['nodename'],
  793. self.system_facts['fqdn']]
  794. hostname = choose_hostname(hostname_values, ip_addr)
  795. common = dict(use_openshift_sdn=True, ip=ip_addr, public_ip=ip_addr,
  796. deployment_type='origin', hostname=hostname,
  797. public_hostname=hostname)
  798. common['client_binary'] = 'oc' if os.path.isfile('/usr/bin/oc') else 'osc'
  799. common['admin_binary'] = 'oadm' if os.path.isfile('/usr/bin/oadm') else 'osadm'
  800. defaults['common'] = common
  801. if 'master' in roles:
  802. master = dict(api_use_ssl=True, api_port='8443',
  803. console_use_ssl=True, console_path='/console',
  804. console_port='8443', etcd_use_ssl=True, etcd_hosts='',
  805. etcd_port='4001', portal_net='172.30.0.0/16',
  806. embedded_etcd=True, embedded_kube=True,
  807. embedded_dns=True, dns_port='53',
  808. bind_addr='0.0.0.0', session_max_seconds=3600,
  809. session_name='ssn', session_secrets_file='',
  810. access_token_max_seconds=86400,
  811. auth_token_max_seconds=500,
  812. oauth_grant_method='auto')
  813. defaults['master'] = master
  814. if 'node' in roles:
  815. node = dict(labels={}, annotations={}, portal_net='172.30.0.0/16',
  816. iptables_sync_period='5s')
  817. defaults['node'] = node
  818. return defaults
  819. def guess_host_provider(self):
  820. """ Guess the host provider
  821. Returns:
  822. dict: The generated default facts for the detected provider
  823. """
  824. # TODO: cloud provider facts should probably be submitted upstream
  825. product_name = self.system_facts['product_name']
  826. product_version = self.system_facts['product_version']
  827. virt_type = self.system_facts['virtualization_type']
  828. virt_role = self.system_facts['virtualization_role']
  829. provider = None
  830. metadata = None
  831. # TODO: this is not exposed through module_utils/facts.py in ansible,
  832. # need to create PR for ansible to expose it
  833. bios_vendor = get_file_content(
  834. '/sys/devices/virtual/dmi/id/bios_vendor'
  835. )
  836. if bios_vendor == 'Google':
  837. provider = 'gce'
  838. metadata_url = ('http://metadata.google.internal/'
  839. 'computeMetadata/v1/?recursive=true')
  840. headers = {'Metadata-Flavor': 'Google'}
  841. metadata = get_provider_metadata(metadata_url, True, headers,
  842. True)
  843. # Filter sshKeys and serviceAccounts from gce metadata
  844. if metadata:
  845. metadata['project']['attributes'].pop('sshKeys', None)
  846. metadata['instance'].pop('serviceAccounts', None)
  847. elif (virt_type == 'xen' and virt_role == 'guest'
  848. and re.match(r'.*\.amazon$', product_version)):
  849. provider = 'ec2'
  850. metadata_url = 'http://169.254.169.254/latest/meta-data/'
  851. metadata = get_provider_metadata(metadata_url)
  852. elif re.search(r'OpenStack', product_name):
  853. provider = 'openstack'
  854. metadata_url = ('http://169.254.169.254/openstack/latest/'
  855. 'meta_data.json')
  856. metadata = get_provider_metadata(metadata_url, True, None,
  857. True)
  858. if metadata:
  859. ec2_compat_url = 'http://169.254.169.254/latest/meta-data/'
  860. metadata['ec2_compat'] = get_provider_metadata(
  861. ec2_compat_url
  862. )
  863. # disable pylint maybe-no-member because overloaded use of
  864. # the module name causes pylint to not detect that results
  865. # is an array or hash
  866. # pylint: disable=maybe-no-member
  867. # Filter public_keys and random_seed from openstack metadata
  868. metadata.pop('public_keys', None)
  869. metadata.pop('random_seed', None)
  870. if not metadata['ec2_compat']:
  871. metadata = None
  872. return dict(name=provider, metadata=metadata)
  873. def init_provider_facts(self):
  874. """ Initialize the provider facts
  875. Returns:
  876. dict: The normalized provider facts
  877. """
  878. provider_info = self.guess_host_provider()
  879. provider_facts = normalize_provider_facts(
  880. provider_info.get('name'),
  881. provider_info.get('metadata')
  882. )
  883. return provider_facts
  884. def init_local_facts(self, facts=None):
  885. """ Initialize the provider facts
  886. Args:
  887. facts (dict): local facts to set
  888. Returns:
  889. dict: The result of merging the provided facts with existing
  890. local facts
  891. """
  892. changed = False
  893. facts_to_set = {self.role: dict()}
  894. if facts is not None:
  895. facts_to_set[self.role] = facts
  896. local_facts = get_local_facts_from_file(self.filename)
  897. for arg in ['labels', 'annotations']:
  898. if arg in facts_to_set and isinstance(facts_to_set[arg],
  899. basestring):
  900. facts_to_set[arg] = module.from_json(facts_to_set[arg])
  901. new_local_facts = merge_facts(local_facts, facts_to_set)
  902. for facts in new_local_facts.values():
  903. keys_to_delete = []
  904. for fact, value in facts.iteritems():
  905. if value == "" or value is None:
  906. keys_to_delete.append(fact)
  907. for key in keys_to_delete:
  908. del facts[key]
  909. if new_local_facts != local_facts:
  910. changed = True
  911. if not module.check_mode:
  912. save_local_facts(self.filename, new_local_facts)
  913. self.changed = changed
  914. return new_local_facts
  915. def main():
  916. """ main """
  917. # disabling pylint errors for global-variable-undefined and invalid-name
  918. # for 'global module' usage, since it is required to use ansible_facts
  919. # pylint: disable=global-variable-undefined, invalid-name
  920. global module
  921. module = AnsibleModule(
  922. argument_spec=dict(
  923. role=dict(default='common', required=False,
  924. choices=OpenShiftFacts.known_roles),
  925. local_facts=dict(default=None, type='dict', required=False),
  926. ),
  927. supports_check_mode=True,
  928. add_file_common_args=True,
  929. )
  930. role = module.params['role']
  931. local_facts = module.params['local_facts']
  932. fact_file = '/etc/ansible/facts.d/openshift.fact'
  933. openshift_facts = OpenShiftFacts(role, fact_file, local_facts)
  934. file_params = module.params.copy()
  935. file_params['path'] = fact_file
  936. file_args = module.load_file_common_arguments(file_params)
  937. changed = module.set_fs_attributes_if_different(file_args,
  938. openshift_facts.changed)
  939. return module.exit_json(changed=changed,
  940. ansible_facts=openshift_facts.facts)
  941. # ignore pylint errors related to the module_utils import
  942. # pylint: disable=redefined-builtin, unused-wildcard-import, wildcard-import
  943. # import module snippets
  944. from ansible.module_utils.basic import *
  945. from ansible.module_utils.facts import *
  946. from ansible.module_utils.urls import *
  947. if __name__ == '__main__':
  948. main()