107bdfaceb
Add support for the Packet features: * phone home - after provisioning is ready, an empty HTTP POST request is performed to the phone_home_url * post user password - a random password is generated for the default user, the password gets encrypted using the encryption public SSH key and posted to the phone_home_url Change-Id: Ib3e405b6b5bb4ca65d047c756513b9d6f87cf6de
135 lines
4.9 KiB
Python
135 lines
4.9 KiB
Python
# Copyright 2016 Cloudbase Solutions Srl
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
"""Metadata Service for Packet."""
|
|
|
|
import json
|
|
import requests
|
|
|
|
from cloudbaseinit import conf as cloudbaseinit_conf
|
|
from cloudbaseinit import exception
|
|
from cloudbaseinit.metadata.services import base
|
|
from oslo_log import log as oslo_logging
|
|
from six.moves.urllib import error
|
|
|
|
CONF = cloudbaseinit_conf.CONF
|
|
LOG = oslo_logging.getLogger(__name__)
|
|
|
|
|
|
class PacketService(base.BaseHTTPMetadataService):
|
|
|
|
"""Metadata Service for Packet.
|
|
|
|
Packet is a NYC-based infrastructure startup, focused on reinventing
|
|
how SaaS/PaaS companies go global with premium bare metal and container
|
|
hosting.
|
|
"""
|
|
|
|
def __init__(self):
|
|
super(PacketService, self).__init__(
|
|
base_url=CONF.packet.metadata_base_url,
|
|
https_allow_insecure=CONF.packet.https_allow_insecure,
|
|
https_ca_bundle=CONF.packet.https_ca_bundle)
|
|
|
|
self._enable_retry = True
|
|
|
|
def _get_meta_data(self):
|
|
data = self._get_cache_data("metadata", decode=True)
|
|
if data:
|
|
return json.loads(data)
|
|
|
|
def load(self):
|
|
"""Load all the available information from the metadata service."""
|
|
super(PacketService, self).load()
|
|
try:
|
|
self._get_meta_data()
|
|
return True
|
|
except Exception:
|
|
LOG.debug('Metadata not found at URL \'%s\'' %
|
|
CONF.packet.metadata_base_url)
|
|
return False
|
|
|
|
def get_instance_id(self):
|
|
"""Get the identifier for the current instance.
|
|
|
|
The instance identifier provides an unique way to address an
|
|
instance into the current metadata provider.
|
|
"""
|
|
return self._get_meta_data().get("id")
|
|
|
|
def get_host_name(self):
|
|
"""Get the hostname for the current instance.
|
|
|
|
The hostname is the label assigned to the current instance used to
|
|
identify it in various forms of electronic communication.
|
|
"""
|
|
return self._get_meta_data().get("hostname")
|
|
|
|
def get_public_keys(self):
|
|
"""Get a list of space-stripped strings as public keys."""
|
|
meta_data = self._get_meta_data()
|
|
ssh_keys = meta_data.get("ssh_keys")
|
|
if not ssh_keys:
|
|
return []
|
|
return list(set((key.strip() for key in ssh_keys)))
|
|
|
|
def get_user_data(self):
|
|
"""Get the available user data for the current instance."""
|
|
return self._get_cache_data("userdata")
|
|
|
|
def _get_phone_home_url(self):
|
|
return self._get_meta_data().get("phone_home_url")
|
|
|
|
def get_user_pwd_encryption_key(self):
|
|
phone_home_url = self._get_phone_home_url()
|
|
key_url = requests.compat.urljoin('%s/' % phone_home_url, "key")
|
|
return self._get_cache_data(key_url, decode=True)
|
|
|
|
@property
|
|
def can_post_password(self):
|
|
"""The Packet metadata service supports posting the password."""
|
|
return True
|
|
|
|
def post_password(self, enc_password_b64):
|
|
phone_home_url = self._get_phone_home_url()
|
|
LOG.info("Posting password to: %s", phone_home_url)
|
|
try:
|
|
action = lambda: self._http_request(
|
|
url=phone_home_url,
|
|
data=json.dumps({'password': enc_password_b64.decode()}))
|
|
return self._exec_with_retry(action)
|
|
except error.HTTPError as exc:
|
|
LOG.exception(exc)
|
|
raise exception.MetadataEndpointException(
|
|
"Failed to post password to the metadata service")
|
|
|
|
def provisioning_completed(self):
|
|
"""Signal to Packet that the instance is ready.
|
|
|
|
To complete the provisioning, on the first boot after installation
|
|
make a GET request to CONF.packet.metadata_url, which will return a
|
|
JSON object which contains phone_home_url entry.
|
|
Make a POST request to phone_home_url with no body (important!)
|
|
and this will complete the installation process.
|
|
"""
|
|
phone_home_url = self._get_phone_home_url()
|
|
LOG.info("Calling home to: %s", phone_home_url)
|
|
try:
|
|
action = lambda: self._http_request(url=phone_home_url,
|
|
method="post")
|
|
return self._exec_with_retry(action)
|
|
except error.HTTPError as exc:
|
|
LOG.exception(exc)
|
|
raise exception.MetadataEndpointException(
|
|
"Failed to call home to the metadata service")
|