module Fog::OpenStack

Public Class Methods

authenticate(options, connection_options = {}) click to toggle source
# File lib/fog/openstack.rb, line 82
def self.authenticate(options, connection_options = {})
  case options[:openstack_auth_uri].path
  when /v1(\.\d+)?/
    authenticate_v1(options, connection_options)
  when /v2(\.\d+)?/
    authenticate_v2(options, connection_options)
  when /v3(\.\d+)?/
    authenticate_v3(options, connection_options)
  else
    authenticate_v2(options, connection_options)
  end
end
authenticate_v1(options, connection_options = {}) click to toggle source

legacy v1.0 style auth

# File lib/fog/openstack.rb, line 96
def self.authenticate_v1(options, connection_options = {})
  uri = options[:openstack_auth_uri]
  connection = Fog::Core::Connection.new(uri.to_s, false, connection_options)
  @openstack_api_key  = options[:openstack_api_key]
  @openstack_username = options[:openstack_username]

  response = connection.request({
    :expects  => [200, 204],
    :headers  => {
      'X-Auth-Key'  => @openstack_api_key,
      'X-Auth-User' => @openstack_username
    },
    :method   => 'GET',
    :path     =>  (uri.path and not uri.path.empty?) ? uri.path : 'v1.0'
  })

  return {
    :token => response.headers['X-Auth-Token'],
    :server_management_url => response.headers['X-Server-Management-Url'] || response.headers['X-Storage-Url'],
    :identity_public_endpoint => response.headers['X-Keystone']
  }
end
authenticate_v2(options, connection_options = {}) click to toggle source

Keystone Style Auth

# File lib/fog/openstack.rb, line 120
def self.authenticate_v2(options, connection_options = {})
  uri                   = options[:openstack_auth_uri]
  tenant_name           = options[:openstack_tenant]
  service_type          = options[:openstack_service_type]
  service_name          = options[:openstack_service_name]
  identity_service_type = options[:openstack_identity_service_type]
  endpoint_type         = (options[:openstack_endpoint_type] || 'publicURL').to_s
  openstack_region      = options[:openstack_region]

  body = retrieve_tokens_v2(options, connection_options)
  service = get_service(body, service_type, service_name)

  options[:unscoped_token] = body['access']['token']['id']

  unless service
    unless tenant_name
      response = Fog::Core::Connection.new(
        "#{uri.scheme}://#{uri.host}:#{uri.port}/v2.0/tenants", false, connection_options).request({
        :expects => [200, 204],
        :headers => {'Content-Type' => 'application/json',
                     'Accept' => 'application/json',
                     'X-Auth-Token' => body['access']['token']['id']},
        :method  => 'GET'
      })

      body = Fog::JSON.decode(response.body)
      if body['tenants'].empty?
        raise Fog::Errors::NotFound.new('No Tenant Found')
      else
        options[:openstack_tenant] = body['tenants'].first['name']
      end
    end

    body = retrieve_tokens_v2(options, connection_options)
    service = get_service(body, service_type, service_name)

  end

  unless service
    available = body['access']['serviceCatalog'].map { |endpoint|
      endpoint['type']
    }.sort.join ', '

    missing = service_type.join ', '

    message = "Could not find service #{missing}.  Have #{available}"

    raise Fog::Errors::NotFound, message
  end

  service['endpoints'] = service['endpoints'].select do |endpoint|
    endpoint['region'] == openstack_region
  end if openstack_region

  if service['endpoints'].empty?
    raise Fog::Errors::NotFound.new("No endpoints available for region '#{openstack_region}'")
  end if openstack_region

  regions = service["endpoints"].map{ |e| e['region'] }.uniq
  if regions.count > 1
    raise Fog::Errors::NotFound.new("Multiple regions available choose one of these '#{regions.join(',')}'")
  end

  identity_service = get_service(body, identity_service_type) if identity_service_type
  tenant = body['access']['token']['tenant']
  user = body['access']['user']

  management_url = service['endpoints'].find{|s| s[endpoint_type]}[endpoint_type]
  identity_url   = identity_service['endpoints'].find{|s| s['publicURL']}['publicURL'] if identity_service

  {
    :user                     => user,
    :tenant                   => tenant,
    :identity_public_endpoint => identity_url,
    :server_management_url    => management_url,
    :token                    => body['access']['token']['id'],
    :expires                  => body['access']['token']['expires'],
    :current_user_id          => body['access']['user']['id'],
    :unscoped_token           => options[:unscoped_token]
  }
end
authenticate_v3(options, connection_options = {}) click to toggle source

Keystone Style Auth

# File lib/fog/openstack.rb, line 203
def self.authenticate_v3(options, connection_options = {})
  uri = options[:openstack_auth_uri]
  project_name          = options[:openstack_project_name]
  service_type          = options[:openstack_service_type]
  service_name          = options[:openstack_service_name]
  identity_service_type = options[:openstack_identity_service_type]
  endpoint_type         = map_endpoint_type(options[:openstack_endpoint_type] || 'publicURL')
  openstack_region      = options[:openstack_region]

  token, body = retrieve_tokens_v3 options, connection_options

  service = get_service_v3(body, service_type, service_name, openstack_region, options)

  options[:unscoped_token] = token

  unless service
    unless project_name
      request_body = {
          :expects => [200],
          :headers => {'Content-Type' => 'application/json',
                       'Accept' => 'application/json',
                       'X-Auth-Token' => token},
          :method => 'GET'
      }
      user_id = body['token']['user']['id']
      project_uri = uri.clone
      project_uri.path = uri.path.sub('/auth/tokens', "/users/#{user_id}/projects")
      project_uri_param = "#{project_uri.scheme}://#{project_uri.host}:#{project_uri.port}#{project_uri.path}"
      response = Fog::Core::Connection.new(project_uri_param, false, connection_options).request(request_body)

      projects_body = Fog::JSON.decode(response.body)
      if projects_body['projects'].empty?
        options[:openstack_domain_id] = body['token']['user']['domain']['id']
      else
        options[:openstack_project_id] = projects_body['projects'].first['id']
        options[:openstack_project_name] = projects_body['projects'].first['name']
        options[:openstack_domain_id] = projects_body['projects'].first['domain_id']
      end
    end

    token, body = retrieve_tokens_v3(options, connection_options)
    service = get_service_v3(body, service_type, service_name, openstack_region, options)
  end

  unless service
    available_services = body['token']['catalog'].map { |service|
      service['type']
    }.sort.join ', '

    available_regions = body['token']['catalog'].map { |service|
      service['endpoints'].map { |endpoint|
        endpoint['region']
      }.uniq
    }.uniq.sort.join ', '

    missing = service_type.join ', '

    message = "Could not find service #{missing}#{(' in region '+openstack_region) if openstack_region}."+
        " Have #{available_services}#{(' in regions '+available_regions) if openstack_region}"

    raise Fog::Errors::NotFound, message
  end

  service['endpoints'] = service['endpoints'].select do |endpoint|
    endpoint['region'] == openstack_region && endpoint['interface'] == endpoint_type
  end if openstack_region

  if service['endpoints'].empty?
    raise Fog::Errors::NotFound.new("No endpoints available for region '#{openstack_region}'")
  end if openstack_region

  regions = service["endpoints"].map { |e| e['region'] }.uniq
  if regions.count > 1
    raise Fog::Errors::NotFound.new("Multiple regions available choose one of these '#{regions.join(',')}'")
  end

  identity_service = get_service_v3(body, identity_service_type, nil, nil, :openstack_endpoint_path_matches => /\/v3/) if identity_service_type

  management_url = service['endpoints'].find { |e| e['interface']==endpoint_type }['url']
  identity_url = identity_service['endpoints'].find { |e| e['interface']=='public' }['url'] if identity_service

  if body['token']['project']
    tenant = body['token']['project']
  elsif body['token']['user']['project']
    tenant = body['token']['user']['project']
  end

  return {
      :user                     => body['token']['user']['name'],
      :tenant                   => tenant,
      :identity_public_endpoint => identity_url,
      :server_management_url    => management_url,
      :token                    => token,
      :expires                  => body['token']['expires_at'],
      :current_user_id          => body['token']['user']['id'],
      :unscoped_token           => options[:unscoped_token]
  }
end
clear_token_cache() click to toggle source
# File lib/fog/openstack.rb, line 78
def self.clear_token_cache
  @@token_cache.clear
end
endpoint_path_match?(endpoint, match_regex) click to toggle source
# File lib/fog/openstack.rb, line 473
def self.endpoint_path_match?(endpoint, match_regex)
  match_regex.nil? || URI(endpoint['url']).path =~ match_regex
end
endpoint_region?(endpoint, region) click to toggle source
# File lib/fog/openstack.rb, line 469
def self.endpoint_region?(endpoint, region)
  region.nil? || endpoint['region'] == region
end
escape(str, extra_exclude_chars = '') click to toggle source

CGI.escape, but without special treatment on spaces

# File lib/fog/openstack.rb, line 536
def self.escape(str, extra_exclude_chars = '')
  str.gsub(/([^a-zA-Z0-9_.-#{extra_exclude_chars}]+)/) do
    '%' + $1.unpack('H2' * $1.bytesize).join('%').upcase
  end
end
get_service(body, service_type=[], service_name=nil) click to toggle source
# File lib/fog/openstack.rb, line 302
def self.get_service(body, service_type=[], service_name=nil)
  if not body['access'].nil?
    body['access']['serviceCatalog'].find do |s|
      if service_name.nil? or service_name.empty?
        service_type.include?(s['type'])
      else
        service_type.include?(s['type']) and s['name'] == service_name
      end
    end
  elsif not body['token']['catalog'].nil?
    body['token']['catalog'].find do |s|
      if service_name.nil? or service_name.empty?
        service_type.include?(s['type'])
      else
        service_type.include?(s['type']) and s['name'] == service_name
      end
    end

  end
end
get_service_v3(hash, service_type=[], service_name=nil, region=nil, options={}) click to toggle source
# File lib/fog/openstack.rb, line 451
def self.get_service_v3(hash, service_type=[], service_name=nil, region=nil, options={})

  # Find all services matching any of the types in service_type, filtered by service_name if it's non-nil
  services = hash['token']['catalog'].find_all do |s|
    if service_name.nil? or service_name.empty?
      service_type.include?(s['type'])
    else
      service_type.include?(s['type']) and s['name'] == service_name
    end
  end if hash['token']['catalog']

  # Filter the found services by region (if specified) and whether the endpoint path matches the given regex (e.g. /\/v3/)
  services.find do |s|
    s['endpoints'].any? { |ep| endpoint_region?(ep, region) && endpoint_path_match?(ep, options[:openstack_endpoint_path_matches])}
  end if services

end
get_supported_version(supported_versions, uri, auth_token, connection_options = {}) click to toggle source
# File lib/fog/openstack.rb, line 477
def self.get_supported_version(supported_versions, uri, auth_token, connection_options = {})
  connection = Fog::Core::Connection.new("#{uri.scheme}://#{uri.host}:#{uri.port}", false, connection_options)
  response = connection.request({
                                    :expects => [200, 204, 300],
                                    :headers => {'Content-Type' => 'application/json',
                                                 'Accept' => 'application/json',
                                                 'X-Auth-Token' => auth_token},
                                    :method => 'GET'
                                })

  body = Fog::JSON.decode(response.body)
  version = nil
  unless body['versions'].empty?
    supported_version = body['versions'].find do |x|
      x["id"].match(supported_versions) &&
          (x["status"] == "CURRENT" || x["status"] == "SUPPORTED")
    end
    version = supported_version["id"] if supported_version
  end
  if version.nil?
    raise Fog::OpenStack::Errors::ServiceUnavailable.new(
              "OpenStack service only supports API versions #{supported_versions.inspect}")
  end

  version
end
get_supported_version_path(supported_versions, uri, auth_token, connection_options = {}) click to toggle source
# File lib/fog/openstack.rb, line 504
def self.get_supported_version_path(supported_versions, uri, auth_token, connection_options = {})
  # Find a version in the path (e.g. the v1 in /xyz/v1/tenantid/abc) and get the path up until that version (e.g. /xyz))
  path_components = uri.path.split '/'
  version_component_index = path_components.index{|comp| comp.match(/v[0-9].?[0-9]?/) }
  versionless_path = (path_components.take(version_component_index).join '/' if version_component_index) || uri.path
  connection = Fog::Core::Connection.new("#{uri.scheme}://#{uri.host}:#{uri.port}#{versionless_path}", false, connection_options)
  response = connection.request({
                                    :expects => [200, 204, 300],
                                    :headers => {'Content-Type' => 'application/json',
                                                 'Accept' => 'application/json',
                                                 'X-Auth-Token' => auth_token},
                                    :method => 'GET'
                                })

  body = Fog::JSON.decode(response.body)
  path = nil
  unless body['versions'].empty?
    supported_version = body['versions'].find do |x|
      x["id"].match(supported_versions) &&
          (x["status"] == "CURRENT" || x["status"] == "SUPPORTED")
    end
    path = URI.parse(supported_version['links'].first['href']).path if supported_version
  end
  if path.nil?
    raise Fog::OpenStack::Errors::ServiceUnavailable.new(
              "OpenStack service only supports API versions #{supported_versions.inspect}")
  end

  path.chomp '/'
end
map_endpoint_type(type) click to toggle source
# File lib/fog/openstack.rb, line 542
def self.map_endpoint_type type
  case type
    when "publicURL"
      "public"
    when "internalURL"
      "internal"
    when "adminURL"
      "admin"
  end

end
retrieve_tokens_v2(options, connection_options = {}) click to toggle source
# File lib/fog/openstack.rb, line 323
def self.retrieve_tokens_v2(options, connection_options = {})
  api_key           = options[:openstack_api_key].to_s
  username          = options[:openstack_username].to_s
  tenant_name       = options[:openstack_tenant].to_s
  auth_token        = options[:openstack_auth_token] || options[:unscoped_token]
  uri               = options[:openstack_auth_uri]
  omit_default_port = options[:openstack_auth_omit_default_port]

  identity_v2_connection = Fog::Core::Connection.new(uri.to_s, false, connection_options)
  request_body = {:auth => Hash.new}

  if auth_token
    request_body[:auth][:token] = {
      :id => auth_token
    }
  else
    request_body[:auth][:passwordCredentials] = {
      :username => username,
      :password => api_key
    }
  end
  request_body[:auth][:tenantName] = tenant_name if tenant_name

  request = {
    :expects => [200, 204],
    :headers => {'Content-Type' => 'application/json'},
    :body    => Fog::JSON.encode(request_body),
    :method  => 'POST',
    :path    => (uri.path and not uri.path.empty?) ? uri.path : 'v2.0'
  }
  request[:omit_default_port] = omit_default_port unless omit_default_port.nil?

  response = identity_v2_connection.request(request)

  Fog::JSON.decode(response.body)
end
retrieve_tokens_v3(options, connection_options = {}) click to toggle source
# File lib/fog/openstack.rb, line 360
def self.retrieve_tokens_v3(options, connection_options = {})

  api_key           = options[:openstack_api_key].to_s
  username          = options[:openstack_username].to_s
  userid            = options[:openstack_userid]
  domain_id         = options[:openstack_domain_id]
  domain_name       = options[:openstack_domain_name]
  project_domain    = options[:openstack_project_domain]
  project_domain_id = options[:openstack_project_domain_id]
  user_domain       = options[:openstack_user_domain]
  user_domain_id    = options[:openstack_user_domain_id]
  project_name      = options[:openstack_project_name]
  project_id        = options[:openstack_project_id]
  auth_token        = options[:openstack_auth_token] || options[:unscoped_token]
  uri               = options[:openstack_auth_uri]
  omit_default_port = options[:openstack_auth_omit_default_port]
  cache_ttl         = options[:openstack_cache_ttl] || 0

  connection = Fog::Core::Connection.new(uri.to_s, false, connection_options)
  request_body = {:auth => {}}

  scope = {}

  if project_name || project_id
    scope[:project] = if project_id.nil? then
                        if project_domain || project_domain_id
                          {:name => project_name, :domain => project_domain_id.nil? ? {:name => project_domain} : {:id => project_domain_id}}
                        else
                          {:name => project_name, :domain => domain_id.nil? ? {:name => domain_name} : {:id => domain_id}}
                        end
                      else
                        {:id => project_id}
                      end
  elsif domain_name || domain_id
    scope[:domain] = domain_id.nil? ? {:name => domain_name} : {:id => domain_id}
  else
    # unscoped token
  end

  if auth_token
    request_body[:auth][:identity] = {
        :methods => %w{token},
        :token => {
            :id => auth_token
        }
    }
  else
    request_body[:auth][:identity] = {
        :methods => %w{password},
        :password => {
            :user => {
                :password => api_key
            }
        }
    }

    if userid
      request_body[:auth][:identity][:password][:user][:id] = userid
    else
      if user_domain || user_domain_id
        request_body[:auth][:identity][:password][:user].merge! :domain => user_domain_id.nil? ? {:name => user_domain} : {:id => user_domain_id}
      elsif domain_name || domain_id
        request_body[:auth][:identity][:password][:user].merge! :domain => domain_id.nil? ? {:name => domain_name} : {:id => domain_id}
      end
      request_body[:auth][:identity][:password][:user][:name] = username
    end

  end
  request_body[:auth][:scope] = scope unless scope.empty?

  path     = (uri.path and not uri.path.empty?) ? uri.path : 'v3'

  response, expires = @@token_cache[{:body => request_body, :path => path}] if cache_ttl > 0

  unless response && expires > Time.now
    request = {
      :expects => [201],
      :headers => {'Content-Type' => 'application/json'},
      :body    => Fog::JSON.encode(request_body),
      :method  => 'POST',
      :path    => path
    }
    request[:omit_default_port] = omit_default_port unless omit_default_port.nil?

    response = connection.request(request)
    @@token_cache[{:body => request_body, :path => path}] = response, Time.now + cache_ttl if cache_ttl > 0
  end

  [response.headers["X-Subject-Token"], Fog::JSON.decode(response.body)]
end