network.py 9.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285
  1. from __future__ import absolute_import
  2. from __future__ import unicode_literals
  3. import logging
  4. from docker.errors import NotFound
  5. from docker.types import IPAMConfig
  6. from docker.types import IPAMPool
  7. from docker.utils import version_gte
  8. from docker.utils import version_lt
  9. from .config import ConfigurationError
  10. from .const import LABEL_NETWORK
  11. from .const import LABEL_PROJECT
  12. log = logging.getLogger(__name__)
  13. OPTS_EXCEPTIONS = [
  14. 'com.docker.network.driver.overlay.vxlanid_list',
  15. 'com.docker.network.windowsshim.hnsid',
  16. 'com.docker.network.windowsshim.networkname'
  17. ]
  18. class Network(object):
  19. def __init__(self, client, project, name, driver=None, driver_opts=None,
  20. ipam=None, external_name=None, internal=False, enable_ipv6=False,
  21. labels=None):
  22. self.client = client
  23. self.project = project
  24. self.name = name
  25. self.driver = driver
  26. self.driver_opts = driver_opts
  27. self.ipam = create_ipam_config_from_dict(ipam)
  28. self.external_name = external_name
  29. self.internal = internal
  30. self.enable_ipv6 = enable_ipv6
  31. self.labels = labels
  32. def ensure(self):
  33. if self.external_name:
  34. try:
  35. self.inspect()
  36. log.debug(
  37. 'Network {0} declared as external. No new '
  38. 'network will be created.'.format(self.name)
  39. )
  40. except NotFound:
  41. raise ConfigurationError(
  42. 'Network {name} declared as external, but could'
  43. ' not be found. Please create the network manually'
  44. ' using `{command} {name}` and try again.'.format(
  45. name=self.external_name,
  46. command='docker network create'
  47. )
  48. )
  49. return
  50. try:
  51. data = self.inspect()
  52. check_remote_network_config(data, self)
  53. except NotFound:
  54. driver_name = 'the default driver'
  55. if self.driver:
  56. driver_name = 'driver "{}"'.format(self.driver)
  57. log.info(
  58. 'Creating network "{}" with {}'
  59. .format(self.full_name, driver_name)
  60. )
  61. self.client.create_network(
  62. name=self.full_name,
  63. driver=self.driver,
  64. options=self.driver_opts,
  65. ipam=self.ipam,
  66. internal=self.internal,
  67. enable_ipv6=self.enable_ipv6,
  68. labels=self._labels,
  69. attachable=version_gte(self.client._version, '1.24') or None,
  70. )
  71. def remove(self):
  72. if self.external_name:
  73. log.info("Network %s is external, skipping", self.full_name)
  74. return
  75. log.info("Removing network {}".format(self.full_name))
  76. self.client.remove_network(self.full_name)
  77. def inspect(self):
  78. return self.client.inspect_network(self.full_name)
  79. @property
  80. def full_name(self):
  81. if self.external_name:
  82. return self.external_name
  83. return '{0}_{1}'.format(self.project, self.name)
  84. @property
  85. def _labels(self):
  86. if version_lt(self.client._version, '1.23'):
  87. return None
  88. labels = self.labels.copy() if self.labels else {}
  89. labels.update({
  90. LABEL_PROJECT: self.project,
  91. LABEL_NETWORK: self.name,
  92. })
  93. return labels
  94. def create_ipam_config_from_dict(ipam_dict):
  95. if not ipam_dict:
  96. return None
  97. return IPAMConfig(
  98. driver=ipam_dict.get('driver'),
  99. pool_configs=[
  100. IPAMPool(
  101. subnet=config.get('subnet'),
  102. iprange=config.get('ip_range'),
  103. gateway=config.get('gateway'),
  104. aux_addresses=config.get('aux_addresses'),
  105. )
  106. for config in ipam_dict.get('config', [])
  107. ],
  108. options=ipam_dict.get('options')
  109. )
  110. class NetworkConfigChangedError(ConfigurationError):
  111. def __init__(self, net_name, property_name):
  112. super(NetworkConfigChangedError, self).__init__(
  113. 'Network "{}" needs to be recreated - {} has changed'.format(
  114. net_name, property_name
  115. )
  116. )
  117. def check_remote_ipam_config(remote, local):
  118. remote_ipam = remote.get('IPAM')
  119. ipam_dict = create_ipam_config_from_dict(local.ipam)
  120. if local.ipam.get('driver') and local.ipam.get('driver') != remote_ipam.get('Driver'):
  121. raise NetworkConfigChangedError(local.full_name, 'IPAM driver')
  122. if len(ipam_dict['Config']) != 0:
  123. if len(ipam_dict['Config']) != len(remote_ipam['Config']):
  124. raise NetworkConfigChangedError(local.full_name, 'IPAM configs')
  125. remote_configs = sorted(remote_ipam['Config'], key='Subnet')
  126. local_configs = sorted(ipam_dict['Config'], key='Subnet')
  127. while local_configs:
  128. lc = local_configs.pop()
  129. rc = remote_configs.pop()
  130. if lc.get('Subnet') != rc.get('Subnet'):
  131. raise NetworkConfigChangedError(local.full_name, 'IPAM config subnet')
  132. if lc.get('Gateway') is not None and lc.get('Gateway') != rc.get('Gateway'):
  133. raise NetworkConfigChangedError(local.full_name, 'IPAM config gateway')
  134. if lc.get('IPRange') != rc.get('IPRange'):
  135. raise NetworkConfigChangedError(local.full_name, 'IPAM config ip_range')
  136. if sorted(lc.get('AuxiliaryAddresses')) != sorted(rc.get('AuxiliaryAddresses')):
  137. raise NetworkConfigChangedError(local.full_name, 'IPAM config aux_addresses')
  138. remote_opts = remote_ipam.get('Options') or {}
  139. local_opts = local.ipam.get('options') or {}
  140. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  141. if remote_opts.get(k) != local_opts.get(k):
  142. raise NetworkConfigChangedError(local.full_name, 'IPAM option "{}"'.format(k))
  143. def check_remote_network_config(remote, local):
  144. if local.driver and remote.get('Driver') != local.driver:
  145. raise NetworkConfigChangedError(local.full_name, 'driver')
  146. local_opts = local.driver_opts or {}
  147. remote_opts = remote.get('Options') or {}
  148. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  149. if k in OPTS_EXCEPTIONS:
  150. continue
  151. if remote_opts.get(k) != local_opts.get(k):
  152. raise NetworkConfigChangedError(local.full_name, 'option "{}"'.format(k))
  153. if local.ipam is not None:
  154. check_remote_ipam_config(remote, local)
  155. if local.internal is not None and local.internal != remote.get('Internal', False):
  156. raise NetworkConfigChangedError(local.full_name, 'internal')
  157. if local.enable_ipv6 is not None and local.enable_ipv6 != remote.get('EnableIPv6', False):
  158. raise NetworkConfigChangedError(local.full_name, 'enable_ipv6')
  159. local_labels = local.labels or {}
  160. remote_labels = remote.get('Labels', {})
  161. for k in set.union(set(remote_labels.keys()), set(local_labels.keys())):
  162. if k.startswith('com.docker.'): # We are only interested in user-specified labels
  163. continue
  164. if remote_labels.get(k) != local_labels.get(k):
  165. log.warn(
  166. 'Network {}: label "{}" has changed. It may need to be'
  167. ' recreated.'.format(local.full_name, k)
  168. )
  169. def build_networks(name, config_data, client):
  170. network_config = config_data.networks or {}
  171. networks = {
  172. network_name: Network(
  173. client=client, project=name, name=network_name,
  174. driver=data.get('driver'),
  175. driver_opts=data.get('driver_opts'),
  176. ipam=data.get('ipam'),
  177. external_name=data.get('external_name'),
  178. internal=data.get('internal'),
  179. enable_ipv6=data.get('enable_ipv6'),
  180. labels=data.get('labels'),
  181. )
  182. for network_name, data in network_config.items()
  183. }
  184. if 'default' not in networks:
  185. networks['default'] = Network(client, name, 'default')
  186. return networks
  187. class ProjectNetworks(object):
  188. def __init__(self, networks, use_networking):
  189. self.networks = networks or {}
  190. self.use_networking = use_networking
  191. @classmethod
  192. def from_services(cls, services, networks, use_networking):
  193. service_networks = {
  194. network: networks.get(network)
  195. for service in services
  196. for network in get_network_names_for_service(service)
  197. }
  198. unused = set(networks) - set(service_networks) - {'default'}
  199. if unused:
  200. log.warn(
  201. "Some networks were defined but are not used by any service: "
  202. "{}".format(", ".join(unused)))
  203. return cls(service_networks, use_networking)
  204. def remove(self):
  205. if not self.use_networking:
  206. return
  207. for network in self.networks.values():
  208. try:
  209. network.remove()
  210. except NotFound:
  211. log.warn("Network %s not found.", network.full_name)
  212. def initialize(self):
  213. if not self.use_networking:
  214. return
  215. for network in self.networks.values():
  216. network.ensure()
  217. def get_network_defs_for_service(service_dict):
  218. if 'network_mode' in service_dict:
  219. return {}
  220. networks = service_dict.get('networks', {'default': None})
  221. return dict(
  222. (net, (config or {}))
  223. for net, config in networks.items()
  224. )
  225. def get_network_names_for_service(service_dict):
  226. return get_network_defs_for_service(service_dict).keys()
  227. def get_networks(service_dict, network_definitions):
  228. networks = {}
  229. for name, netdef in get_network_defs_for_service(service_dict).items():
  230. network = network_definitions.get(name)
  231. if network:
  232. networks[network.full_name] = netdef
  233. else:
  234. raise ConfigurationError(
  235. 'Service "{}" uses an undefined network "{}"'
  236. .format(service_dict['name'], name))
  237. return networks