network.py 9.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286
  1. from __future__ import absolute_import
  2. from __future__ import unicode_literals
  3. import logging
  4. from docker.errors import NotFound
  5. from docker.types import IPAMConfig
  6. from docker.types import IPAMPool
  7. from docker.utils import version_gte
  8. from docker.utils import version_lt
  9. from .config import ConfigurationError
  10. from .const import LABEL_NETWORK
  11. from .const import LABEL_PROJECT
  12. log = logging.getLogger(__name__)
  13. OPTS_EXCEPTIONS = [
  14. 'com.docker.network.driver.overlay.vxlanid_list',
  15. 'com.docker.network.windowsshim.hnsid',
  16. 'com.docker.network.windowsshim.networkname'
  17. ]
  18. class Network(object):
  19. def __init__(self, client, project, name, driver=None, driver_opts=None,
  20. ipam=None, external_name=None, internal=False, enable_ipv6=False,
  21. labels=None):
  22. self.client = client
  23. self.project = project
  24. self.name = name
  25. self.driver = driver
  26. self.driver_opts = driver_opts
  27. self.ipam = create_ipam_config_from_dict(ipam)
  28. self.external_name = external_name
  29. self.internal = internal
  30. self.enable_ipv6 = enable_ipv6
  31. self.labels = labels
  32. def ensure(self):
  33. if self.external_name:
  34. try:
  35. self.inspect()
  36. log.debug(
  37. 'Network {0} declared as external. No new '
  38. 'network will be created.'.format(self.name)
  39. )
  40. except NotFound:
  41. raise ConfigurationError(
  42. 'Network {name} declared as external, but could'
  43. ' not be found. Please create the network manually'
  44. ' using `{command} {name}` and try again.'.format(
  45. name=self.external_name,
  46. command='docker network create'
  47. )
  48. )
  49. return
  50. try:
  51. data = self.inspect()
  52. check_remote_network_config(data, self)
  53. except NotFound:
  54. driver_name = 'the default driver'
  55. if self.driver:
  56. driver_name = 'driver "{}"'.format(self.driver)
  57. log.info(
  58. 'Creating network "{}" with {}'
  59. .format(self.full_name, driver_name)
  60. )
  61. self.client.create_network(
  62. name=self.full_name,
  63. driver=self.driver,
  64. options=self.driver_opts,
  65. ipam=self.ipam,
  66. internal=self.internal,
  67. enable_ipv6=self.enable_ipv6,
  68. labels=self._labels,
  69. attachable=version_gte(self.client._version, '1.24') or None,
  70. check_duplicate=True,
  71. )
  72. def remove(self):
  73. if self.external_name:
  74. log.info("Network %s is external, skipping", self.full_name)
  75. return
  76. log.info("Removing network {}".format(self.full_name))
  77. self.client.remove_network(self.full_name)
  78. def inspect(self):
  79. return self.client.inspect_network(self.full_name)
  80. @property
  81. def full_name(self):
  82. if self.external_name:
  83. return self.external_name
  84. return '{0}_{1}'.format(self.project, self.name)
  85. @property
  86. def _labels(self):
  87. if version_lt(self.client._version, '1.23'):
  88. return None
  89. labels = self.labels.copy() if self.labels else {}
  90. labels.update({
  91. LABEL_PROJECT: self.project,
  92. LABEL_NETWORK: self.name,
  93. })
  94. return labels
  95. def create_ipam_config_from_dict(ipam_dict):
  96. if not ipam_dict:
  97. return None
  98. return IPAMConfig(
  99. driver=ipam_dict.get('driver'),
  100. pool_configs=[
  101. IPAMPool(
  102. subnet=config.get('subnet'),
  103. iprange=config.get('ip_range'),
  104. gateway=config.get('gateway'),
  105. aux_addresses=config.get('aux_addresses'),
  106. )
  107. for config in ipam_dict.get('config', [])
  108. ],
  109. options=ipam_dict.get('options')
  110. )
  111. class NetworkConfigChangedError(ConfigurationError):
  112. def __init__(self, net_name, property_name):
  113. super(NetworkConfigChangedError, self).__init__(
  114. 'Network "{}" needs to be recreated - {} has changed'.format(
  115. net_name, property_name
  116. )
  117. )
  118. def check_remote_ipam_config(remote, local):
  119. remote_ipam = remote.get('IPAM')
  120. ipam_dict = create_ipam_config_from_dict(local.ipam)
  121. if local.ipam.get('driver') and local.ipam.get('driver') != remote_ipam.get('Driver'):
  122. raise NetworkConfigChangedError(local.full_name, 'IPAM driver')
  123. if len(ipam_dict['Config']) != 0:
  124. if len(ipam_dict['Config']) != len(remote_ipam['Config']):
  125. raise NetworkConfigChangedError(local.full_name, 'IPAM configs')
  126. remote_configs = sorted(remote_ipam['Config'], key='Subnet')
  127. local_configs = sorted(ipam_dict['Config'], key='Subnet')
  128. while local_configs:
  129. lc = local_configs.pop()
  130. rc = remote_configs.pop()
  131. if lc.get('Subnet') != rc.get('Subnet'):
  132. raise NetworkConfigChangedError(local.full_name, 'IPAM config subnet')
  133. if lc.get('Gateway') is not None and lc.get('Gateway') != rc.get('Gateway'):
  134. raise NetworkConfigChangedError(local.full_name, 'IPAM config gateway')
  135. if lc.get('IPRange') != rc.get('IPRange'):
  136. raise NetworkConfigChangedError(local.full_name, 'IPAM config ip_range')
  137. if sorted(lc.get('AuxiliaryAddresses')) != sorted(rc.get('AuxiliaryAddresses')):
  138. raise NetworkConfigChangedError(local.full_name, 'IPAM config aux_addresses')
  139. remote_opts = remote_ipam.get('Options') or {}
  140. local_opts = local.ipam.get('options') or {}
  141. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  142. if remote_opts.get(k) != local_opts.get(k):
  143. raise NetworkConfigChangedError(local.full_name, 'IPAM option "{}"'.format(k))
  144. def check_remote_network_config(remote, local):
  145. if local.driver and remote.get('Driver') != local.driver:
  146. raise NetworkConfigChangedError(local.full_name, 'driver')
  147. local_opts = local.driver_opts or {}
  148. remote_opts = remote.get('Options') or {}
  149. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  150. if k in OPTS_EXCEPTIONS:
  151. continue
  152. if remote_opts.get(k) != local_opts.get(k):
  153. raise NetworkConfigChangedError(local.full_name, 'option "{}"'.format(k))
  154. if local.ipam is not None:
  155. check_remote_ipam_config(remote, local)
  156. if local.internal is not None and local.internal != remote.get('Internal', False):
  157. raise NetworkConfigChangedError(local.full_name, 'internal')
  158. if local.enable_ipv6 is not None and local.enable_ipv6 != remote.get('EnableIPv6', False):
  159. raise NetworkConfigChangedError(local.full_name, 'enable_ipv6')
  160. local_labels = local.labels or {}
  161. remote_labels = remote.get('Labels', {})
  162. for k in set.union(set(remote_labels.keys()), set(local_labels.keys())):
  163. if k.startswith('com.docker.'): # We are only interested in user-specified labels
  164. continue
  165. if remote_labels.get(k) != local_labels.get(k):
  166. log.warn(
  167. 'Network {}: label "{}" has changed. It may need to be'
  168. ' recreated.'.format(local.full_name, k)
  169. )
  170. def build_networks(name, config_data, client):
  171. network_config = config_data.networks or {}
  172. networks = {
  173. network_name: Network(
  174. client=client, project=name, name=network_name,
  175. driver=data.get('driver'),
  176. driver_opts=data.get('driver_opts'),
  177. ipam=data.get('ipam'),
  178. external_name=data.get('external_name'),
  179. internal=data.get('internal'),
  180. enable_ipv6=data.get('enable_ipv6'),
  181. labels=data.get('labels'),
  182. )
  183. for network_name, data in network_config.items()
  184. }
  185. if 'default' not in networks:
  186. networks['default'] = Network(client, name, 'default')
  187. return networks
  188. class ProjectNetworks(object):
  189. def __init__(self, networks, use_networking):
  190. self.networks = networks or {}
  191. self.use_networking = use_networking
  192. @classmethod
  193. def from_services(cls, services, networks, use_networking):
  194. service_networks = {
  195. network: networks.get(network)
  196. for service in services
  197. for network in get_network_names_for_service(service)
  198. }
  199. unused = set(networks) - set(service_networks) - {'default'}
  200. if unused:
  201. log.warn(
  202. "Some networks were defined but are not used by any service: "
  203. "{}".format(", ".join(unused)))
  204. return cls(service_networks, use_networking)
  205. def remove(self):
  206. if not self.use_networking:
  207. return
  208. for network in self.networks.values():
  209. try:
  210. network.remove()
  211. except NotFound:
  212. log.warn("Network %s not found.", network.full_name)
  213. def initialize(self):
  214. if not self.use_networking:
  215. return
  216. for network in self.networks.values():
  217. network.ensure()
  218. def get_network_defs_for_service(service_dict):
  219. if 'network_mode' in service_dict:
  220. return {}
  221. networks = service_dict.get('networks', {'default': None})
  222. return dict(
  223. (net, (config or {}))
  224. for net, config in networks.items()
  225. )
  226. def get_network_names_for_service(service_dict):
  227. return get_network_defs_for_service(service_dict).keys()
  228. def get_networks(service_dict, network_definitions):
  229. networks = {}
  230. for name, netdef in get_network_defs_for_service(service_dict).items():
  231. network = network_definitions.get(name)
  232. if network:
  233. networks[network.full_name] = netdef
  234. else:
  235. raise ConfigurationError(
  236. 'Service "{}" uses an undefined network "{}"'
  237. .format(service_dict['name'], name))
  238. return networks