network.py 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289
  1. from __future__ import absolute_import
  2. from __future__ import unicode_literals
  3. import logging
  4. from docker.errors import NotFound
  5. from docker.types import IPAMConfig
  6. from docker.types import IPAMPool
  7. from docker.utils import version_gte
  8. from docker.utils import version_lt
  9. from .config import ConfigurationError
  10. from .const import LABEL_NETWORK
  11. from .const import LABEL_PROJECT
  12. log = logging.getLogger(__name__)
  13. OPTS_EXCEPTIONS = [
  14. 'com.docker.network.driver.overlay.vxlanid_list',
  15. 'com.docker.network.windowsshim.hnsid',
  16. 'com.docker.network.windowsshim.networkname'
  17. ]
  18. class Network(object):
  19. def __init__(self, client, project, name, driver=None, driver_opts=None,
  20. ipam=None, external=False, internal=False, enable_ipv6=False,
  21. labels=None, custom_name=False):
  22. self.client = client
  23. self.project = project
  24. self.name = name
  25. self.driver = driver
  26. self.driver_opts = driver_opts
  27. self.ipam = create_ipam_config_from_dict(ipam)
  28. self.external = external
  29. self.internal = internal
  30. self.enable_ipv6 = enable_ipv6
  31. self.labels = labels
  32. self.custom_name = custom_name
  33. def ensure(self):
  34. if self.external:
  35. try:
  36. self.inspect()
  37. log.debug(
  38. 'Network {0} declared as external. No new '
  39. 'network will be created.'.format(self.name)
  40. )
  41. except NotFound:
  42. raise ConfigurationError(
  43. 'Network {name} declared as external, but could'
  44. ' not be found. Please create the network manually'
  45. ' using `{command} {name}` and try again.'.format(
  46. name=self.full_name,
  47. command='docker network create'
  48. )
  49. )
  50. return
  51. try:
  52. data = self.inspect()
  53. check_remote_network_config(data, self)
  54. except NotFound:
  55. driver_name = 'the default driver'
  56. if self.driver:
  57. driver_name = 'driver "{}"'.format(self.driver)
  58. log.info(
  59. 'Creating network "{}" with {}'
  60. .format(self.full_name, driver_name)
  61. )
  62. self.client.create_network(
  63. name=self.full_name,
  64. driver=self.driver,
  65. options=self.driver_opts,
  66. ipam=self.ipam,
  67. internal=self.internal,
  68. enable_ipv6=self.enable_ipv6,
  69. labels=self._labels,
  70. attachable=version_gte(self.client._version, '1.24') or None,
  71. check_duplicate=True,
  72. )
  73. def remove(self):
  74. if self.external:
  75. log.info("Network %s is external, skipping", self.full_name)
  76. return
  77. log.info("Removing network {}".format(self.full_name))
  78. self.client.remove_network(self.full_name)
  79. def inspect(self):
  80. return self.client.inspect_network(self.full_name)
  81. @property
  82. def full_name(self):
  83. if self.custom_name:
  84. return self.name
  85. return '{0}_{1}'.format(self.project, self.name)
  86. @property
  87. def _labels(self):
  88. if version_lt(self.client._version, '1.23'):
  89. return None
  90. labels = self.labels.copy() if self.labels else {}
  91. labels.update({
  92. LABEL_PROJECT: self.project,
  93. LABEL_NETWORK: self.name,
  94. })
  95. return labels
  96. def create_ipam_config_from_dict(ipam_dict):
  97. if not ipam_dict:
  98. return None
  99. return IPAMConfig(
  100. driver=ipam_dict.get('driver') or 'default',
  101. pool_configs=[
  102. IPAMPool(
  103. subnet=config.get('subnet'),
  104. iprange=config.get('ip_range'),
  105. gateway=config.get('gateway'),
  106. aux_addresses=config.get('aux_addresses'),
  107. )
  108. for config in ipam_dict.get('config', [])
  109. ],
  110. options=ipam_dict.get('options')
  111. )
  112. class NetworkConfigChangedError(ConfigurationError):
  113. def __init__(self, net_name, property_name):
  114. super(NetworkConfigChangedError, self).__init__(
  115. 'Network "{}" needs to be recreated - {} has changed'.format(
  116. net_name, property_name
  117. )
  118. )
  119. def check_remote_ipam_config(remote, local):
  120. remote_ipam = remote.get('IPAM')
  121. ipam_dict = create_ipam_config_from_dict(local.ipam)
  122. if local.ipam.get('driver') and local.ipam.get('driver') != remote_ipam.get('Driver'):
  123. raise NetworkConfigChangedError(local.full_name, 'IPAM driver')
  124. if len(ipam_dict['Config']) != 0:
  125. if len(ipam_dict['Config']) != len(remote_ipam['Config']):
  126. raise NetworkConfigChangedError(local.full_name, 'IPAM configs')
  127. remote_configs = sorted(remote_ipam['Config'], key='Subnet')
  128. local_configs = sorted(ipam_dict['Config'], key='Subnet')
  129. while local_configs:
  130. lc = local_configs.pop()
  131. rc = remote_configs.pop()
  132. if lc.get('Subnet') != rc.get('Subnet'):
  133. raise NetworkConfigChangedError(local.full_name, 'IPAM config subnet')
  134. if lc.get('Gateway') is not None and lc.get('Gateway') != rc.get('Gateway'):
  135. raise NetworkConfigChangedError(local.full_name, 'IPAM config gateway')
  136. if lc.get('IPRange') != rc.get('IPRange'):
  137. raise NetworkConfigChangedError(local.full_name, 'IPAM config ip_range')
  138. if sorted(lc.get('AuxiliaryAddresses')) != sorted(rc.get('AuxiliaryAddresses')):
  139. raise NetworkConfigChangedError(local.full_name, 'IPAM config aux_addresses')
  140. remote_opts = remote_ipam.get('Options') or {}
  141. local_opts = local.ipam.get('options') or {}
  142. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  143. if remote_opts.get(k) != local_opts.get(k):
  144. raise NetworkConfigChangedError(local.full_name, 'IPAM option "{}"'.format(k))
  145. def check_remote_network_config(remote, local):
  146. if local.driver and remote.get('Driver') != local.driver:
  147. raise NetworkConfigChangedError(local.full_name, 'driver')
  148. local_opts = local.driver_opts or {}
  149. remote_opts = remote.get('Options') or {}
  150. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  151. if k in OPTS_EXCEPTIONS:
  152. continue
  153. if remote_opts.get(k) != local_opts.get(k):
  154. raise NetworkConfigChangedError(local.full_name, 'option "{}"'.format(k))
  155. if local.ipam is not None:
  156. check_remote_ipam_config(remote, local)
  157. if local.internal is not None and local.internal != remote.get('Internal', False):
  158. raise NetworkConfigChangedError(local.full_name, 'internal')
  159. if local.enable_ipv6 is not None and local.enable_ipv6 != remote.get('EnableIPv6', False):
  160. raise NetworkConfigChangedError(local.full_name, 'enable_ipv6')
  161. local_labels = local.labels or {}
  162. remote_labels = remote.get('Labels', {})
  163. for k in set.union(set(remote_labels.keys()), set(local_labels.keys())):
  164. if k.startswith('com.docker.'): # We are only interested in user-specified labels
  165. continue
  166. if remote_labels.get(k) != local_labels.get(k):
  167. log.warn(
  168. 'Network {}: label "{}" has changed. It may need to be'
  169. ' recreated.'.format(local.full_name, k)
  170. )
  171. def build_networks(name, config_data, client):
  172. network_config = config_data.networks or {}
  173. networks = {
  174. network_name: Network(
  175. client=client, project=name,
  176. name=data.get('name', network_name),
  177. driver=data.get('driver'),
  178. driver_opts=data.get('driver_opts'),
  179. ipam=data.get('ipam'),
  180. external=bool(data.get('external', False)),
  181. internal=data.get('internal'),
  182. enable_ipv6=data.get('enable_ipv6'),
  183. labels=data.get('labels'),
  184. custom_name=data.get('name') is not None,
  185. )
  186. for network_name, data in network_config.items()
  187. }
  188. if 'default' not in networks:
  189. networks['default'] = Network(client, name, 'default')
  190. return networks
  191. class ProjectNetworks(object):
  192. def __init__(self, networks, use_networking):
  193. self.networks = networks or {}
  194. self.use_networking = use_networking
  195. @classmethod
  196. def from_services(cls, services, networks, use_networking):
  197. service_networks = {
  198. network: networks.get(network)
  199. for service in services
  200. for network in get_network_names_for_service(service)
  201. }
  202. unused = set(networks) - set(service_networks) - {'default'}
  203. if unused:
  204. log.warn(
  205. "Some networks were defined but are not used by any service: "
  206. "{}".format(", ".join(unused)))
  207. return cls(service_networks, use_networking)
  208. def remove(self):
  209. if not self.use_networking:
  210. return
  211. for network in self.networks.values():
  212. try:
  213. network.remove()
  214. except NotFound:
  215. log.warn("Network %s not found.", network.full_name)
  216. def initialize(self):
  217. if not self.use_networking:
  218. return
  219. for network in self.networks.values():
  220. network.ensure()
  221. def get_network_defs_for_service(service_dict):
  222. if 'network_mode' in service_dict:
  223. return {}
  224. networks = service_dict.get('networks', {'default': None})
  225. return dict(
  226. (net, (config or {}))
  227. for net, config in networks.items()
  228. )
  229. def get_network_names_for_service(service_dict):
  230. return get_network_defs_for_service(service_dict).keys()
  231. def get_networks(service_dict, network_definitions):
  232. networks = {}
  233. for name, netdef in get_network_defs_for_service(service_dict).items():
  234. network = network_definitions.get(name)
  235. if network:
  236. networks[network.full_name] = netdef
  237. else:
  238. raise ConfigurationError(
  239. 'Service "{}" uses an undefined network "{}"'
  240. .format(service_dict['name'], name))
  241. return networks