network.py 9.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280
  1. from __future__ import absolute_import
  2. from __future__ import unicode_literals
  3. import logging
  4. from docker.errors import NotFound
  5. from docker.types import IPAMConfig
  6. from docker.types import IPAMPool
  7. from docker.utils import version_gte
  8. from docker.utils import version_lt
  9. from .config import ConfigurationError
  10. from .const import LABEL_NETWORK
  11. from .const import LABEL_PROJECT
  12. log = logging.getLogger(__name__)
  13. OPTS_EXCEPTIONS = [
  14. 'com.docker.network.driver.overlay.vxlanid_list',
  15. ]
  16. class Network(object):
  17. def __init__(self, client, project, name, driver=None, driver_opts=None,
  18. ipam=None, external_name=None, internal=False, enable_ipv6=False,
  19. labels=None):
  20. self.client = client
  21. self.project = project
  22. self.name = name
  23. self.driver = driver
  24. self.driver_opts = driver_opts
  25. self.ipam = create_ipam_config_from_dict(ipam)
  26. self.external_name = external_name
  27. self.internal = internal
  28. self.enable_ipv6 = enable_ipv6
  29. self.labels = labels
  30. def ensure(self):
  31. if self.external_name:
  32. try:
  33. self.inspect()
  34. log.debug(
  35. 'Network {0} declared as external. No new '
  36. 'network will be created.'.format(self.name)
  37. )
  38. except NotFound:
  39. raise ConfigurationError(
  40. 'Network {name} declared as external, but could'
  41. ' not be found. Please create the network manually'
  42. ' using `{command} {name}` and try again.'.format(
  43. name=self.external_name,
  44. command='docker network create'
  45. )
  46. )
  47. return
  48. try:
  49. data = self.inspect()
  50. check_remote_network_config(data, self)
  51. except NotFound:
  52. driver_name = 'the default driver'
  53. if self.driver:
  54. driver_name = 'driver "{}"'.format(self.driver)
  55. log.info(
  56. 'Creating network "{}" with {}'
  57. .format(self.full_name, driver_name)
  58. )
  59. self.client.create_network(
  60. name=self.full_name,
  61. driver=self.driver,
  62. options=self.driver_opts,
  63. ipam=self.ipam,
  64. internal=self.internal,
  65. enable_ipv6=self.enable_ipv6,
  66. labels=self._labels,
  67. attachable=version_gte(self.client._version, '1.24') or None,
  68. )
  69. def remove(self):
  70. if self.external_name:
  71. log.info("Network %s is external, skipping", self.full_name)
  72. return
  73. log.info("Removing network {}".format(self.full_name))
  74. self.client.remove_network(self.full_name)
  75. def inspect(self):
  76. return self.client.inspect_network(self.full_name)
  77. @property
  78. def full_name(self):
  79. if self.external_name:
  80. return self.external_name
  81. return '{0}_{1}'.format(self.project, self.name)
  82. @property
  83. def _labels(self):
  84. if version_lt(self.client._version, '1.23'):
  85. return None
  86. labels = self.labels.copy() if self.labels else {}
  87. labels.update({
  88. LABEL_PROJECT: self.project,
  89. LABEL_NETWORK: self.name,
  90. })
  91. return labels
  92. def create_ipam_config_from_dict(ipam_dict):
  93. if not ipam_dict:
  94. return None
  95. return IPAMConfig(
  96. driver=ipam_dict.get('driver'),
  97. pool_configs=[
  98. IPAMPool(
  99. subnet=config.get('subnet'),
  100. iprange=config.get('ip_range'),
  101. gateway=config.get('gateway'),
  102. aux_addresses=config.get('aux_addresses'),
  103. )
  104. for config in ipam_dict.get('config', [])
  105. ],
  106. options=ipam_dict.get('options')
  107. )
  108. class NetworkConfigChangedError(ConfigurationError):
  109. def __init__(self, net_name, property_name):
  110. super(NetworkConfigChangedError, self).__init__(
  111. 'Network "{}" needs to be recreated - {} has changed'.format(
  112. net_name, property_name
  113. )
  114. )
  115. def check_remote_ipam_config(remote, local):
  116. remote_ipam = remote.get('IPAM')
  117. ipam_dict = create_ipam_config_from_dict(local.ipam)
  118. if local.ipam.get('driver') and local.ipam.get('driver') != remote_ipam.get('Driver'):
  119. raise NetworkConfigChangedError(local.full_name, 'IPAM driver')
  120. if len(ipam_dict['Config']) != 0:
  121. if len(ipam_dict['Config']) != len(remote_ipam['Config']):
  122. raise NetworkConfigChangedError(local.full_name, 'IPAM configs')
  123. remote_configs = sorted(remote_ipam['Config'], key='Subnet')
  124. local_configs = sorted(ipam_dict['Config'], key='Subnet')
  125. while local_configs:
  126. lc = local_configs.pop()
  127. rc = remote_configs.pop()
  128. if lc.get('Subnet') != rc.get('Subnet'):
  129. raise NetworkConfigChangedError(local.full_name, 'IPAM config subnet')
  130. if lc.get('Gateway') is not None and lc.get('Gateway') != rc.get('Gateway'):
  131. raise NetworkConfigChangedError(local.full_name, 'IPAM config gateway')
  132. if lc.get('IPRange') != rc.get('IPRange'):
  133. raise NetworkConfigChangedError(local.full_name, 'IPAM config ip_range')
  134. if sorted(lc.get('AuxiliaryAddresses')) != sorted(rc.get('AuxiliaryAddresses')):
  135. raise NetworkConfigChangedError(local.full_name, 'IPAM config aux_addresses')
  136. remote_opts = remote_ipam.get('Options', {})
  137. local_opts = local.ipam.get('options', {})
  138. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  139. if remote_opts.get(k) != local_opts.get(k):
  140. raise NetworkConfigChangedError(local.full_name, 'IPAM option "{}"'.format(k))
  141. def check_remote_network_config(remote, local):
  142. if local.driver and remote.get('Driver') != local.driver:
  143. raise NetworkConfigChangedError(local.full_name, 'driver')
  144. local_opts = local.driver_opts or {}
  145. remote_opts = remote.get('Options') or {}
  146. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  147. if k in OPTS_EXCEPTIONS:
  148. continue
  149. if remote_opts.get(k) != local_opts.get(k):
  150. raise NetworkConfigChangedError(local.full_name, 'option "{}"'.format(k))
  151. if local.ipam is not None:
  152. check_remote_ipam_config(remote, local)
  153. if local.internal is not None and local.internal != remote.get('Internal', False):
  154. raise NetworkConfigChangedError(local.full_name, 'internal')
  155. if local.enable_ipv6 is not None and local.enable_ipv6 != remote.get('EnableIPv6', False):
  156. raise NetworkConfigChangedError(local.full_name, 'enable_ipv6')
  157. local_labels = local.labels or {}
  158. remote_labels = remote.get('Labels', {})
  159. for k in set.union(set(remote_labels.keys()), set(local_labels.keys())):
  160. if k.startswith('com.docker.compose.'): # We are only interested in user-specified labels
  161. continue
  162. if remote_labels.get(k) != local_labels.get(k):
  163. raise NetworkConfigChangedError(local.full_name, 'label "{}"'.format(k))
  164. def build_networks(name, config_data, client):
  165. network_config = config_data.networks or {}
  166. networks = {
  167. network_name: Network(
  168. client=client, project=name, name=network_name,
  169. driver=data.get('driver'),
  170. driver_opts=data.get('driver_opts'),
  171. ipam=data.get('ipam'),
  172. external_name=data.get('external_name'),
  173. internal=data.get('internal'),
  174. enable_ipv6=data.get('enable_ipv6'),
  175. labels=data.get('labels'),
  176. )
  177. for network_name, data in network_config.items()
  178. }
  179. if 'default' not in networks:
  180. networks['default'] = Network(client, name, 'default')
  181. return networks
  182. class ProjectNetworks(object):
  183. def __init__(self, networks, use_networking):
  184. self.networks = networks or {}
  185. self.use_networking = use_networking
  186. @classmethod
  187. def from_services(cls, services, networks, use_networking):
  188. service_networks = {
  189. network: networks.get(network)
  190. for service in services
  191. for network in get_network_names_for_service(service)
  192. }
  193. unused = set(networks) - set(service_networks) - {'default'}
  194. if unused:
  195. log.warn(
  196. "Some networks were defined but are not used by any service: "
  197. "{}".format(", ".join(unused)))
  198. return cls(service_networks, use_networking)
  199. def remove(self):
  200. if not self.use_networking:
  201. return
  202. for network in self.networks.values():
  203. try:
  204. network.remove()
  205. except NotFound:
  206. log.warn("Network %s not found.", network.full_name)
  207. def initialize(self):
  208. if not self.use_networking:
  209. return
  210. for network in self.networks.values():
  211. network.ensure()
  212. def get_network_defs_for_service(service_dict):
  213. if 'network_mode' in service_dict:
  214. return {}
  215. networks = service_dict.get('networks', {'default': None})
  216. return dict(
  217. (net, (config or {}))
  218. for net, config in networks.items()
  219. )
  220. def get_network_names_for_service(service_dict):
  221. return get_network_defs_for_service(service_dict).keys()
  222. def get_networks(service_dict, network_definitions):
  223. networks = {}
  224. for name, netdef in get_network_defs_for_service(service_dict).items():
  225. network = network_definitions.get(name)
  226. if network:
  227. networks[network.full_name] = netdef
  228. else:
  229. raise ConfigurationError(
  230. 'Service "{}" uses an undefined network "{}"'
  231. .format(service_dict['name'], name))
  232. return networks