network.py 9.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273
  1. from __future__ import absolute_import
  2. from __future__ import unicode_literals
  3. import logging
  4. from docker.errors import NotFound
  5. from docker.types import IPAMConfig
  6. from docker.types import IPAMPool
  7. from docker.utils import version_gte
  8. from docker.utils import version_lt
  9. from .config import ConfigurationError
  10. from .const import LABEL_NETWORK
  11. from .const import LABEL_PROJECT
  12. log = logging.getLogger(__name__)
  13. OPTS_EXCEPTIONS = [
  14. 'com.docker.network.driver.overlay.vxlanid_list',
  15. ]
  16. class Network(object):
  17. def __init__(self, client, project, name, driver=None, driver_opts=None,
  18. ipam=None, external_name=None, internal=False, enable_ipv6=False,
  19. labels=None):
  20. self.client = client
  21. self.project = project
  22. self.name = name
  23. self.driver = driver
  24. self.driver_opts = driver_opts
  25. self.ipam = create_ipam_config_from_dict(ipam)
  26. self.external_name = external_name
  27. self.internal = internal
  28. self.enable_ipv6 = enable_ipv6
  29. self.labels = labels
  30. def ensure(self):
  31. if self.external_name:
  32. try:
  33. self.inspect()
  34. log.debug(
  35. 'Network {0} declared as external. No new '
  36. 'network will be created.'.format(self.name)
  37. )
  38. except NotFound:
  39. raise ConfigurationError(
  40. 'Network {name} declared as external, but could'
  41. ' not be found. Please create the network manually'
  42. ' using `{command} {name}` and try again.'.format(
  43. name=self.external_name,
  44. command='docker network create'
  45. )
  46. )
  47. return
  48. try:
  49. data = self.inspect()
  50. check_remote_network_config(data, self)
  51. except NotFound:
  52. driver_name = 'the default driver'
  53. if self.driver:
  54. driver_name = 'driver "{}"'.format(self.driver)
  55. log.info(
  56. 'Creating network "{}" with {}'
  57. .format(self.full_name, driver_name)
  58. )
  59. self.client.create_network(
  60. name=self.full_name,
  61. driver=self.driver,
  62. options=self.driver_opts,
  63. ipam=self.ipam,
  64. internal=self.internal,
  65. enable_ipv6=self.enable_ipv6,
  66. labels=self._labels,
  67. attachable=version_gte(self.client._version, '1.24') or None,
  68. )
  69. def remove(self):
  70. if self.external_name:
  71. log.info("Network %s is external, skipping", self.full_name)
  72. return
  73. log.info("Removing network {}".format(self.full_name))
  74. self.client.remove_network(self.full_name)
  75. def inspect(self):
  76. return self.client.inspect_network(self.full_name)
  77. @property
  78. def full_name(self):
  79. if self.external_name:
  80. return self.external_name
  81. return '{0}_{1}'.format(self.project, self.name)
  82. @property
  83. def _labels(self):
  84. if version_lt(self.client._version, '1.23'):
  85. return None
  86. labels = self.labels.copy() if self.labels else {}
  87. labels.update({
  88. LABEL_PROJECT: self.project,
  89. LABEL_NETWORK: self.name,
  90. })
  91. return labels
  92. def create_ipam_config_from_dict(ipam_dict):
  93. if not ipam_dict:
  94. return None
  95. return IPAMConfig(
  96. driver=ipam_dict.get('driver'),
  97. pool_configs=[
  98. IPAMPool(
  99. subnet=config.get('subnet'),
  100. iprange=config.get('ip_range'),
  101. gateway=config.get('gateway'),
  102. aux_addresses=config.get('aux_addresses'),
  103. )
  104. for config in ipam_dict.get('config', [])
  105. ],
  106. )
  107. class NetworkConfigChangedError(ConfigurationError):
  108. def __init__(self, net_name, property_name):
  109. super(NetworkConfigChangedError, self).__init__(
  110. 'Network "{}" needs to be recreated - {} has changed'.format(
  111. net_name, property_name
  112. )
  113. )
  114. def check_remote_ipam_config(remote, local):
  115. remote_ipam = remote.get('IPAM')
  116. ipam_dict = create_ipam_config_from_dict(local.ipam)
  117. if local.ipam.get('driver') and local.ipam.get('driver') != remote_ipam.get('Driver'):
  118. raise NetworkConfigChangedError(local.full_name, 'IPAM driver')
  119. if len(ipam_dict['Config']) != 0:
  120. if len(ipam_dict['Config']) != len(remote_ipam['Config']):
  121. raise NetworkConfigChangedError(local.full_name, 'IPAM configs')
  122. remote_configs = sorted(remote_ipam['Config'], key='Subnet')
  123. local_configs = sorted(ipam_dict['Config'], key='Subnet')
  124. while local_configs:
  125. lc = local_configs.pop()
  126. rc = remote_configs.pop()
  127. if lc.get('Subnet') != rc.get('Subnet'):
  128. raise NetworkConfigChangedError(local.full_name, 'IPAM config subnet')
  129. if lc.get('Gateway') is not None and lc.get('Gateway') != rc.get('Gateway'):
  130. raise NetworkConfigChangedError(local.full_name, 'IPAM config gateway')
  131. if lc.get('IPRange') != rc.get('IPRange'):
  132. raise NetworkConfigChangedError(local.full_name, 'IPAM config ip_range')
  133. if sorted(lc.get('AuxiliaryAddresses')) != sorted(rc.get('AuxiliaryAddresses')):
  134. raise NetworkConfigChangedError(local.full_name, 'IPAM config aux_addresses')
  135. def check_remote_network_config(remote, local):
  136. if local.driver and remote.get('Driver') != local.driver:
  137. raise NetworkConfigChangedError(local.full_name, 'driver')
  138. local_opts = local.driver_opts or {}
  139. remote_opts = remote.get('Options') or {}
  140. for k in set.union(set(remote_opts.keys()), set(local_opts.keys())):
  141. if k in OPTS_EXCEPTIONS:
  142. continue
  143. if remote_opts.get(k) != local_opts.get(k):
  144. raise NetworkConfigChangedError(local.full_name, 'option "{}"'.format(k))
  145. if local.ipam is not None:
  146. check_remote_ipam_config(remote, local)
  147. if local.internal is not None and local.internal != remote.get('Internal', False):
  148. raise NetworkConfigChangedError(local.full_name, 'internal')
  149. if local.enable_ipv6 is not None and local.enable_ipv6 != remote.get('EnableIPv6', False):
  150. raise NetworkConfigChangedError(local.full_name, 'enable_ipv6')
  151. local_labels = local.labels or {}
  152. remote_labels = remote.get('Labels', {})
  153. for k in set.union(set(remote_labels.keys()), set(local_labels.keys())):
  154. if k.startswith('com.docker.compose.'): # We are only interested in user-specified labels
  155. continue
  156. if remote_labels.get(k) != local_labels.get(k):
  157. raise NetworkConfigChangedError(local.full_name, 'label "{}"'.format(k))
  158. def build_networks(name, config_data, client):
  159. network_config = config_data.networks or {}
  160. networks = {
  161. network_name: Network(
  162. client=client, project=name, name=network_name,
  163. driver=data.get('driver'),
  164. driver_opts=data.get('driver_opts'),
  165. ipam=data.get('ipam'),
  166. external_name=data.get('external_name'),
  167. internal=data.get('internal'),
  168. enable_ipv6=data.get('enable_ipv6'),
  169. labels=data.get('labels'),
  170. )
  171. for network_name, data in network_config.items()
  172. }
  173. if 'default' not in networks:
  174. networks['default'] = Network(client, name, 'default')
  175. return networks
  176. class ProjectNetworks(object):
  177. def __init__(self, networks, use_networking):
  178. self.networks = networks or {}
  179. self.use_networking = use_networking
  180. @classmethod
  181. def from_services(cls, services, networks, use_networking):
  182. service_networks = {
  183. network: networks.get(network)
  184. for service in services
  185. for network in get_network_names_for_service(service)
  186. }
  187. unused = set(networks) - set(service_networks) - {'default'}
  188. if unused:
  189. log.warn(
  190. "Some networks were defined but are not used by any service: "
  191. "{}".format(", ".join(unused)))
  192. return cls(service_networks, use_networking)
  193. def remove(self):
  194. if not self.use_networking:
  195. return
  196. for network in self.networks.values():
  197. try:
  198. network.remove()
  199. except NotFound:
  200. log.warn("Network %s not found.", network.full_name)
  201. def initialize(self):
  202. if not self.use_networking:
  203. return
  204. for network in self.networks.values():
  205. network.ensure()
  206. def get_network_defs_for_service(service_dict):
  207. if 'network_mode' in service_dict:
  208. return {}
  209. networks = service_dict.get('networks', {'default': None})
  210. return dict(
  211. (net, (config or {}))
  212. for net, config in networks.items()
  213. )
  214. def get_network_names_for_service(service_dict):
  215. return get_network_defs_for_service(service_dict).keys()
  216. def get_networks(service_dict, network_definitions):
  217. networks = {}
  218. for name, netdef in get_network_defs_for_service(service_dict).items():
  219. network = network_definitions.get(name)
  220. if network:
  221. networks[network.full_name] = netdef
  222. else:
  223. raise ConfigurationError(
  224. 'Service "{}" uses an undefined network "{}"'
  225. .format(service_dict['name'], name))
  226. return networks