1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
|
require 'json/pure'
if $ruby_version < [1,9]
require 'iconv'
end
module LeapCli
module Config
#
# A class to manage all the objects in all the configuration files.
#
class Manager
##
## ATTRIBUTES
##
attr_reader :services, :tags, :nodes, :provider, :providers, :common, :secrets
attr_reader :base_services, :base_tags, :base_provider, :base_common
#
# returns the Hash of the contents of facts.json
#
def facts
@facts ||= JSON.parse(Util.read_file(:facts) || "{}")
end
#
# returns an Array of all the environments defined for this provider.
# the returned array includes nil (for the default environment)
#
def environments
@environments ||= [nil] + self.tags.collect {|name, tag| tag['environment']}.compact
end
##
## IMPORT EXPORT
##
#
# load .json configuration files
#
def load(options = {})
@provider_dir = Path.provider
# load base
@base_services = load_all_json(Path.named_path([:service_config, '*'], Path.provider_base), Config::Tag)
@base_tags = load_all_json(Path.named_path([:tag_config, '*'], Path.provider_base), Config::Tag)
@base_common = load_json(Path.named_path(:common_config, Path.provider_base), Config::Object)
@base_provider = load_json(Path.named_path(:provider_config, Path.provider_base), Config::Provider)
# load provider
provider_path = Path.named_path(:provider_config, @provider_dir)
common_path = Path.named_path(:common_config, @provider_dir)
Util::assert_files_exist!(provider_path, common_path)
@services = load_all_json(Path.named_path([:service_config, '*'], @provider_dir), Config::Tag)
@tags = load_all_json(Path.named_path([:tag_config, '*'], @provider_dir), Config::Tag)
@nodes = load_all_json(Path.named_path([:node_config, '*'], @provider_dir), Config::Node)
@common = load_json(common_path, Config::Object)
@provider = load_json(provider_path, Config::Provider)
@secrets = load_json(Path.named_path(:secrets_config, @provider_dir), Config::Secrets)
### BEGIN HACK
### remove this after it is likely that no one has any old-style secrets.json
if @secrets['webapp_secret_token']
@secrets = Config::Secrets.new
Util::log :warning, "Creating all new secrets.json (new version is scoped by environment). Make sure to do a full deploy so that new secrets take effect."
end
### END HACK
# inherit
@services.inherit_from! base_services
@tags.inherit_from! base_tags
@common.inherit_from! base_common
@provider.inherit_from! base_provider
@nodes.each do |name, node|
Util::assert! name =~ /^[0-9a-z-]+$/, "Illegal character(s) used in node name '#{name}'"
@nodes[name] = apply_inheritance(node)
end
unless options[:include_disabled]
remove_disabled_nodes
end
# load optional environment specific providers
validate_provider(@provider)
@providers = {}
environments.each do |env|
if Path.defined?(:provider_env_config)
provider_path = Path.named_path([:provider_env_config, env], @provider_dir)
providers[env] = load_json(provider_path, Config::Provider)
providers[env].inherit_from! @provider
validate_provider(providers[env])
end
end
end
#
# save compiled hiera .yaml files
#
# if a node_list is specified, only update those .yaml files.
# otherwise, update all files, destroying files that are no longer used.
#
def export_nodes(node_list=nil)
updated_hiera = []
updated_files = []
existing_hiera = nil
existing_files = nil
unless node_list
node_list = self.nodes
existing_hiera = Dir.glob(Path.named_path([:hiera, '*'], @provider_dir))
existing_files = Dir.glob(Path.named_path([:node_files_dir, '*'], @provider_dir))
end
node_list.each_node do |node|
filepath = Path.named_path([:node_files_dir, node.name], @provider_dir)
hierapath = Path.named_path([:hiera, node.name], @provider_dir)
Util::write_file!(hierapath, node.dump_yaml)
updated_files << filepath
updated_hiera << hierapath
end
if @disabled_nodes
# make disabled nodes appear as if they are still active
@disabled_nodes.each_node do |node|
updated_files << Path.named_path([:node_files_dir, node.name], @provider_dir)
updated_hiera << Path.named_path([:hiera, node.name], @provider_dir)
end
end
# remove files that are no longer needed
if existing_hiera
(existing_hiera - updated_hiera).each do |filepath|
Util::remove_file!(filepath)
end
end
if existing_files
(existing_files - updated_files).each do |filepath|
Util::remove_directory!(filepath)
end
end
end
def export_secrets(clean_unused_secrets = false)
if @secrets.any?
Util.write_file!([:secrets_config, @provider_dir], @secrets.dump_json(clean_unused_secrets) + "\n")
end
end
##
## FILTERING
##
#
# returns a node list consisting only of nodes that satisfy the filter criteria.
#
# filter: condition [condition] [condition] [+condition]
# condition: [node_name | service_name | tag_name]
#
# if conditions is prefixed with +, then it works like an AND. Otherwise, it works like an OR.
#
def filter(filters)
if filters.empty?
return nodes
end
if filters[0] =~ /^\+/
# don't let the first filter have a + prefix
filters[0] = filters[0][1..-1]
end
node_list = Config::ObjectList.new
filters.each do |filter|
if filter =~ /^\+/
keep_list = nodes_for_name(filter[1..-1])
node_list.delete_if do |name, node|
if keep_list[name]
false
else
true
end
end
else
node_list.merge!(nodes_for_name(filter))
end
end
return node_list
end
#
# same as filter(), but exits if there is no matching nodes
#
def filter!(filters)
node_list = filter(filters)
Util::assert! node_list.any?, "Could not match any nodes from '#{filters.join ' '}'"
return node_list
end
#
# returns a single Config::Object that corresponds to a Node.
#
def node(name)
@nodes[name]
end
#
# returns a single node that is disabled
#
def disabled_node(name)
@disabled_nodes[name]
end
#
# yields each node, in sorted order
#
def each_node(&block)
nodes.each_node &block
end
def reload_node(node)
@nodes[node.name] = apply_inheritance(node)
end
private
def load_all_json(pattern, object_class)
results = Config::ObjectList.new
Dir.glob(pattern).each do |filename|
obj = load_json(filename, object_class)
if obj
name = File.basename(filename).sub(/\.json$/,'')
obj['name'] ||= name
results[name] = obj
end
end
results
end
def load_json(filename, object_class)
if !File.exists?(filename)
return object_class.new(self)
end
log :loading, filename, 3
#
# Read a JSON file, strip out comments.
#
# UTF8 is the default encoding for JSON, but others are allowed:
# https://www.ietf.org/rfc/rfc4627.txt
#
buffer = StringIO.new
File.open(filename, "rb") do |f|
while (line = f.gets)
next if line =~ /^\s*\/\//
buffer << line
end
end
#
# force UTF-8
#
if $ruby_version >= [1,9]
string = buffer.string.force_encoding('utf-8')
else
string = Iconv.conv("UTF-8//IGNORE", "UTF-8", buffer.string)
end
# parse json
begin
hash = JSON.parse(string, :object_class => Hash, :array_class => Array) || {}
rescue SyntaxError, JSON::ParserError => exc
log 0, :error, 'in file "%s":' % filename
log 0, exc.to_s, :indent => 1
return nil
end
object = object_class.new(self)
object.deep_merge!(hash)
return object
end
#
# remove all the nesting from a hash.
#
# def flatten_hash(input = {}, output = {}, options = {})
# input.each do |key, value|
# key = options[:prefix].nil? ? "#{key}" : "#{options[:prefix]}#{options[:delimiter]||"_"}#{key}"
# if value.is_a? Hash
# flatten_hash(value, output, :prefix => key, :delimiter => options[:delimiter])
# else
# output[key] = value
# end
# end
# output.replace(input)
# output
# end
#
# makes a node inherit options from appropriate the common, service, and tag json files.
#
def apply_inheritance(node)
new_node = Config::Node.new(self)
name = node.name
# inherit from common
new_node.deep_merge!(@common)
# inherit from services
if node['services']
node['services'].to_a.each do |node_service|
service = @services[node_service]
if service.nil?
log 0, :error, 'in node "%s": the service "%s" does not exist.' % [node['name'], node_service]
else
new_node.deep_merge!(service)
service.node_list.add(name, new_node)
end
end
end
# inherit from tags
if node.vagrant?
node['tags'] = (node['tags'] || []).to_a + ['local']
end
if node['tags']
node['tags'].to_a.each do |node_tag|
tag = @tags[node_tag]
if tag.nil?
log 0, :error, 'in node "%s": the tag "%s" does not exist.' % [node['name'], node_tag]
else
new_node.deep_merge!(tag)
tag.node_list.add(name, new_node)
end
end
end
# inherit from node
new_node.deep_merge!(node)
return new_node
end
def remove_disabled_nodes
@disabled_nodes = Config::ObjectList.new
@nodes.each do |name, node|
unless node.enabled
log 2, :skipping, "disabled node #{name}."
@nodes.delete(name)
@disabled_nodes[name] = node
if node['services']
node['services'].to_a.each do |node_service|
@services[node_service].node_list.delete(node.name)
end
end
if node['tags']
node['tags'].to_a.each do |node_tag|
@tags[node_tag].node_list.delete(node.name)
end
end
end
end
end
#
# returns a set of nodes corresponding to a single name, where name could be a node name, service name, or tag name.
#
def nodes_for_name(name)
if node = self.nodes[name]
Config::ObjectList.new(node)
elsif service = self.services[name]
service.node_list
elsif tag = self.tags[name]
tag.node_list
else
{}
end
end
def validate_provider(provider)
# nothing yet.
end
end
end
end
|