1 files changed, 151 insertions, 0 deletions
diff --git a/dnsdesig/dnsdesig/dns_plugin.py b/dnsdesig/dnsdesig/dns_plugin.py
new file mode 100644
index 0000000..ee755aa
--- /dev/null
+++ b/dnsdesig/dnsdesig/dns_plugin.py
@@ -0,0 +1,151 @@
+# ============LICENSE_START====================================================
+# org.onap.ccsdk
+# =============================================================================
+# Copyright (c) 2017 AT&T Intellectual Property. All rights reserved.
+# =============================================================================
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# 
+#      http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# ============LICENSE_END======================================================
+
+import requests
+from urlparse import urlparse
+from cloudify import ctx
+from cloudify.decorators import operation
+from cloudify.exceptions import NonRecoverableError, RecoverableError
+
+def _check_status(resp, msg):
+  if resp.status_code >= 300:
+    if resp.status_code >= 500:
+      raise RecoverableError(msg)
+    else:
+      raise NonRecoverableError(msg)
+
+def _get_auth_info(openstack):
+  resp = requests.post('{0}/tokens'.format(openstack['auth_url']), json={'auth':{'tenantName':openstack['tenant_name'],'passwordCredentials':{'username':openstack['username'], 'password':openstack['password']}}})
+  _check_status(resp, 'Failed to get authorization token from OpenStack identity service')
+  respj = resp.json()['access']
+  osauth={'X-Auth-Token': respj['token']['id'] }
+  urls = {}
+  for se in respj['serviceCatalog']:
+    type = se['type']
+    for ep in se['endpoints']:
+      url = ep['publicURL']
+      reg = ep['region']
+      if not urls.has_key(reg):
+        urls[reg] = { }
+      if type not in urls[reg] or urls[reg][type] == '':
+        urls[reg][type] = url
+  if len(urls.keys()) == 1:
+    openstack['region'] = urls.keys()[0]
+  return { 'osauth': osauth, 'dns': urls[openstack['region']]['dns'] }
+
+def _dot(fqdn):
+  """
+  Append a dot to a fully qualified domain name.
+
+  DNS and Designate expect FQDNs to end with a dot, but human's conventionally don't do that.
+  """
+  return '{0}.'.format(fqdn)
+
+def _get_domain(fqdn):
+  return fqdn[(fqdn.find('.') + 1):]
+
+def _get_zone_id(fqdn, access):
+  zn = _dot(_get_domain(fqdn))
+  resp = requests.get('{0}/v2/zones'.format(access['dns']), headers=access['osauth'])
+  _check_status(resp, 'Failed to list DNS zones')
+  respj = resp.json()['zones']
+  for ae in respj:
+    if ae['name'] == zn:
+      return ae['id']
+  raise NonRecoverableError('DNS zone {0} not available for this tenant'.format(zn))
+
+def _find_recordset(fqdn, type, zid, access):
+  fqdnd = _dot(fqdn)
+  resp = requests.get('{0}/v2/zones/{1}/recordsets?limit=1000'.format(access['dns'], zid), headers=access['osauth'])
+  _check_status(resp, 'Failed to list DNS record sets')
+  respj = resp.json()['recordsets']
+  for rs in respj:
+    if rs['type'] == type and rs['name'] == fqdnd:
+      return rs
+  return None
+
+@operation
+def aneeded(**kwargs):
+  """
+  Create DNS A record, if not already present.  Expect args: ip_addresses: [ ... ]
+  """
+  try:
+    _doneed('A', kwargs['args']['ip_addresses'])
+  except NonRecoverableError as nre:
+    raise nre
+  except Exception as e:
+    raise NonRecoverableError(e)
+
+@operation
+def anotneeded(**kwargs):
+  """
+  Remove DNS A record, if present
+  """
+  _noneed('A')
+
+@operation
+def cnameneeded(**kwargs):
+  """
+  Create DNS CNAME record, if not already present.  Expect args: cname: '...'
+  """
+  try:
+    _doneed('CNAME', [ _dot(kwargs['args']['cname']) ] )
+  except NonRecoverableError as nre:
+    raise nre
+  except Exception as e:
+    raise NonRecoverableError(e)
+
+@operation
+def cnamenotneeded(**kwargs):
+  """
+  Remove DNS CNAME record, if present
+  """
+  _noneed('CNAME')
+
+def _doneed(type, records):
+  """
+  Create DNS entries, if not already present
+  """
+  access = _get_auth_info(ctx.node.properties['openstack'])
+  fqdn = ctx.node.properties['fqdn']
+  zid = _get_zone_id(fqdn, access)
+  rs = _find_recordset(fqdn, type, zid, access)
+  if not rs:
+    resp = requests.post('{0}/v2/zones/{1}/recordsets'.format(access['dns'], zid), json={ 'name': _dot(fqdn), 'type': type, 'records': records, 'ttl': ctx.node.properties['ttl'] }, headers=access['osauth'])
+    _check_status(resp, 'Failed to create DNS record set for {0}'.format(fqdn))
+  else:
+    resp = requests.put('{0}/v2/zones/{1}/recordsets/{2}'.format(access['dns'], zid, rs['id']), json={ 'records': records, 'ttl': ctx.node.properties['ttl'] }, headers=access['osauth'])
+    _check_status(resp, 'Failed to update DNS record set for {0}'.format(fqdn))
+
+
+def _noneed(type):
+  """
+  Remove DNS entries, if present
+  """
+  try:
+    fqdn = ctx.node.properties['fqdn']
+    access = _get_auth_info(ctx.node.properties['openstack'])
+    zid = _get_zone_id(fqdn, access)
+    rs = _find_recordset(fqdn, type, zid, access)
+    if rs:
+      resp = requests.delete('{0}/v2/zones/{1}/recordsets/{2}'.format(access['dns'], zid, rs['id']), headers=access['osauth'])
+      _check_status(resp, 'Failed to delete DNS record set for {0}'.format(fqdn))
+  except NonRecoverableError as nre:
+    raise nre
+  except Exception as e:
+    raise NonRecoverableError(e)