Add files via upload

agents/fence_ibm_powervs.V4.py

@@ -0,0 +1,254 @@
+#!/usr/libexec/platform-python -tt
+##!@PYTHON@ -tt
+
+import sys
+import pycurl, io, json
+import logging
+import atexit
+sys.path.append("/usr/share/fence")
+#sys.path.append("@FENCEAGENTSLIBDIR@")
+from fencing import *
+from fencing import fail, run_delay, EC_LOGIN_DENIED, EC_STATUS
+
+state = {
+         "ACTIVE": "on",
+         "SHUTOFF": "off",
+         "ERROR": "unknown"
+}
+
+def get_token(conn, options):
+
+        try:
+                command = "identity/token"
+                action = "grant_type=urn%3Aibm%3Aparams%3Aoauth%3Agrant-type%3Aapikey&apikey={}".format(options["--token"])
+                res = send_command(conn, command, "POST", action)
+        except Exception as e:
+                logging.debug("Failed: {}".format(e))
+                return "TOKEN_IS_MISSING"
+
+        if "--verbose" in options:
+                logging.debug(json.dumps(res, indent=2))
+
+        return res["access_token"]
+
+def get_list(conn, options):
+        outlets = {}
+
+        try:
+                command = "cloud-instances/{}/pvm-instances".format(options["--instance"])
+                res = send_command(conn, command)
+        except Exception as e:
+                logging.debug("Failed: {}".format(e))
+                return outlets
+        for r in res["pvmInstances"]:
+                if "--verbose" in options:
+                        logging.debug(json.dumps(r, indent=2))
+                outlets[r["pvmInstanceID"]] = (r["serverName"], state[r["status"]])
+
+        return outlets
+
+def get_power_status(conn, options):
+        try:
+                command = "cloud-instances/{}/pvm-instances/{}".format(
+                                options["--instance"], options["--plug"])
+                res = send_command(conn, command)
+                result = get_list(conn, options)[options["--plug"]][1]
+        except KeyError as e:
+                logging.debug("Failed: Unable to get status for {}".format(e))
+                fail(EC_STATUS)
+
+        return result
+
+def set_power_status(conn, options):
+        action = {
+                "on" :  '{"action" : "start"}',
+                "off" : '{"action" : "immediate-shutdown"}',
+        }[options["--action"]]
+
+        try:
+                send_command(conn, "cloud-instances/{}/pvm-instances/{}/action".format(
+                                options["--instance"], options["--plug"]), "POST", action)
+        except Exception as e:
+                logging.debug("Failed: Unable to set power to {} for {}".format(options["--action"], e))
+                fail(EC_STATUS)
+
+def connect(opt, token):
+        conn = pycurl.Curl()
+
+        ## setup correct URL
+        conn.base_url = "https://private." + opt["--region"] + ".power-iaas.cloud.ibm.com/pcloud/v1/"
+        if opt["--api-type"] == "public":
+                conn.base_url = "https://" + opt["--region"] + ".power-iaas.cloud.ibm.com/pcloud/v1/"
+
+        if opt["--verbose-level"] > 1:
+                conn.setopt(pycurl.VERBOSE, 1)
+
+        conn.setopt(pycurl.TIMEOUT, int(opt["--shell-timeout"]))
+        conn.setopt(pycurl.SSL_VERIFYPEER, 1)
+        conn.setopt(pycurl.SSL_VERIFYHOST, 2)
+
+        # set auth token for later requests
+        conn.setopt(pycurl.HTTPHEADER, [
+                "Content-Type: application/json",
+                "Authorization: Bearer {}".format(token),
+                "CRN: {}".format(opt["--crn"]),
+                "User-Agent: curl",
+        ])
+
+        return conn
+
+def auth_connect(opt):
+        conn = pycurl.Curl()
+
+        ## setup correct URL
+        conn.base_url = "https://iam.cloud.ibm.com/"
+
+        if opt["--verbose-level"] > 1:
+                conn.setopt(pycurl.VERBOSE, 1)
+
+        conn.setopt(pycurl.TIMEOUT, int(opt["--shell-timeout"]))
+        conn.setopt(pycurl.SSL_VERIFYPEER, 1)
+        conn.setopt(pycurl.SSL_VERIFYHOST, 2)
+
+        # set auth token for later requests
+        conn.setopt(pycurl.HTTPHEADER, [
+                "Content-type: application/x-www-form-urlencoded",
+                "Accept: application/json",
+                "User-Agent: curl",
+        ])
+
+        return conn
+
+def disconnect(conn):
+        conn.close()
+
+def send_command(conn, command, method="GET", action=None):
+        url = conn.base_url + command
+
+        conn.setopt(pycurl.URL, url.encode("ascii"))
+
+        web_buffer = io.BytesIO()
+
+        if method == "GET":
+                conn.setopt(pycurl.POST, 0)
+        if method == "POST":
+                conn.setopt(pycurl.POSTFIELDS, action)
+        if method == "DELETE":
+                conn.setopt(pycurl.CUSTOMREQUEST, "DELETE")
+
+        conn.setopt(pycurl.WRITEFUNCTION, web_buffer.write)
+
+        try:
+                conn.perform()
+        except Exception as e:
+                raise(e)
+
+        rc = conn.getinfo(pycurl.HTTP_CODE)
+        result = web_buffer.getvalue().decode("UTF-8")
+
+        web_buffer.close()
+
+        if rc != 200:
+                if len(result) > 0:
+                        raise Exception("{}: {}".format(rc,result))
+                else:
+                        raise Exception("Remote returned {} for request to {}".format(rc, url))
+
+        if len(result) > 0:
+                result = json.loads(result)
+
+        logging.debug("url: {}".format(url))
+        logging.debug("method: {}".format(method))
+        logging.debug("response code: {}".format(rc))
+        logging.debug("result: {}\n".format(result))
+
+        return result
+
+def define_new_opts():
+        all_opt["token"] = {
+                "getopt" : ":",
+                "longopt" : "token",
+                "help" : "--token=[token]                API Token",
+                "required" : "1",
+                "shortdesc" : "API Token",
+                "order" : 0
+        }
+        all_opt["crn"] = {
+                "getopt" : ":",
+                "longopt" : "crn",
+                "help" : "--crn=[crn]                    CRN",
+                "required" : "1",
+                "shortdesc" : "CRN",
+                "order" : 0
+        }
+        all_opt["instance"] = {
+                "getopt" : ":",
+                "longopt" : "instance",
+                "help" : "--instance=[instance]          PowerVS Instance",
+                "required" : "1",
+                "shortdesc" : "PowerVS Instance",
+                "order" : 0
+        }
+        all_opt["region"] = {
+                "getopt" : ":",
+                "longopt" : "region",
+                "help" : "--region=[region]              Region",
+                "required" : "1",
+                "shortdesc" : "Region",
+                "order" : 0
+        }
+        all_opt["api-type"] = {
+                "getopt" : ":",
+                "longopt" : "api-type",
+                "help" : "--api-type=[private|public]          API-type: 'private' (default) or 'public'",
+                "required" : "1",
+                "shortdesc" : "API-type (private|public)",
+                "order" : 0
+        }
+
+
+def main():
+        device_opt = [
+                "token",
+                "crn",
+                "instance",
+                "region",
+                "api-type",
+                "port",
+                "no_password",
+        ]
+
+        atexit.register(atexit_handler)
+        define_new_opts()
+
+        all_opt["shell_timeout"]["default"] = "15"
+        all_opt["power_timeout"]["default"] = "30"
+        all_opt["power_wait"]["default"] = "1"
+        all_opt["api-type"]["default"] = "private"
+
+        options = check_input(device_opt, process_input(device_opt))
+
+        docs = {}
+        docs["shortdesc"] = "Fence agent for IBM PowerVS"
+        docs["longdesc"] = """fence_ibm_powervs is an I/O Fencing agent which can be \
+used with IBM PowerVS to fence virtual machines."""
+        docs["vendorurl"] = "https://www.ibm.com"
+        show_docs(options, docs)
+
+        ####
+        ## Fence operations
+        ####
+        run_delay(options)
+
+        auth_conn = auth_connect(options)
+        token = get_token(auth_conn, options)
+        disconnect(auth_conn)
+        conn = connect(options, token)
+        atexit.register(disconnect, conn)
+
+        result = fence_action(conn, options, set_power_status, get_power_status, get_list)
+
+        sys.exit(result)
+
+if __name__ == "__main__":
+        main()