forked from rook/rook
Configure the Ceph rgw daemon completely from the operator a la the recent changes to the Ceph mon, mgr, and mds operators. Create the rgw deployment or daemonset first, and then create the keyring secret for the object store with its owner reference as the corresponding deployment or daemonset. When the replication controller is deleted, the secret is also deleted. The RGW's mime.types file is now stored in a configmap with a different file created for each object store. This is primarily just a means to get the mime.types file into the rgw pod, but the added benefit is that the administrator can modify the configmap, which could reduce susceptibility to file type execution vulnerabilities (worst case). Signed-off-by: Blaine Gardner <blaine.gardner@suse.com>
298 lines
8.9 KiB
Go
298 lines
8.9 KiB
Go
/*
|
|
Copyright 2016 The Rook Authors. All rights reserved.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package object
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"strings"
|
|
|
|
ceph "github.com/rook/rook/pkg/daemon/ceph/client"
|
|
"github.com/rook/rook/pkg/daemon/ceph/model"
|
|
)
|
|
|
|
const (
|
|
rootPool = ".rgw.root"
|
|
|
|
// AppName is the name Rook uses for the object store's application
|
|
AppName = "rook-ceph-rgw"
|
|
)
|
|
|
|
var (
|
|
metadataPools = []string{
|
|
// .rgw.root (rootPool) is appended to this slice where needed
|
|
"rgw.control",
|
|
"rgw.meta",
|
|
"rgw.log",
|
|
"rgw.buckets.index",
|
|
}
|
|
dataPools = []string{
|
|
"rgw.buckets.data",
|
|
}
|
|
)
|
|
|
|
type idType struct {
|
|
ID string `json:"id"`
|
|
}
|
|
|
|
type realmType struct {
|
|
Realms []string `json:"realms"`
|
|
}
|
|
|
|
func createObjectStore(context *Context, metadataSpec, dataSpec model.Pool, serviceIP string, port int32) error {
|
|
err := createPools(context, metadataSpec, dataSpec)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create object pools. %+v", err)
|
|
}
|
|
|
|
err = createRealm(context, serviceIP, port)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create object store realm. %+v", err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func deleteRealmAndPools(context *Context) error {
|
|
stores, err := getObjectStores(context)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to detect object stores during deletion. %+v", err)
|
|
}
|
|
logger.Infof("Found stores %v when deleting store %s", stores, context.Name)
|
|
|
|
err = deleteRealm(context)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to delete realm. %+v", err)
|
|
}
|
|
|
|
lastStore := false
|
|
if len(stores) == 1 && stores[0] == context.Name {
|
|
lastStore = true
|
|
}
|
|
|
|
err = deletePools(context, lastStore)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to delete object store pools. %+v", err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func createRealm(context *Context, serviceIP string, port int32) error {
|
|
zoneArg := fmt.Sprintf("--rgw-zone=%s", context.Name)
|
|
endpointArg := fmt.Sprintf("--endpoints=%s:%d", serviceIP, port)
|
|
updatePeriod := false
|
|
|
|
// The first realm must be marked as the default
|
|
defaultArg := ""
|
|
stores, err := getObjectStores(context)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to get object stores. %+v", err)
|
|
}
|
|
if len(stores) == 0 {
|
|
defaultArg = "--default"
|
|
}
|
|
|
|
// create the realm if it doesn't exist yet
|
|
output, err := runAdminCommand(context, "realm", "get")
|
|
if err != nil {
|
|
updatePeriod = true
|
|
output, err = runAdminCommand(context, "realm", "create", defaultArg)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create rgw realm %s. %+v", context.Name, err)
|
|
}
|
|
}
|
|
|
|
realmID, err := decodeID(output)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to parse realm id. %+v", err)
|
|
}
|
|
|
|
// create the zonegroup if it doesn't exist yet
|
|
output, err = runAdminCommand(context, "zonegroup", "get")
|
|
if err != nil {
|
|
updatePeriod = true
|
|
output, err = runAdminCommand(context, "zonegroup", "create", "--master", endpointArg, defaultArg)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create rgw zonegroup for %s. %+v", context.Name, err)
|
|
}
|
|
}
|
|
|
|
zoneGroupID, err := decodeID(output)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to parse zone group id. %+v", err)
|
|
}
|
|
|
|
// create the zone if it doesn't exist yet
|
|
output, err = runAdminCommand(context, "zone", "get", zoneArg)
|
|
if err != nil {
|
|
updatePeriod = true
|
|
output, err = runAdminCommand(context, "zone", "create", "--master", endpointArg, zoneArg, defaultArg)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create rgw zonegroup for %s. %+v", context.Name, err)
|
|
}
|
|
}
|
|
zoneID, err := decodeID(output)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to parse zone id. %+v", err)
|
|
}
|
|
|
|
if updatePeriod {
|
|
// the period will help notify other zones of changes if there are multi-zones
|
|
_, err := runAdminCommandNoRealm(context, "period", "update", "--commit")
|
|
if err != nil {
|
|
return fmt.Errorf("failed to update period. %+v", err)
|
|
}
|
|
}
|
|
|
|
logger.Infof("RGW: realm=%s, zonegroup=%s, zone=%s", realmID, zoneGroupID, zoneID)
|
|
return nil
|
|
}
|
|
|
|
func deleteRealm(context *Context) error {
|
|
// <name>
|
|
_, err := runAdminCommand(context, "realm", "delete", "--rgw-realm", context.Name)
|
|
if err != nil {
|
|
logger.Warningf("failed to delete rgw realm %s. %+v", context.Name, err)
|
|
}
|
|
|
|
_, err = runAdminCommand(context, "zonegroup", "delete", "--rgw-zonegroup", context.Name)
|
|
if err != nil {
|
|
logger.Warningf("failed to delete rgw zonegroup %s. %+v", context.Name, err)
|
|
}
|
|
|
|
_, err = runAdminCommand(context, "zone", "delete", "--rgw-zone", context.Name)
|
|
if err != nil {
|
|
logger.Warningf("failed to delete rgw zone %s. %+v", context.Name, err)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func decodeID(data string) (string, error) {
|
|
var id idType
|
|
err := json.Unmarshal([]byte(data), &id)
|
|
if err != nil {
|
|
return "", fmt.Errorf("Failed to unmarshal json: %+v", err)
|
|
}
|
|
|
|
return id.ID, err
|
|
}
|
|
|
|
func getObjectStores(context *Context) ([]string, error) {
|
|
output, err := runAdminCommandNoRealm(context, "realm", "list")
|
|
if err != nil {
|
|
if strings.Index(err.Error(), "exit status 2") != 0 {
|
|
return []string{}, nil
|
|
}
|
|
return nil, err
|
|
}
|
|
|
|
var r realmType
|
|
err = json.Unmarshal([]byte(output), &r)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("Failed to unmarshal realms: %+v", err)
|
|
}
|
|
|
|
return r.Realms, nil
|
|
}
|
|
|
|
func deletePools(context *Context, lastStore bool) error {
|
|
pools := append(metadataPools, dataPools...)
|
|
if lastStore {
|
|
pools = append(pools, rootPool)
|
|
}
|
|
|
|
for _, pool := range pools {
|
|
name := poolName(context.Name, pool)
|
|
if err := ceph.DeletePool(context.context, context.ClusterName, name); err != nil {
|
|
logger.Warningf("failed to delete pool %s. %+v", name, err)
|
|
}
|
|
}
|
|
|
|
// Delete erasure code profile if any
|
|
erasureCodes, err := ceph.ListErasureCodeProfiles(context.context, context.ClusterName)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to list erasure code profiles for cluster %s: %+v", context.ClusterName, err)
|
|
}
|
|
// cleans up the EC profile for the data pool only. Metadata pools don't support EC (only replication is supported).
|
|
objectStoreErasureCode := ceph.GetErasureCodeProfileForPool(context.Name)
|
|
for i := range erasureCodes {
|
|
if erasureCodes[i] == objectStoreErasureCode {
|
|
if err := ceph.DeleteErasureCodeProfile(context.context, context.ClusterName, objectStoreErasureCode); err != nil {
|
|
return fmt.Errorf("failed to delete erasure code profile %s for object store %s: %+v", objectStoreErasureCode, context.Name, err)
|
|
}
|
|
break
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func createPools(context *Context, metadataSpec, dataSpec model.Pool) error {
|
|
if err := createSimilarPools(context, append(metadataPools, rootPool), metadataSpec); err != nil {
|
|
return fmt.Errorf("failed to create metadata pools. %+v", err)
|
|
}
|
|
|
|
if err := createSimilarPools(context, dataPools, dataSpec); err != nil {
|
|
return fmt.Errorf("failed to create data pool. %+v", err)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func createSimilarPools(context *Context, pools []string, poolSpec model.Pool) error {
|
|
poolSpec.Name = context.Name
|
|
cephConfig := ceph.ModelPoolToCephPool(poolSpec)
|
|
isECPool := cephConfig.ErasureCodeProfile != ""
|
|
if isECPool {
|
|
// create a new erasure code profile for the new pool
|
|
if err := ceph.CreateErasureCodeProfile(context.context, context.ClusterName, poolSpec.ErasureCodedConfig, cephConfig.ErasureCodeProfile,
|
|
poolSpec.FailureDomain, poolSpec.CrushRoot); err != nil {
|
|
return fmt.Errorf("failed to create erasure code profile for object store %s: %+v", context.Name, err)
|
|
}
|
|
}
|
|
|
|
for _, pool := range pools {
|
|
// create the pool if it doesn't exist yet
|
|
name := poolName(context.Name, pool)
|
|
if _, err := ceph.GetPoolDetails(context.context, context.ClusterName, name); err != nil {
|
|
cephConfig.Name = name
|
|
// If the ceph config has an EC profile, an EC pool must be created. Otherwise, it's necessary
|
|
// to create a replicated pool.
|
|
var err error
|
|
if isECPool {
|
|
// An EC pool backing an object store does not need to enable EC overwrites, so the pool is
|
|
// created with that property disabled to avoid unnecessary performance impact.
|
|
err = ceph.CreateECPoolForApp(context.context, context.ClusterName, cephConfig, AppName, false /* enableECOverwrite */, poolSpec.ErasureCodedConfig)
|
|
} else {
|
|
err = ceph.CreateReplicatedPoolForApp(context.context, context.ClusterName, cephConfig, AppName)
|
|
}
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create pool %s for object store %s", name, context.Name)
|
|
}
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func poolName(storeName, poolName string) string {
|
|
if strings.HasPrefix(poolName, ".") {
|
|
return poolName
|
|
}
|
|
// the name of the pool is <instance>.<name>, except for the pool ".rgw.root" that spans object stores
|
|
return fmt.Sprintf("%s.%s", storeName, poolName)
|
|
}
|