Files
my-rook-config/pkg/operator/ceph/object/objectstore.go
T
Blaine Gardner 086fa8231c rgw: configure entirely in operator
Configure the Ceph rgw daemon completely from the operator a la the
recent changes to the Ceph mon, mgr, and mds operators.

Create the rgw deployment or daemonset first, and then create the
keyring secret for the object store with its owner reference as the
corresponding deployment or daemonset. When the replication controller
is deleted, the secret is also deleted.

The RGW's mime.types file is now stored in a configmap with a different
file created for each object store. This is primarily just a means to
get the mime.types file into the rgw pod, but the added benefit is that
the administrator can modify the configmap, which could reduce
susceptibility to file type execution vulnerabilities (worst case).

Signed-off-by: Blaine Gardner <blaine.gardner@suse.com>
2019-03-07 08:02:42 -07:00

298 lines
8.9 KiB
Go

/*
Copyright 2016 The Rook Authors. All rights reserved.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package object
import (
"encoding/json"
"fmt"
"strings"
ceph "github.com/rook/rook/pkg/daemon/ceph/client"
"github.com/rook/rook/pkg/daemon/ceph/model"
)
const (
rootPool = ".rgw.root"
// AppName is the name Rook uses for the object store's application
AppName = "rook-ceph-rgw"
)
var (
metadataPools = []string{
// .rgw.root (rootPool) is appended to this slice where needed
"rgw.control",
"rgw.meta",
"rgw.log",
"rgw.buckets.index",
}
dataPools = []string{
"rgw.buckets.data",
}
)
type idType struct {
ID string `json:"id"`
}
type realmType struct {
Realms []string `json:"realms"`
}
func createObjectStore(context *Context, metadataSpec, dataSpec model.Pool, serviceIP string, port int32) error {
err := createPools(context, metadataSpec, dataSpec)
if err != nil {
return fmt.Errorf("failed to create object pools. %+v", err)
}
err = createRealm(context, serviceIP, port)
if err != nil {
return fmt.Errorf("failed to create object store realm. %+v", err)
}
return nil
}
func deleteRealmAndPools(context *Context) error {
stores, err := getObjectStores(context)
if err != nil {
return fmt.Errorf("failed to detect object stores during deletion. %+v", err)
}
logger.Infof("Found stores %v when deleting store %s", stores, context.Name)
err = deleteRealm(context)
if err != nil {
return fmt.Errorf("failed to delete realm. %+v", err)
}
lastStore := false
if len(stores) == 1 && stores[0] == context.Name {
lastStore = true
}
err = deletePools(context, lastStore)
if err != nil {
return fmt.Errorf("failed to delete object store pools. %+v", err)
}
return nil
}
func createRealm(context *Context, serviceIP string, port int32) error {
zoneArg := fmt.Sprintf("--rgw-zone=%s", context.Name)
endpointArg := fmt.Sprintf("--endpoints=%s:%d", serviceIP, port)
updatePeriod := false
// The first realm must be marked as the default
defaultArg := ""
stores, err := getObjectStores(context)
if err != nil {
return fmt.Errorf("failed to get object stores. %+v", err)
}
if len(stores) == 0 {
defaultArg = "--default"
}
// create the realm if it doesn't exist yet
output, err := runAdminCommand(context, "realm", "get")
if err != nil {
updatePeriod = true
output, err = runAdminCommand(context, "realm", "create", defaultArg)
if err != nil {
return fmt.Errorf("failed to create rgw realm %s. %+v", context.Name, err)
}
}
realmID, err := decodeID(output)
if err != nil {
return fmt.Errorf("failed to parse realm id. %+v", err)
}
// create the zonegroup if it doesn't exist yet
output, err = runAdminCommand(context, "zonegroup", "get")
if err != nil {
updatePeriod = true
output, err = runAdminCommand(context, "zonegroup", "create", "--master", endpointArg, defaultArg)
if err != nil {
return fmt.Errorf("failed to create rgw zonegroup for %s. %+v", context.Name, err)
}
}
zoneGroupID, err := decodeID(output)
if err != nil {
return fmt.Errorf("failed to parse zone group id. %+v", err)
}
// create the zone if it doesn't exist yet
output, err = runAdminCommand(context, "zone", "get", zoneArg)
if err != nil {
updatePeriod = true
output, err = runAdminCommand(context, "zone", "create", "--master", endpointArg, zoneArg, defaultArg)
if err != nil {
return fmt.Errorf("failed to create rgw zonegroup for %s. %+v", context.Name, err)
}
}
zoneID, err := decodeID(output)
if err != nil {
return fmt.Errorf("failed to parse zone id. %+v", err)
}
if updatePeriod {
// the period will help notify other zones of changes if there are multi-zones
_, err := runAdminCommandNoRealm(context, "period", "update", "--commit")
if err != nil {
return fmt.Errorf("failed to update period. %+v", err)
}
}
logger.Infof("RGW: realm=%s, zonegroup=%s, zone=%s", realmID, zoneGroupID, zoneID)
return nil
}
func deleteRealm(context *Context) error {
// <name>
_, err := runAdminCommand(context, "realm", "delete", "--rgw-realm", context.Name)
if err != nil {
logger.Warningf("failed to delete rgw realm %s. %+v", context.Name, err)
}
_, err = runAdminCommand(context, "zonegroup", "delete", "--rgw-zonegroup", context.Name)
if err != nil {
logger.Warningf("failed to delete rgw zonegroup %s. %+v", context.Name, err)
}
_, err = runAdminCommand(context, "zone", "delete", "--rgw-zone", context.Name)
if err != nil {
logger.Warningf("failed to delete rgw zone %s. %+v", context.Name, err)
}
return nil
}
func decodeID(data string) (string, error) {
var id idType
err := json.Unmarshal([]byte(data), &id)
if err != nil {
return "", fmt.Errorf("Failed to unmarshal json: %+v", err)
}
return id.ID, err
}
func getObjectStores(context *Context) ([]string, error) {
output, err := runAdminCommandNoRealm(context, "realm", "list")
if err != nil {
if strings.Index(err.Error(), "exit status 2") != 0 {
return []string{}, nil
}
return nil, err
}
var r realmType
err = json.Unmarshal([]byte(output), &r)
if err != nil {
return nil, fmt.Errorf("Failed to unmarshal realms: %+v", err)
}
return r.Realms, nil
}
func deletePools(context *Context, lastStore bool) error {
pools := append(metadataPools, dataPools...)
if lastStore {
pools = append(pools, rootPool)
}
for _, pool := range pools {
name := poolName(context.Name, pool)
if err := ceph.DeletePool(context.context, context.ClusterName, name); err != nil {
logger.Warningf("failed to delete pool %s. %+v", name, err)
}
}
// Delete erasure code profile if any
erasureCodes, err := ceph.ListErasureCodeProfiles(context.context, context.ClusterName)
if err != nil {
return fmt.Errorf("failed to list erasure code profiles for cluster %s: %+v", context.ClusterName, err)
}
// cleans up the EC profile for the data pool only. Metadata pools don't support EC (only replication is supported).
objectStoreErasureCode := ceph.GetErasureCodeProfileForPool(context.Name)
for i := range erasureCodes {
if erasureCodes[i] == objectStoreErasureCode {
if err := ceph.DeleteErasureCodeProfile(context.context, context.ClusterName, objectStoreErasureCode); err != nil {
return fmt.Errorf("failed to delete erasure code profile %s for object store %s: %+v", objectStoreErasureCode, context.Name, err)
}
break
}
}
return nil
}
func createPools(context *Context, metadataSpec, dataSpec model.Pool) error {
if err := createSimilarPools(context, append(metadataPools, rootPool), metadataSpec); err != nil {
return fmt.Errorf("failed to create metadata pools. %+v", err)
}
if err := createSimilarPools(context, dataPools, dataSpec); err != nil {
return fmt.Errorf("failed to create data pool. %+v", err)
}
return nil
}
func createSimilarPools(context *Context, pools []string, poolSpec model.Pool) error {
poolSpec.Name = context.Name
cephConfig := ceph.ModelPoolToCephPool(poolSpec)
isECPool := cephConfig.ErasureCodeProfile != ""
if isECPool {
// create a new erasure code profile for the new pool
if err := ceph.CreateErasureCodeProfile(context.context, context.ClusterName, poolSpec.ErasureCodedConfig, cephConfig.ErasureCodeProfile,
poolSpec.FailureDomain, poolSpec.CrushRoot); err != nil {
return fmt.Errorf("failed to create erasure code profile for object store %s: %+v", context.Name, err)
}
}
for _, pool := range pools {
// create the pool if it doesn't exist yet
name := poolName(context.Name, pool)
if _, err := ceph.GetPoolDetails(context.context, context.ClusterName, name); err != nil {
cephConfig.Name = name
// If the ceph config has an EC profile, an EC pool must be created. Otherwise, it's necessary
// to create a replicated pool.
var err error
if isECPool {
// An EC pool backing an object store does not need to enable EC overwrites, so the pool is
// created with that property disabled to avoid unnecessary performance impact.
err = ceph.CreateECPoolForApp(context.context, context.ClusterName, cephConfig, AppName, false /* enableECOverwrite */, poolSpec.ErasureCodedConfig)
} else {
err = ceph.CreateReplicatedPoolForApp(context.context, context.ClusterName, cephConfig, AppName)
}
if err != nil {
return fmt.Errorf("failed to create pool %s for object store %s", name, context.Name)
}
}
}
return nil
}
func poolName(storeName, poolName string) string {
if strings.HasPrefix(poolName, ".") {
return poolName
}
// the name of the pool is <instance>.<name>, except for the pool ".rgw.root" that spans object stores
return fmt.Sprintf("%s.%s", storeName, poolName)
}