def __init__(self):
etcd_authority = os.getenv(ETCD_AUTHORITY_ENV, ETCD_AUTHORITY_DEFAULT)
if not validate_hostname_port(etcd_authority):
raise DataStoreError("Invalid %s. It must take the form "
"<address>:<port>. Value provided is '%s'" %
(ETCD_AUTHORITY_ENV, etcd_authority))
(host, port) = etcd_authority.split(":", 1)
etcd_scheme = os.getenv(ETCD_SCHEME_ENV, ETCD_SCHEME_DEFAULT)
etcd_key = os.getenv(ETCD_KEY_FILE_ENV, '')
etcd_cert = os.getenv(ETCD_CERT_FILE_ENV, '')
etcd_ca = os.getenv(ETCD_CA_CERT_FILE_ENV, '')
key_pair = (etcd_cert, etcd_key) if (etcd_cert and etcd_key) else None
if etcd_scheme == "https":
# key and certificate must be both specified or both not specified
if bool(etcd_key) != bool(etcd_cert):
raise DataStoreError("Invalid %s, %s combination. Key and "
"certificate must both be specified or "
"both be blank. Values provided: %s=%s, "
"%s=%s" % (ETCD_KEY_FILE_ENV,
ETCD_CERT_FILE_ENV,
ETCD_KEY_FILE_ENV, etcd_key,
ETCD_CERT_FILE_ENV, etcd_cert))
# Make sure etcd key and certificate are readable
if etcd_key and etcd_cert and not (os.path.isfile(etcd_key) and
os.access(etcd_key, os.R_OK) and
os.path.isfile(etcd_cert) and
os.access(etcd_cert, os.R_OK)):
raise DataStoreError("Cannot read %s and/or %s. Both must "
"be readable file paths. Values "
"provided: %s=%s, %s=%s" %
(ETCD_KEY_FILE_ENV,
ETCD_CERT_FILE_ENV,
ETCD_KEY_FILE_ENV, etcd_key,
ETCD_CERT_FILE_ENV, etcd_cert))
# Certificate Authority cert must be provided, check it's readable
if not etcd_ca or not (os.path.isfile(etcd_ca) and
os.access(etcd_ca, os.R_OK)):
raise DataStoreError("Invalid %s. Certificate Authority "
"cert is required and must be a "
"readable file path. Value provided: "
"%s" % (ETCD_CA_CERT_FILE_ENV, etcd_ca))
elif etcd_scheme != "http":
raise DataStoreError("Invalid %s. Value must be one of: \"\", "
"\"http\", \"https\". Value provided: %s" %
(ETCD_SCHEME_ENV, etcd_scheme))
# Set CA value to None if it is a None-value string
etcd_ca = None if not etcd_ca else etcd_ca
self.etcd_client = etcd.Client(host=host,
port=int(port),
protocol=etcd_scheme,
cert=key_pair,
ca_cert=etcd_ca)
def test_validate_hostname_port(self, input_string, expected_result):
"""
Test validate_hostname_port function.
This also tests validate_hostname which is invoked from
validate_hostname_port.
"""
test_result = validate_hostname_port(input_string)
# Assert expected result
self.assertEqual(expected_result, test_result)
def test_validate_hostname_port(self, input_string, expected_result):
"""
Test validate_hostname_port function.
This also tests validate_hostname which is invoked from
validate_hostname_port.
"""
test_result = validate_hostname_port(input_string)
# Assert expected result
self.assertEqual(expected_result, test_result)
import sys
import docker
import docker.errors
from pycalico.ipam import IPAMClient
from pycalico.datastore import (ETCD_AUTHORITY_ENV, ETCD_AUTHORITY_DEFAULT,
ETCD_SCHEME_ENV, ETCD_SCHEME_DEFAULT,
ETCD_KEY_FILE_ENV, ETCD_CERT_FILE_ENV,
ETCD_CA_CERT_FILE_ENV, DataStoreError)
from utils import DOCKER_VERSION
from utils import print_paragraph
from pycalico.util import validate_hostname_port
# If an ETCD_AUTHORITY is specified in the environment variables, validate
# it.
etcd_authority = os.getenv(ETCD_AUTHORITY_ENV, ETCD_AUTHORITY_DEFAULT)
if etcd_authority and not validate_hostname_port(etcd_authority):
print_paragraph("Invalid %s. It must take the form <address>:<port>. "
"Value provided is '%s'" % (ETCD_AUTHORITY_ENV,
etcd_authority))
sys.exit(1)
try:
client = IPAMClient()
except DataStoreError as e:
print_paragraph(e.message)
sys.exit(1)
DOCKER_URL = os.getenv("DOCKER_HOST", "unix://var/run/docker.sock")
docker_client = docker.Client(version=DOCKER_VERSION, base_url=DOCKER_URL)
