jumpserver/apps/assets/tasks.py

# ~*~ coding: utf-8 ~*~
import json

from celery import shared_task
from django.core.cache import cache
from django.dispatch import receiver
from django.db.models.signals import post_save

from common.utils import get_object_or_none, capacity_convert, \
    sum_capacity, encrypt_password, get_logger
from common.celery import app as celery_app
from .models import SystemUser, AdminUser, Asset
from . import const
from .signals import on_app_ready


FORKS = 10
TIMEOUT = 60
logger = get_logger(__file__)
CACHE_MAX_TIME = 60*60*60


def _update_asset_info(result_raw):
    assets_updated = []
    for hostname, info in result_raw['ok'].items():
        if info:
            info = info[const.UPDATE_ASSETS_HARDWARE_TASK_NAME]['ansible_facts']
        else:
            continue

        asset = get_object_or_none(Asset, hostname=hostname)
        if not asset:
            continue

        ___vendor = info['ansible_system_vendor']
        ___model = info['ansible_product_version']
        ___sn = info['ansible_product_serial']

        for ___cpu_model in info['ansible_processor']:
            if ___cpu_model.endswith('GHz'):
                break
        else:
            ___cpu_model = 'Unknown'
        ___cpu_count = info['ansible_processor_count']
        ___cpu_cores = info['ansible_processor_cores']
        ___memory = '%s %s' % capacity_convert('{} MB'.format(info['ansible_memtotal_mb']))
        disk_info = {}
        for dev, dev_info in info['ansible_devices'].items():
            if dev_info['removable'] == '0':
                disk_info[dev] = dev_info['size']
        ___disk_total = '%s %s' % sum_capacity(disk_info.values())
        ___disk_info = json.dumps(disk_info)

        ___platform = info['ansible_system']
        ___os = info['ansible_distribution']
        ___os_version = info['ansible_distribution_version']
        ___os_arch = info['ansible_architecture']
        ___hostname_raw = info['ansible_hostname']

        for k, v in locals().items():
            if k.startswith('___'):
                setattr(asset, k.strip('_'), v)
        asset.save()
        assets_updated.append(asset)
    return assets_updated


@shared_task
def update_assets_hardware_info(assets, task_name=None):
    """
    Using ansible api to update asset hardware info
    :param assets:  asset seq
    :param task_name: task_name running
    :return: result summary ['contacted': {}, 'dark': {}]
    """
    from ops.utils import create_or_update_task
    if task_name is None:
        task_name = const.UPDATE_ASSETS_HARDWARE_TASK_NAME
    tasks = const.UPDATE_ASSETS_HARDWARE_TASKS
    hostname_list = [asset.hostname for asset in assets]
    task = create_or_update_task(
        task_name, hosts=hostname_list, tasks=tasks, pattern='all',
        options=const.TASK_OPTIONS, run_as_admin=True, created_by='System',
    )
    result = task.run()
    summary, result_raw = result.results_summary, result.results_raw
    # TOdo: may be somewhere using
    assets_updated = _update_asset_info(result_raw)
    return summary


@shared_task
def update_assets_hardware_period():
    """
    Update asset hardware period task
    :return:
    """
    task_name = const.UPDATE_ASSETS_HARDWARE_PERIOD_TASK_NAME
    if cache.get(const.UPDATE_ASSETS_HARDWARE_PERIOD_LOCK_KEY) == 1:
        msg = "Task {} is running or before long, passed this time".format(
            task_name
        )
        logger.debug(msg)
        return {}
    # Todo: set cache but not update, because we want also set it to as a
    # minimum update time too
    cache.set(const.UPDATE_ASSETS_HARDWARE_PERIOD_LOCK_KEY, 1, CACHE_MAX_TIME)
    assets = Asset.objects.filter(type__in=['Server', 'VM'])
    return update_assets_hardware_info(assets, task_name=task_name)


@shared_task
def test_admin_user_connectability(admin_user, force=False):
    """
    Test asset admin user can connect or not. Using ansible api do that
    :param admin_user:
    :param force: Force update
    :return:
    """
    from ops.utils import create_or_update_task

    task_name = const.TEST_ADMIN_USER_CONN_TASK_NAME.format(admin_user.name)
    lock_key = const.TEST_ADMIN_USER_CONN_LOCK_KEY.format(admin_user.name)

    if cache.get(lock_key, 0) == 1 and not force:
        logger.debug("Task {} is running or before along, passed this time")
        return {}

    assets = admin_user.get_related_assets()
    hosts = [asset.hostname for asset in assets]
    tasks = const.TEST_ADMIN_USER_CONN_TASKS
    task = create_or_update_task(
        task_name=task_name, hosts=hosts, tasks=tasks, pattern='all',
        options=const.TASK_OPTIONS, run_as_admin=True, created_by='System',
    )
    cache.set(lock_key, 1, CACHE_MAX_TIME)
    result = task.run()
    cache_key = const.ADMIN_USER_CONN_CACHE_KEY.format(admin_user.name)
    cache.set(cache_key, result.results_summary, CACHE_MAX_TIME)

    for i in result.results_summary.get('contacted', []):
        asset_conn_cache_key = const.ASSET_ADMIN_CONN_CACHE_KEY.format(i)
        cache.set(asset_conn_cache_key, 1, CACHE_MAX_TIME)

    for i, msg in result.results_summary.get('dark', {}).items():
        asset_conn_cache_key = const.ASSET_ADMIN_CONN_CACHE_KEY.format(i)
        cache.set(asset_conn_cache_key, 0, CACHE_MAX_TIME)
        logger.error(msg)

    return result.results_summary


@shared_task
def test_admin_user_connectability_period():
    if cache.get(const.TEST_ADMIN_USER_CONN_PERIOD_LOCK_KEY) == 1:
        msg = "{} task is running or before long, passed this time".format(
            const.TEST_ADMIN_USER_CONN_PERIOD_TASK_NAME
        )
        logger.debug(msg)
        return

    logger.debug("Task {} start".format(const.TEST_ADMIN_USER_CONN_TASK_NAME))
    cache.set(const.TEST_ADMIN_USER_CONN_PERIOD_LOCK_KEY, 1, CACHE_MAX_TIME)
    admin_users = AdminUser.objects.all()
    for admin_user in admin_users:
        test_admin_user_connectability(admin_user)


@shared_task
def test_admin_user_connectability_manual(asset, task_name=None):
    from ops.utils import create_or_update_task
    if task_name is None:
        task_name = const.TEST_ASSET_CONN_TASK_NAME
    hosts = [asset.hostname]
    tasks = const.TEST_ADMIN_USER_CONN_TASKS
    task = create_or_update_task(
        task_name, tasks=tasks, hosts=hosts, run_as_admin=True,
        created_by='System', options=const.TASK_OPTIONS, pattern='all',
    )
    result = task.run()

    if result.results_summary['dark']:
        cache.set(const.ASSET_ADMIN_CONN_CACHE_KEY.format(asset.hostname), 0, CACHE_MAX_TIME)
        return False, result.results_summary['dark']
    else:
        cache.set(const.ASSET_ADMIN_CONN_CACHE_KEY.format(asset.hostname), 1, CACHE_MAX_TIME)
        return True, ""


@shared_task
def test_system_user_connectability(system_user, force=False):
    """
    Test system cant connect his assets or not.
    :param system_user:
    :param force
    :return:
    """
    from ops.utils import create_or_update_task
    lock_key = const.TEST_SYSTEM_USER_CONN_LOCK_KEY.format(system_user.name)
    task_name = const.TEST_SYSTEM_USER_CONN_TASK_NAME.format(system_user.name)
    if cache.get(lock_key, 0) == 1 and not force:
        logger.debug("Task {} is running or before long, passed this time".format(task_name))
        return {}
    assets = system_user.get_clusters_assets()
    hosts = [asset.hostname for asset in assets]
    tasks = const.TEST_SYSTEM_USER_CONN_TASKS
    task = create_or_update_task(
        task_name, hosts=hosts, tasks=tasks, pattern='all',
        options=const.TASK_OPTIONS,
        run_as=system_user.name, created_by="System",
    )
    cache.set(lock_key, 1, CACHE_MAX_TIME)
    result = task.run()
    cache_key = const.SYSTEM_USER_CONN_CACHE_KEY.format(system_user.name)
    print("Set cache: {} {}".format(cache_key, result.results_summary))
    cache.set(cache_key, result.results_summary, CACHE_MAX_TIME)
    return result.results_summary


@shared_task
def test_system_user_connectability_period():
    lock_key = const.TEST_SYSTEM_USER_CONN_LOCK_KEY
    if cache.get(lock_key) == 1:
        logger.debug("{} task is running, passed this time".format(
            const.TEST_SYSTEM_USER_CONN_PERIOD_TASK_NAME
        ))
        return

    logger.debug("Task {} start".format(const.TEST_SYSTEM_USER_CONN_PERIOD_TASK_NAME))
    cache.set(lock_key, 1, CACHE_MAX_TIME)
    for system_user in SystemUser.objects.all():
        test_system_user_connectability(system_user)


def get_push_system_user_tasks(system_user):
    tasks = [
        {
            'name': 'Add user {}'.format(system_user.username),
            'action': {
                'module': 'user',
                'args': 'name={} shell={} state=present password={}'.format(
                    system_user.username, system_user.shell,
                    encrypt_password(system_user.password),
                ),
            }
        },
        {
            'name': 'Set {} authorized key'.format(system_user.username),
            'action': {
                'module': 'authorized_key',
                'args': "user={} state=present key='{}'".format(
                    system_user.username, system_user.public_key
                )
            }
        },
        {
            'name': 'Set {} sudo setting'.format(system_user.username),
            'action': {
                'module': 'lineinfile',
                'args': "dest=/etc/sudoers state=present regexp='^{0} ALL=' "
                        "line='{0} ALL=(ALL) NOPASSWD: {1}' "
                        "validate='visudo -cf %s'".format(
                    system_user.username,
                    system_user.sudo,
                )
            }
        }
    ]
    return tasks


@shared_task
def push_system_user(system_user, assets, task_name=None):
    from ops.utils import create_or_update_task

    if system_user.auto_push and assets:
        if task_name is None:
            task_name = 'PUSH-SYSTEM-USER-{}'.format(system_user.name)

        hosts = [asset.hostname for asset in assets]
        tasks = get_push_system_user_tasks(system_user)

        task = create_or_update_task(
            task_name=task_name, hosts=hosts, tasks=tasks, pattern='all',
            options=const.TASK_OPTIONS, run_as_admin=True, created_by='System'
        )
        result = task.run()
        for i in result.results_summary.get('contacted'):
            logger.debug("Push system user {} to {}  [OK]".format(
                system_user.name, i
            ))
        for i in result.results_summary.get('dark'):
            logger.error("Push system user {} to {}  [FAILED]".format(
                system_user.name, i
            ))
        return result.results_summary
    else:
        msg = "Task {} does'nt execute, because auto_push " \
              "is not True, or not assets".format(task_name)
        logger.debug(msg)
        return {}


@shared_task
def push_system_user_to_cluster_assets(system_user, force=False):
    lock_key = const.PUSH_SYSTEM_USER_LOCK_KEY
    task_name = const.PUSH_SYSTEM_USER_TASK_NAME.format(system_user.name)
    if cache.get(lock_key, 0) == 1 and not force:
        msg = "Task {} is running or before long, passed this time".format(
            task_name
        )
        logger.debug(msg)
        return {}

    logger.debug("Task {} start".format(task_name))
    assets = system_user.get_clusters_assets()
    summary = push_system_user(system_user, assets, task_name)
    return summary


@shared_task
def push_system_user_period():
    task_name = const.PUSH_SYSTEM_USER_PERIOD_TASK_NAME
    if cache.get(const.PUSH_SYSTEM_USER_PERIOD_LOCK_KEY) == 1:
        msg = "Task {} is running or before long, passed this time".format(
            task_name
        )
        logger.debug(msg)
        return
    logger.debug("Task {} start".format(task_name))
    cache.set(const.PUSH_SYSTEM_USER_PERIOD_LOCK_KEY, 1, timeout=CACHE_MAX_TIME)

    for system_user in SystemUser.objects.filter(auto_push=True):
        push_system_user_to_cluster_assets(system_user)


@shared_task
def push_asset_system_users(asset, system_users=None, task_name=None):
    from ops.utils import create_or_update_task
    if task_name is None:
        task_name = "PUSH-ASSET-SYSTEM-USER-{}".format(asset.hostname)

    if system_users is None:
        system_users = asset.cluster.systemuser_set.all()

    tasks = []
    for system_user in system_users:
        if system_user.auto_push:
            tasks.extend(get_push_system_user_tasks(system_user))

    hosts = [asset.hostname]

    task = create_or_update_task(
        task_name=task_name, hosts=hosts, tasks=tasks, pattern='all',
        options=const.TASK_OPTIONS, run_as_admin=True, created_by='System'
    )
    result = task.run()
    return result.results_summary


@receiver(post_save, sender=Asset, dispatch_uid="my_unique_identifier")
def update_asset_info_when_created(sender, instance=None, created=False, **kwargs):
    if instance and created:
        msg = "Receive asset {} create signal, update asset hardware info".format(
            instance
        )
        logger.debug(msg)
        task_name = "UPDATE-ASSET-HARDWARE-INFO-WHEN-CREATED"
        update_assets_hardware_info.delay([instance], task_name)


@receiver(post_save, sender=Asset, dispatch_uid="my_unique_identifier")
def update_asset_conn_info_on_created(sender, instance=None, created=False, **kwargs):
    if instance and created:
        task_name = 'TEST-ASSET-CONN-WHEN-CREATED-{}'.format(instance)
        msg = "Receive asset {} create signal, test asset connectability".format(
            instance
        )
        logger.debug(msg)
        test_admin_user_connectability_manual.delay(instance, task_name)


@receiver(post_save, sender=Asset, dispatch_uid="my_unique_identifier")
def push_system_user_on_created(sender, instance=None, created=False, **kwargs):
    if instance and created:
        task_name = 'PUSH-SYSTEM-USER-WHEN-ASSET-CREATED-{}'.format(instance)
        system_users = instance.cluster.systemuser_set.all()
        msg = "Receive asset {} create signal, push system users".format(
            instance
        )
        logger.debug(msg)
        push_asset_system_users.delay(instance, system_users, task_name=task_name)


@receiver(post_save, sender=SystemUser)
def push_system_user_on_auth_change(sender, instance=None, update_fields=None, **kwargs):
    fields_check = {'_password', '_private_key', '_public_key'}
    auth_changed = update_fields & fields_check if update_fields else None
    if instance and instance.auto_push and auth_changed:
        logger.debug("System user `{}` auth changed, push it".format(instance.name))
        task_name = "PUSH-SYSTEM-USER-ON-CREATED-{}".format(instance.name)
        push_system_user_to_cluster_assets.delay(instance, task_name)


celery_app.conf['CELERYBEAT_SCHEDULE'].update(
    {
        'update_assets_hardware_period': {
            'task': 'assets.tasks.update_assets_hardware_period',
            'schedule': 60*60*24,
            'args': (),
        },
        'test-admin-user-connectability_period': {
            'task': 'assets.tasks.test_admin_user_connectability_period',
            'schedule': 60*60,
            'args': (),
        },
        'push_system_user_period': {
            'task': 'assets.tasks.push_system_user_period',
            'schedule': 60*60,
            'args': (),
        }
    }
)