# -*- coding: utf-8 -*- # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or # implied. # See the License for the specific language governing permissions and # limitations under the License. """ Installs and configures OpenStack Horizon """ import os import uuid from packstack.installer import basedefs from packstack.installer import exceptions from packstack.installer import utils from packstack.installer import validators from packstack.modules.documentation import update_params_usage from packstack.modules.ospluginutils import generate_ssl_cert from packstack.modules.ospluginutils import deliver_ssl_file # ------------- Horizon Packstack Plugin Initialization -------------- PLUGIN_NAME = "OS-Horizon" PLUGIN_NAME_COLORED = utils.color_text(PLUGIN_NAME, 'blue') def initConfig(controller): params = [ {"CMD_OPTION": "os-horizon-ssl", "PROMPT": "Would you like to set up Horizon communication over https", "OPTION_LIST": ["y", "n"], "VALIDATORS": [validators.validate_options], "DEFAULT_VALUE": "n", "MASK_INPUT": False, "LOOSE_VALIDATION": True, "CONF_NAME": "CONFIG_HORIZON_SSL", "USE_DEFAULT": False, "NEED_CONFIRM": False, "CONDITION": False}, {"CMD_OPTION": "os-horizon-secretkey", "PROMPT": "Horizon Secret Encryption Key", "OPTION_LIST": [], "VALIDATORS": [validators.validate_not_empty], "DEFAULT_VALUE": uuid.uuid4().hex, "MASK_INPUT": True, "LOOSE_VALIDATION": False, "CONF_NAME": "CONFIG_HORIZON_SECRET_KEY", "USE_DEFAULT": True, "NEED_CONFIRM": False, "CONDITION": False}, ] update_params_usage(basedefs.PACKSTACK_DOC, params, sectioned=False) group = {"GROUP_NAME": "OSHORIZON", "DESCRIPTION": "OpenStack Horizon Config parameters", "PRE_CONDITION": "CONFIG_HORIZON_INSTALL", "PRE_CONDITION_MATCH": "y", "POST_CONDITION": False, "POST_CONDITION_MATCH": True} controller.addGroup(group, params) params = [ {"CMD_OPTION": "os-ssl-cert", "PROMPT": ("Enter the path to a PEM encoded certificate to be used " "on the https server, leave blank if one should be " "generated, this certificate should not require " "a passphrase"), "OPTION_LIST": [], "VALIDATORS": [], "DEFAULT_VALUE": '', "MASK_INPUT": False, "LOOSE_VALIDATION": True, "CONF_NAME": "CONFIG_HORIZON_SSL_CERT", "USE_DEFAULT": False, "NEED_CONFIRM": False, "CONDITION": False, "DEPRECATES": ['CONFIG_SSL_CERT']}, {"CMD_OPTION": "os-ssl-key", "PROMPT": ("Enter the SSL keyfile corresponding to the certificate " "if one was entered"), "OPTION_LIST": [], "VALIDATORS": [], "DEFAULT_VALUE": "", "MASK_INPUT": False, "LOOSE_VALIDATION": True, "CONF_NAME": "CONFIG_HORIZON_SSL_KEY", "USE_DEFAULT": False, "NEED_CONFIRM": False, "CONDITION": False, "DEPRECATES": ['CONFIG_SSL_KEY']}, {"CMD_OPTION": "os-ssl-cachain", "PROMPT": ("Enter the CA chain file corresponding to the certificate " "if one was entered"), "OPTION_LIST": [], "VALIDATORS": [], "DEFAULT_VALUE": "", "MASK_INPUT": False, "LOOSE_VALIDATION": True, "CONF_NAME": "CONFIG_HORIZON_SSL_CACERT", "USE_DEFAULT": False, "NEED_CONFIRM": False, "CONDITION": False, "DEPRECATES": ['CONFIG_SSL_CACHAIN']}, ] update_params_usage(basedefs.PACKSTACK_DOC, params, sectioned=False) group = {"GROUP_NAME": "OSSSL", "DESCRIPTION": "SSL Config parameters", "PRE_CONDITION": "CONFIG_HORIZON_SSL", "PRE_CONDITION_MATCH": "y", "POST_CONDITION": False, "POST_CONDITION_MATCH": True} controller.addGroup(group, params) def initSequences(controller): if controller.CONF['CONFIG_HORIZON_INSTALL'] != 'y': return steps = [ {'title': 'Preparing Horizon entries', 'functions': [create_manifest]} ] controller.addSequence("Installing OpenStack Horizon", [], [], steps) # -------------------------- step functions -------------------------- def create_manifest(config, messages): horizon_host = config['CONFIG_CONTROLLER_HOST'] proto = "http" config["CONFIG_HORIZON_PORT"] = 80 sslmanifestdata = '' if config["CONFIG_HORIZON_SSL"] == 'y': config["CONFIG_HORIZON_PORT"] = 443 proto = "https" # Are we using the users cert/key files if config["CONFIG_HORIZON_SSL_CERT"]: ssl_cert_file = config["CONFIG_HORIZON_SSL_CERT"] ssl_key_file = config["CONFIG_HORIZON_SSL_KEY"] ssl_chain_file = config["CONFIG_HORIZON_SSL_CACERT"] if not os.path.exists(ssl_cert_file): raise exceptions.ParamValidationError( "The file %s doesn't exist" % ssl_cert_file) if not os.path.exists(ssl_key_file): raise exceptions.ParamValidationError( "The file %s doesn't exist" % ssl_key_file) if not os.path.exists(ssl_chain_file): raise exceptions.ParamValidationError( "The file %s doesn't exist" % ssl_chain_file) final_cert = open(ssl_cert_file, 'rt').read() final_key = open(ssl_key_file, 'rt').read() final_cacert = open(ssl_chain_file, 'rt').read() host = config['CONFIG_CONTROLLER_HOST'] deliver_ssl_file(final_cacert, ssl_chain_file, host) deliver_ssl_file(final_cert, ssl_cert_file, host) deliver_ssl_file(final_key, ssl_key_file, host) else: ssl_cert_file = config["CONFIG_HORIZON_SSL_CERT"] = ( '/etc/pki/tls/certs/ssl_dashboard.crt' ) ssl_key_file = config["CONFIG_HORIZON_SSL_KEY"] = ( '/etc/pki/tls/private/ssl_dashboard.key' ) cacert = config['CONFIG_SSL_CACERT'] config["CONFIG_HORIZON_SSL_CACERT"] = cacert ssl_host = config['CONFIG_CONTROLLER_HOST'] service = 'dashboard' generate_ssl_cert(config, ssl_host, service, ssl_key_file, ssl_cert_file) messages.append( "%sNOTE%s : A certificate was generated to be used for ssl, " "You should change the ssl certificate configured in " "/etc/httpd/conf.d/ssl.conf on %s to use a CA signed cert." % (utils.COLORS['red'], utils.COLORS['nocolor'], horizon_host)) config["CONFIG_HORIZON_NEUTRON_LB"] = False config["CONFIG_HORIZON_NEUTRON_FW"] = False config["CONFIG_HORIZON_NEUTRON_VPN"] = False if config['CONFIG_NEUTRON_INSTALL'] == 'y': if config["CONFIG_LBAAS_INSTALL"] == 'y': config["CONFIG_HORIZON_NEUTRON_LB"] = True if config["CONFIG_NEUTRON_FWAAS"] == 'y': config["CONFIG_HORIZON_NEUTRON_FW"] = True if config["CONFIG_NEUTRON_VPNAAS"] == 'y': config["CONFIG_HORIZON_NEUTRON_VPN"] = True msg = ("To access the OpenStack Dashboard browse to %s://%s/dashboard .\n" "Please, find your login credentials stored in the keystonerc_admin" " in your home directory." % (proto, config['CONFIG_CONTROLLER_HOST'])) messages.append(msg)