crowbar/crowbar-ceph

def whyrun_supported?
  true
end

action :add do
  current_resource = @current_resource
  ceph_conf = @new_resource.ceph_conf
  admin_keyring = @new_resource.admin_keyring
  filename = @current_resource.filename
  keyname = @current_resource.keyname
  caps = @new_resource.caps
  owner = @new_resource.owner
  group = @new_resource.group
  mode = @new_resource.mode
  unless @current_resource.caps_match
    converge_by("Set caps for #{@new_resource}") do
      auth_set_key(ceph_conf, admin_keyring, keyname, caps)
      current_resource.key = get_key(ceph_conf, admin_keyring, keyname)
    end
  end
  # update the key in the file
  file filename do
    content file_content
    owner owner
    group group
    mode mode
  end
end

def load_current_resource
  node_name = get_ceph_client_name(node)
  @current_resource = Chef::Resource::CephClient.new(@new_resource.name)
  @current_resource.ceph_conf(@new_resource.ceph_conf)
  @current_resource.admin_keyring(@new_resource.admin_keyring)
  @current_resource.name(@new_resource.name)
  @current_resource.as_keyring(@new_resource.as_keyring)
  @current_resource.keyname(@new_resource.keyname || "client.#{current_resource.name}.#{node_name}")
  @current_resource.caps(get_caps(@current_resource.ceph_conf, @current_resource.admin_keyring, @current_resource.keyname))
  default_filename = "/etc/ceph/ceph.client.#{@new_resource.name}.#{node_name}." \
                                            "#{@new_resource.as_keyring ? 'keyring' : 'secret'}"
  @current_resource.filename(@new_resource.filename || default_filename)
  @current_resource.key = get_key(@current_resource.ceph_conf, @current_resource.admin_keyring, @current_resource.keyname)
  @current_resource.caps_match = true if @current_resource.caps == @new_resource.caps
end

def file_content
  @current_resource.as_keyring ? "[#{@current_resource.keyname}]\n\tkey = #{@current_resource.key}\n" : @current_resource.key
end

def get_key(ceph_conf, admin_keyring, keyname)
  cmd = "ceph -k #{admin_keyring} -c #{ceph_conf} auth print_key #{keyname}"
  Mixlib::ShellOut.new(cmd).run_command.stdout
end

def get_caps(ceph_conf, admin_keyring, keyname)
  caps = {}
  cmd = "ceph -k #{admin_keyring} -c #{ceph_conf} auth get #{keyname}"
  output = Mixlib::ShellOut.new(cmd).run_command.stdout
  output.scan(/caps\s*(\S+)\s*=\s*"([^"]*)"/) { |k, v| caps[k] = v }
  caps
end

def auth_set_key(ceph_conf, admin_keyring, keyname, caps)
  raise "No caps defined for ceph_client resource!" if caps.empty?
  # try to add the key
  caps_str = caps.map { |k, v| "#{k} '#{v}'" }.join(" ")
  cmd = "ceph -k #{admin_keyring} -c #{ceph_conf} auth get-or-create #{keyname} #{caps_str}"
  get_or_create = Mixlib::ShellOut.new(cmd)
  get_or_create.run_command
  return get_or_create.error! unless get_or_create.stderr.scan(/EINVAL.*but cap.*does not match/)
  Chef::Log.info("Updating incorrect caps for #{keyname}")
  # create list of uniq pools
  pools = caps["osd"].split(",").collect(&:strip).map { |x| x.gsub(/allow [rwx]{1,3} /, "") }.uniq
  # get current existing capabilities
  cur_caps = get_caps(ceph_conf, admin_keyring, keyname)
  if cur_caps["osd"] && !cur_caps["osd"].empty?
    cur_caps["osd"].split(",").collect(&:strip).sort.uniq.each do |cap|
      # skip if capability is in incorrect format
      next unless /allow [rwx]{1,3} pool=\w+$/ =~ cap
      # merge capabilities for other pools which were not provided in ceph client
      caps["osd"] += ", " + cap unless pools.include? cap.gsub(/allow [rwx]{1,3} /, "")
    end
  end
  caps_str = caps.map { |k, v| "#{k} '#{v}'" }.join(" ")
  cmd = "ceph -k #{admin_keyring} -c #{ceph_conf} auth caps #{keyname} #{caps_str}"
  # update caps and not delete client keyring
  update_client_caps = Mixlib::ShellOut.new(cmd)
  update_client_caps.run_command
  update_client_caps.error!
end