ali_ecs.go

// Copyright © 2021 Alibaba Group Holding Ltd.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package aliyun

import (
	"errors"
	"fmt"
	"math/rand"
	"os"
	"strconv"
	"strings"
	"time"

	"github.com/aliyun/alibaba-cloud-sdk-go/sdk/requests"
	"github.com/aliyun/alibaba-cloud-sdk-go/sdk/responses"
	"github.com/aliyun/alibaba-cloud-sdk-go/services/ecs"
	"github.com/sirupsen/logrus"

	v1 "github.com/sealerio/sealer/types/api/v1"
	"github.com/sealerio/sealer/utils"
	utilsnet "github.com/sealerio/sealer/utils/net"
	strUtils "github.com/sealerio/sealer/utils/strings"
)

type Instance struct {
	CPU              int
	Memory           int
	InstanceID       string
	PrimaryIPAddress string
}

type EcsManager struct {
	/*	config Config
		client *ecs.Client*/
}

func (a *AliProvider) RetryEcsRequest(request requests.AcsRequest, response responses.AcsResponse) error {
	return a.RetryEcsAction(request, response, TryTimes)
}

func (a *AliProvider) RetryEcsAction(request requests.AcsRequest, response responses.AcsResponse, tryTimes int) error {
	return utils.Retry(tryTimes, TrySleepTime, func() error {
		if err := a.EcsClient.DoAction(request, response); err != nil {
			return err
		}
		return nil
	})
}

func (a *AliProvider) RetryEcsInstanceType(request requests.AcsRequest, response responses.AcsResponse, instances []string) error {
	for i := 0; i < len(instances); i++ {
		switch req := request.(type) {
		case *ecs.ModifyInstanceSpecRequest:
			req.InstanceType = instances[i]
		case *ecs.RunInstancesRequest:
			req.InstanceType = instances[i]
		}
		err := a.RetryEcsAction(request, response, 4)
		if err == nil {
			logrus.Debugf("use instance type: %s", instances[i])
			break
		} else if i == len(instances)-1 {
			return fmt.Errorf("failed to get ecs instance type, %v", err)
		}
	}
	return nil
}

func (a *AliProvider) TryGetInstance(request *ecs.DescribeInstancesRequest, response *ecs.DescribeInstancesResponse, expectCount int) error {
	return utils.Retry(TryTimes, TrySleepTime, func() error {
		if err := a.EcsClient.DoAction(request, response); err != nil {
			return err
		}
		var ipList []string
		instances := response.Instances.Instance
		if expectCount == -1 {
			return nil
		}

		if len(instances) != expectCount {
			return errors.New("the number of instances is not as expected")
		}
		for _, instance := range instances {
			if instance.NetworkInterfaces.NetworkInterface[0].PrimaryIpAddress == "" {
				return errors.New("PrimaryIpAddress cannot nob be nil")
			}
			if len(ipList) != 0 && strUtils.IsInSlice(instance.NetworkInterfaces.NetworkInterface[0].PrimaryIpAddress, ipList) {
				return errors.New("PrimaryIpAddress cannot nob be same")
			}

			ipList = append(ipList, instance.NetworkInterfaces.NetworkInterface[0].PrimaryIpAddress)
		}

		return nil
	})
}

func (a *AliProvider) InputIPlist(instanceRole string) (ipList []string, err error) {
	var hosts *v1.Hosts
	switch instanceRole {
	case Master:
		hosts = &a.Cluster.Spec.Masters
	case Node:
		hosts = &a.Cluster.Spec.Nodes
	}
	if hosts == nil {
		return nil, err
	}
	instances, err := a.GetInstancesInfo(instanceRole, hosts.Count)
	if err != nil {
		return nil, err
	}
	for _, instance := range instances {
		ipList = append(ipList, instance.PrimaryIPAddress)
	}
	return ipList, nil
}

func (a *AliProvider) CreatePassword() {
	rand.Seed(time.Now().UnixNano())
	digits := Digits
	specials := Specials
	letter := Letter
	all := digits + specials + letter
	length := PasswordLength
	buf := make([]byte, length)
	// #nosec
	buf[0] = digits[rand.Intn(len(digits))]
	// #nosec
	buf[1] = specials[rand.Intn(len(specials))]
	for i := 2; i < length; i++ {
		// #nosec
		buf[i] = all[rand.Intn(len(all))]
	}
	rand.Shuffle(len(buf), func(i, j int) {
		buf[i], buf[j] = buf[j], buf[i]
	})
	a.Cluster.Spec.SSH.Passwd = string(buf)
}

func (a *AliProvider) GetInstanceStatus(instanceID string) (instanceStatus string, err error) {
	request := ecs.CreateDescribeInstanceStatusRequest()
	request.Scheme = Scheme
	request.InstanceId = &[]string{instanceID}

	//response, err := d.Client.DescribeInstanceStatus(request)
	response := ecs.CreateDescribeInstanceStatusResponse()
	err = a.RetryEcsRequest(request, response)
	if err != nil {
		return "", fmt.Errorf("get instance status failed %v , error :%v", instanceID, err)
	}
	if len(response.InstanceStatuses.InstanceStatus) == 0 {
		return "", fmt.Errorf("instance list is empty")
	}
	return response.InstanceStatuses.InstanceStatus[0].Status, nil
}

func (a *AliProvider) PoweroffInstance(instanceID string) error {
	request := ecs.CreateStopInstancesRequest()
	request.Scheme = Scheme
	request.InstanceId = &[]string{instanceID}

	//_, err := d.Client.StopInstances(request)
	response := ecs.CreateStopInstancesResponse()
	return a.RetryEcsRequest(request, response)
}

func (a *AliProvider) StartInstance(instanceID string) error {
	request := ecs.CreateStartInstanceRequest()
	request.Scheme = Scheme
	request.InstanceId = instanceID

	//_, err := d.Client.StartInstance(request)
	response := ecs.CreateStartInstanceResponse()
	return a.RetryEcsRequest(request, response)
}

func (a *AliProvider) ChangeInstanceType(instanceID, cpu, memory string) error {
	cpuInt, err := strconv.Atoi(cpu)
	if err != nil {
		return err
	}
	memoryFloat, err := strconv.ParseFloat(memory, 64)
	if err != nil {
		return err
	}
	instanceStatus, err := a.GetInstanceStatus(instanceID)
	if err != nil {
		return err
	}
	if instanceStatus != Stopped {
		err = a.PoweroffInstance(instanceID)
		if err != nil {
			return err
		}
	}
	expectInstanceType, err := a.GetAvailableResource(cpuInt, memoryFloat)
	if err != nil {
		return err
	}

	request := ecs.CreateModifyInstanceSpecRequest()
	request.Scheme = Scheme
	request.InstanceId = instanceID
	//_, err = d.Client.ModifyInstanceSpec(request)
	response := ecs.CreateModifyInstanceSpecResponse()
	err = a.RetryEcsInstanceType(request, response, expectInstanceType)
	if err != nil {
		return err
	}
	return a.StartInstance(instanceID)
}

func (a *AliProvider) GetInstancesInfo(instancesRole, expectCount string) (instances []Instance, err error) {
	var count int
	tag := make(map[string]string)
	tag[Product] = a.Cluster.Name
	tag[Role] = instancesRole
	if expectCount == "" {
		count = -1
	} else {
		count, _ = strconv.Atoi(expectCount)
	}
	instancesTags := CreateDescribeInstancesTag(tag)
	request := ecs.CreateDescribeInstancesRequest()
	request.Scheme = Scheme
	request.RegionId = a.Config.RegionID
	request.VSwitchId = a.Cluster.Annotations[VSwitchID]
	request.SecurityGroupId = a.Cluster.Annotations[SecurityGroupID]
	request.Tag = &instancesTags
	//response, err := d.Client.DescribeInstances(request)
	response := ecs.CreateDescribeInstancesResponse()
	err = a.TryGetInstance(request, response, count)
	if err != nil {
		return nil, err
	}

	for _, instance := range response.Instances.Instance {
		instances = append(instances,
			Instance{
				CPU:              instance.Cpu,
				Memory:           instance.Memory / 1024,
				InstanceID:       instance.InstanceId,
				PrimaryIPAddress: instance.NetworkInterfaces.NetworkInterface[0].PrimaryIpAddress})
	}
	return
}

func (a *AliProvider) ReconcileInstances(instanceRole string) error {
	var hosts *v1.Hosts
	var instances []Instance
	var instancesIDs string
	switch instanceRole {
	case Master:
		hosts = &a.Cluster.Spec.Masters
		instancesIDs = a.Cluster.Annotations[AliMasterIDs]
		if hosts.Count == "" {
			return errors.New("master count not set")
		}
	case Node:
		hosts = &a.Cluster.Spec.Nodes
		instancesIDs = a.Cluster.Annotations[AliNodeIDs]
		if hosts.Count == "" {
			return nil
		}
	}
	if hosts == nil {
		return errors.New("hosts not set")
	}
	i, err := strconv.Atoi(hosts.Count)
	if err != nil {
		return fmt.Errorf("failed to get hosts count, %v", err)
	}
	if instancesIDs != "" {
		instances, err = a.GetInstancesInfo(instanceRole, JustGetInstanceInfo)
	}

	if err != nil {
		return err
	}
	if len(instances) < i {
		err = a.RunInstances(instanceRole, i-len(instances))
		if err != nil {
			return err
		}
		ipList, err := a.InputIPlist(instanceRole)
		if err != nil {
			return err
		}
		IPStrList := utilsnet.IPsToIPStrs(hosts.IPList)
		hosts.IPList = utilsnet.IPStrsToIPs(strUtils.NewComparator(IPStrList, ipList).GetUnion())
		logrus.Infof("get scale up IP list %v, append iplist %v, host count %s", ipList, hosts.IPList, hosts.Count)
	} else if len(instances) > i {
		var deleteInstancesIDs []string
		var count int
		for _, instance := range instances {
			if instance.InstanceID != a.Cluster.Annotations[Master0ID] {
				deleteInstancesIDs = append(deleteInstancesIDs, instance.InstanceID)
				count++
			}
			if count == (len(instances) - i) {
				break
			}
		}
		if len(deleteInstancesIDs) != 0 {
			a.Cluster.Annotations[ShouldBeDeleteInstancesIDs] = strings.Join(deleteInstancesIDs, ",")
			err = a.DeleteInstances()
			if err != nil {
				return err
			}
			a.Cluster.Annotations[ShouldBeDeleteInstancesIDs] = ""
		}

		ipList, err := a.InputIPlist(instanceRole)
		if err != nil {
			return err
		}
		IPStrList := utilsnet.IPsToIPStrs(hosts.IPList)
		hosts.IPList = utilsnet.IPStrsToIPs(strUtils.NewComparator(IPStrList, ipList).GetIntersection())
	}

	cpu, err := strconv.Atoi(hosts.CPU)
	if err != nil {
		return fmt.Errorf("failed to get hosts CPU, %v", err)
	}

	memory, err := strconv.Atoi(hosts.Memory)
	if err != nil {
		return fmt.Errorf("failed to get hosts memory, %v", err)
	}
	for _, instance := range instances {
		if instance.CPU != cpu || instance.Memory != memory {
			err = a.ChangeInstanceType(instance.InstanceID, hosts.CPU, hosts.Memory)
			if err != nil {
				return err
			}
		}
	}

	logrus.Infof("reconcile %s instances success %v ", instanceRole, hosts.IPList)
	return nil
}

func (a *AliProvider) DeleteInstances() error {
	instanceIDs := strings.Split(a.Cluster.Annotations[ShouldBeDeleteInstancesIDs], ",")
	if len(instanceIDs) == 0 {
		return nil
	}
	request := ecs.CreateDeleteInstancesRequest()
	request.Scheme = Scheme
	request.InstanceId = &instanceIDs
	request.Force = requests.NewBoolean(true)
	//_, err := d.Client.DeleteInstances(request)
	response := ecs.CreateDeleteInstancesResponse()
	if err := a.RetryEcsRequest(request, response); err != nil {
		return err
	}

	a.Cluster.Annotations[ShouldBeDeleteInstancesIDs] = ""
	return nil
}

func CreateDescribeInstancesTag(tags map[string]string) (instanceTags []ecs.DescribeInstancesTag) {
	for k, v := range tags {
		instanceTags = append(instanceTags, ecs.DescribeInstancesTag{Key: k, Value: v})
	}
	return
}

func CreateInstanceDataDisk(dataDisks []string) (instanceDisks []ecs.RunInstancesDataDisk) {
	for _, v := range dataDisks {
		instanceDisks = append(instanceDisks,
			ecs.RunInstancesDataDisk{Size: v, Category: AliCloudEssd})
	}
	return
}

func (a *AliProvider) GetAvailableResource(cores int, memory float64) (instanceType []string, err error) {
	request := ecs.CreateDescribeAvailableResourceRequest()
	request.Scheme = Scheme
	request.RegionId = a.Config.RegionID
	request.ZoneId = a.Cluster.GetAnnotationsByKey(ZoneID)
	request.DestinationResource = DestinationResource
	request.InstanceChargeType = InstanceChargeType
	request.Cores = requests.NewInteger(cores)
	request.Memory = requests.NewFloat(memory)

	//response, err := d.Client.DescribeAvailableResource(request)
	response := ecs.CreateDescribeAvailableResourceResponse()
	err = a.RetryEcsRequest(request, response)
	if err != nil {
		return nil, err
	}

	if len(response.AvailableZones.AvailableZone) < 1 {
		return nil, fmt.Errorf("resources not find")
	}
	for _, f := range response.AvailableZones.AvailableZone[0].AvailableResources.AvailableResource {
		for _, r := range f.SupportedResources.SupportedResource {
			if r.StatusCategory == AvailableTypeStatus {
				instanceType = append(instanceType, r.Value)
			}
		}
	}
	return
}

func (a *AliProvider) RunInstances(instanceRole string, count int) error {
	var hosts *v1.Hosts
	switch instanceRole {
	case Master:
		hosts = &a.Cluster.Spec.Masters
	case Node:
		hosts = &a.Cluster.Spec.Nodes
	}
	instances := hosts
	if instances == nil {
		return errors.New("host not set")
	}
	instancesCPU, _ := strconv.Atoi(instances.CPU)
	instancesMemory, _ := strconv.ParseFloat(instances.Memory, 64)
	systemDiskSize := instances.SystemDisk
	instanceType, err := a.GetAvailableResource(instancesCPU, instancesMemory)
	if err != nil {
		return err
	}
	tag := make(map[string]string)
	tag[Product] = a.Cluster.Name
	tag[Role] = instanceRole
	instancesTag := CreateInstanceTag(tag)

	dataDisks := instances.DataDisks
	datadisk := CreateInstanceDataDisk(dataDisks)

	request := ecs.CreateRunInstancesRequest()
	request.Scheme = Scheme
	request.ImageId = ImageID
	request.Password = a.Cluster.Spec.SSH.Passwd
	request.SecurityGroupId = a.Cluster.GetAnnotationsByKey(SecurityGroupID)
	request.VSwitchId = a.Cluster.GetAnnotationsByKey(VSwitchID)
	request.SystemDiskSize = systemDiskSize
	request.SystemDiskCategory = DataCategory
	request.DataDisk = &datadisk
	request.Amount = requests.NewInteger(count)
	request.Tag = &instancesTag

	//response, err := d.Client.RunInstances(request)
	response := ecs.CreateRunInstancesResponse()
	err = a.RetryEcsInstanceType(request, response, instanceType)
	if err != nil {
		return err
	}

	instancesIDs := strings.Join(response.InstanceIdSets.InstanceIdSet, ",")
	switch instanceRole {
	case Master:
		a.Cluster.Annotations[AliMasterIDs] += instancesIDs
	case Node:
		a.Cluster.Annotations[AliNodeIDs] += instancesIDs
	}

	return nil
}

func (a *AliProvider) AuthorizeSecurityGroup(securityGroupID, portRange string) bool {
	request := ecs.CreateAuthorizeSecurityGroupRequest()
	request.Scheme = Scheme
	request.SecurityGroupId = securityGroupID
	request.IpProtocol = IPProtocol
	request.PortRange = portRange
	request.SourceCidrIp = SourceCidrIP
	request.Policy = Policy

	//response, err := d.Client.AuthorizeSecurityGroup(request)
	response := ecs.CreateAuthorizeSecurityGroupResponse()
	if err := a.RetryEcsRequest(request, response); err != nil {
		logrus.Errorf("%v", err)
		return false
	}
	return response.BaseResponse.IsSuccess()
}

func (a *AliProvider) CreateSecurityGroup() error {
	request := ecs.CreateCreateSecurityGroupRequest()
	request.Scheme = Scheme
	request.RegionId = a.Config.RegionID
	request.VpcId = a.Cluster.GetAnnotationsByKey(VpcID)
	//response, err := d.Client.CreateSecurityGroup(request)
	response := ecs.CreateCreateSecurityGroupResponse()
	if err := a.RetryEcsRequest(request, response); err != nil {
		return err
	}

	if !a.AuthorizeSecurityGroup(response.SecurityGroupId, SSHPortRange) {
		return fmt.Errorf("authorize securitygroup ssh port failed")
	}
	if !a.AuthorizeSecurityGroup(response.SecurityGroupId, APIServerPortRange) {
		return fmt.Errorf("authorize securitygroup apiserver port failed")
	}
	a.Cluster.Annotations[SecurityGroupID] = response.SecurityGroupId
	return nil
}

func (a *AliProvider) DeleteSecurityGroup() error {
	request := ecs.CreateDeleteSecurityGroupRequest()
	request.Scheme = Scheme
	request.SecurityGroupId = a.Cluster.Annotations[SecurityGroupID]

	//response, err := d.Client.DeleteSecurityGroup(request)
	response := ecs.CreateDeleteSecurityGroupResponse()
	return a.RetryEcsRequest(request, response)
}

func CreateInstanceTag(tags map[string]string) (instanceTags []ecs.RunInstancesTag) {
	for k, v := range tags {
		instanceTags = append(instanceTags, ecs.RunInstancesTag{Key: k, Value: v})
	}
	return
}

func LoadConfig(config *Config) error {
	config.AccessKey = os.Getenv(AccessKey)
	config.AccessSecret = os.Getenv(AccessSecret)
	config.RegionID = os.Getenv(RegionID)
	if config.RegionID == "" {
		config.RegionID = DefaultRegionID
	}
	if config.AccessKey == "" || config.AccessSecret == "" || config.RegionID == "" {
		return fmt.Errorf("please set accessKey and accessKeySecret ENV, example: export ACCESSKEYID=xxx export ACCESSKEYSECRET=xxx , how to get AK SK: https://ram.console.aliyun.com/manage/ak")
	}
	return nil
}