com.bertramlabs.plugins.karman.alibaba.AlibabaSecurityGroupRule.groovy Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of karman-alibaba Show documentation
Karman Storage Provider interface for Alibaba web services (primarily OSS)
There is a newer version: 2.3.3
package com.bertramlabs.plugins.karman.alibaba

import com.aliyuncs.IAcsClient
import com.aliyuncs.ecs.model.v20140526.AuthorizeSecurityGroupEgressRequest
import com.aliyuncs.ecs.model.v20140526.AuthorizeSecurityGroupEgressResponse
import com.aliyuncs.ecs.model.v20140526.AuthorizeSecurityGroupRequest
import com.aliyuncs.ecs.model.v20140526.AuthorizeSecurityGroupResponse
import com.aliyuncs.ecs.model.v20140526.RevokeSecurityGroupEgressRequest
import com.aliyuncs.ecs.model.v20140526.RevokeSecurityGroupEgressResponse
import com.aliyuncs.ecs.model.v20140526.RevokeSecurityGroupRequest
import com.aliyuncs.ecs.model.v20140526.RevokeSecurityGroupResponse
import com.bertramlabs.plugins.karman.network.SecurityGroupInterface
import com.bertramlabs.plugins.karman.network.SecurityGroupRule
import groovy.util.logging.Commons

@Commons
class AlibabaSecurityGroupRule extends SecurityGroupRule{

	private AlibabaNetworkProvider provider
	private String direction
	private String ethertype = 'internet'

	private String originalGroupId
	private String originalGroupOwnerId
	private String originalEtherType
	private String originalDirection
	private String originalPolicy
	private Integer originalMinPort
	private Integer originalMaxPort
	private String targetGroupOwnerId
	private String originalIpProtocol
	private String originalCidr
	private String description

	private boolean modified = false
	private boolean existing = false

	AlibabaSecurityGroupRule(AlibabaNetworkProvider provider, SecurityGroupInterface securityGroup, Map options) {
		super(securityGroup)

		this.provider = provider


		initializeFromOptions(options)
	}

	private void initializeFromOptions(Map options) {
		ethertype = options?.ethertype ?: 'internet'
		direction = options?.direction
		description = options?.description
		minPort = options?.minPort
		maxPort = options?.maxPort
		targetGroupName = options?.targetGroupName
		targetGroupId = options?.targetGroupId
		ipProtocol = options?.ipProtocol
		policy = options?.policy
		targetGroupOwnerId = options?.targetGroupOwnerId
		existing = options?.existing
		if(options?.cidr) {
			ipRange << options.cidr
			originalCidr = options.cidr

		}
		originalMinPort = minPort
		originalMaxPort = maxPort
		originalEtherType = ethertype
		originalIpProtocol = ipProtocol
		originalDirection = direction
		originalPolicy = policy
		originalGroupId = targetGroupId
		originalGroupOwnerId = targetGroupOwnerId
		if(existing) {
			modified = false
		}
	}


	@Override
	public void addIpRange(String ipRange) {
		// OpenStack only supports a single cidr
		ipRange.clear()
		ipRange << ipRange
		modified = true
	}

	@Override
	public void addIpRange(List ipRange) {
		// OpenStack only supports a single cidr
		ipRange.clear()
		if(ipRange.size()) {
			ipRange << ipRange.first()
		}
		modified = true
	}

	@Override
	public void removeIpRange(String ipRange) {
		ipRange.remove(ipRange)
		modified = true
	}

	@Override
	public void removeIpRange(List ipRange) {
		ipRange.each { it ->
			ipRange.remove(it)
		}
		modified = true
	}


	void setEthertype(String ethertype) {
		this.ethertype = ethertype //valid options are internet intranet
		modified = true
	}

	String getEthertype() {
		return ethertype
	}

	@Override
	public void setMinPort(Integer port) {
		super.setMinPort(port)
		modified = true
	}



	@Override
	public void setMaxPort(Integer port) {
		super.setMaxPort(port)
		modified = true
	}



	@Override
	public void setIpProtocol(String protocol) {
		super.setIpProtocol(protocol)
		modified = true
	}

	@Override
	void setPolicy(String policy) {
		super.setPolicy(policy)
		modified = true
	}

	@Override
	void setTargetGroupName(String groupName) {
		super.setTargetGroupName(targetGroupName)
		modified = true
	}
	@Override
	void setTargetGroupId(String groupId) {
		super.setTargetGroupId(groupId)
		modified = true
	}


	@Override
	void setDirection(String targetDirection) {
		super.setDirection(targetDirection)
		modified = true
	}

	@Override
	void setDescription(String targetDescription) {
		super.setDescription(targetDescription)
		modified = true
	}


	@Override
	String getId() {
		return null
	}


	@Override
	void save() {
		if(modified && existing) {
			delete()
		}

		if(direction == 'egress') {
			AuthorizeSecurityGroupEgressRequest request = new AuthorizeSecurityGroupEgressRequest()
			request.setPortRange("${minPort}/${maxPort}")
			if(this.ipRange?.size()) {
				request.setDestCidrIp(this.ipRange[0])
			}

			request.setDestGroupId(this.targetGroupId)
			request.setDestGroupOwnerId(this.targetGroupOwnerId)
			request.setNicType(this.ethertype)
			request.setPolicy(this.policy)
			request.setDescription(description)
			request.setIpProtocol(this.ipProtocol)
			request.setSecurityGroupId(this.securityGroup.id)
			AuthorizeSecurityGroupEgressResponse response = client.getAcsResponse(request)
		} else {
			AuthorizeSecurityGroupRequest request = new AuthorizeSecurityGroupRequest()
			request.setPortRange("${minPort}/${maxPort}")
			if(this.ipRange?.size()) {
				request.setSourceCidrIp(this.ipRange[0])
			}

			request.setSourceGroupId(this.targetGroupId)
			request.setSourceGroupOwnerId(this.targetGroupOwnerId)
			request.setNicType(this.ethertype)
			request.setPolicy(this.policy)
			request.setDescription(description)
			request.setIpProtocol(this.ipProtocol)
			request.setSecurityGroupId(this.securityGroup.id)
			AuthorizeSecurityGroupResponse response = client.getAcsResponse(request)
		}


		if(this.ipRange?.size()) {
			originalCidr = ipRange[0]
		}

		originalMinPort = minPort
		originalMaxPort = maxPort
		originalEtherType = ethertype
		originalIpProtocol = ipProtocol
		originalDirection = direction
		originalPolicy = policy
		originalGroupId = targetGroupId
		originalGroupOwnerId = targetGroupOwnerId

		existing = true
		modified = false
	}

	@Override
	void delete() {
		if(originalDirection == 'egress') {
			RevokeSecurityGroupEgressRequest egressRequest = new RevokeSecurityGroupEgressRequest()
			egressRequest.setPortRange("${originalMinPort}/${originalMaxPort}")
			egressRequest.setDestCidrIp(this.originalCidr)
			egressRequest.setDestGroupId(this.originalGroupId)
			egressRequest.setDestGroupOwnerId(this.originalGroupOwnerId)
			egressRequest.setNicType(this.originalEtherType)
			egressRequest.setPolicy(this.originalPolicy)
			egressRequest.setIpProtocol(this.originalIpProtocol)
			egressRequest.setSecurityGroupId(this.securityGroup.id)
			RevokeSecurityGroupEgressResponse response = client.getAcsResponse(egressRequest)
		} else {
			RevokeSecurityGroupRequest ingressRequest = new RevokeSecurityGroupRequest()
			ingressRequest.setPortRange("${originalMinPort}/${originalMaxPort}")
			ingressRequest.setSourceCidrIp(this.originalCidr)
			ingressRequest.setSourceGroupId(this.originalGroupId)
			ingressRequest.setSourceGroupOwnerId(this.originalGroupOwnerId)
			ingressRequest.setNicType(this.originalEtherType)
			ingressRequest.setPolicy(this.originalPolicy)
			ingressRequest.setIpProtocol(this.originalIpProtocol)
			ingressRequest.setSecurityGroupId(this.securityGroup.id)
			RevokeSecurityGroupResponse response = client.getAcsResponse(ingressRequest)
		}
	}

	private IAcsClient getClient() {
		return ((AlibabaNetworkProvider)provider).getClient()
	}
}