Fix Bug 917: Revoke NBI's Auth token once user is deleted
[osm/NBI.git] / osm_nbi / validation.py
1 # -*- coding: utf-8 -*-
2
3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
6 #
7 # http://www.apache.org/licenses/LICENSE-2.0
8 #
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
12 # implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15
16 from jsonschema import validate as js_v, exceptions as js_e
17 from http import HTTPStatus
18 from copy import deepcopy
19 from uuid import UUID # To test for valid UUID
20
21 __author__ = "Alfonso Tierno <alfonso.tiernosepulveda@telefonica.com>"
22 __version__ = "0.1"
23 version_date = "Mar 2018"
24
25 """
26 Validator of input data using JSON schemas for those items that not contains an OSM yang information model
27 """
28
29 # Basis schemas
30 patern_name = "^[ -~]+$"
31 shortname_schema = {"type": "string", "minLength": 1, "maxLength": 60, "pattern": "^[^,;()\\.\\$'\"]+$"}
32 passwd_schema = {"type": "string", "minLength": 1, "maxLength": 60}
33 name_schema = {"type": "string", "minLength": 1, "maxLength": 255, "pattern": "^[^,;()'\"]+$"}
34 string_schema = {"type": "string", "minLength": 1, "maxLength": 255}
35 xml_text_schema = {"type": "string", "minLength": 1, "maxLength": 1000, "pattern": "^[^']+$"}
36 description_schema = {"type": ["string", "null"], "maxLength": 255, "pattern": "^[^'\"]+$"}
37 id_schema_fake = {"type": "string", "minLength": 2, "maxLength": 36}
38 bool_schema = {"type": "boolean"}
39 null_schema = {"type": "null"}
40 # "pattern": "^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$"
41 id_schema = {"type": "string", "pattern": "^[a-fA-F0-9]{8}(-[a-fA-F0-9]{4}){3}-[a-fA-F0-9]{12}$"}
42 time_schema = {"type": "string", "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]([0-5]:){2}"}
43 pci_schema = {"type": "string", "pattern": "^[0-9a-fA-F]{4}(:[0-9a-fA-F]{2}){2}\\.[0-9a-fA-F]$"}
44 # allows [] for wildcards. For that reason huge length limit is set
45 pci_extended_schema = {"type": "string", "pattern": "^[0-9a-fA-F.:-\\[\\]]{12,40}$"}
46 http_schema = {"type": "string", "pattern": "^https?://[^'\"=]+$"}
47 bandwidth_schema = {"type": "string", "pattern": "^[0-9]+ *([MG]bps)?$"}
48 memory_schema = {"type": "string", "pattern": "^[0-9]+ *([MG]i?[Bb])?$"}
49 integer0_schema = {"type": "integer", "minimum": 0}
50 integer1_schema = {"type": "integer", "minimum": 1}
51 path_schema = {"type": "string", "pattern": "^(\\.){0,2}(/[^/\"':{}\\(\\)]+)+$"}
52 vlan_schema = {"type": "integer", "minimum": 1, "maximum": 4095}
53 vlan1000_schema = {"type": "integer", "minimum": 1000, "maximum": 4095}
54 mac_schema = {"type": "string",
55 "pattern": "^[0-9a-fA-F][02468aceACE](:[0-9a-fA-F]{2}){5}$"} # must be unicast: LSB bit of MSB byte ==0
56 dpid_Schema = {"type": "string", "pattern": "^[0-9a-fA-F]{2}(:[0-9a-fA-F]{2}){7}$"}
57 # mac_schema={"type":"string", "pattern":"^([0-9a-fA-F]{2}:){5}[0-9a-fA-F]{2}$"}
58 ip_schema = {"type": "string",
59 "pattern": "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$"}
60 ip_prefix_schema = {"type": "string",
61 "pattern": "^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}"
62 "(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)/(30|[12]?[0-9])$"}
63 port_schema = {"type": "integer", "minimum": 1, "maximum": 65534}
64 object_schema = {"type": "object"}
65 schema_version_2 = {"type": "integer", "minimum": 2, "maximum": 2}
66 # schema_version_string={"type":"string","enum": ["0.1", "2", "0.2", "3", "0.3"]}
67 log_level_schema = {"type": "string", "enum": ["DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"]}
68 checksum_schema = {"type": "string", "pattern": "^[0-9a-fA-F]{32}$"}
69 size_schema = {"type": "integer", "minimum": 1, "maximum": 100}
70 array_edition_schema = {
71 "type": "object",
72 "patternProperties": {
73 "^\\$": {}
74 },
75 "additionalProperties": False,
76 "minProperties": 1,
77 }
78 nameshort_list_schema = {
79 "type": "array",
80 "minItems": 1,
81 "items": shortname_schema,
82 }
83
84
85 ns_instantiate_vdu = {
86 "title": "ns action instantiate input schema for vdu",
87 "$schema": "http://json-schema.org/draft-04/schema#",
88 "type": "object",
89 "properties": {
90 "id": name_schema,
91 "volume": {
92 "type": "array",
93 "minItems": 1,
94 "items": {
95 "type": "object",
96 "properties": {
97 "name": name_schema,
98 "vim-volume-id": name_schema,
99 },
100 "required": ["name", "vim-volume-id"],
101 "additionalProperties": False
102 }
103 },
104 "interface": {
105 "type": "array",
106 "minItems": 1,
107 "items": {
108 "type": "object",
109 "properties": {
110 "name": name_schema,
111 "ip-address": ip_schema,
112 "mac-address": mac_schema,
113 "floating-ip-required": bool_schema,
114 },
115 "required": ["name"],
116 "additionalProperties": False
117 }
118 }
119 },
120 "required": ["id"],
121 "additionalProperties": False
122 }
123
124 ip_profile_dns_schema = {
125 "type": "array",
126 "minItems": 1,
127 "items": {
128 "type": "object",
129 "properties": {
130 "address": ip_schema,
131 },
132 "required": ["address"],
133 "additionalProperties": False
134 }
135 }
136
137 ip_profile_dhcp_schema = {
138 "type": "object",
139 "properties": {
140 "enabled": {"type": "boolean"},
141 "count": integer1_schema,
142 "start-address": ip_schema
143 },
144 "additionalProperties": False,
145 }
146
147 ip_profile_schema = {
148 "title": "ip profile validation schame",
149 "$schema": "http://json-schema.org/draft-04/schema#",
150 "type": "object",
151 "properties": {
152 "ip-version": {"enum": ["ipv4", "ipv6"]},
153 "subnet-address": ip_prefix_schema,
154 "gateway-address": ip_schema,
155 "dns-server": ip_profile_dns_schema,
156 "dhcp-params": ip_profile_dhcp_schema,
157 }
158 }
159
160 ip_profile_update_schema = {
161 "title": "ip profile validation schame",
162 "$schema": "http://json-schema.org/draft-04/schema#",
163 "type": "object",
164 "properties": {
165 "ip-version": {"enum": ["ipv4", "ipv6"]},
166 "subnet-address": {"oneOf": [null_schema, ip_prefix_schema]},
167 "gateway-address": {"oneOf": [null_schema, ip_schema]},
168 "dns-server": {"oneOf": [null_schema, ip_profile_dns_schema]},
169
170 "dhcp-params": {"oneOf": [null_schema, ip_profile_dhcp_schema]},
171 },
172 "additionalProperties": False
173 }
174
175 provider_network_schema = {
176 "title": "provider network validation schame",
177 "$schema": "http://json-schema.org/draft-04/schema#",
178 "type": "object",
179 "properties": {
180 "physical-network": name_schema,
181 "segmentation-id": name_schema,
182 },
183 "additionalProperties": False
184 }
185
186 ns_instantiate_internal_vld = {
187 "title": "ns action instantiate input schema for vdu",
188 "$schema": "http://json-schema.org/draft-04/schema#",
189 "type": "object",
190 "properties": {
191 "name": name_schema,
192 "vim-network-name": name_schema,
193 "vim-network-id": name_schema,
194 "ip-profile": ip_profile_update_schema,
195 "provider-network": provider_network_schema,
196 "internal-connection-point": {
197 "type": "array",
198 "minItems": 1,
199 "items": {
200 "type": "object",
201 "properties": {
202 "id-ref": name_schema,
203 "ip-address": ip_schema,
204 # "mac-address": mac_schema,
205 },
206 "required": ["id-ref"],
207 "minProperties": 2,
208 "additionalProperties": False
209 },
210 }
211 },
212 "required": ["name"],
213 "minProperties": 2,
214 "additionalProperties": False
215 }
216
217 additional_params_for_vnf = {
218 "type": "array",
219 "items": {
220 "type": "object",
221 "properties": {
222 "member-vnf-index": name_schema,
223 "additionalParams": object_schema,
224 "additionalParamsForVdu": {
225 "type": "array",
226 "items": {
227 "type": "object",
228 "properties": {
229 "vdu_id": name_schema,
230 "additionalParams": object_schema,
231 },
232 "required": ["vdu_id", "additionalParams"],
233 "additionalProperties": False,
234 },
235 },
236 "additionalParamsForKdu": {
237 "type": "array",
238 "items": {
239 "type": "object",
240 "properties": {
241 "kdu_name": name_schema,
242 "additionalParams": object_schema,
243 },
244 "required": ["kdu_name", "additionalParams"],
245 "additionalProperties": False,
246 },
247 },
248 },
249 "required": ["member-vnf-index"],
250 "minProperties": 2,
251 "additionalProperties": False
252 }
253 }
254
255 ns_instantiate = {
256 "title": "ns action instantiate input schema",
257 "$schema": "http://json-schema.org/draft-04/schema#",
258 "type": "object",
259 "properties": {
260 "lcmOperationType": string_schema,
261 "nsInstanceId": id_schema,
262 "netsliceInstanceId": id_schema,
263 "nsName": name_schema,
264 "nsDescription": {"oneOf": [description_schema, null_schema]},
265 "nsdId": id_schema,
266 "vimAccountId": id_schema,
267 "wimAccountId": {"OneOf": [id_schema, bool_schema, null_schema]},
268 "additionalParamsForNs": object_schema,
269 "additionalParamsForVnf": additional_params_for_vnf,
270 "ssh_keys": {"type": "array", "items": {"type": "string"}},
271 "nsr_id": id_schema,
272 "vduImage": name_schema,
273 "vnf": {
274 "type": "array",
275 "minItems": 1,
276 "items": {
277 "type": "object",
278 "properties": {
279 "member-vnf-index": name_schema,
280 "vimAccountId": id_schema,
281 "vdu": {
282 "type": "array",
283 "minItems": 1,
284 "items": ns_instantiate_vdu,
285 },
286 "internal-vld": {
287 "type": "array",
288 "minItems": 1,
289 "items": ns_instantiate_internal_vld
290 }
291 },
292 "required": ["member-vnf-index"],
293 "minProperties": 2,
294 "additionalProperties": False
295 }
296 },
297 "vld": {
298 "type": "array",
299 "minItems": 1,
300 "items": {
301 "type": "object",
302 "properties": {
303 "name": string_schema,
304 "vim-network-name": {"OneOf": [string_schema, object_schema]},
305 "vim-network-id": {"OneOf": [string_schema, object_schema]},
306 "ns-net": object_schema,
307 "wimAccountId": {"OneOf": [id_schema, bool_schema, null_schema]},
308 "ip-profile": object_schema,
309 "provider-network": provider_network_schema,
310 "vnfd-connection-point-ref": {
311 "type": "array",
312 "minItems": 1,
313 "items": {
314 "type": "object",
315 "properties": {
316 "member-vnf-index-ref": name_schema,
317 "vnfd-connection-point-ref": name_schema,
318 "ip-address": ip_schema,
319 # "mac-address": mac_schema,
320 },
321 "required": ["member-vnf-index-ref", "vnfd-connection-point-ref"],
322 "minProperties": 3,
323 "additionalProperties": False
324 },
325 }
326 },
327 "required": ["name"],
328 "additionalProperties": False
329 }
330 },
331 },
332 "required": ["nsName", "nsdId", "vimAccountId"],
333 "additionalProperties": False
334 }
335
336 ns_action = { # TODO for the moment it is only contemplated the vnfd primitive execution
337 "title": "ns action input schema",
338 "$schema": "http://json-schema.org/draft-04/schema#",
339 "type": "object",
340 "properties": {
341 "lcmOperationType": string_schema,
342 "nsInstanceId": id_schema,
343 "member_vnf_index": name_schema,
344 "vnf_member_index": name_schema, # TODO for backward compatibility. To remove in future
345 "vdu_id": name_schema,
346 "vdu_count_index": integer0_schema,
347 "kdu_name": name_schema,
348 "primitive": name_schema,
349 "primitive_params": {"type": "object"},
350 },
351 "required": ["primitive", "primitive_params"], # TODO add member_vnf_index
352 "additionalProperties": False
353 }
354 ns_scale = { # TODO for the moment it is only VDU-scaling
355 "title": "ns scale input schema",
356 "$schema": "http://json-schema.org/draft-04/schema#",
357 "type": "object",
358 "properties": {
359 "lcmOperationType": string_schema,
360 "nsInstanceId": id_schema,
361 "scaleType": {"enum": ["SCALE_VNF"]},
362 "scaleVnfData": {
363 "type": "object",
364 "properties": {
365 "vnfInstanceId": name_schema,
366 "scaleVnfType": {"enum": ["SCALE_OUT", 'SCALE_IN']},
367 "scaleByStepData": {
368 "type": "object",
369 "properties": {
370 "scaling-group-descriptor": name_schema,
371 "member-vnf-index": name_schema,
372 "scaling-policy": name_schema,
373 },
374 "required": ["scaling-group-descriptor", "member-vnf-index"],
375 "additionalProperties": False
376 },
377 },
378 "required": ["scaleVnfType", "scaleByStepData"], # vnfInstanceId
379 "additionalProperties": False
380 },
381 "scaleTime": time_schema,
382 },
383 "required": ["scaleType", "scaleVnfData"],
384 "additionalProperties": False
385 }
386
387
388 schema_version = {"type": "string", "enum": ["1.0"]}
389 schema_type = {"type": "string"}
390 vim_type = shortname_schema # {"enum": ["openstack", "openvim", "vmware", "opennebula", "aws", "azure", "fos"]}
391
392 vim_account_edit_schema = {
393 "title": "vim_account edit input schema",
394 "$schema": "http://json-schema.org/draft-04/schema#",
395 "type": "object",
396 "properties": {
397 "name": name_schema,
398 "description": description_schema,
399 "vim": name_schema,
400 "datacenter": name_schema,
401 "vim_type": vim_type,
402 "vim_url": description_schema,
403 # "vim_url_admin": description_schema,
404 # "vim_tenant": name_schema,
405 "vim_tenant_name": name_schema,
406 "vim_user": shortname_schema,
407 "vim_password": passwd_schema,
408 "config": {"type": "object"}
409 },
410 "additionalProperties": False
411 }
412
413 vim_account_new_schema = {
414 "title": "vim_account creation input schema",
415 "$schema": "http://json-schema.org/draft-04/schema#",
416 "type": "object",
417 "properties": {
418 "schema_version": schema_version,
419 "schema_type": schema_type,
420 "name": name_schema,
421 "description": description_schema,
422 "vim": name_schema,
423 "datacenter": name_schema,
424 "vim_type": vim_type,
425 "vim_url": description_schema,
426 # "vim_url_admin": description_schema,
427 # "vim_tenant": name_schema,
428 "vim_tenant_name": name_schema,
429 "vim_user": shortname_schema,
430 "vim_password": passwd_schema,
431 "config": {"type": "object"}
432 },
433 "required": ["name", "vim_url", "vim_type", "vim_user", "vim_password", "vim_tenant_name"],
434 "additionalProperties": False
435 }
436
437 wim_type = shortname_schema # {"enum": ["tapi", "onos", "odl", "dynpac", "fake"]}
438
439 wim_account_edit_schema = {
440 "title": "wim_account edit input schema",
441 "$schema": "http://json-schema.org/draft-04/schema#",
442 "type": "object",
443 "properties": {
444 "name": name_schema,
445 "description": description_schema,
446 "wim": name_schema,
447 "wim_type": wim_type,
448 "wim_url": description_schema,
449 "user": shortname_schema,
450 "password": passwd_schema,
451 "config": {"type": "object"}
452 },
453 "additionalProperties": False
454 }
455
456 wim_account_new_schema = {
457 "title": "wim_account creation input schema",
458 "$schema": "http://json-schema.org/draft-04/schema#",
459 "type": "object",
460 "properties": {
461 "schema_version": schema_version,
462 "schema_type": schema_type,
463 "name": name_schema,
464 "description": description_schema,
465 "wim": name_schema,
466 "wim_type": wim_type,
467 "wim_url": description_schema,
468 "user": shortname_schema,
469 "password": passwd_schema,
470 "config": {
471 "type": "object",
472 "patternProperties": {
473 ".": {"not": {"type": "null"}}
474 }
475 }
476 },
477 "required": ["name", "wim_url", "wim_type"],
478 "additionalProperties": False
479 }
480
481 sdn_properties = {
482 "name": name_schema,
483 "description": description_schema,
484 "dpid": dpid_Schema,
485 "ip": ip_schema,
486 "port": port_schema,
487 "type": {"type": "string", "enum": ["opendaylight", "floodlight", "onos"]},
488 "version": {"type": "string", "minLength": 1, "maxLength": 12},
489 "user": shortname_schema,
490 "password": passwd_schema
491 }
492 sdn_new_schema = {
493 "title": "sdn controller information schema",
494 "$schema": "http://json-schema.org/draft-04/schema#",
495 "type": "object",
496 "properties": sdn_properties,
497 "required": ["name", "port", 'ip', 'dpid', 'type'],
498 "additionalProperties": False
499 }
500 sdn_edit_schema = {
501 "title": "sdn controller update information schema",
502 "$schema": "http://json-schema.org/draft-04/schema#",
503 "type": "object",
504 "properties": sdn_properties,
505 # "required": ["name", "port", 'ip', 'dpid', 'type'],
506 "additionalProperties": False
507 }
508 sdn_port_mapping_schema = {
509 "$schema": "http://json-schema.org/draft-04/schema#",
510 "title": "sdn port mapping information schema",
511 "type": "array",
512 "items": {
513 "type": "object",
514 "properties": {
515 "compute_node": shortname_schema,
516 "ports": {
517 "type": "array",
518 "items": {
519 "type": "object",
520 "properties": {
521 "pci": pci_extended_schema,
522 "switch_port": shortname_schema,
523 "switch_mac": mac_schema
524 },
525 "required": ["pci"]
526 }
527 }
528 },
529 "required": ["compute_node", "ports"]
530 }
531 }
532 sdn_external_port_schema = {
533 "$schema": "http://json-schema.org/draft-04/schema#",
534 "title": "External port information",
535 "type": "object",
536 "properties": {
537 "port": {"type": "string", "minLength": 1, "maxLength": 60},
538 "vlan": vlan_schema,
539 "mac": mac_schema
540 },
541 "required": ["port"]
542 }
543
544 # K8s Clusters
545 k8scluster_nets_schema = {
546 "title": "k8scluster nets input schema",
547 "$schema": "http://json-schema.org/draft-04/schema#",
548 "type": "object",
549 "patternProperties": {".": {"oneOf": [description_schema, null_schema]}},
550 "minProperties": 1,
551 "additionalProperties": False
552 }
553 k8scluster_new_schema = {
554 "title": "k8scluster creation input schema",
555 "$schema": "http://json-schema.org/draft-04/schema#",
556 "type": "object",
557 "properties": {
558 "schema_version": schema_version,
559 "schema_type": schema_type,
560 "name": name_schema,
561 "description": description_schema,
562 "credentials": object_schema,
563 "vim_account": id_schema,
564 "k8s_version": string_schema,
565 "nets": k8scluster_nets_schema,
566 "namespace": name_schema,
567 "cni": nameshort_list_schema,
568 },
569 "required": ["name", "credentials", "vim_account", "k8s_version", "nets"],
570 "additionalProperties": False
571 }
572 k8scluster_edit_schema = {
573 "title": "vim_account edit input schema",
574 "$schema": "http://json-schema.org/draft-04/schema#",
575 "type": "object",
576 "properties": {
577 "name": name_schema,
578 "description": description_schema,
579 "credentials": object_schema,
580 "vim_account": id_schema,
581 "k8s_version": string_schema,
582 "nets": k8scluster_nets_schema,
583 "namespace": name_schema,
584 "cni": nameshort_list_schema,
585 },
586 "additionalProperties": False
587 }
588
589 # K8s Repos
590 k8srepo_types = {"enum": ["helm-chart", "juju-bundle"]}
591 k8srepo_properties = {
592 "name": name_schema,
593 "description": description_schema,
594 "type": k8srepo_types,
595 "url": description_schema,
596 }
597 k8srepo_new_schema = {
598 "title": "k8scluster creation input schema",
599 "$schema": "http://json-schema.org/draft-04/schema#",
600 "type": "object",
601 "properties": k8srepo_properties,
602 "required": ["name", "type", "url"],
603 "additionalProperties": False
604 }
605 k8srepo_edit_schema = {
606 "title": "vim_account edit input schema",
607 "$schema": "http://json-schema.org/draft-04/schema#",
608 "type": "object",
609 "properties": k8srepo_properties,
610 "additionalProperties": False
611 }
612
613 # PDUs
614 pdu_interface = {
615 "type": "object",
616 "properties": {
617 "name": shortname_schema,
618 "mgmt": bool_schema,
619 "type": {"enum": ["overlay", 'underlay']},
620 "ip-address": ip_schema,
621 # TODO, add user, password, ssh-key
622 "mac-address": mac_schema,
623 "vim-network-name": shortname_schema, # interface is connected to one vim network, or switch port
624 "vim-network-id": shortname_schema,
625 # # provide this in case SDN assist must deal with this interface
626 # "switch-dpid": dpid_Schema,
627 # "switch-port": shortname_schema,
628 # "switch-mac": shortname_schema,
629 # "switch-vlan": vlan_schema,
630 },
631 "required": ["name", "mgmt", "ip-address"],
632 "additionalProperties": False
633 }
634 pdu_new_schema = {
635 "title": "pdu creation input schema",
636 "$schema": "http://json-schema.org/draft-04/schema#",
637 "type": "object",
638 "properties": {
639 "name": shortname_schema,
640 "type": shortname_schema,
641 "description": description_schema,
642 "shared": bool_schema,
643 "vims": nameshort_list_schema,
644 "vim_accounts": nameshort_list_schema,
645 "interfaces": {
646 "type": "array",
647 "items": pdu_interface,
648 "minItems": 1
649 }
650 },
651 "required": ["name", "type", "interfaces"],
652 "additionalProperties": False
653 }
654
655 pdu_edit_schema = {
656 "title": "pdu edit input schema",
657 "$schema": "http://json-schema.org/draft-04/schema#",
658 "type": "object",
659 "properties": {
660 "name": shortname_schema,
661 "type": shortname_schema,
662 "description": description_schema,
663 "shared": bool_schema,
664 "vims": {"oneOf": [array_edition_schema, nameshort_list_schema]},
665 "vim_accounts": {"oneOf": [array_edition_schema, nameshort_list_schema]},
666 "interfaces": {"oneOf": [
667 array_edition_schema,
668 {
669 "type": "array",
670 "items": pdu_interface,
671 "minItems": 1
672 }
673 ]}
674 },
675 "additionalProperties": False,
676 "minProperties": 1
677 }
678
679 # USERS
680 project_role_mappings = {
681 "title": "list pf projects/roles",
682 "$schema": "http://json-schema.org/draft-04/schema#",
683 "type": "array",
684 "items": {
685 "type": "object",
686 "properties": {
687 "project": shortname_schema,
688 "role": shortname_schema
689 },
690 "required": ["project", "role"],
691 "additionalProperties": False
692 },
693 "minItems": 1
694 }
695 project_role_mappings_optional = {
696 "title": "list of projects/roles or projects only",
697 "$schema": "http://json-schema.org/draft-04/schema#",
698 "type": "array",
699 "items": {
700 "type": "object",
701 "properties": {
702 "project": shortname_schema,
703 "role": shortname_schema
704 },
705 "required": ["project"],
706 "additionalProperties": False
707 },
708 "minItems": 1
709 }
710 user_new_schema = {
711 "$schema": "http://json-schema.org/draft-04/schema#",
712 "title": "New user schema",
713 "type": "object",
714 "properties": {
715 "username": shortname_schema,
716 "password": passwd_schema,
717 "projects": nameshort_list_schema,
718 "project_role_mappings": project_role_mappings,
719 },
720 "required": ["username", "password"],
721 "additionalProperties": False
722 }
723 user_edit_schema = {
724 "$schema": "http://json-schema.org/draft-04/schema#",
725 "title": "User edit schema for administrators",
726 "type": "object",
727 "properties": {
728 "password": passwd_schema,
729 "username": shortname_schema, # To allow User Name modification
730 "projects": {
731 "oneOf": [
732 nameshort_list_schema,
733 array_edition_schema
734 ]
735 },
736 "project_role_mappings": project_role_mappings,
737 "add_project_role_mappings": project_role_mappings,
738 "remove_project_role_mappings": project_role_mappings_optional,
739 },
740 "minProperties": 1,
741 "additionalProperties": False
742 }
743
744 # PROJECTS
745 topics_with_quota = ["vnfds", "nsds", "nsts", "pdus", "nsrs", "nsis", "vim_accounts", "wim_accounts", "sdns",
746 "k8sclusters", "k8srepos"]
747 project_new_schema = {
748 "$schema": "http://json-schema.org/draft-04/schema#",
749 "title": "New project schema for administrators",
750 "type": "object",
751 "properties": {
752 "name": shortname_schema,
753 "admin": bool_schema,
754 "quotas": {
755 "type": "object",
756 "properties": {topic: integer0_schema for topic in topics_with_quota},
757 "additionalProperties": False
758 },
759 },
760 "required": ["name"],
761 "additionalProperties": False
762 }
763 project_edit_schema = {
764 "$schema": "http://json-schema.org/draft-04/schema#",
765 "title": "Project edit schema for administrators",
766 "type": "object",
767 "properties": {
768 "admin": bool_schema,
769 "name": shortname_schema, # To allow Project Name modification
770 "quotas": {
771 "type": "object",
772 "properties": {topic: {"oneOf": [integer0_schema, null_schema]} for topic in topics_with_quota},
773 "additionalProperties": False
774 },
775 },
776 "additionalProperties": False,
777 "minProperties": 1
778 }
779
780 # ROLES
781 roles_new_schema = {
782 "$schema": "http://json-schema.org/draft-04/schema#",
783 "title": "New role schema for administrators",
784 "type": "object",
785 "properties": {
786 "name": shortname_schema,
787 "permissions": {
788 "type": "object",
789 "patternProperties": {
790 ".": bool_schema,
791 },
792 # "minProperties": 1,
793 }
794 },
795 "required": ["name"],
796 "additionalProperties": False
797 }
798 roles_edit_schema = {
799 "$schema": "http://json-schema.org/draft-04/schema#",
800 "title": "Roles edit schema for administrators",
801 "type": "object",
802 "properties": {
803 "name": shortname_schema,
804 "permissions": {
805 "type": "object",
806 "patternProperties": {
807 ".": {
808 "oneOf": [bool_schema, null_schema]
809 }
810 },
811 # "minProperties": 1,
812 }
813 },
814 "additionalProperties": False,
815 "minProperties": 1
816 }
817
818 # GLOBAL SCHEMAS
819
820 nbi_new_input_schemas = {
821 "users": user_new_schema,
822 "projects": project_new_schema,
823 "vim_accounts": vim_account_new_schema,
824 "sdns": sdn_new_schema,
825 "ns_instantiate": ns_instantiate,
826 "ns_action": ns_action,
827 "ns_scale": ns_scale,
828 "pdus": pdu_new_schema,
829 }
830
831 nbi_edit_input_schemas = {
832 "users": user_edit_schema,
833 "projects": project_edit_schema,
834 "vim_accounts": vim_account_edit_schema,
835 "sdns": sdn_edit_schema,
836 "pdus": pdu_edit_schema,
837 }
838
839 # NETSLICE SCHEMAS
840 nsi_subnet_instantiate = deepcopy(ns_instantiate)
841 nsi_subnet_instantiate["title"] = "netslice subnet instantiation params input schema"
842 nsi_subnet_instantiate["properties"]["id"] = name_schema
843 del nsi_subnet_instantiate["required"]
844
845 nsi_vld_instantiate = {
846 "title": "netslice vld instantiation params input schema",
847 "$schema": "http://json-schema.org/draft-04/schema#",
848 "type": "object",
849 "properties": {
850 "name": string_schema,
851 "vim-network-name": {"OneOf": [string_schema, object_schema]},
852 "vim-network-id": {"OneOf": [string_schema, object_schema]},
853 "ip-profile": object_schema,
854 },
855 "required": ["name"],
856 "additionalProperties": False
857 }
858
859 nsi_instantiate = {
860 "title": "netslice action instantiate input schema",
861 "$schema": "http://json-schema.org/draft-04/schema#",
862 "type": "object",
863 "properties": {
864 "lcmOperationType": string_schema,
865 "netsliceInstanceId": id_schema,
866 "nsiName": name_schema,
867 "nsiDescription": {"oneOf": [description_schema, null_schema]},
868 "nstId": string_schema,
869 "vimAccountId": id_schema,
870 "ssh_keys": {"type": "string"},
871 "nsi_id": id_schema,
872 "additionalParamsForNsi": object_schema,
873 "netslice-subnet": {
874 "type": "array",
875 "minItems": 1,
876 "items": nsi_subnet_instantiate
877 },
878 "netslice-vld": {
879 "type": "array",
880 "minItems": 1,
881 "items": nsi_vld_instantiate
882 },
883 },
884 "required": ["nsiName", "nstId", "vimAccountId"],
885 "additionalProperties": False
886 }
887
888 nsi_action = {
889
890 }
891
892 nsi_terminate = {
893
894 }
895
896
897 class ValidationError(Exception):
898 def __init__(self, message, http_code=HTTPStatus.UNPROCESSABLE_ENTITY):
899 self.http_code = http_code
900 Exception.__init__(self, message)
901
902
903 def validate_input(indata, schema_to_use):
904 """
905 Validates input data against json schema
906 :param indata: user input data. Should be a dictionary
907 :param schema_to_use: jsonschema to test
908 :return: None if ok, raises ValidationError exception on error
909 """
910 try:
911 if schema_to_use:
912 js_v(indata, schema_to_use)
913 return None
914 except js_e.ValidationError as e:
915 if e.path:
916 error_pos = "at '" + ":".join(map(str, e.path)) + "'"
917 else:
918 error_pos = ""
919 raise ValidationError("Format error {} '{}' ".format(error_pos, e.message))
920 except js_e.SchemaError:
921 raise ValidationError("Bad json schema {}".format(schema_to_use), http_code=HTTPStatus.INTERNAL_SERVER_ERROR)
922
923
924 def is_valid_uuid(x):
925 """
926 Test for a valid UUID
927 :param x: string to test
928 :return: True if x is a valid uuid, False otherwise
929 """
930 try:
931 if UUID(x):
932 return True
933 except (TypeError, ValueError, AttributeError):
934 return False