#!/usr/bin/python2.7

# Copyright (c) 2015, 2016, Oracle and/or its affiliates. All rights reserved.

#

#    Licensed under the Apache License, Version 2.0 (the "License"); you may

#    not use this file except in compliance with the License. You may obtain

#    a copy of the License at

#

#         http://www.apache.org/licenses/LICENSE-2.0

#

#    Unless required by applicable law or agreed to in writing, software

#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT

#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the

#    License for the specific language governing permissions and limitations

#    under the License.

import glob

import os

from subprocess import check_call, Popen, PIPE

import sys

import traceback

import iniparse

import smf_include

import sqlalchemy

from openstack_common import alter_mysql_tables, create_backups, modify_conf

KEYSTONE_CONF_MAPPINGS = {

    # Deprecated group/name

    ('DEFAULT', 'admin_bind_host'): ('eventlet_server', 'admin_bind_host'),

    ('DEFAULT', 'admin_workers'): ('eventlet_server', 'admin_workers'),

    ('DEFAULT', 'admin_port'): ('eventlet_server', 'admin_port'),

    ('DEFAULT', 'tcp_keepidle'): ('eventlet_server', 'tcp_keepidle'),

    ('ssl', 'cert_required'): ('eventlet_server_ssl', 'cert_required'),

    ('DEFAULT', 'public_port'): ('eventlet_server', 'public_port'),

    ('DEFAULT', 'public_bind_host'): ('eventlet_server', 'public_bind_host'),

    ('DEFAULT', 'tcp_keepalive'): ('eventlet_server', 'tcp_keepalive'),

    ('DEFAULT', 'public_workers'): ('eventlet_server', 'public_workers'),

    ('ssl', 'keyfile'): ('eventlet_server_ssl', 'keyfile'),

    ('ssl', 'ca_certs'): ('eventlet_server_ssl', 'ca_certs'),

    ('ssl', 'enable'): ('eventlet_server_ssl', 'enable'),

    ('ssl', 'certfile'): ('eventlet_server_ssl', 'certfile'),

    ('DEFAULT', 'max_request_body_size'):

        ('oslo_middleware', 'max_request_body_size'),

    ('assignment', 'list_limit'): ('resource', 'list_limit'),

    ('assignment', 'caching'): ('resource', 'caching'),

    ('assignment', 'cache_time'): ('resource', 'cache_time'),

    ('token', 'revocation_cache_time'): ('revoke', 'cache_time'),

    ('DEFAULT', 'log-format'): (None, None),

    ('DEFAULT', 'use-syslog'): (None, None),

}

KEYSTONE_CONF_EXCEPTIONS = [

    ('eventlet_server', 'public_workers'),

    ('eventlet_server', 'admin_workers'),

    ('database', 'connection'),

]

def start():

    # pull out the current version of config/upgrade-id

    p = Popen(['/usr/bin/svcprop', '-p', 'config/upgrade-id',

               os.environ['SMF_FMRI']], stdout=PIPE, stderr=PIPE)

    curr_ver, _err = p.communicate()

    curr_ver = curr_ver.strip()

    # extract the openstack-upgrade-id from the pkg

    p = Popen(['/usr/bin/pkg', 'contents', '-H', '-t', 'set', '-o', 'value',

               '-a', 'name=openstack.upgrade-id',

               'pkg:/cloud/openstack/keystone'], stdout=PIPE, stderr=PIPE)

    pkg_ver, _err = p.communicate()

    pkg_ver = pkg_ver.strip()

    if curr_ver == pkg_ver:

        # No need to upgrade

        sys.exit(smf_include.SMF_EXIT_OK)

    # look for any .new files

    if glob.glob('/etc/keystone/*.new'):

        # the versions are different, so perform an upgrade

        # modify the configuration files

        # backup all the old configuration files

        create_backups('/etc/keystone')

        modify_conf('/etc/keystone/keystone.conf', KEYSTONE_CONF_MAPPINGS,

                    KEYSTONE_CONF_EXCEPTIONS)

        modify_conf('/etc/keystone/keystone-paste.ini')

        modify_conf('/etc/keystone/logging.conf')

    config = iniparse.RawConfigParser()

    config.read('/etc/keystone/keystone.conf')

    # In certain cases the database section does not exist and the

    # default database chosen is sqlite.

    if config.has_section('database'):

        db_connection = config.get('database', 'connection')

        if db_connection.startswith('mysql'):

            engine = sqlalchemy.create_engine(db_connection)

            if engine.url.username != '%SERVICE_USER%':

                alter_mysql_tables(engine)

                print "altered character set to utf8 in keystone tables"

    # update the current version

    check_call(['/usr/sbin/svccfg', '-s', os.environ['SMF_FMRI'], 'setprop',

               'config/upgrade-id', '=', pkg_ver])

    check_call(['/usr/sbin/svccfg', '-s', os.environ['SMF_FMRI'], 'refresh'])

    sys.exit(smf_include.SMF_EXIT_OK)

if __name__ == '__main__':

    os.putenv('LC_ALL', 'C')

    try:

        smf_include.smf_main()

    except RuntimeError:

        sys.exit(smf_include.SMF_EXIT_ERR_FATAL)

    except Exception as err:

        print 'Unknown error:  %s' % err

        print

        traceback.print_exc(file=sys.stdout)

        sys.exit(smf_include.SMF_EXIT_ERR_FATAL)