mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 11:16:47 +00:00
726f330dd0
- An API volume takes the name and size the web form takes. Its name went into the volume XML unchecked, so a name could add elements such as a backing store pointing at another VM's disk; the name is also escaped there now. A size of 0 and metadata preallocation on a non-qcow2 volume are refused or dropped, as on the web form. - An API compute update with an empty or null password keeps the stored one, as the web form does; it emptied it and cut the host off. - The architectures endpoint answers 404 for an unknown compute instead of 500; an unrouted copy of it is removed.
73 lines
2.6 KiB
Python
73 lines
2.6 KiB
Python
from admin.permissions import IsSuperUser
|
|
from computes.models import Compute
|
|
from django.shortcuts import get_object_or_404
|
|
from drf_spectacular.types import OpenApiTypes
|
|
from drf_spectacular.utils import extend_schema
|
|
from logs.audit import audit, changed_fields, snapshot
|
|
from rest_framework import viewsets
|
|
from rest_framework.response import Response
|
|
from vrtManager.create import wvmCreate
|
|
|
|
from .serializers import ComputeSerializer
|
|
|
|
|
|
class ComputeViewSet(viewsets.ModelViewSet):
|
|
"""
|
|
API endpoint that allows computes to be viewed or edited.
|
|
"""
|
|
|
|
queryset = Compute.objects.all().order_by("name")
|
|
lookup_value_converter = "int"
|
|
serializer_class = ComputeSerializer
|
|
permission_classes = [IsSuperUser]
|
|
|
|
def perform_create(self, serializer):
|
|
data = serializer.validated_data
|
|
with audit(self.request, data["name"], f"Compute {data['name']} ({data['hostname']})", "add"):
|
|
serializer.save()
|
|
|
|
def perform_update(self, serializer):
|
|
compute = serializer.instance
|
|
subject = f"Compute {compute.name} ({compute.hostname})"
|
|
before = snapshot(compute)
|
|
with audit(self.request, compute, subject, "change") as entry:
|
|
serializer.save()
|
|
fields = changed_fields(before, snapshot(compute))
|
|
entry.action = "change " + ", ".join(fields)
|
|
entry.skip = not fields
|
|
|
|
def perform_destroy(self, instance):
|
|
with audit(self.request, instance, f"Compute {instance.name} ({instance.hostname})", "delete"):
|
|
instance.delete()
|
|
|
|
|
|
class ComputeArchitecturesView(viewsets.ViewSet):
|
|
permission_classes = [IsSuperUser]
|
|
|
|
# The list is a mapping of architecture -> machine types, not an array,
|
|
# so drf-spectacular would name it "retrieve" and clash with retrieve().
|
|
@extend_schema(operation_id="api_v1_computes_archs_list", responses=OpenApiTypes.OBJECT)
|
|
def list(self, request, compute_pk=None):
|
|
"""
|
|
Return a list of supported host architectures.
|
|
"""
|
|
compute = get_object_or_404(Compute, pk=compute_pk)
|
|
conn = wvmCreate(
|
|
compute.hostname,
|
|
compute.login,
|
|
compute.password,
|
|
compute.type,
|
|
)
|
|
return Response(conn.get_hypervisors_machines())
|
|
|
|
@extend_schema(responses={200: {"type": "array", "items": {"type": "string"}}})
|
|
def retrieve(self, request, compute_pk=None, pk=None):
|
|
compute = get_object_or_404(Compute, pk=compute_pk)
|
|
conn = wvmCreate(
|
|
compute.hostname,
|
|
compute.login,
|
|
compute.password,
|
|
compute.type,
|
|
)
|
|
return Response(conn.get_machine_types(pk))
|
|
|