Skip to content

Commit

Permalink
Avoid fetching user-data when fetching meta-data on Alibaba Cloud
Browse files Browse the repository at this point in the history
Signed-off-by: ETiV Wang <et@xde.com>
  • Loading branch information
ETiV Wang committed Jul 30, 2023
1 parent 36a56d7 commit 5dffbd8
Show file tree
Hide file tree
Showing 3 changed files with 212 additions and 15 deletions.
36 changes: 23 additions & 13 deletions lib/ohai/mixin/alibaba_metadata.rb
Original file line number Diff line number Diff line change
Expand Up @@ -41,30 +41,40 @@ def http_get(uri)
conn.get("/2016-01-01/#{uri}", { "User-Agent" => "chef-ohai/#{Ohai::VERSION}" })
end

def fetch_metadata(id = "")
def fetch_metadata(id = "", is_directory = true)
response = http_get(id)
if response.code == "200"
json_data = parse_json(response.body)
if json_data.nil?
logger.warn("Mixin AlibabaMetadata: Metadata response is NOT valid JSON for id='#{id}'")
if response.body.include?("\n")
temp = {}
response.body.split("\n").each do |sub_attr|
temp[sanitize_key(sub_attr)] = fetch_metadata("#{id}/#{sub_attr}")
end
temp
else

if !is_directory
json_data = parse_json(response.body)
if json_data.nil?
response.body
else
json_data
end
else
json_data
elsif is_directory
temp = {}
response.body.split("\n").each do |sub_attr|
if "#{id}/#{sub_attr}" != "/user-data"
uri = id == "" ? "#{id}#{sub_attr}/" : "#{id}#{sub_attr}"
temp[sanitize_key(sub_attr).gsub(/_$/, "")] = fetch_metadata(uri, has_trailing_slash?(uri))
end
end
temp
end
else
logger.warn("Mixin AlibabaMetadata: Received response code #{response.code} requesting metadata for id='#{id}'")
nil
end
end

# @param data [String]
#
# @return [Boolean] is there a trailing /?
def has_trailing_slash?(data)
!!(data =~ %r{/$})
end

def sanitize_key(key)
key.gsub(%r{\-|/}, "_")
end
Expand Down
187 changes: 187 additions & 0 deletions spec/unit/mixin/alibaba_metadata_spec.rb
Original file line number Diff line number Diff line change
@@ -0,0 +1,187 @@
#
# Author:: ETiV Wang <et@xde.com>
# Copyright:: Copyright (c) Chef Software Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDIT"Net::HTTP Response"NS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
require "spec_helper"
require "ohai/mixin/alibaba_metadata"

describe Ohai::Mixin::AlibabaMetadata do
let(:mixin) do
metadata_object = Object.new.extend(described_class)
conn = double("Net::HTTP client")
allow(conn).to receive(:get).and_return(response)
allow(metadata_object).to receive(:http_get).and_return(conn.get)
metadata_object
end

before do
logger = instance_double("Mixlib::Log::Child", trace: nil, debug: nil, warn: nil)
allow(mixin).to receive(:logger).and_return(logger)
end

JSON_STR = %{{"zone-id":"cn-shanghai-a","region-id":"cn-shanghai","private-ipv4":"192.168.0.200","instance-type":"ecs.4xlarge"}}.freeze
CONF_STR = %{#cloud-config
# system wide
timezone: Asia/Shanghai
locale: en_US.UTF-8
manage_etc_hosts: localhost
## apt & packages
apt:
disable_suites: [proposed, $RELEASE-proposed-updates]
package_update: true
package_upgrade: true
packages:
- htop
- lvm2
- tmux
- dnsutils
- net-tools
- rsync
- ca-certificates
- curl
}.freeze

API_TREE = {
"meta-data" => {
# plain K-V
"a" => "b",
# nested structure
"c" => {
"d" => "e",
},
# has a new-line but not nested
"dns-conf" => "1.1.1.1\n1.0.0.1",
"eipv4" => nil,
"private_ipv4" => "192.168.2.1",
"private_ipv4s" => ["192.168.2.2"],
"hostname" => "some-host.example.com",
},
"json-data" => {
"dynamic" => JSON_STR,
},
"user-data" => CONF_STR,
}.freeze

def compare_tree(local, remote, need_sanitize = false)
local.all? do |k, v|
key = k
key = mixin.sanitize_key(k) if !!need_sanitize

if v.class == Hash
return compare_tree(v, remote[key], need_sanitize)
else
return v == remote[key]
end
end
end

describe "#fetch_metadata" do
context "when get a non-200 status code" do
let(:response) { double("Net::HTTP Response", code: "404") }

it "should get nil" do
expect(mixin.fetch_metadata).to eq(nil)
end
end

context "when get a plain text content without new-line" do
let(:response) { double("Net::HTTP Response", body: "bar", code: "200") }

it "should be its original content" do
expect(mixin.fetch_metadata("foo", false)).to eq("bar")
end
end

context "when get a plain text content with a new-line" do
let(:response) { double("Net::HTTP Response", body: "bar\nbaz", code: "200") }

it "should be its original content" do
expect(mixin.fetch_metadata("foo", false)).to eq("bar\nbaz")
end
end

context "when get a JSON response" do
let(:response) { double("Net::HTTP Response", body: JSON_STR, code: "200") }

it "should be parsed" do
ret = mixin.fetch_metadata("foo", false)

parser = FFI_Yajl::Parser.new
json_obj = parser.parse(JSON_STR)

expect(compare_tree(json_obj, ret, false)).to eq(true)
end
end

context "when recursively fetching a tree structure from root" do
let(:response) { double("Net::HTTP Response", body: "", code: "200") }

it "should be a nested structure" do
allow(mixin).to receive(:http_get) do |uri|
tree = API_TREE

uri.split("/").each do |part|
tree = tree[part] unless part == ""
end

output = [tree]
if tree.class == Hash
output = tree.keys.map do |key|
ret = key
ret += "/" if tree[key].class == Hash
ret
end
end

double("Net::HTTP Response", body: output.join("\n"), code: "200")
end

ret = mixin.fetch_metadata

expect(compare_tree(API_TREE, ret, true)).to eq(true)
end

it "should avoid the key user-data" do
allow(mixin).to receive(:http_get) do |uri|
tree = API_TREE

uri.split("/").each do |part|
tree = tree[part] unless part == ""
end

output = [tree]
if tree.class == Hash
output = tree.keys.map do |key|
ret = key
ret += "/" if tree[key].class == Hash
ret
end
end

double("Net::HTTP Response", body: output.join("\n"), code: "200")
end

ret = mixin.fetch_metadata

expect(ret["meta_data"]).not_to be_nil
expect(ret["json_data"]).not_to be_nil
expect(ret["user_data"]).to eq(nil)

end
end

end
end
4 changes: 2 additions & 2 deletions spec/unit/plugins/alibaba_spec.rb
Original file line number Diff line number Diff line change
Expand Up @@ -43,8 +43,8 @@
before do
@http_get = double("Net::HTTP client")
allow(plugin).to receive(:http_get).with("").and_return(double("Net::HTTP Response", body: "meta-data\n", code: "200"))
allow(plugin).to receive(:http_get).with("/meta-data").and_return(double("Net::HTTP Response", body: "hostname\n", code: "200"))
allow(plugin).to receive(:http_get).with("/meta-data/hostname").and_return(double("Net::HTTP Response", body: "foo", code: "200"))
allow(plugin).to receive(:http_get).with("meta-data/").and_return(double("Net::HTTP Response", body: "hostname\n", code: "200"))
allow(plugin).to receive(:http_get).with("meta-data/hostname").and_return(double("Net::HTTP Response", body: "foo", code: "200"))
allow(IO).to receive(:select).and_return([[], [1], []])
t = double("connection")
allow(t).to receive(:connect_nonblock).and_raise(Errno::EINPROGRESS)
Expand Down

0 comments on commit 5dffbd8

Please sign in to comment.