"""Review candidates.""" import codecs import copy import os import re from distutils.version import LooseVersion from six import iteritems from ansiblelater import LOG from ansiblelater import utils from ansiblelater.logger import flag_extra try: # Ansible 2.4 import of module loader from ansible.plugins.loader import module_loader except ImportError: try: from ansible.plugins import module_loader except ImportError: from ansible.utils import module_finder as module_loader class Candidate(object): """ Meta object for all files which later has to process. Each file passed to later will be classified by type and bundled with necessary meta informations for rule processing. """ def __init__(self, filename, settings={}, standards=[]): self.path = filename self.binary = False self.vault = False self.filetype = type(self).__name__.lower() self.expected_version = True self.standards = self._get_standards(settings, standards) try: with codecs.open(filename, mode="rb", encoding="utf-8") as f: if f.readline().startswith("$ANSIBLE_VAULT"): self.vault = True except UnicodeDecodeError: self.binary = True self.version = self._get_version(settings) def _get_version(self, settings): path = self.path version = None if not self.binary: if isinstance(self, RoleFile): parentdir = os.path.dirname(os.path.abspath(self.path)) while parentdir != os.path.dirname(parentdir): meta_file = os.path.join(parentdir, "meta", "main.yml") if os.path.exists(meta_file): path = meta_file break parentdir = os.path.dirname(parentdir) version_re = re.compile(r"^# Standards:\s*([\d.]+)") with codecs.open(path, mode="rb", encoding="utf-8") as f: for line in f: match = version_re.match(line) if match: version = match.group(1) if not version: version = utils.standards_latest(self.standards) if self.expected_version: if isinstance(self, RoleFile): LOG.warning( "{name} {path} is in a role that contains a meta/main.yml without a " "declared standards version. " "Using latest standards version {version}".format( name=type(self).__name__, path=self.path, version=version ) ) else: LOG.warning( "{name} {path} does not present standards version. " "Using latest standards version {version}".format( name=type(self).__name__, path=self.path, version=version ) ) else: LOG.info( "{name} {path} declares standards version {version}".format( name=type(self).__name__, path=self.path, version=version ) ) return version def _get_standards(self, settings, standards): target_standards = [] includes = settings.config["rules"]["filter"] excludes = settings.config["rules"]["exclude_filter"] if len(includes) == 0: includes = [s.id for s in standards] for standard in standards: if standard.id in includes and standard.id not in excludes: target_standards.append(standard) return target_standards def review(self, settings, lines=None): errors = 0 for standard in self.standards: if type(self).__name__.lower() not in standard.types: continue result = standard.check(self, settings.config) if not result: utils.sysexit_with_message( "Standard '{}' returns an empty result object.".format( standard.check.__name__ ) ) labels = { "tag": "review", "standard": standard.name, "file": self.path, "passed": True } if standard.id and standard.id.strip(): labels["id"] = standard.id for err in [ err for err in result.errors if not err.lineno or utils.is_line_in_ranges(err.lineno, utils.lines_ranges(lines)) ]: # noqa err_labels = copy.copy(labels) err_labels["passed"] = False if isinstance(err, Error): err_labels.update(err.to_dict()) if not standard.version: LOG.warning( "{id}Best practice '{name}' not met:\n{path}:{error}".format( id=self._format_id(standard.id), name=standard.name, path=self.path, error=err ), extra=flag_extra(err_labels) ) elif LooseVersion(standard.version) > LooseVersion(self.version): LOG.warning( "{id}Future standard '{name}' not met:\n{path}:{error}".format( id=self._format_id(standard.id), name=standard.name, path=self.path, error=err ), extra=flag_extra(err_labels) ) else: LOG.error( "{id}Standard '{name}' not met:\n{path}:{error}".format( id=self._format_id(standard.id), name=standard.name, path=self.path, error=err ), extra=flag_extra(err_labels) ) errors = errors + 1 return errors def _format_id(self, standard_id): if standard_id and standard_id.strip(): standard_id = "[{id}] ".format(id=standard_id.strip()) return standard_id def __repr__(self): # noqa return "{name} ({path})".format(name=type(self).__name__, path=self.path) def __getitem__(self, item): # noqa return self.__dict__.get(item) class RoleFile(Candidate): """Object classified as Ansible role file.""" def __init__(self, filename, settings={}, standards=[]): super(RoleFile, self).__init__(filename, settings, standards) parentdir = os.path.dirname(os.path.abspath(filename)) while parentdir != os.path.dirname(parentdir): role_modules = os.path.join(parentdir, "library") if os.path.exists(role_modules): module_loader.add_directory(role_modules) break parentdir = os.path.dirname(parentdir) class Playbook(Candidate): """Object classified as Ansible playbook.""" pass class Task(RoleFile): """Object classified as Ansible task file.""" def __init__(self, filename, settings={}, standards=[]): super(Task, self).__init__(filename, settings, standards) self.filetype = "tasks" class Handler(RoleFile): """Object classified as Ansible handler file.""" def __init__(self, filename, settings={}, standards=[]): super(Handler, self).__init__(filename, settings, standards) self.filetype = "handlers" class Vars(Candidate): """Object classified as Ansible vars file.""" pass class Unversioned(Candidate): """Object classified as unversioned file.""" def __init__(self, filename, settings={}, standards=[]): super(Unversioned, self).__init__(filename, settings, standards) self.expected_version = False class InventoryVars(Unversioned): """Object classified as Ansible inventory vars.""" pass class HostVars(InventoryVars): """Object classified as Ansible host vars.""" pass class GroupVars(InventoryVars): """Object classified as Ansible group vars.""" pass class RoleVars(RoleFile): """Object classified as Ansible role vars.""" pass class Meta(RoleFile): """Object classified as Ansible meta file.""" pass class Inventory(Unversioned): """Object classified as Ansible inventory file.""" pass class Code(Unversioned): """Object classified as code file.""" pass class Template(RoleFile): """Object classified as Ansible template file.""" pass class Doc(Unversioned): """Object classified as documentation file.""" pass class Makefile(Unversioned): """Object classified as makefile.""" pass class File(RoleFile): """Object classified as generic file.""" pass class Rolesfile(Unversioned): """Object classified as Ansible roles file.""" pass class Error(object): """Default error object created if a rule failed.""" def __init__(self, lineno, message, error_type=None, **kwargs): """ Initialize a new error object and returns None. :param lineno: Line number where the error from de rule occures :param message: Detailed error description provided by the rule """ self.lineno = lineno self.message = message self.kwargs = kwargs for (key, value) in iteritems(kwargs): setattr(self, key, value) def __repr__(self): # noqa if self.lineno: return "{no}: {msg}".format(no=self.lineno, msg=self.message) else: return " {msg}".format(msg=self.message) def to_dict(self): result = dict(lineno=self.lineno, message=self.message) for (key, value) in iteritems(self.kwargs): result[key] = value return result class Result(object): """Generic result object.""" def __init__(self, candidate, errors=None): self.candidate = candidate self.errors = errors or [] def message(self): return "\n".join(["{0}:{1}".format(self.candidate, error) for error in self.errors]) def classify(filename, settings={}, standards=[]): parentdir = os.path.basename(os.path.dirname(filename)) basename = os.path.basename(filename) if parentdir in ["tasks"]: return Task(filename, settings, standards) if parentdir in ["handlers"]: return Handler(filename, settings, standards) if parentdir in ["vars", "defaults"]: return RoleVars(filename, settings, standards) if "group_vars" in filename.split(os.sep): return GroupVars(filename, settings, standards) if "host_vars" in filename.split(os.sep): return HostVars(filename, settings, standards) if parentdir in ["meta"]: return Meta(filename, settings, standards) if ( parentdir in ["library", "lookup_plugins", "callback_plugins", "filter_plugins"] or filename.endswith(".py") ): return Code(filename, settings, standards) if "inventory" == basename or "hosts" == basename or parentdir in ["inventories"]: return Inventory(filename, settings, standards) if "rolesfile" in basename or "requirements" in basename: return Rolesfile(filename, settings, standards) if "Makefile" in basename: return Makefile(filename, settings, standards) if "templates" in filename.split(os.sep) or basename.endswith(".j2"): return Template(filename, settings, standards) if "files" in filename.split(os.sep): return File(filename, settings, standards) if basename.endswith(".yml") or basename.endswith(".yaml"): return Playbook(filename, settings, standards) if "README" in basename: return Doc(filename, settings, standards) return None