Data Model

shade has a very strict policy on not breaking backwards compatability ever. However, with the data structures returned from OpenStack, there are places where the resource structures from OpenStack are returned to the user somewhat directly, leaving a shade user open to changes/differences in result content.

To combat that, shade ‘normalizes’ the return structure from OpenStack in many places, and the results of that normalization are listed below. Where shade performs normalization, a user can count on any fields declared in the docs as being completely safe to use - they are as much a part of shade’s API contract as any other Python method.

Some OpenStack objects allow for arbitrary attributes at the root of the object. shade will pass those through so as not to break anyone who may be counting on them, but as they are arbitrary shade can make no guarantees as to their existence. As part of normalization, shade will put any attribute from an OpenStack resource that is not in its data model contract into an attribute called ‘properties’. The contents of properties are defined to be an arbitrary collection of key value pairs with no promises as to any particular key ever existing.

If a user passes strict=True to the shade constructor, shade will not pass through arbitrary objects to the root of the resource, and will instead only put them in the properties dict. If a user is worried about accidentally writing code that depends on an attribute that is not part of the API contract, this can be a useful tool. Keep in mind all data can still be accessed via the properties dict, but any code touching anything in the properties dict should be aware that the keys found there are highly user/cloud specific. Any key that is transformed as part of the shade data model contract will not wind up with an entry in properties - only keys that are unknown.

Location

A Location defines where a resource lives. It includes a cloud name and a region name, an availability zone as well as information about the project that owns the resource.

The project information may contain a project id, or a combination of one or more of a project name with a domain name or id. If a project id is present, it should be considered correct.

Some resources do not carry ownership information with them. For those, the project information will be filled in from the project the user currently has a token for.

Some resources do not have information about availability zones, or may exist region wide. Those resources will have None as their availability zone.

If all of the project information is None, then

Location = dict(
  cloud=str(),
  region=str(),
  zone=str() or None,
  project=dict(
    id=str() or None,
    name=str() or None,
    domain_id=str() or None,
    domain_name=str() or None))

Resources

Flavor

A flavor for a Nova Server.

Flavor = dict(
  location=Location(),
  id=str(),
  name=str(),
  is_public=bool(),
  is_disabled=bool(),
  ram=int(),
  vcpus=int(),
  disk=int(),
  ephemeral=int(),
  swap=int(),
  rxtx_factor=float(),
  extra_specs=dict(),
  properties=dict())

Flavor Access

An access entry for a Nova Flavor.

FlavorAccess = dict(
  flavor_id=str(),
  project_id=str())

Image

A Glance Image.

Image = dict(
  location=Location(),
  id=str(),
  name=str(),
  min_ram=int(),
  min_disk=int(),
  size=int(),
  virtual_size=int(),
  container_format=str(),
  disk_format=str(),
  checksum=str(),
  created_at=str(),
  updated_at=str(),
  owner=str(),
  is_public=bool(),
  is_protected=bool(),
  visibility=str(),
  status=str(),
  locations=list(),
  direct_url=str() or None,
  tags=list(),
  properties=dict())

Keypair

A keypair for a Nova Server.

Keypair = dict(
  location=Location(),
  name=str(),
  id=str(),
  public_key=str(),
  fingerprint=str(),
  type=str(),
  user_id=str(),
  private_key=str() or None
  properties=dict())

Security Group

A Security Group from either Nova or Neutron

SecurityGroup = dict(
  location=Location(),
  id=str(),
  name=str(),
  description=str(),
  security_group_rules=list(),
  properties=dict())

Security Group Rule

A Security Group Rule from either Nova or Neutron

SecurityGroupRule = dict(
  location=Location(),
  id=str(),
  direction=str(),  # oneof('ingress', 'egress')
  ethertype=str(),
  port_range_min=int() or None,
  port_range_max=int() or None,
  protocol=str() or None,
  remote_ip_prefix=str() or None,
  security_group_id=str() or None,
  remote_group_id=str() or None
  properties=dict())

Server

A Server from Nova

Server = dict(
  location=Location(),
  id=str(),
  name=str(),
  image=dict() or str(),
  flavor=dict(),
  volumes=list(),  # Volume
  interface_ip=str(),
  has_config_drive=bool(),
  accessIPv4=str(),
  accessIPv6=str(),
  addresses=dict(),  # string, list(Address)
  created=str(),
  created_at=str(),
  key_name=str(),
  metadata=dict(),  # string, string
  private_v4=str(),
  progress=int(),
  public_v4=str(),
  public_v6=str(),
  security_groups=list(),  # SecurityGroup
  status=str(),
  updated=str(),
  user_id=str(),
  host_id=str() or None,
  power_state=str() or None,
  task_state=str() or None,
  vm_state=str() or None,
  launched_at=str() or None,
  terminated_at=str() or None,
  task_state=str() or None,
  properties=dict())

ComputeLimits

Limits and current usage for a project in Nova

ComputeLimits = dict(
  location=Location(),
  max_personality=int(),
  max_personality_size=int(),
  max_server_group_members=int(),
  max_server_groups=int(),
  max_server_meta=int(),
  max_total_cores=int(),
  max_total_instances=int(),
  max_total_keypairs=int(),
  max_total_ram_size=int(),
  total_cores_used=int(),
  total_instances_used=int(),
  total_ram_used=int(),
  total_server_groups_used=int(),
  properties=dict())

ComputeUsage

Current usage for a project in Nova

ComputeUsage = dict(
  location=Location(),
  started_at=str(),
  stopped_at=str(),
  server_usages=list(),
  max_personality=int(),
  max_personality_size=int(),
  max_server_group_members=int(),
  max_server_groups=int(),
  max_server_meta=int(),
  max_total_cores=int(),
  max_total_instances=int(),
  max_total_keypairs=int(),
  max_total_ram_size=int(),
  total_cores_used=int(),
  total_hours=int(),
  total_instances_used=int(),
  total_local_gb_usage=int(),
  total_memory_mb_usage=int(),
  total_ram_used=int(),
  total_server_groups_used=int(),
  total_vcpus_usage=int(),
  properties=dict())

ServerUsage

Current usage for a server in Nova

ComputeUsage = dict(
  started_at=str(),
  ended_at=str(),
  flavor=str(),
  hours=int(),
  instance_id=str(),
  local_gb=int(),
  memory_mb=int(),
  name=str(),
  state=str(),
  uptime=int(),
  vcpus=int(),
  properties=dict())

Floating IP

A Floating IP from Neutron or Nova

FloatingIP = dict(
  location=Location(),
  id=str(),
  description=str(),
  attached=bool(),
  fixed_ip_address=str() or None,
  floating_ip_address=str() or None,
  network=str() or None,
  port=str() or None,
  router=str(),
  status=str(),
  created_at=str() or None,
  updated_at=str() or None,
  revision_number=int() or None,
  properties=dict())

Volume

A volume from cinder.

Volume = dict(
  location=Location(),
  id=str(),
  name=str(),
  description=str(),
  size=int(),
  attachments=list(),
  status=str(),
  migration_status=str() or None,
  host=str() or None,
  replication_driver=str() or None,
  replication_status=str() or None,
  replication_extended_status=str() or None,
  snapshot_id=str() or None,
  created_at=str(),
  updated_at=str() or None,
  source_volume_id=str() or None,
  consistencygroup_id=str() or None,
  volume_type=str() or None,
  metadata=dict(),
  is_bootable=bool(),
  is_encrypted=bool(),
  can_multiattach=bool(),
  properties=dict())

VolumeType

A volume type from cinder.

VolumeType = dict(
  location=Location(),
  id=str(),
  name=str(),
  description=str() or None,
  is_public=bool(),
  qos_specs_id=str() or None,
  extra_specs=dict(),
  properties=dict())

VolumeTypeAccess

A volume type access from cinder.

VolumeTypeAccess = dict(
  location=Location(),
  volume_type_id=str(),
  project_id=str(),
  properties=dict())

ClusterTemplate

A Cluster Template from magnum.

ClusterTemplate = dict(
  location=Location(),
  apiserver_port=int(),
  cluster_distro=str(),
  coe=str(),
  created_at=str(),
  dns_nameserver=str(),
  docker_volume_size=int(),
  external_network_id=str(),
  fixed_network=str() or None,
  flavor_id=str(),
  http_proxy=str() or None,
  https_proxy=str() or None,
  id=str(),
  image_id=str(),
  insecure_registry=str(),
  is_public=bool(),
  is_registry_enabled=bool(),
  is_tls_disabled=bool(),
  keypair_id=str(),
  labels=dict(),
  master_flavor_id=str() or None,
  name=str(),
  network_driver=str(),
  no_proxy=str() or None,
  server_type=str(),
  updated_at=str() or None,
  volume_driver=str(),
  properties=dict())

MagnumService

A Magnum Service from magnum

MagnumService = dict(
  location=Location(),
  binary=str(),
  created_at=str(),
  disabled_reason=str() or None,
  host=str(),
  id=str(),
  report_count=int(),
  state=str(),
  properties=dict())

Stack

A Stack from Heat

Stack = dict(
  location=Location(),
  id=str(),
  name=str(),
  created_at=str(),
  deleted_at=str(),
  updated_at=str(),
  description=str(),
  action=str(),
  identifier=str(),
  is_rollback_enabled=bool(),
  notification_topics=list(),
  outputs=list(),
  owner=str(),
  parameters=dict(),
  parent=str(),
  stack_user_project_id=str(),
  status=str(),
  status_reason=str(),
  tags=dict(),
  tempate_description=str(),
  timeout_mins=int(),
  properties=dict())

Identity Resources

Identity Resources are slightly different.

They are global to a cloud, so location.availability_zone and location.region_name and will always be None. If a deployer happens to deploy OpenStack in such a way that users and projects are not shared amongst regions, that necessitates treating each of those regions as separate clouds from shade’s POV.

The Identity Resources that are not Project do not exist within a Project, so all of the values in location.project will be None.

Project

A Project from Keystone (or a tenant if Keystone v2)

Location information for Project has some additional specific semantics. If the project has a parent project, that will be in location.project.id, and if it doesn’t that should be None.

If the Project is associated with a domain that will be in location.project.domain_id in addition to the normal domain_id regardless of the current user’s token scope.

Project = dict(
  location=Location(),
  id=str(),
  name=str(),
  description=str(),
  is_enabled=bool(),
  is_domain=bool(),
  domain_id=str(),
  properties=dict())

Role

A Role from Keystone

Project = dict(
  location=Location(),
  id=str(),
  name=str(),
  domain_id=str(),
  properties=dict())