feat(controller): add endpoint and infrastructure for limiting memory…

…/cpu

controller/api/models.py

@@ -134,7 +134,9 @@ def __str__(self):
     def create(self, *args, **kwargs):
         config = Config.objects.create(owner=self.owner, app=self, values={})
         build = Build.objects.create(owner=self.owner, app=self, image=settings.DEFAULT_BUILD)
-        Release.objects.create(version=1, owner=self.owner, app=self, config=config, build=build)
+        limit = Limit.objects.create(owner=self.owner, app=self, memory={}, cpu={})
+        Release.objects.create(version=1, owner=self.owner, app=self,
+                               config=config, build=build, limit=limit)
 
     def delete(self, *args, **kwargs):
         for c in self.container_set.all():
@@ -301,10 +303,13 @@ def _command_announceable(self):
     @transition(field=state, source=INITIALIZED, target=CREATED)
     def create(self):
         image = self.release.image
+        kwargs = {'memory': self.release.limit.memory,
+                  'cpu': self.release.limit.cpu}
         self._scheduler.create(name=self._job_id,
                                image=image,
                                command=self._command,
-                               use_announcer=self._command_announceable())
+                               use_announcer=self._command_announceable(),
+                               **kwargs)
 
     @close_db_connections
     @transition(field=state,
@@ -327,10 +332,13 @@ def deploy(self, release):
         new_job_id = self._job_id
         image = self.release.image
         c_type = self.type
+        kwargs = {'memory': self.release.limit.memory,
+                  'cpu': self.release.limit.cpu}
         self._scheduler.create(name=new_job_id,
                                image=image,
                                command=self._command.format(**locals()),
-                               use_announcer=self._command_announceable())
+                               use_announcer=self._command_announceable(),
+                               **kwargs)
         self._scheduler.start(new_job_id, self._command_announceable())
         # destroy old container
         self._scheduler.destroy(old_job_id, self._command_announceable())
@@ -426,6 +434,27 @@ def __str__(self):
         return "{}-{}".format(self.app.id, self.uuid[:7])
 
 
+@python_2_unicode_compatible
+class Limit(UuidAuditedModel):
+    """
+    Set of resource limits applied by the scheduler
+    during runtime execution of the Application.
+    """
+
+    owner = models.ForeignKey(settings.AUTH_USER_MODEL)
+    app = models.ForeignKey('App')
+    memory = JSONField(default='{}', blank=True)
+    cpu = JSONField(default='{}', blank=True)
+
+    class Meta:
+        get_latest_by = 'created'
+        ordering = ['-created']
+        unique_together = (('app', 'uuid'),)
+
+    def __str__(self):
+        return "{}-{}".format(self.app.id, self.uuid[:7])
+
+
 @python_2_unicode_compatible
 class Release(UuidAuditedModel):
     """
@@ -441,6 +470,7 @@ class Release(UuidAuditedModel):
 
     config = models.ForeignKey('Config')
     build = models.ForeignKey('Build')
+    limit = models.ForeignKey('Limit', null=True)
     # NOTE: image contains combined build + config, ready to run
     image = models.CharField(max_length=256, default=settings.DEFAULT_BUILD)
 
@@ -452,7 +482,8 @@ class Meta:
     def __str__(self):
         return "{0}-v{1}".format(self.app.id, self.version)
 
-    def new(self, user, config=None, build=None, summary=None, source_version='latest'):
+    def new(self, user, config=None, build=None, limit=None,
+            summary=None, source_version='latest'):
         """
         Create a new application release using the provided Build and Config
         on behalf of a user.
@@ -463,6 +494,8 @@ def new(self, user, config=None, build=None, summary=None, source_version='lates
             config = self.config
         if not build:
             build = self.build
+        if not limit:
+            limit = self.limit
         # always create a release off the latest image
         source_image = '{}:{}'.format(build.image, source_version)
         # construct fully-qualified target image
@@ -472,8 +505,8 @@ def new(self, user, config=None, build=None, summary=None, source_version='lates
         target_image = '{}'.format(self.app.id)
         # create new release and auto-increment version
         release = Release.objects.create(
-            owner=user, app=self.app, config=config,
-            build=build, version=new_version, image=target_image, summary=summary)
+            owner=user, app=self.app, config=config, build=build, limit=limit,
+            version=new_version, image=target_image, summary=summary)
         # IOW, this image did not come from the builder
         if not build.sha:
             # we assume that the image is not present on our registry,
@@ -507,12 +540,14 @@ def previous(self):
             prev_release = None
         return prev_release
 
-    def save(self, *args, **kwargs):
+    def save(self, *args, **kwargs):  # noqa
         if not self.summary:
             self.summary = ''
             prev_release = self.previous()
             # compare this build to the previous build
             old_build = prev_release.build if prev_release else None
+            old_config = prev_release.config if prev_release else None
+            old_limit = prev_release.limit if prev_release else None
             # if the build changed, log it and who pushed it
             if self.version == 1:
                 self.summary += "{} created initial release".format(self.app.owner)
@@ -521,10 +556,8 @@ def save(self, *args, **kwargs):
                     self.summary += "{} deployed {}".format(self.build.owner, self.build.sha[:7])
                 else:
                     self.summary += "{} deployed {}".format(self.build.owner, self.build.image)
-            # compare this config to the previous config
-            old_config = prev_release.config if prev_release else None
             # if the config data changed, log the dict diff
-            if self.config != old_config:
+            elif self.config != old_config:
                 dict1 = self.config.values
                 dict2 = old_config.values if old_config else {}
                 diff = dict_diff(dict1, dict2)
@@ -540,11 +573,25 @@ def save(self, *args, **kwargs):
                     if self.summary:
                         self.summary += ' and '
                     self.summary += "{} {}".format(self.config.owner, changes)
-                if not self.summary:
-                    if self.version == 1:
-                        self.summary = "{} created the initial release".format(self.owner)
-                    else:
-                        self.summary = "{} changed nothing".format(self.owner)
+            # if the limit changes, log the dict diff
+            elif self.limit != old_limit:
+                changes = []
+                old_mem = old_limit.memory if old_limit else {}
+                diff = dict_diff(self.limit.memory, old_mem)
+                if diff.get('added') or diff.get('changed') or diff.get('deleted'):
+                    changes.append('memory')
+                old_cpu = old_limit.cpu if old_limit else {}
+                diff = dict_diff(self.limit.cpu, old_cpu)
+                if diff.get('added') or diff.get('changed') or diff.get('deleted'):
+                    changes.append('cpu')
+                if changes:
+                    changes = 'changed limits for '+', '.join(changes)
+                    self.summary += "{} {}".format(self.config.owner, changes)
+            if not self.summary:
+                if self.version == 1:
+                    self.summary = "{} created the initial release".format(self.owner)
+                else:
+                    self.summary = "{} changed nothing".format(self.owner)
         super(Release, self).save(*args, **kwargs)
 
 

controller/api/serializers.py

@@ -14,6 +14,11 @@
 from api import utils
 
 
+PROCTYPE_MATCH = re.compile(r'^(?P<type>[a-z]+)')
+MEMLIMIT_MATCH = re.compile(r'^(?P<mem>[0-9]+[BbKkMmGg])$')
+CPUSHARE_MATCH = re.compile(r'^(?P<cpu>[0-9]+)$')
+
+
 class OwnerSlugRelatedField(serializers.SlugRelatedField):
     """Filter queries by owner as well as slug_field."""
 
@@ -102,6 +107,51 @@ class Meta:
         read_only_fields = ('uuid', 'created', 'updated')
 
 
+class LimitSerializer(serializers.ModelSerializer):
+    """Serialize a :class:`~api.models.Limit` model."""
+
+    owner = serializers.Field(source='owner.username')
+    app = serializers.SlugRelatedField(slug_field='id')
+    memory = serializers.ModelField(
+        model_field=models.Limit()._meta.get_field('memory'), required=False)
+    cpu = serializers.ModelField(
+        model_field=models.Limit()._meta.get_field('cpu'), required=False)
+
+    class Meta:
+        """Metadata options for a :class:`LimitSerializer`."""
+        model = models.Limit
+        read_only_fields = ('uuid', 'created', 'updated')
+
+    def validate_memory(self, attrs, source):
+        for k, v in attrs.get(source, {}).items():
+            if v is None:  # use NoneType to unset a value
+                continue
+            if not re.match(PROCTYPE_MATCH, k):
+                raise serializers.ValidationError("Process types can only contain [a-z]")
+            if not re.match(MEMLIMIT_MATCH, str(v)):
+                raise serializers.ValidationError(
+                    "Limit format: <number><unit>, where unit = B, K, M or G")
+        return attrs
+
+    def validate_cpu(self, attrs, source):
+        for k, v in attrs.get(source, {}).items():
+            if v is None:  # use NoneType to unset a value
+                continue
+            if not re.match(PROCTYPE_MATCH, k):
+                raise serializers.ValidationError("Process types can only contain [a-z]")
+            shares = re.match(CPUSHARE_MATCH, str(v))
+            if not shares:
+                raise serializers.ValidationError("CPU shares must be an integer")
+            for v in shares.groupdict().values():
+                try:
+                    i = int(v)
+                except ValueError:
+                    raise serializers.ValidationError("CPU shares must be an integer")
+                if i > 1024 or i < 0:
+                    raise serializers.ValidationError("CPU shares must be between 0 and 1024")
+        return attrs
+
+
 class ReleaseSerializer(serializers.ModelSerializer):
     """Serialize a :class:`~api.models.Release` model."""