File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/azurearm_network.cpython-310.pyc
Back
o ;jqb � @ s� d Z ddlZddlmZ ddlZdZe�e�Z dd� Z dd� Z e d-d d ��Z e d.d d ��Z e d-d d��Ze d.dd��Ze d-dd��Ze d.dd��Ze d/dd��Ze d.dd��Ze d/dd��Ze d.dd ��Ze d0d d ��Ze d.d d ��Ze d1d!d"��Ze d.d#d$��Ze d2d%d&��Ze d.d'd(��Ze d3d)d*��Z e d.d+d,��Z dS )4a� Azure (ARM) Network State Module .. versionadded:: 2019.2.0 .. warning:: This cloud provider will be removed from Salt in version 3007 in favor of the `saltext.azurerm Salt Extension <https://github.com/salt-extensions/saltext-azurerm>`_ :maintainer: <devops@eitr.tech> :maturity: new :depends: * `azure <https://pypi.python.org/pypi/azure>`_ >= 2.0.0 * `azure-common <https://pypi.python.org/pypi/azure-common>`_ >= 1.1.8 * `azure-mgmt <https://pypi.python.org/pypi/azure-mgmt>`_ >= 1.0.0 * `azure-mgmt-compute <https://pypi.python.org/pypi/azure-mgmt-compute>`_ >= 1.0.0 * `azure-mgmt-network <https://pypi.python.org/pypi/azure-mgmt-network>`_ >= 1.7.1 * `azure-mgmt-resource <https://pypi.python.org/pypi/azure-mgmt-resource>`_ >= 1.1.0 * `azure-mgmt-storage <https://pypi.python.org/pypi/azure-mgmt-storage>`_ >= 1.0.0 * `azure-mgmt-web <https://pypi.python.org/pypi/azure-mgmt-web>`_ >= 0.32.0 * `azure-storage <https://pypi.python.org/pypi/azure-storage>`_ >= 0.34.3 * `msrestazure <https://pypi.python.org/pypi/msrestazure>`_ >= 0.4.21 :platform: linux :configuration: This module requires Azure Resource Manager credentials to be passed as a dictionary of keyword arguments to the ``connection_auth`` parameter in order to work properly. Since the authentication parameters are sensitive, it's recommended to pass them to the states via pillar. Required provider parameters: if using username and password: * ``subscription_id`` * ``username`` * ``password`` if using a service principal: * ``subscription_id`` * ``tenant`` * ``client_id`` * ``secret`` Optional provider parameters: **cloud_environment**: Used to point the cloud driver to different API endpoints, such as Azure GovCloud. Possible values: * ``AZURE_PUBLIC_CLOUD`` (default) * ``AZURE_CHINA_CLOUD`` * ``AZURE_US_GOV_CLOUD`` * ``AZURE_GERMAN_CLOUD`` Example Pillar for Azure Resource Manager authentication: .. code-block:: yaml azurearm: user_pass_auth: subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617 username: fletch password: 123pass mysubscription: subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617 tenant: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF client_id: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF secret: XXXXXXXXXXXXXXXXXXXXXXXX cloud_environment: AZURE_PUBLIC_CLOUD Example states using Azure Resource Manager authentication: .. code-block:: jinja {% set profile = salt['pillar.get']('azurearm:mysubscription') %} Ensure virtual network exists: azurearm_network.virtual_network_present: - name: my_vnet - resource_group: my_rg - address_prefixes: - '10.0.0.0/8' - '192.168.0.0/16' - dns_servers: - '8.8.8.8' - tags: how_awesome: very contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} Ensure virtual network is absent: azurearm_network.virtual_network_absent: - name: other_vnet - resource_group: my_rg - connection_auth: {{ profile }} � N��wrapsZazurearm_networkc C s dt v rtS dS )zU Only make this state available if the azurearm_network module is available. z.azurearm_network.check_ip_address_availability)Fz+azurearm_network module could not be loaded)�__salt__�__virtualname__� r r �P/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/azurearm_network.py� __virtual__i s r c s t � �� fdd��}|S )z> Decorator wrapper to warn about azurearm deprecation c s6 t jjjddtd� � | i t jjjdi |����}|S )NZChlorinez�The 'azurearm' functionality in Salt has been deprecated and its functionality will be removed in version 3007 in favor of the saltext.azurerm Salt Extension. (https://github.com/salt-extensions/saltext-azurerm))�categoryr )�salt�utilsZversionsZ warn_until� FutureWarning�argsZ clean_kwargs)r �kwargs�ret��functionr r �wrappedw s � z%_deprecation_message.<locals>.wrappedr )r r r r r �_deprecation_messager s r c K s� | ddi d�}t |t�sd|d< |S td | |fddi|��}d |vr�td |�d i �|p.i �} | r8| |d d < t|p<g ��t|�d i ��dg ���} | r^|�d i ��dg �|d�|d d< t|pbg ��t|�di ��dg ���} | r�d|�di ��dg �|d�i|d d< |�dd�|�d�kr�|�d�|�d�d�|d d< |�dd�|�d�kr�|�d�|�d�d�|d d< |d s�d|d< d| � d�|d< |S td r�d|d< d| � d�|d< |S ni | |d|id|i|�dd�|�dd�|d�d�|d < td �r d| � d �|d< d|d< |S |�� } | � |� td d!| ||||d �| ��}d |v�r8d|d< d| � d �|d< |S d � | |�d ��|d< |S )"a� .. versionadded:: 2019.2.0 Ensure a virtual network exists. :param name: Name of the virtual network. :param resource_group: The resource group assigned to the virtual network. :param address_prefixes: A list of CIDR blocks which can be used by subnets within the virtual network. :param dns_servers: A list of DNS server addresses. :param tags: A dictionary of strings can be passed as tag metadata to the virtual network object. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure virtual network exists: azurearm_network.virtual_network_present: - name: vnet1 - resource_group: group1 - address_prefixes: - '10.0.0.0/8' - '192.168.0.0/16' - dns_servers: - '8.8.8.8' - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists F� ��name�result�comment�changes�HConnection information must be specified via connection_auth dictionary!r �$azurearm_network.virtual_network_get�azurearm_log_level�info�error�dictdiffer.deep_diff�tagsr � dhcp_options� dns_servers��old�new� address_space�address_prefixes�enable_ddos_protection�enable_vm_protectionTr �Virtual network � is already present.�testN� would be updated.)r �resource_groupr& r! r( r) r � would be created.z1azurearm_network.virtual_network_create_or_update)r r. r' r" r � has been created.z)Failed to create virtual network {}! ({})r ) � isinstance�dictr � __utils__�get�set�symmetric_difference�__opts__�copy�update�format) r r' r. r" r �connection_authr r �vnet� tag_changesZ dns_changesZ addr_changesZ vnet_kwargsr r r �virtual_network_present� s� 6 ����� �� �� ������ � � �� �r> c C �� | ddi d�}t |t�sd|d< |S td | |fddi|��}d |v r1d |d < d | � d �|d< |S td rJd | � d�|d< d|d < |i d�|d< |S td | |fi |��}|rld |d < d | � d�|d< |i d�|d< |S d| � d�|d< |S )a� .. versionadded:: 2019.2.0 Ensure a virtual network does not exist in the resource group. :param name: Name of the virtual network. :param resource_group: The resource group assigned to the virtual network. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r r r r r Tr r* � was not found.r, � would be deleted.Nr# r z'azurearm_network.virtual_network_delete� has been deleted.z!Failed to delete virtual network �!�r1 r2 r r7 )r r. r; r r< �deletedr r r �virtual_network_absent( �F ���� ���rF c K s� | ddi d�}t |t�sd|d< |S td | ||fddi|��} d | vr�|| �d �kr7| �d �|d �|d d < d } | �d�rI| d d �d�d } |rX|| krX| |d �|d d< d } | �d�rj| d d �d�d } |ry|| kry| |d �|d d< |d s�d|d< d| � d�|d< |S td r�d |d< d| � d�|d< |S n i | |||d�d �|d < td r�d| � d�|d< d |d< |S |�� } | �|� td d | |||||d �| ��} d | vr�d|d< d| � d �|d< |S d �| | �d ��|d< |S ) a{ .. versionadded:: 2019.2.0 Ensure a subnet exists. :param name: Name of the subnet. :param address_prefix: A CIDR block used by the subnet within the virtual network. :param virtual_network: Name of the existing virtual network to contain the subnet. :param resource_group: The resource group assigned to the virtual network. :param security_group: The name of the existing network security group to assign to the subnet. :param route_table: The name of the existing route table to assign to the subnet. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure subnet exists: azurearm_network.subnet_present: - name: vnet1_sn1 - virtual_network: vnet1 - resource_group: group1 - address_prefix: '192.168.1.0/24' - security_group: nsg1 - route_table: rt1 - connection_auth: {{ profile }} - require: - azurearm_network: Ensure virtual network exists - azurearm_network: Ensure network security group exists - azurearm_network: Ensure route table exists Fr r r r �azurearm_network.subnet_getr r r �address_prefixr# r N�network_security_group�id�/���� route_tableTr �Subnet r+ r, r- )r rI rJ rN r/ z(azurearm_network.subnet_create_or_update)r �virtual_networkr. rI rJ rN r0 z Failed to create subnet {}! ({})r ) r1 r2 r r4 �splitr7 r8 r9 r: ) r rI rP r. �security_grouprN r; r r �snet�nsg_nameZ rttbl_nameZ snet_kwargsr r r �subnet_presenta s� 9 ����� � �� � �� rU c C �� | ddi d�}t |t�sd|d< |S td | ||fddi|��}d |v r2d |d < d | � d �|d< |S td rKd | � d�|d< d|d < |i d�|d< |S td | ||fi |��}|rnd |d < d | � d�|d< |i d�|d< |S d| � d�|d< |S )a� .. versionadded:: 2019.2.0 Ensure a virtual network does not exist in the virtual network. :param name: Name of the subnet. :param virtual_network: Name of the existing virtual network containing the subnet. :param resource_group: The resource group assigned to the virtual network. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r rH r r r Tr rO r@ r, rA Nr# r z azurearm_network.subnet_deleterB zFailed to delete subnet rC rD )r rP r. r; r rS rE r r r � subnet_absent� �J ���� ���rW c K s� | ddi d�}t |t�sd|d< |S td | |fddi|��}d |vr�td |�d i �|p.i �}|r8||d d < |rbtd |�dg �|�} | �d�rUd�| d �|d< |S | �d �rb| d |d d< |d ssd|d< d�| �|d< |S td r�d|d< d| � d�|d< |S n i | |||d�d�|d < td r�d| � d�|d< d|d< |S |�� } | �|� td d | |||d�| ��}d |vr�d|d< d| � d�|d< |S d �| |�d ��|d< |S ) a� .. versionadded:: 2019.2.0 Ensure a network security group exists. :param name: Name of the network security group. :param resource_group: The resource group assigned to the network security group. :param tags: A dictionary of strings can be passed as tag metadata to the network security group object. :param security_rules: An optional list of dictionaries representing valid SecurityRule objects. See the documentation for the security_rule_present state or security_rule_create_or_update execution module for more information on required and optional parameters for security rules. The rules are only managed if this parameter is present. When this parameter is absent, implemented rules will not be removed, and will merely become unmanaged. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure network security group exists: azurearm_network.network_security_group_present: - name: nsg1 - resource_group: group1 - security_rules: - name: nsg1_rule1 priority: 100 protocol: tcp access: allow direction: outbound source_address_prefix: virtualnetwork destination_address_prefix: internet source_port_range: '*' destination_port_range: '*' - name: nsg1_rule2 priority: 101 protocol: tcp access: allow direction: inbound source_address_prefix: internet destination_address_prefix: virtualnetwork source_port_range: '*' destination_port_ranges: - '80' - '443' - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists Fr r r r �+azurearm_network.network_security_group_getr r r r r r � azurearm.compare_list_of_dicts�security_rulesz"security_rules" {}Tr z-Network security group {} is already present.r, N�Network security group r- )r r. r r[ r# r/ z8azurearm_network.network_security_group_create_or_updater0 z0Failed to create network security group {}! ({})r � r1 r2 r r3 r4 r: r7 r8 r9 ) r r. r r[ r; r r �nsgr= �comp_retZ nsg_kwargsr r r � network_security_group_present2 s� @ ���� � ��� � �� �r` c C r? )a� .. versionadded:: 2019.2.0 Ensure a network security group does not exist in the resource group. :param name: Name of the network security group. :param resource_group: The resource group assigned to the network security group. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r rY r r r Tr r\ r@ r, rA Nr# r z.azurearm_network.network_security_group_deleterB z(Failed to delete network security group rC rD )r r. r; r r^ rE r r r � network_security_group_absent� rG ra c K s� | ddi d�}t |t�sd|d< |S g d�}|D ]D}t|d �s6t|d �s6d �|d |d �|d< | S t|d �r\t t|d �t�sSd |d � d �|d< | S t|d � d �� qtd | ||fddi|��}d|v�rP|�� |�d�kr�|�d�|d�|d d< | |�d�kr�|�d�| d�|d d< |�� |�d�kr�|�d�|d�|d d< t |�|�d�kr�|�d�|d�|d d< |� � |�dd�� � kr�|�d�|d�|d d< ||�d�kr�|�d�|d�|d d< | |�d�k�r|�d�| d�|d d< t | �pg �t |�dg ��k�r |�d�| d�|d d< t |�p"g �t |�dg ��k�r9|�d�|d�|d d< |�p=d� � |�d d�� � k�rU|�d �|d�|d d < | �pYd� � |�d d�� � k�rq|�d �| d�|d d < t | �pvg �t |�d g ��k�r�t | �p�g �t |�d g ��k�r�|�d �| d�|d d < n/t | �t |�d ��}}t |�D ] \}}|� � || � � k�r�|�d �| d�|d d < n�q�t |�p�g �t |�d g ��k�r)t |�p�g �t |�d g ��k�r�|�d �|d�|d d < n/t |�t |�d ��}}t |�D ] \}}|� � || � � k�r'|�d �|d�|d d < n�q |d �s<d |d!< d"| � d#�|d< |S td$ �rOd%|d!< d"| � d&�|d< |S ni | || ||||| || | || |d'�d�|d< td$ �ryd"| � d(�|d< d%|d!< |S |�� } | �|� td) d/i d*| �d|�d| �d|�d|�d|�d+|�d,|�d |�d | �d|�d| �d | �d |�d| �d|�| ��}d|v�r�d |d!< d"| � d-�|d< |S d.�| |�d��|d< |S )0a .. versionadded:: 2019.2.0 Ensure a security rule exists. :param name: Name of the security rule. :param access: 'allow' or 'deny' :param direction: 'inbound' or 'outbound' :param priority: Integer between 100 and 4096 used for ordering rule application. :param protocol: 'tcp', 'udp', or '*' :param security_group: The name of the existing network security group to contain the security rule. :param resource_group: The resource group assigned to the network security group. :param description: Optional description of the security rule. :param destination_address_prefix: The CIDR or destination IP range. Asterix '*' can also be used to match all destination IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. :param destination_port_range: The destination port or range. Integer or range between 0 and 65535. Asterix '*' can also be used to match all ports. :param source_address_prefix: The CIDR or source IP range. Asterix '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. :param source_port_range: The source port or range. Integer or range between 0 and 65535. Asterix '*' can also be used to match all ports. :param destination_address_prefixes: A list of destination_address_prefix values. This parameter overrides destination_address_prefix and will cause any value entered there to be ignored. :param destination_port_ranges: A list of destination_port_range values. This parameter overrides destination_port_range and will cause any value entered there to be ignored. :param source_address_prefixes: A list of source_address_prefix values. This parameter overrides source_address_prefix and will cause any value entered there to be ignored. :param source_port_ranges: A list of source_port_range values. This parameter overrides source_port_range and will cause any value entered there to be ignored. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure security rule exists: azurearm_network.security_rule_present: - name: nsg1_rule2 - security_group: nsg1 - resource_group: group1 - priority: 101 - protocol: tcp - access: allow - direction: inbound - source_address_prefix: internet - destination_address_prefix: virtualnetwork - source_port_range: '*' - destination_port_ranges: - '80' - '443' - connection_auth: {{ profile }} - require: - azurearm_network: Ensure network security group exists Fr r r r ))�source_port_ranges�source_port_range)�source_address_prefixes�source_address_prefix)�destination_port_ranges�destination_port_range)� destination_address_prefixes�destination_address_prefixr � z/Either the {} or {} parameter must be provided!zThe z parameter must be a list!z = None�"azurearm_network.security_rule_getr r r �accessr# r � description� direction�priority�protocolrg rc rf rb ri re rh rd Tr �Security rule r+ r, Nr- )r rl rm rn ro rp ri rh rg rf re rd rc rb r/ z/azurearm_network.security_rule_create_or_updater rR r. r0 z'Failed to create security rule {}! ({})r )r1 r2 �evalr: �list�execr � capitalizer4 �int�lower�sorted�len� enumerater7 r8 r9 ) r rl rn ro rp rR r. ri rg re rc rm rh rf rd rb r; r r Zexclusive_params�params�ruleZlocal_dst_addrsZremote_dst_addrs�idx�valZlocal_src_addrsZremote_src_addrsZ rule_kwargsr r r �security_rule_present� s| p � � ���� ���� �� �������� � �� ��� � �� ��� �� � �������� � � � � ���� �r c C rV )a� .. versionadded:: 2019.2.0 Ensure a security rule does not exist in the network security group. :param name: Name of the security rule. :param security_group: The network security group containing the security rule. :param resource_group: The resource group assigned to the network security group. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r rk r r r Tr rq r@ r, rA Nr# r z%azurearm_network.security_rule_deleterB z Failed to delete security rule rC rD )r rR r. r; r r| rE r r r �security_rule_absentT rX r� c K s: | ddi d�} t | t�sd| d< | S |rd|�� i}td | |fdd i| ��}d |v�r�td |�d i �| p7i �}|rA|| d d < |rVtd |�di �|�}|rV|| d d< |r�td |�dg �|ddg�}|�d�rvd�|d �| d< | S |�d �r�|d | d d< |r�td |�dg �|�}|�d�r�d�|d �| d< | S |�d �r�|d | d d< |r�td |�dg �|�}|�d�r�d�|d �| d< | S |�d �r�|d | d d< |�rtd |�dg �|g d��}|�d�r�d�|d �| d< | S |�d ��r|d | d d< |�r5td |�dg �|d g�}|�d��r'd �|d �| d< | S |�d ��r5|d | d d< |�rdtd |�d g �|d g�}|�d��rVd �|d �| d< | S |�d ��rd|d | d d < | �r�td |�d g �| d g�}|�d��r�d!�|d �| d< | S |�d ��r�|d | d d < | d �s�d"| d#< d$| � d%�| d< | S td& �r�d'| d#< d$| � d(�| d< | S ni | || ||||||| d)� d*�| d < td& �r�d$| � d+�| d< d'| d#< | S | �� }|� | � td, d0| ||| ||||||| d-� |��}d |v�rd"| d#< d$| � d.�| d< | S d/�| |�d ��| d< | S )1a�( .. versionadded:: 2019.2.0 Ensure a load balancer exists. :param name: Name of the load balancer. :param resource_group: The resource group assigned to the load balancer. :param sku: The load balancer SKU, which can be 'Basic' or 'Standard'. :param tags: A dictionary of strings can be passed as tag metadata to the load balancer object. :param frontend_ip_configurations: An optional list of dictionaries representing valid FrontendIPConfiguration objects. A frontend IP configuration can be either private (using private IP address and subnet parameters) or public (using a reference to a public IP address object). Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``private_ip_address``: The private IP address of the IP configuration. Required if 'private_ip_allocation_method' is 'Static'. - ``private_ip_allocation_method``: The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'. - ``subnet``: Name of an existing subnet inside of which the frontend IP will reside. - ``public_ip_address``: Name of an existing public IP address which will be assigned to the frontend IP object. :param backend_address_pools: An optional list of dictionaries representing valid BackendAddressPool objects. Only the 'name' parameter is valid for a BackendAddressPool dictionary. All other parameters are read-only references from other objects linking to the backend address pool. Inbound traffic is randomly load balanced across IPs in the backend IPs. :param probes: An optional list of dictionaries representing valid Probe objects. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``protocol``: The protocol of the endpoint. Possible values are 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specified URI is required for the probe to be successful. - ``port``: The port for communicating the probe. Possible values range from 1 to 65535, inclusive. - ``interval_in_seconds``: The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5. - ``number_of_probes``: The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure. - ``request_path``: The URI used for requesting health status from the VM. Path is required if a protocol is set to 'Http'. Otherwise, it is not allowed. There is no default value. :param load_balancing_rules: An optional list of dictionaries representing valid LoadBalancingRule objects. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``load_distribution``: The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'. - ``frontend_port``: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables 'Any Port'. - ``backend_port``: The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables 'Any Port'. - ``idle_timeout_in_minutes``: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP. - ``enable_floating_ip``: Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint. - ``disable_outbound_snat``: Configures SNAT for the VMs in the backend pool to use the public IP address specified in the frontend of the load balancing rule. - ``frontend_ip_configuration``: Name of the frontend IP configuration object used by the load balancing rule object. - ``backend_address_pool``: Name of the backend address pool object used by the load balancing rule object. Inbound traffic is randomly load balanced across IPs in the backend IPs. - ``probe``: Name of the probe object used by the load balancing rule object. :param inbound_nat_rules: An optional list of dictionaries representing valid InboundNatRule objects. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``frontend_ip_configuration``: Name of the frontend IP configuration object used by the inbound NAT rule object. - ``protocol``: Possible values include 'Udp', 'Tcp', or 'All'. - ``frontend_port``: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534. - ``backend_port``: The port used for the internal endpoint. Acceptable values range from 1 to 65535. - ``idle_timeout_in_minutes``: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP. - ``enable_floating_ip``: Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint. :param inbound_nat_pools: An optional list of dictionaries representing valid InboundNatPool objects. They define an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``frontend_ip_configuration``: Name of the frontend IP configuration object used by the inbound NAT pool object. - ``protocol``: Possible values include 'Udp', 'Tcp', or 'All'. - ``frontend_port_range_start``: The first port number in the range of external ports that will be used to provide Inbound NAT to NICs associated with a load balancer. Acceptable values range between 1 and 65534. - ``frontend_port_range_end``: The last port number in the range of external ports that will be used to provide Inbound NAT to NICs associated with a load balancer. Acceptable values range between 1 and 65535. - ``backend_port``: The port used for internal connections to the endpoint. Acceptable values are between 1 and 65535. :param outbound_nat_rules: An optional list of dictionaries representing valid OutboundNatRule objects. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``frontend_ip_configuration``: Name of the frontend IP configuration object used by the outbound NAT rule object. - ``backend_address_pool``: Name of the backend address pool object used by the outbound NAT rule object. Outbound traffic is randomly load balanced across IPs in the backend IPs. - ``allocated_outbound_ports``: The number of outbound ports to be used for NAT. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure load balancer exists: azurearm_network.load_balancer_present: - name: lb1 - resource_group: group1 - location: eastus - frontend_ip_configurations: - name: lb1_feip1 public_ip_address: pub_ip1 - backend_address_pools: - name: lb1_bepool1 - probes: - name: lb1_webprobe1 protocol: tcp port: 80 interval_in_seconds: 5 number_of_probes: 2 - load_balancing_rules: - name: lb1_webprobe1 protocol: tcp frontend_port: 80 backend_port: 80 idle_timeout_in_minutes: 4 frontend_ip_configuration: lb1_feip1 backend_address_pool: lb1_bepool1 probe: lb1_webprobe1 - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists - azurearm_network: Ensure public IP exists Fr r r r r �"azurearm_network.load_balancer_getr r r r r r �skurZ �frontend_ip_configurations�public_ip_address�subnetz "frontend_ip_configurations" {}�backend_address_poolsz"backend_address_pools" {}�probesz "probes" {}�load_balancing_rules)�frontend_ip_configurationZbackend_address_poolZprobez"load_balancing_rules" {}�inbound_nat_rulesr� z"inbound_nat_rules" {}�inbound_nat_poolsz"inbound_nat_pools" {}�outbound_nat_rulesz"outbound_nat_rules" {}Tr �Load balancer r+ r, Nr- ) r r� r r� r� r� r� r� r� r� r# r/ z/azurearm_network.load_balancer_create_or_update) r r. r� r r� r� r� r� r� r� r� r0 z'Failed to create load balancer {}! ({})r ) r1 r2 ru r r3 r4 r: r7 r8 r9 )r r. r� r� r� r� r� r� r� r� r r; r r �load_balr= � sku_changesr_ Z lb_kwargsr r r �load_balancer_present� s6 5 � ��� � � � � � � � � � � � �� � � � �r� c C r? )a� .. versionadded:: 2019.2.0 Ensure a load balancer does not exist in the resource group. :param name: Name of the load balancer. :param resource_group: The resource group assigned to the load balancer. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r r� r r r Tr r� r@ r, rA Nr# r z%azurearm_network.load_balancer_deleterB z Failed to delete load balancer rC rD )r r. r; r r� rE r r r �load_balancer_absent rG r� c K s� | ddi d�} t |t�sd| d< | S |rd|�� i}td | |fdd i|��} d | vr�td | �d i �|p6i �} | r@| | d d < |rmt |t�sMd| d< | S |D ] } || | �di ��| �krl| �d�|d�| d d< nqO|r�td | �di �|�}|r�|| d d< |r�|�� | �d�kr�| �d�|d�| d d< |r�|�� | �dd��� kr�| �d�|d�| d d< |r�t|�| �d�kr�| �d�|d�| d d< | d s�d| d< d| � d�| d< | S td r�d| d< d| � d�| d< | S ni | ||||||d �d�| d < td �rd| � d �| d< d| d< | S | � � }|� |� td d"| |||||||d �|��} d | v�r?d| d< d| � d �| d< | S d!� | | �d ��| d< | S )#a{ .. versionadded:: 2019.2.0 Ensure a public IP address exists. :param name: Name of the public IP address. :param resource_group: The resource group assigned to the public IP address. :param dns_settings: An optional dictionary representing a valid PublicIPAddressDnsSettings object. Parameters include 'domain_name_label' and 'reverse_fqdn', which accept strings. The 'domain_name_label' parameter is concatenated with the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system. The 'reverse_fqdn' parameter is a user-visible, fully qualified domain name that resolves to this public IP address. If the reverse FQDN is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. :param sku: The public IP address SKU, which can be 'Basic' or 'Standard'. :param public_ip_allocation_method: The public IP allocation method. Possible values are: 'Static' and 'Dynamic'. :param public_ip_address_version: The public IP address version. Possible values are: 'IPv4' and 'IPv6'. :param idle_timeout_in_minutes: An integer representing the idle timeout of the public IP address. :param tags: A dictionary of strings can be passed as tag metadata to the public IP address object. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure public IP exists: azurearm_network.public_ip_address_present: - name: pub_ip1 - resource_group: group1 - dns_settings: domain_name_label: decisionlab-ext-test-label - sku: basic - public_ip_allocation_method: static - public_ip_address_version: ipv4 - idle_timeout_in_minutes: 4 - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists Fr r r r r �&azurearm_network.public_ip_address_getr r r r r r �.DNS settings must be provided as a dictionary!� dns_settingsr# r� �public_ip_allocation_method�public_ip_address_version�idle_timeout_in_minutesTr �Public IP address r+ r, Nr- )r r r� r� r� r� r� r/ z3azurearm_network.public_ip_address_create_or_update)r r. r� r r� r� r� r� r0 z+Failed to create public IP address {}! ({})r ) r1 r2 ru r r3 r4 rw rv r7 r8 r9 r: )r r. r r� r� r� r� r� r; r r �pub_ipr= �keyr� Z pub_ip_kwargsr r r �public_ip_address_presentF s� I � ���� �� ������� � � � �r� c C r? )a� .. versionadded:: 2019.2.0 Ensure a public IP address does not exist in the resource group. :param name: Name of the public IP address. :param resource_group: The resource group assigned to the public IP address. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r r� r r r Tr r� r@ r, rA Nr# r z)azurearm_network.public_ip_address_deleterB z#Failed to delete public IP address rC rD )r r. r; r r� rE r r r �public_ip_address_absent rG r� c K s� | ddi d�}t | t�sd|d< |S td | |fddi| ��}d |v�r^td |�d i �|p/i �}|r9||d d < | rN| |�d �krN|�d �| d�|d d < | durf| |�dd�krf|�d�| d�|d d< | dur}| |�d�kr}|�d�| d�|d d< | dur�| |�d�kr�|�d�| d�|d d< d}|�d�r�|d d �d�d }|r�||kr�||d�|d d< d}|�d�r�|d d �d�d }|r�||kr�||d�|d d< |�r t |t�s�d|d< |S |D ]#}|| �� |�di ��|d��� k�r |�d�|d�|d d< nq�td |�d g �|d d g�}|�d��r)d �|d �|d< |S |�d ��r7|d |d d < |d �sJd|d < d!| � d"�|d< |S td# �r]d|d < d!| � d$�|d< |S ni | ||||| | | | |d%� d�|d < td# �r�d!| � d&�|d< d|d < |S |� � }|� | � td' d+| |||||| | | | |||d(� |��}d |v�r�d|d < d!| � d)�|d< |S d*�| |�d ��|d< |S ),a8 .. versionadded:: 2019.2.0 Ensure a network interface exists. :param name: Name of the network interface. :param ip_configurations: A list of dictionaries representing valid NetworkInterfaceIPConfiguration objects. The 'name' key is required at minimum. At least one IP Configuration must be present. :param subnet: Name of the existing subnet assigned to the network interface. :param virtual_network: Name of the existing virtual network containing the subnet. :param resource_group: The resource group assigned to the virtual network. :param tags: A dictionary of strings can be passed as tag metadata to the network interface object. :param network_security_group: The name of the existing network security group to assign to the network interface. :param virtual_machine: The name of the existing virtual machine to assign to the network interface. :param dns_settings: An optional dictionary representing a valid NetworkInterfaceDnsSettings object. Valid parameters are: - ``dns_servers``: List of DNS server IP addresses. Use 'AzureProvidedDNS' to switch to Azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dns_servers collection. - ``internal_dns_name_label``: Relative DNS name for this NIC used for internal communications between VMs in the same virtual network. - ``internal_fqdn``: Fully qualified DNS name supporting internal communications between VMs in the same virtual network. - ``internal_domain_name_suffix``: Even if internal_dns_name_label is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internal_domain_name_suffix. :param mac_address: Optional string containing the MAC address of the network interface. :param primary: Optional boolean allowing the interface to be set as the primary network interface on a virtual machine with multiple interfaces attached. :param enable_accelerated_networking: Optional boolean indicating whether accelerated networking should be enabled for the interface. :param enable_ip_forwarding: Optional boolean indicating whether IP forwarding should be enabled for the interface. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure network interface exists: azurearm_network.network_interface_present: - name: iface1 - subnet: vnet1_sn1 - virtual_network: vnet1 - resource_group: group1 - ip_configurations: - name: iface1_ipc1 public_ip_address: pub_ip2 - dns_settings: internal_dns_name_label: decisionlab-int-test-label - primary: True - enable_accelerated_networking: True - enable_ip_forwarding: False - network_security_group: nsg1 - connection_auth: {{ profile }} - require: - azurearm_network: Ensure subnet exists - azurearm_network: Ensure network security group exists - azurearm_network: Ensure another public IP exists Fr r r r �&azurearm_network.network_interface_getr r r r r r � mac_addressr# N�primaryT� enable_accelerated_networking�enable_ip_forwardingrJ rK rL rM �virtual_machiner� r� rZ �ip_configurationsr� r� z"ip_configurations" {}r �Network interface r+ r, r- ) r r� r� rJ r� r� r� r� r� r r/ z3azurearm_network.network_interface_create_or_update) r r� rP r. r� r� r� r� r� r� rJ r� r r0 z+Failed to create network interface {}! ({})r ) r1 r2 r r3 r4 rQ rw r: r7 r8 r9 )r r� r� rP r. r r� rJ r� r� r� r� r� r; r r �ifacer= rT �vm_namer� r_ Z iface_kwargsr r r �network_interface_presentH s� i ���� � ����� � ��� � �� � �� �r� c C r? )a� .. versionadded:: 2019.2.0 Ensure a network interface does not exist in the resource group. :param name: Name of the network interface. :param resource_group: The resource group assigned to the network interface. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r r� r r r Tr r� r@ r, rA Nr# r z)azurearm_network.network_interface_deleterB z#Failed to delete network interface z!)rD )r r. r; r r� rE r r r �network_interface_absentW rG r� c K s� | ddi d�}t |t�sd|d< |S td | |fddi|��}d |vr�td |�d i �|p.i �} | r8| |d d < |rM||�d �krM|�d �|d�|d d < |rwtd |�dg �|�} | �d�rjd�| d �|d< |S | �d �rw| d |d d< |d s�d|d< d| � d�|d< |S td r�d|d< d| � d�|d< |S n i | |||d�d�|d < td r�d| � d�|d< d|d< |S |�� } | �|� td d | ||||d �| ��}d |vr�d|d< d| � d �|d< |S d �| |�d ��|d< |S ) a .. versionadded:: 2019.2.0 Ensure a route table exists. :param name: Name of the route table. :param resource_group: The resource group assigned to the route table. :param routes: An optional list of dictionaries representing valid Route objects contained within a route table. See the documentation for the route_present state or route_create_or_update execution module for more information on required and optional parameters for routes. The routes are only managed if this parameter is present. When this parameter is absent, implemented routes will not be removed, and will merely become unmanaged. :param disable_bgp_route_propagation: An optional boolean parameter setting whether to disable the routes learned by BGP on the route table. :param tags: A dictionary of strings can be passed as tag metadata to the route table object. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure route table exists: azurearm_network.route_table_present: - name: rt1 - resource_group: group1 - routes: - name: rt1_route1 address_prefix: '0.0.0.0/0' next_hop_type: internet - name: rt1_route2 address_prefix: '192.168.0.0/16' next_hop_type: vnetlocal - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists Fr r r r � azurearm_network.route_table_getr r r r r r � disable_bgp_route_propagationr# rZ �routesz "routes" {}Tr � Route table r+ r, Nr- )r r r� r� r/ z-azurearm_network.route_table_create_or_update)r r. r� r� r r0 z%Failed to create route table {}! ({})r r] ) r r. r r� r� r; r r �rt_tblr= r_ Z rt_tbl_kwargsr r r �route_table_present� s� ; ����� � � �� � �� �r� c C r? )a� .. versionadded:: 2019.2.0 Ensure a route table does not exist in the resource group. :param name: Name of the route table. :param resource_group: The resource group assigned to the route table. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r r� r r r Tr r� r@ r, rA Nr# r z#azurearm_network.route_table_deleterB z Failed to delete route table rC rD )r r. r; r r� rE r r r �route_table_absent' rG r� c K s� | ddi d�}t |t�sd|d< |S td | ||fddi|��} d | vr�|| �d �kr7| �d �|d �|d d < |�� | �d d��� krO| �d �|d �|d d < |�� dkrh|| �d�krh| �d�|d �|d d< |d szd|d< d| � d�|d< |S td r�d|d< d| � d�|d< |S n i | |||d�d �|d < td r�d| � d�|d< d|d< |S |�� } | �|� td d | |||||d�| ��} d | vr�d|d< d| � d�|d< |S d �| | �d ��|d< |S ) a� .. versionadded:: 2019.2.0 Ensure a route exists within a route table. :param name: Name of the route. :param address_prefix: The destination CIDR to which the route applies. :param next_hop_type: The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'. :param next_hop_ip_address: The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is 'VirtualAppliance'. :param route_table: The name of the existing route table which will contain the route. :param resource_group: The resource group assigned to the route table. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure route exists: azurearm_network.route_present: - name: rt1_route2 - route_table: rt1 - resource_group: group1 - address_prefix: '192.168.0.0/16' - next_hop_type: vnetlocal - connection_auth: {{ profile }} - require: - azurearm_network: Ensure route table exists Fr r r r �azurearm_network.route_getr r r rI r# r � next_hop_typeZvirtualappliance�next_hop_ip_addressTr �Route r+ r, Nr- )r rI r� r� r/ z'azurearm_network.route_create_or_update)r rN r. rI r� r� r0 z Failed to create route {}! ({})r ) r1 r2 r r4 rw r7 r8 r9 r: ) r rI r� rN r. r� r; r r �routeZ route_kwargsr r r � route_present` s� 8 ������ ��� � �� r� c C rV )a� .. versionadded:: 2019.2.0 Ensure a route table does not exist in the resource group. :param name: Name of the route table. :param route_table: The name of the existing route table containing the route. :param resource_group: The resource group assigned to the route table. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r r� r r r Tr r� r@ r, rA Nr# r z azurearm_network.route_deleterB zFailed to delete route rC rD )r rN r. r; r r� rE r r r � route_absent� sF ���� ���r� )NNN)N) NNNNNNNNNN)NNNNNNN) NNNNNNNNN)NNNN)NN) �__doc__�logging� functoolsr Zsalt.utils.azurearmr r � getLogger�__name__�logr r r> rF rU rW r` ra r r� r� r� r� r� r� r� r� r� r� r� r r r r �<module> s� ^ � ! 8 � ? � 8 � [ ? � z 8 � I 8 � 8 � 8 �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings