File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/azurearm_resource.cpython-310.pyc
Back
o ;j4p � @ s� d Z ddlZddlZddlmZ ddlZddlZdZe� e �Z dd� Z dd� Z e dd d ��Ze dd d ��Ze ddd��Ze ddd��Ze ddd��Ze ddd��ZdS )a� Azure (ARM) Resource State Module .. versionadded:: 2019.2.0 .. warning:: This cloud provider will be removed from Salt in version 3007 in favor of the `saltext.azurerm Salt Extension <https://github.com/salt-extensions/saltext-azurerm>`_ :maintainer: <devops@eitr.tech> :maturity: new :depends: * `azure <https://pypi.python.org/pypi/azure>`_ >= 2.0.0 * `azure-common <https://pypi.python.org/pypi/azure-common>`_ >= 1.1.8 * `azure-mgmt <https://pypi.python.org/pypi/azure-mgmt>`_ >= 1.0.0 * `azure-mgmt-compute <https://pypi.python.org/pypi/azure-mgmt-compute>`_ >= 1.0.0 * `azure-mgmt-network <https://pypi.python.org/pypi/azure-mgmt-network>`_ >= 1.7.1 * `azure-mgmt-resource <https://pypi.python.org/pypi/azure-mgmt-resource>`_ >= 1.1.0 * `azure-mgmt-storage <https://pypi.python.org/pypi/azure-mgmt-storage>`_ >= 1.0.0 * `azure-mgmt-web <https://pypi.python.org/pypi/azure-mgmt-web>`_ >= 0.32.0 * `azure-storage <https://pypi.python.org/pypi/azure-storage>`_ >= 0.34.3 * `msrestazure <https://pypi.python.org/pypi/msrestazure>`_ >= 0.4.21 :platform: linux :configuration: This module requires Azure Resource Manager credentials to be passed as a dictionary of keyword arguments to the ``connection_auth`` parameter in order to work properly. Since the authentication parameters are sensitive, it's recommended to pass them to the states via pillar. Required provider parameters: if using username and password: * ``subscription_id`` * ``username`` * ``password`` if using a service principal: * ``subscription_id`` * ``tenant`` * ``client_id`` * ``secret`` Optional provider parameters: **cloud_environment**: Used to point the cloud driver to different API endpoints, such as Azure GovCloud. Possible values: * ``AZURE_PUBLIC_CLOUD`` (default) * ``AZURE_CHINA_CLOUD`` * ``AZURE_US_GOV_CLOUD`` * ``AZURE_GERMAN_CLOUD`` Example Pillar for Azure Resource Manager authentication: .. code-block:: yaml azurearm: user_pass_auth: subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617 username: fletch password: 123pass mysubscription: subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617 tenant: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF client_id: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF secret: XXXXXXXXXXXXXXXXXXXXXXXX cloud_environment: AZURE_PUBLIC_CLOUD Example states using Azure Resource Manager authentication: .. code-block:: jinja {% set profile = salt['pillar.get']('azurearm:mysubscription') %} Ensure resource group exists: azurearm_resource.resource_group_present: - name: my_rg - location: westus - tags: how_awesome: very contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} Ensure resource group is absent: azurearm_resource.resource_group_absent: - name: other_rg - connection_auth: {{ profile }} � N��wrapsZazurearm_resourcec C s dt v rtS dS )zV Only make this state available if the azurearm_resource module is available. �0azurearm_resource.resource_group_check_existence)Fz,azurearm_resource module could not be loaded)�__salt__�__virtualname__� r r �Q/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/azurearm_resource.py� __virtual__e s r c s t � �� fdd��}|S )z> Decorator wrapper to warn about azurearm deprecation c s6 t jjjddtd� � | i t jjjdi |����}|S )NZChlorinez�The 'azurearm' functionality in Salt has been deprecated and its functionality will be removed in version 3007 in favor of the saltext.azurerm Salt Extension. (https://github.com/salt-extensions/saltext-azurerm))�categoryr )�salt�utilsZversionsZ warn_until� FutureWarning�argsZ clean_kwargs)r �kwargs�ret��functionr r �wrappeds s � z%_deprecation_message.<locals>.wrappedr )r r r r r �_deprecation_messagen s r c K s� | ddi d�}t |t�sd|d< |S i }td | fi |��}|ritd | fi |��}td |�d i �|p5i �|d < |d sKd |d < d | � d�|d< |S td rhd | � d�|d< d|d < |�d i �|d�|d < |S n td r�d | � d�|d< d|d < i | |||d�d�|d < |S |�� } | �|� td | |f||d�| ��}td | fi |��}|r�d |d < d | � d�|d< i |d�|d < |S d�| |�d��|d< |S )a .. versionadded:: 2019.2.0 Ensure a resource group exists. :param name: Name of the resource group. :param location: The Azure location in which to create the resource group. This value cannot be updated once the resource group is created. :param managed_by: The ID of the resource that manages this resource group. This value cannot be updated once the resource group is created. :param tags: A dictionary of strings can be passed as tag metadata to the resource group object. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure resource group exists: azurearm_resource.resource_group_present: - name: group1 - location: eastus - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} F� ��name�result�comment�changes�HConnection information must be specified via connection_auth dictionary!r r �$azurearm_resource.resource_group_get�dictdiffer.deep_diff�tagsr Tr �Resource group � is already present.�testz tags would be updated.N��old�new� would be created.)r �location� managed_byr z1azurearm_resource.resource_group_create_or_update)r' r � has been created.z(Failed to create resource group {}! ({})�error) � isinstance�dictr � __utils__�get�__opts__�copy�update�format) r r& r' r �connection_authr r �group�presentZ group_kwargsr r r �resource_group_present� s� ( �������� � ����� �r5 c C s* | ddi d�}t |t�sd|d< |S i }td | fi |��}|s.d|d< d | � d �|d< |S td rQtd | fi |��}d | � d �|d< d|d< |i d�|d< |S td | fi |��}td | fi |��}|rjd}n td | fi |��}|s�d|d< d | � d�|d< |i d�|d< |S d| � d�|d< |S )aC .. versionadded:: 2019.2.0 Ensure a resource group does not exist in the current subscription. :param name: Name of the resource group. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r r Tr r � is already absent.r! r � would be deleted.Nr" r z'azurearm_resource.resource_group_delete� has been deleted.z Failed to delete resource group �!�r* r+ r r. )r r2 r r3 r4 �deletedr r r �resource_group_absent� s^ ����� �����r< �jinjaFc K sf | ddi d�}t |t�sd|d< |S |s |s | s d|d< |S tdd� ||| fD ��d kr2d |d< |S |s6| rH|sB|sB|sB|sB|sB|rHd |d< |S i }|rpzt�|�}W n� tyo } zd |� d �|d< |W Y d}~S d}~ww | r�ztd d| | | | dddtddf d| i|��\}}}W n ty� } zd�| |�|d< |W Y d}~S d}~ww |s�d�| �|d< |S z t j j � |d�� }t� |�}W d � n1 s�w Y W n ty� } zd�| |�|d< |W Y d}~S d}~ww |r�t j j �|� | }|�s| �rL|�d��r |�d�}|�di ��d�}|�di ��d�}|�di ��d�}|�di ��d�}|�di ��d�}|�di ��d �}|�di ��d �}td | fd d i|��}d!|v�r9|�ry|�� |�d"d��� k�ry|�d"�|d#�|d$ d"< |�p}d�� |�dd��� k�r�|�d�|d#�|d$ d< |�p�d�� |�d%d��� k�r�|�d%�|d#�|d$ d%< |�p�d�� |�dd��� k�r�|�d�|d#�|d$ d< td& |�d'i �|�p�i �}|�r�||d$ d'< td& |�d i �|�p�i �}|�r�||d$ d < td& |�d i �|�pi �}|�r||d$ d < |d$ �s%d(|d)< d*| � d+�|d< |S td, �r8d*| � d-�|d< d|d)< |S ni ||||||||d.�d#�|d$< td, �r\d*| � d/�|d< d|d)< |S t |t��rjt�t�|��}t |t��rxt�t�|��}|�� } | �|� td0 d4||||||||d1�| ��}d!|v�r�d(|d)< d*| � d2�|d< |S d3�| |�d!��|d< |S )5a� .. versionadded:: 2019.2.0 Ensure a security policy definition exists. :param name: Name of the policy definition. :param policy_rule: A YAML dictionary defining the policy rule. See `Azure Policy Definition documentation <https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition#policy-rule>`_ for details on the structure. One of ``policy_rule``, ``policy_rule_json``, or ``policy_rule_file`` is required, in that order of precedence for use if multiple parameters are used. :param policy_rule_json: A text field defining the entirety of a policy definition in JSON. See `Azure Policy Definition documentation <https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition#policy-rule>`_ for details on the structure. One of ``policy_rule``, ``policy_rule_json``, or ``policy_rule_file`` is required, in that order of precedence for use if multiple parameters are used. Note that the `name` field in the JSON will override the ``name`` parameter in the state. :param policy_rule_file: The source of a JSON file defining the entirety of a policy definition. See `Azure Policy Definition documentation <https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition#policy-rule>`_ for details on the structure. One of ``policy_rule``, ``policy_rule_json``, or ``policy_rule_file`` is required, in that order of precedence for use if multiple parameters are used. Note that the `name` field in the JSON will override the ``name`` parameter in the state. :param skip_verify: Used for the ``policy_rule_file`` parameter. If ``True``, hash verification of remote file sources (``http://``, ``https://``, ``ftp://``) will be skipped, and the ``source_hash`` argument will be ignored. :param source_hash: This can be a source hash string or the URI of a file that contains source hash strings. :param source_hash_name: When ``source_hash`` refers to a hash file, Salt will try to find the correct hash by matching the filename/URI associated with that hash. :param policy_type: The type of policy definition. Possible values are NotSpecified, BuiltIn, and Custom. Only used with the ``policy_rule`` parameter. :param mode: The policy definition mode. Possible values are NotSpecified, Indexed, and All. Only used with the ``policy_rule`` parameter. :param display_name: The display name of the policy definition. Only used with the ``policy_rule`` parameter. :param description: The policy definition description. Only used with the ``policy_rule`` parameter. :param metadata: The policy definition metadata defined as a dictionary. Only used with the ``policy_rule`` parameter. :param parameters: Required dictionary if a parameter is used in the policy rule. Only used with the ``policy_rule`` parameter. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure policy definition exists: azurearm_resource.policy_definition_present: - name: testpolicy - display_name: Test Policy - description: Test policy for testing policies. - policy_rule: if: allOf: - equals: Microsoft.Compute/virtualMachines/write source: action - field: location in: - eastus - eastus2 - centralus then: effect: deny - connection_auth: {{ profile }} Fr r r r zLOne of "policy_rule", "policy_rule_json", or "policy_rule_file" is required!c s s � | ]}|d uV qd S �Nr )�.0�xr r r � <genexpr>� s � z,policy_definition_present.<locals>.<genexpr>� zPOnly one of "policy_rule", "policy_rule_json", or "policy_rule_file" is allowed!z]Policy definitions cannot be passed when "policy_rule_json" or "policy_rule_file" is defined!z"Unable to load policy rule json! (�)Nzfile.get_managed� skip_verifyz,Unable to locate policy rule file "{}"! ({})z(Unable to locate policy rule file "{}"!)�rz*Unable to load policy rule file "{}"! ({})r Z propertiesZ policyRuleZ policyType�modeZ displayName� description�metadata� parameters�'azurearm_resource.policy_definition_get�azurearm_log_level�infor) � policy_typer" r � display_namer � policy_ruleTr �Policy definition r r! � would be updated.)r rM rF rN rG rH rI rO r% z4azurearm_resource.policy_definition_create_or_update)r rO rM rF rN rG rH rI r( z+Failed to create policy definition {}! ({})r )r* r+ �sum�json�loads� Exceptionr Z__env__r1 r r �filesZfopen�load�remover- �lowerr, r. �dumpsr/ r0 ) r rO rM rF rN rG rH rI Zpolicy_rule_jsonZpolicy_rule_file�template� source_hashZsource_hash_namerD r2 r r Z temp_rule�excZsfnZ source_sumZcomment_ZprfZ policy_name�policyZ rule_changesZ meta_changes� param_changes� policy_kwargsr r r �policy_definition_present4 sn j � ������������� � ����� ����� ��� � � �� � � �� � � � �ra c C s� | ddi d�}t |t�sd|d< |S td | fddi|��}d |v r0d |d < d | � d �|d< |S td rId | � d�|d< d|d < |i d�|d< |S td | fi |��}|rjd |d < d | � d�|d< |i d�|d< |S d| � d�|d< |S )aI .. versionadded:: 2019.2.0 Ensure a policy definition does not exist in the current subscription. :param name: Name of the policy definition. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r rJ rK rL r) Tr rP r6 r! r7 Nr" r z*azurearm_resource.policy_definition_deleter8 z#Failed to delete policy definition r9 r: )r r2 r r^ r; r r r �policy_definition_absentg sF ���� ���rb c K s� | ddi d�} t |t�sd| d< | S td | |fddi|��} d | vr�|r=|�� | �d d��� kr=| �d �|d �| d d < |�� | d �� krR| d |d �| d d < | d �d�d } |�� | �� krl| |d �| d d< |pod�� | �dd��� kr�| �d�|d �| d d< |p�d�� | �dd��� kr�| �d�|d �| d d< td | �di �|p�i �} | r�| | d d< | d s�d| d< d| � d�| d< | S td r�d| � d�| d< d | d< | S ni | ||||||d �d �| d < td r�d| � d �| d< d | d< | S t |t��r t� t� |��}|� � } | � |� td d"| ||||||d �| ��} d | v�r6d| d< d| � d �| d< | S d!� | | �d ��| d< | S )#a� .. versionadded:: 2019.2.0 Ensure a security policy assignment exists. :param name: Name of the policy assignment. :param scope: The scope of the policy assignment. :param definition_name: The name of the policy definition to assign. :param display_name: The display name of the policy assignment. :param description: The policy assignment description. :param assignment_type: The type of policy assignment. :param parameters: Required dictionary if a parameter is used in the policy rule. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure policy assignment exists: azurearm_resource.policy_assignment_present: - name: testassign - scope: /subscriptions/bc75htn-a0fhsi-349b-56gh-4fghti-f84852 - definition_name: testpolicy - display_name: Test Assignment - description: Test assignment for testing assignments. - connection_auth: {{ profile }} Fr r r r �'azurearm_resource.policy_assignment_getrK rL r) �typer" r �scopeZpolicy_definition_id�/����definition_namerN rG r rI Tr �Policy assignment r r! rQ N)r re rh rd rN rG rI r% z*azurearm_resource.policy_assignment_creater( z+Failed to create policy assignment {}! ({})r )r* r+ r rY r- �splitr, r. rS rT rZ r/ r0 r1 )r re rh rN rG Zassignment_typerI r2 r r r^ Zpa_namer_ r` r r r �policy_assignment_present� s� 8 ����� � �� �� � �� �rk c C s� | ddi d�}t |t�sd|d< |S td | |fddi|��}d |v r1d |d < d | � d �|d< |S td rJd | � d�|d< d|d < |i d�|d< |S td | |fi |��}|rld |d < d | � d�|d< |i d�|d< |S d| � d�|d< |S )az .. versionadded:: 2019.2.0 Ensure a policy assignment does not exist in the provided scope. :param name: Name of the policy assignment. :param scope: The scope of the policy assignment. connection_auth A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Fr r r r rc rK rL r) Tr ri r6 r! r7 Nr" r z*azurearm_resource.policy_assignment_deleter8 z#Failed to delete policy assignment r9 r: )r re r2 r r^ r; r r r �policy_assignment_absent9 sF ���� ���rl )NNNr> )NNNNNNNNNr= NNFN)NNNNN)�__doc__rS �logging� functoolsr Zsalt.utils.azurearmr Zsalt.utils.filesr � getLogger�__name__�logr r r5 r< ra rb rk rl r r r r �<module> sZ X �l C � 4 5 �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings