File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/boto_ec2.cpython-310.pyc
Back
o ;j� � @ s� d Z ddlZddlmZmZ ddlZddlm mZ ddl m Z m Z e� e �Zdd� Z d&dd�Zd'd d �Z d(d d �Zdd� Zdd� Z d)dd�Z d*dd�Z d+dd�Z d,dd�Z d-d d �Z d)d d �Z d.d d!�Z d/d"d#�Z d0d$d%�Z dS )1a� Manage EC2 .. versionadded:: 2015.8.0 This module provides an interface to the Elastic Compute Cloud (EC2) service from AWS. The below code creates a key pair: .. code-block:: yaml create-key-pair: boto_ec2.key_present: - name: mykeypair - save_private: /root/ - region: eu-west-1 - keyid: GKTADJGHEIQSXMKKRBJ08H - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs .. code-block:: yaml import-key-pair: boto_ec2.key_present: - name: mykeypair - upload_public: 'ssh-rsa AAAA' - keyid: GKTADJGHEIQSXMKKRBJ08H - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs You can also use salt:// in order to define the public key. .. code-block:: yaml import-key-pair: boto_ec2.key_present: - name: mykeypair - upload_public: salt://mybase/public_key.pub - keyid: GKTADJGHEIQSXMKKRBJ08H - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs The below code deletes a key pair: .. code-block:: yaml delete-key-pair: boto_ec2.key_absent: - name: mykeypair - region: eu-west-1 - keyid: GKTADJGHEIQSXMKKRBJ08H - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs � N)�sleep�time)�CommandExecutionError�SaltInvocationErrorc C s dt v rdS dS )z) Only load if boto is available. �boto_ec2.get_keyZboto_ec2)Fz#boto_ec2 module could not be loaded)�__salt__� r r �H/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/boto_ec2.py� __virtual__? s r c C s� | ddi d�}t d | ||||�}t�d|� |durMd|v rMzt d |�}W n% tyL } zt�| � d |� d �|d < d |d < |W Y d} ~ S d} ~ ww |s�td rad| � d�|d < d|d < |S |r�|s�t d | |||||�} | r�d|d < d| � d�|d < | |d d< |S d |d < d| � d�|d < |S |s�|r�t d | |||||�} | r�d|d < d| � d�|d < d|d d< | |d d< |S d |d < d| � d�|d < |S d |d < d|d < |S d|d < d| � d�|d < |S ) z% Ensure key pair is present. T� ��name�result�comment�changesr � exists is %sNzsalt://zcp.get_file_strzFile � not found.r Fr �test�The key � is set to be created.zboto_ec2.create_keyz is created.r �newzCould not create key � zboto_ec2.import_key�oldz0You can either upload or download a private key � The key name z already exists)r �log�debug�OSError�__opts__) r Z save_privateZ upload_public�region�key�keyid�profile�ret�exists�e�createdZimportedr r r � key_presentH sb �� � �� � ���r& c C s� | ddi d�}t d | ||||�}|rYtd r%d| � d�|d< d |d < |S t d | ||||�}t�d |� |rKd|d < d| � d �|d< | |d d< |S d|d < d| � d�|d< |S d|d < d| � d�|d< |S )z Deletes a key pair Tr r r r r � is set to be deleted.r Nr zboto_ec2.delete_keyr z is deleted.r r FzCould not delete key r r z does not exist)r r r r )r r r r r! r" r# Zdeletedr r r � key_absent� s( ��r( Tc C sh t jj�||f�s td��|std��t|t�s td��t|t�s%td��| ddi d�} td | | | | | d �}d |v rLd | d < d � |d d �| d< | S |d s�t d rxd| d< |red� | d dg�| d< |rrd� | d dg�| d< d| d < | S td | |||||| | | | d� }d |v r�d | d < d� |d d �| d< | S |d |d < d| � �| d< |d d | d d< nht |d d || | | | �}t �| d |d �| d< |d | d< |d s�|d | d < | d d u r�| S t|d || | | | �}t �| d |d �| d< d� | d |d g�| d< |d �s |d | d < | d d u �r | S t |d d || | | | �}t �| d |d �| d< d� | d |d g�| d< |d �sO|d | d < | S |�r�d |d v�r�t d �rjd� | d d g�| d< nw|d k�rqd nd}td! || | | | d"�}|�r�td# ddd|d$ |d d dd | | | | d%� }|�s�td& d|d$ | | | | d'�}d | d < d(� |�r�d)nd*�}d� | d |g�| d< | S n d | d < d� | d d+g�| d< | S d� | d d,g�| d< |�r�|D ]�}d-|v�r�d.}t|��t�d/|� d}d0}d1|d2< d }d3|v �r |�d3�}|�r2d4|d v �r |d d4 |d5< nd6|v �r,|d6 |d5< nd7}t|��|d d8 |d5< d9|v �rD|�d9�}|d0k�rmd:|v�rR| |d:< d;|v�r[| |d;< d<|v�rd| |d<< d=|v�rm| |d=< td>� |d?g� dAi |��}t�d@|� t �| d |d �| d< d� | d |d g�| d< |d �s�|d | d < | d d u �r�| S �q�| S )Ba� Ensure the EC2 ENI exists. .. versionadded:: 2016.3.0 name Name tag associated with the ENI. subnet_id The VPC subnet ID the ENI will exist within. subnet_name The VPC subnet name the ENI will exist within. private_ip_address The private ip address to use for this ENI. If this is not specified AWS will automatically assign a private IP address to the ENI. Must be specified at creation time; will be ignored afterward. description Description of the key. groups A list of security groups to apply to the ENI. source_dest_check Boolean specifying whether source/destination checking is enabled on the ENI. allocate_eip allocate and associate an EIP to the ENI. Could be 'standard' to allocate Elastic IP to EC2 region or 'vpc' to get it for a particular VPC .. versionchanged:: 2016.11.0 arecords A list of arecord dicts with attributes needed for the DNS add_record state. By default the boto_route53.add_record state will be used, which requires: name, zone, ttl, and identifier. See the boto_route53 state for information about these attributes. Other DNS modules can be called by specifying the provider keyword. By default, the private ENI IP address will be used, set 'public: True' in the arecord dict to use the ENI's public IP address .. versionadded:: 2016.3.0 region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. z@One (but not both) of subnet_id or subnet_name must be provided.z groups is a required argument.zgroups must be a list.z!source_dest_check must be a bool.Tr r � boto_ec2.get_network_interface�r r r r r! �errorFr �&Error when attempting to find eni: {}.�messager r zENI is set to be created.r z4An EIP is set to be allocated/assocaited to the ENI.z A records are set to be created.Nz!boto_ec2.create_network_interface) � subnet_id� subnet_name�private_ip_address� description�groupsr r r r! zFailed to create ENI: {}z Created ENI �idr r1 �source_dest_check� allocationIdz8An EIP is set to be allocated and assocaited to the ENI.�vpc� boto_ec2.allocate_eip_address��domainr r r r! � boto_ec2.associate_eip_address� allocation_id) � instance_id� instance_name� public_ipr; �network_interface_idr0 Zallow_reassociationr r r r! � boto_ec2.release_eip_address�r> r; r r r r! zGFailed to assocaite the allocated EIP address with the ENI. The EIP {}zwas successfully released.zwas NOT RELEASED.z!Failed to allocate an EIP addressz1An EIP is already allocated/assocaited to the ENIr z+The arecord must contain a "name" property.zprocessing arecord %sZ boto_route53�AZ record_typeZpublicZpublicIp�valuer> zsUnable to add an A record for the public IP address, a public IP address does not seem to be allocated to this ENI.r0 Zproviderr! r r r �.Zpresentz"ret from dns_provider.present = %sr )�salt�utils�data� exactly_oner � isinstance�list�boolr �formatr �join�_eni_attribute� dictupdate�update� _eni_groupsr r �popr Z __states__)r r. r/ r0 r1 r2 r4 � allocate_eipZarecordsr r r r! r" �rZ result_create�_retr9 Z eip_alloc�msgZarecordZ dns_providerZpublic_ip_arecordr r r � eni_present� s` I� � ��� �� � � � � � � � ����� � � � �rW c C s� ddi d�}| | |kr|S t d r d|� d�|d< d |d< |S td | d ||||||d �}d |v rGd } d|d< | �||d d �|d< |S d|� d�|d< | | |d�|d |< |S )NTr �r r r r zENI set to have z updated.r r �+boto_ec2.modify_network_interface_attributer3 �r? �attrrC r r r r! r+ z Failed to update ENI {0}: {1}.Fr- z Updated ENI rD �r r r )r r rL ) �metadatar[ rC r r r r! r" � result_updaterV r r r rN � s0 � �rN c C s� ddi d�}dd� | d D �}|� � td || d ||||d �}|s+d |d < d |d < |� � ||kr5|S td rCd|d < d |d < |S td | d d|||||d�} d| v rid} d |d < | �| d d �|d < |S d|d < ||d�|d d< |S )NTr rX c S s g | ]}|d �qS )r3 r )�.0�gr r r � <listcomp>� s z _eni_groups.<locals>.<listcomp>r2 z"boto_secgroup.convert_to_group_ids�vpc_id)rb r r r r! z0Could not find secgroup ids for provided groups.r Fr r z ENI set to have groups updated.rY r3 rZ r+ z!Failed to update ENI groups: {1}.r- zUpdated ENI groups.r\ r )�sortr r rL ) r] r2 r r r r! r" Z group_idsZ_groupsr^ rV r r r rQ � sL �� �rQ Fc C s� | ddi d�}t d | ||||d�}d|v r'd|d< d �|d d �|d < |S |d s;td r9d |d < d|d< |S |S td r\d |d < |rVd|d v rVd�|d dg�|d < d|d< |S d|d d v r�t d | d||||d�}d|v r�d|d< d�|d d �|d < |S t d | ||||d�} d| v r�d|d< d�| d d �|d < |S d| � �|d < d|d d< |r�d|d v r�t d d|d d ||||d �} | s�d�|d d g�|d < d|d< |S d�|d d g�|d < d|d d < |S ) a� Ensure the EC2 ENI is absent. .. versionadded:: 2016.3.0 name Name tag associated with the ENI. release_eip True/False - release any EIP associated with the ENI region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r r) r* r+ Fr r, r- r r zENI is set to be deleted.Nr5 r z.Allocated/associated EIP is set to be releasedr3 � attachmentz!boto_ec2.detach_network_interface)r �forcer r r r! zFailed to detach ENI: {}z!boto_ec2.delete_network_interfacezFailed to delete ENI: {}z Deleted ENI r r@ rA z+Failed to release EIP allocated to the ENI.z EIP released.z eip released)r rL r rM ) r � release_eipr r r r! r" rT Z result_detachZ result_deleterU r r r � eni_absent� s� � �7� �� � � � � � rg �, c K s� | ddi d�}t d d||d�|��s d|� �|d< d|d < |S d |� �|d< ||i|d d < |s3|S t� } t d d|dd�|��}|rO|d jdkrO |S t� | |krr|rddj|d jd�|d< ndj|d�|d< d|d < |S td� q7)zS Create a snapshot from the given instance .. versionadded:: 2016.3.0 Tr r zboto_ec2.create_image)�ami_namer= zFailed to create new AMI r Fr zCreated new AMI r r �boto_ec2.find_images)ri � return_objsr Z availablez(AMI still in state {state} after timeout)�statez1AMI with name {ami_name} not found after timeout.)ri � Nr )r r rl rL r ) r ri r= Zwait_until_availableZwait_timeout_seconds�kwargsr" Z starttimeZimagesr r r �snapshot_createdJ sH ����� ����ro c+ C sf | ddi d�}+d},d}-i }.t jj�||f�std��|$s |%s |&r.t jj�|$|%|&f�s.td��|rAtd ||'|(|)|*|-d �}/|/s@d},n'td |rH|n| |'|(|)|*|-d �}0|0sVd},nt|0�d krdt�d � d}n|0d }|,�r�t d r}d| � d�|+d< d|+d< |+S |r�||'|(|)|*d�}1td dhi |1��}2|2r�|2d }n|}td ||r�|n| fi d��d|�d|�d|�d | �d | �d | �d | �d | �d!|�d"|�d#|�d$|�d%|�d&|�d'|�d(|�d)|�d*|�d+|�d,|�d-|�d.|�d/| �d0| �d1| �d2| �d3| �d4|!�d5|'�d6|(�d7|)�d8|*��}3|3�rd9|3v�r#d|+d< d:� |�r |n| �|+d< |+S |3d9 }i i d;�|+d<< d|+d< d= d9< ||+d< d> d9< |&�rt d �rPd?|+d< d|+d< |+S | �sV|�rXd@nd}4tdA |4|'|(|)|*dB�}3|3�srd|+d< dC|+d< |+S |3dD }%t� dE|3dF � nt� dG� |$�s�|%�rEdH}5dI}6t |5�D ]%}7tdJ |$|%|'|(|)|*dK�}3|3�r� nt� dL|5|6 |$�p�|%� t �|6� �q�|3�s�d|+d< dM� |$�p�|%�|+d< |+S |3d dF }8|3d �d9��r�|3d d9 |k�r�d|+d< dN� |$�r�|$n|%|3d d9 �|+d< |+S nKt d �r dO| � dP�|+d< d|+d< |+S tdQ ||$|%|'|(|)|*dR�}3|3�r3d>|+d< v�r*i |+d< d>< |8|+d< d> dF< nd|+d< dS� |�r>|n| �|+d< |+S |"�r�|"�� D ]�\}9}:tdT |9||'|(|)|*dU�};t|;t��sdi n|;};|;�|9�|:k�rp�qLt d �r�dV� |9|;�|9�|:�|.|9< �qLztdW |9|:||'|(|)|*dX�}3W n$ t�y� }< zd|+d< dY� |9|:|�|+d< |+W Y d}<~< S d}<~<ww |+d< �r�|+d< ni i d;�|+d<< |;�|9�|+d< d= |9< |:|+d< d> |9< �qLt d �r�|.�r�|.|+d< d>< d|+d< ndZ� |�r�|n| �|+d< d|+d< ��r1|du�r1t���ttd[ d\|i|'|(|)|*d]��|i ��� t� �� �}=t��� �}>t|=|> �}?�fd^d_�|>|= D �}@� �fd`d_��D �}A|@�|A� |@�sP|?�r1t d �r�d=|+d< v �rb|+d< d= ni |+d< d=< d>|+d< v �ru|+d< d> ni |+d< d>< � |+d< d= d< �|+d< d> d< |+d da� |�r�|n| �7 < |+S |?�r�tdb ||?|'|(|)|*dc��s�dd� |�r�|n| �}Bt�|B� |+d de|B 7 < d|+d< |+S |@�r�tdf ||@|'|(|)|*dc��s�dg� |�r�|n| �}Bt�|B� |+d de|B 7 < d|+d< |+S d=|+d< v �r|+d< d= ni |+d< d=< d>|+d< v �r|+d< d> ni |+d< d>< � |+d< d= d< �|+d< d> d< |+S )iu� Ensure an EC2 instance is running with the given attributes and state. name (string) - The name of the state definition. Recommended that this match the instance_name attribute (generally the FQDN of the instance). instance_name (string) - The name of the instance, generally its FQDN. Exclusive with 'instance_id'. instance_id (string) - The ID of the instance (if known). Exclusive with 'instance_name'. image_id (string) – The ID of the AMI image to run. image_name (string) – The name of the AMI image to run. tags (dict) - Tags to apply to the instance. key_name (string) – The name of the key pair with which to launch instances. security_groups (list of strings) – The names of the EC2 classic security groups with which to associate instances user_data (string) – The Base64-encoded MIME user data to be made available to the instance(s) in this reservation. instance_type (string) – The EC2 instance size/type. Note that only certain types are compatible with HVM based AMIs. placement (string) – The Availability Zone to launch the instance into. kernel_id (string) – The ID of the kernel with which to launch the instances. ramdisk_id (string) – The ID of the RAM disk with which to launch the instances. vpc_id (string) - The ID of a VPC to attach the instance to. vpc_name (string) - The name of a VPC to attach the instance to. monitoring_enabled (bool) – Enable detailed CloudWatch monitoring on the instance. subnet_id (string) – The ID of the subnet within which to launch the instances for VPC. subnet_name (string) – The name of the subnet within which to launch the instances for VPC. private_ip_address (string) – If you’re using VPC, you can optionally use this parameter to assign the instance a specific available IP address from the subnet (e.g., 10.0.0.25). block_device_map (boto.ec2.blockdevicemapping.BlockDeviceMapping) – A BlockDeviceMapping data structure describing the EBS volumes associated with the Image. disable_api_termination (bool) – If True, the instances will be locked and will not be able to be terminated via the API. instance_initiated_shutdown_behavior (string) – Specifies whether the instance stops or terminates on instance-initiated shutdown. Valid values are: - 'stop' - 'terminate' placement_group (string) – If specified, this is the name of the placement group in which the instance(s) will be launched. client_token (string) – Unique, case-sensitive identifier you provide to ensure idempotency of the request. Maximum 64 ASCII characters. security_group_ids (list of strings) – The IDs of the VPC security groups with which to associate instances. security_group_names (list of strings) – The names of the VPC security groups with which to associate instances. additional_info (string) – Specifies additional information to make available to the instance(s). tenancy (string) – The tenancy of the instance you want to launch. An instance with a tenancy of ‘dedicated’ runs on single-tenant hardware and can only be launched into a VPC. Valid values are:”default” or “dedicated”. NOTE: To use dedicated tenancy you MUST specify a VPC subnet-ID as well. instance_profile_arn (string) – The Amazon resource name (ARN) of the IAM Instance Profile (IIP) to associate with the instances. instance_profile_name (string) – The name of the IAM Instance Profile (IIP) to associate with the instances. ebs_optimized (bool) – Whether the instance is optimized for EBS I/O. This optimization provides dedicated throughput to Amazon EBS and a tuned configuration stack to provide optimal EBS I/O performance. This optimization isn’t available with all instance types. network_interfaces (boto.ec2.networkinterface.NetworkInterfaceCollection) – A NetworkInterfaceCollection data structure containing the ENI specifications for the instance. network_interface_name (string) - The name of Elastic Network Interface to attach .. versionadded:: 2016.11.0 network_interface_id (string) - The id of Elastic Network Interface to attach .. versionadded:: 2016.11.0 attributes (dict) - Instance attributes and value to be applied to the instance. Available options are: - instanceType - A valid instance type (m1.small) - kernel - Kernel ID (None) - ramdisk - Ramdisk ID (None) - userData - Base64 encoded String (None) - disableApiTermination - Boolean (true) - instanceInitiatedShutdownBehavior - stop|terminate - blockDeviceMapping - List of strings - ie: [‘/dev/sda=false’] - sourceDestCheck - Boolean (true) - groupSet - Set of Security Groups or IDs - ebsOptimized - Boolean (false) - sriovNetSupport - String - ie: ‘simple’ target_state (string) - The desired target state of the instance. Available options are: - running - stopped Note that this option is currently UNIMPLEMENTED. public_ip: (string) - The IP of a previously allocated EIP address, which will be attached to the instance. EC2 Classic instances ONLY - for VCP pass in an allocation_id instead. allocation_id: (string) - The ID of a previously allocated EIP address, which will be attached to the instance. VPC instances ONLY - for Classic pass in a public_ip instead. allocate_eip: (bool) - Allocate and attach an EIP on-the-fly for this instance. Note you'll want to release this address when terminating the instance, either manually or via the 'release_eip' flag to 'instance_absent'. region (string) - Region to connect to. key (string) - Secret key to be used. keyid (string) - Access key to be used. profile (variable) - A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. .. versionadded:: 2016.3.0 Tr r F��pendingZ rebooting�runningZstopping�stoppedz7Exactly one of image_id OR image_name must be provided.zHAt most one of public_ip, allocation_id OR allocate_eip may be provided.zboto_ec2.exists)r< r r r r! � in_states�boto_ec2.find_instances�r r r r r! rt � zTMultiple instances matching criteria found - cannot determine a singular instance-idNr r � The instance r r r )ri r r r r! rj z boto_ec2.run�tags�key_name�security_groups� user_data� instance_type� placement� kernel_id� ramdisk_idrb �vpc_name�monitoring_enabledr. r/ r0 �block_device_map�disable_api_termination�$instance_initiated_shutdown_behavior�placement_group� client_token�security_group_ids�security_group_names�additional_info�tenancy�instance_profile_arn�instance_profile_name� ebs_optimized�network_interfaces�network_interface_namer? r r r r! r< z Failed to create instance {}.r\ r r r zNew EIP would be allocated.r6 r7 r8 zFailed to allocate new EIP.r; z"New EIP with address %s allocated.r> zEIP not requested.� � � boto_ec2.get_eip_address_info)� addressesZallocation_idsr r r r! z8Waiting up to %s secs for new EIP %s to become availablezFailed to lookup EIP {}.z.EIP {} is already associated with instance {}.� Instance z to be updated.r: )r< r> r; r r r r! z$Failed to attach EIP to instance {}.�boto_ec2.get_attribute�r< r r r r! zAThe instance attribute {} is set to be changed from '{}' to '{}'.zboto_ec2.set_attribute)Z attributeZattribute_valuer< r r r r! z0Failed to set attribute {} to {} on instance {}.z#Instance {} is in the correct statezboto_ec2.get_all_tagsz resource-id)�filtersr r r r! c s i | ]}|� | �qS r r �r_ �t)ry r r � <dictcomp>V s z$instance_present.<locals>.<dictcomp>c s* i | ]}�� |�� � |�kr|�| �qS r )�getr� �Z curr_tagsry r r r� W s * z' Tags would be updated on instance {}.zboto_ec2.delete_tags)Z resource_idsry r r r r! z(Error while deleting tags on instance {}z zboto_ec2.create_tagsz(Error while creating tags on instance {}r )rE rF rG rH r r �lenr r r rL �info�ranger r r� �itemsrI �dict�set�keysrJ rP r+ )Cr r= r< Zimage_idZ image_namery rz r{ r| r} r~ r r� rb r� r� r. r/ r0 r� r� r� r� r� r� r� r� r� r� r� r� r� r� r? Z attributesZ target_stater> r; rS r r r r! r" �_create�running_statesZ changed_attrsr# � instances�argsZ image_idsrT r9 ZtriesZsecsr� �ip�k�v�currr$ �currentZdesired�remove�add�replacerV r r� r �instance_present~ s� L����� � �� ������� � � � � ��������������� � � � � �!�"�#�% � � ��� ��� � �� � � ���� � ��� � � � �-�� � � � � �r� c C s� | ddi d�} d} |s@zt d |r|n| ||||| |d�}W n! ty? } zd| d< d �|p/| �| d < | W Y d} ~ S d} ~ ww t d |||||d|d �} | s]d| d< d |� d�| d < | S | d } t d d|||||d�}|�d�du r�d| d< d�|�| d < | S td r�d| � d�| d < d| d< | S t d ||||||d�}|s�d| d< d|� d�| d < | S d |i| d d < d| d d < |�r]t| d d�}|�r]||||d!�}d}d}d}t| d"d��r t d# d/d$|i|��}|r�d%|d v r�|d d% }|d �d&�}nd| d< d'|� d�| d < | S | j}|�r$t d( d/d&|i|���s$t�d)|� t d* d/||d+�|���rOt� d,|�p<|d d- � |�pF|d d- | d d d-< | S d| d< d.|� d�| d < | S | S )0a� Ensure an EC2 instance does not exist (is stopped and removed). .. versionchanged:: 2016.11.0 name (string) - The name of the state definition. instance_name (string) - The name of the instance. instance_id (string) - The ID of the instance. release_eip (bool) - Release any associated EIPs during termination. region (string) - Region to connect to. key (string) - Secret key to be used. keyid (string) - Access key to be used. profile (variable) - A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. filters (dict) - A dict of additional filters to use in matching the instance to delete. YAML example fragment: .. code-block:: yaml - filters: vpc-id: vpc-abcdef12 Tr r rp �boto_ec2.get_id)r r r r r! rt r� Nr z1Couldn't determine current status of instance {}.r ru )r< r r r r! rk r� r� z is already gone.r r� ZdisableApiTerminationr� Fz3Termination of instance {} via the API is disabled.r rx r' zboto_ec2.terminate)r< r r r r r! z Failed to terminate instance rD r< r r r � ip_address�r r r r! rb r� r� r; Zassociation_idz)Can't determine AllocationId for address z!boto_ec2.disassociate_eip_addressz Failed to disassociate EIP %s.r@ )r; r> zReleased EIP address %sr> zFailed to release EIP r ) r r rL r� r �getattrr� r �warningr� )r r= r< rf r r r r! r� r" r� r$ r� �instanceZ no_can_dorT r� Z base_argsr> Zalloc_idZassoc_idr r r �instance_absent� s� . � ���� ��� � �� �� �r� c C s� | ddi d�} i } d} t jj�||||f�std��|s |r$|s$td��|r-| �d|i� |r6| �d|i� |rOtd ||||| | d �}|sOd �|�| d < | S |rX| �d |i� |ra| �d|i� |||| d�} td d&d| i| ��}t|�dk rd| d < | S t|�dkr�d�| �}t � |� || d < d| d< | S |d }t � d|� t d r�d|� d�| d < d | d< | S td d&|dd �| ��r�d |� d �| d < d!|id!d id"�| d#< | S d$|� d%�| d < d| d< | S )'a� Ensure the EC2 volume is detached and absent. .. versionadded:: 2016.11.0 name State definition name. volume_name Name tag associated with the volume. For safety, if this matches more than one volume, the state will refuse to apply. volume_id Resource ID of the volume. instance_name Only remove volume if it is attached to instance with this Name tag. Exclusive with 'instance_id'. Requires 'device'. instance_id Only remove volume if it is attached to this instance. Exclusive with 'instance_name'. Requires 'device'. device Match by device rather than ID. Requires one of 'instance_name' or 'instance_id'. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r rp z^Exactly one of 'volume_name', 'volume_id', 'instance_name', or 'instance_id' must be provided.zYParameter 'device' is required when either 'instance_name' or 'instance_id' is specified.z volume-id�tag:Namer� rv zCInstance with Name {} not found. Assuming associated volumes gone.r zattachment.instance-idzattachment.devicer� �boto_ec2.get_all_volumesr� rw z;Volume matching criteria not found, assuming already absentzAMore than one volume matched criteria, can't continue in state {}Fr r zMatched Volume ID %sr z The volume r' Nzboto_ec2.delete_volume)� volume_idre �Volume z deleted.r� r\ r zError deleting volume rD r ) rE rF rG rH r rP r rL r� r r+ r� r )r � volume_namer� r= r< �devicer r r r! r" r� r� r� �volsrV �volr r r � volume_absent8 s| 6 �� ��� �� �r� c C s� | ddi d�}||||||d�}t d rDd|d< td di |��} | d r:| �d �r8d |d < | d |d < d |d < |S d|d < d|d < |S td di |��} | d rb| �d �r`d|d < | d |d < |S d|d < d|d < |S )a Ensure EC2 volume(s) matching the given filters have the defined tags. .. versionadded:: 2016.11.0 name State definition name. tag_maps List of dicts of filters and tags, where 'filters' is a dict suitable for passing to the 'filters' argument of boto_ec2.get_all_volumes(), and 'tags' is a dict of tags to be set on volumes as matched by the given filters. The filter syntax is extended to permit passing either a list of volume_ids or an instance_name (with instance_name being the Name tag of the instance to which the desired volumes are mapped). Each mapping in the list is applied separately, so multiple sets of volumes can be all tagged differently with one call to this function. YAML example fragment: .. code-block:: yaml - filters: attachment.instance_id: i-abcdef12 tags: Name: dev-int-abcdef12.aws-foo.com - filters: attachment.device: /dev/sdf tags: ManagedSnapshots: true BillingGroup: bubba.hotep@aws-foo.com - filters: instance_name: prd-foo-01.aws-foo.com tags: Name: prd-foo-01.aws-foo.com BillingGroup: infra-team@aws-foo.com - filters: volume_ids: [ vol-12345689, vol-abcdef12 ] tags: BillingGroup: infra-team@aws-foo.com authoritative Should un-declared tags currently set on matched volumes be deleted? Boolean. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r )�tag_maps� authoritativer r r r! r �dry_run�boto_ec2.set_volumes_tags�successr zTags would be updated.r Nr z'Error validating requested volume tags.Fz Tags applied.z%Error updating requested volume tags.r )r r r� ) r r� r� r r r r! r" r� rT r r r �volumes_tagged� s: =� � �r� c C s� | ddi d�}i }i }d}t jj�||f�std��t jj�||f�s'td��|du r/td��| | ||d �}|rNtd d;||d �|��}|sNtd |� d ���td d;|dd�|��}|d }|r�i }|�d|i� td d;d|i|��}t|�dkr�d�|| �}t|��t|�dk r�t d r�d�|||�|d< d|d< |S td d;|j |||| | | dd�|��}d|v r�|d }ntd |� d ���td d;d d |gid!|id"�gi|��}|d# d$u r�td%�|||d ���d|d&< ||d&< n|d }td d;|gdd'�|��}t|�dk �rtd(|� d)���|d }|j |j k�r&td*�||j ||j ���|j } | du�r�| j du�r�|| j k�rK|| jk�rKd+�|||�|d< |S t d �rcd,�| j | j|||�|d< d|d< |S td- d;|dd.�|���r�d/�|| j | j�|d< | j |d0< | j|d1< ntd2�|| j | j���||d0< d|d1< t d �r�d3�|||�|d< d|d< |S td4 d;|||d5�|���r�d6�|d d7�|||�g�|d< ||d0< ||d1< ||d8�|d9< |S d:�|||�|d< d$|d< |S )<a_ Ensure the EC2 volume is present and attached. .. name State definition name. volume_name The Name tag value for the volume. If no volume with that matching name tag is found, a new volume will be created. If multiple volumes are matched, the state will fail. volume_id Resource ID of the volume. Exclusive with 'volume_name'. instance_name Attach volume to instance with this Name tag. Exclusive with 'instance_id'. instance_id Attach volume to instance with this ID. Exclusive with 'instance_name'. device The device on the instance through which the volume is exposed (e.g. /dev/sdh) size The size of the new volume, in GiB. If you're creating the volume from a snapshot and don't specify a volume size, the default is the snapshot size. Optionally specified at volume creation time; will be ignored afterward. Requires 'volume_name'. snapshot_id The snapshot ID from which the new Volume will be created. Optionally specified at volume creation time; will be ignored afterward. Requires 'volume_name'. volume_type The type of the volume. Optionally specified at volume creation time; will be ignored afterward. Requires 'volume_name'. Valid volume types for AWS can be found here: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html iops The provisioned IOPS you want to associate with this volume. Optionally specified at volume creation time; will be ignored afterward. Requires 'volume_name'. encrypted Specifies whether the volume should be encrypted. Optionally specified at volume creation time; will be ignored afterward. Requires 'volume_name'. kms_key_id If encrypted is True, this KMS Key ID may be specified to encrypt volume with this key. Optionally specified at volume creation time; will be ignored afterward. Requires 'volume_name'. e.g.: arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r )rr rs z=Exactly one of 'volume_name', 'volume_id', must be provided.zBExactly one of 'instance_name', or 'instance_id' must be provided.Nz Parameter 'device' is required.r� r� )r rt zInstance with Name r ru )r< rk r r� r� r� rw zGMore than one volume matched volume name {}, can't continue in state {}r zDThe volume with name {} is set to be created and attached on {}({}).r r zboto_ec2.create_volume)Z zone_name�size� snapshot_id� volume_type�iops� encrypted� kms_key_idZwait_for_creationz Error creating volume with name rD r� r� � volume_ids�Name)r� ry r� Fz3Error updating requested volume {} with name {}. {}r� )r� rk r� z do not existz3Volume {} in {} cannot attach to instance {} in {}.z$The volume {} is attached on {}({}).zFThe volume {} is set to be detached from {}({} and attached on {}({}).zboto_ec2.detach_volume)r� Zwait_for_detachementz"Volume {} is detached from {}({}).r< r� zFThe volume {} is already attached on instance {}({}). Failed to detachz.The volume {} is set to be attached on {}({}).zboto_ec2.attach_volume)r� r< r� r z Volume {} is attached on {}({}).r\ r z-Error attaching volume {} to instance {}({}).r )rE rF rG rH r r rP r� rL r r~ �zone� attach_datar< r� ZdevicrM ) r r� r� r= r< r� r� r� r� r� r� r� r r r r! r" Zold_dictZnew_dictr� r� r� r� r� r� rV Z_rtr� r� r r r �volume_present s8 X������ � �� � � ���� �� �� ��� �� �� � �� ��������r� c C s` t jj�||f�s td��|std��| ddg g d�d�} ||||||d�} td di | ��} | rN| �d i ��d �rN| d d D ] } | d d �| d � q@g } |D ]}|| d d vra| �|� qR| �rtd s�|| |||||d�}td di |�� td di | ��} | r�| �d i ��d d�r�| d d D ] } | d d �| d � q�g }|D ]}|| d d vr�|�|� q�|r�d| d < d� dd� | d d � dd� | � dd� |� �| d< n d� dd� | � �| d< | d d | d d kr�i | d < | S d� dd� | d d � dd� | � �| d< i | d < d| d < | S d� dd� | d d � �| d< i | d < | S )ax Ensure an ENI has secondary private ip addresses associated with it name (String) - State definition name network_interface_id (String) - The EC2 network interface id, example eni-123456789 private_ip_addresses (List or String) - The secondary private ip address(es) that should be present on the ENI. allow_reassignment (Boolean) - If true, will reassign a secondary private ip address associated with another ENI. If false, state will fail if the secondary private ip address is associated with another ENI. region (string) - Region to connect to. key (string) - Secret key to be used. keyid (string) - Access key to be used. profile (variable) - A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. �PExactly one of 'network_interface_name', 'network_interface_id' must be providedzCYou must provide the private_ip_addresses to associate with the ENITr r\ r �r r? r r r r! r) r �private_ip_addressesr r r0 r )r? r� �allow_reassignmentr r r r! z$boto_ec2.assign_private_ip_addressesNr FzHips on eni: {} attempted to add: {} could not add the following ips: {} � - r z added ips: {}z+ips on eni: {} ips that would be added: {} zips on eni: {}r ) rE rF rG rH r r r� �appendr rL rM )r r� r? r� r� r r r r! r" � get_eni_args�eni�eni_pipZ ips_to_add� private_ip�assign_ips_argsZ ips_not_addedr r r �private_ips_present s� #���� �� � �� �� � ��r� c C s� t jj�||f�s td��|std��t|t�s|g}| ddg g d�d�}||||||d�} td d i | ��} d } | r`| �d i ��d �r`| d d D ]} |d d � | d � | d r_| d } qJg } |D ]6}||d d v rs| � |� || kr�d|d < d� | dd� |d d � dd� |� �|d< i |d < | S qd| �rUt d �s5|| ||||d�}td d i |�� td d i | ��} | r�| �d i ��d d �r�| d d D ] } |d d � | d � q�g }|D ]}||d d v r�|� |� q�|�rd|d < d� dd� |d d � dd� | � dd� |� �|d< n d� dd� | � �|d< |d d |d d k�r3i |d < |S d� dd� |d d � dd� | � �|d< i |d < d |d < |S d� dd� |d d � �|d< i |d < |S ) a� Ensure an ENI does not have secondary private ip addresses associated with it name (String) - State definition name network_interface_id (String) - The EC2 network interface id, example eni-123456789 private_ip_addresses (List or String) - The secondary private ip address(es) that should be absent on the ENI. region (string) - Region to connect to. key (string) - Secret key to be used. keyid (string) - Access key to be used. profile (variable) - A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. r� zEYou must provide the private_ip_addresses to unassociate with the ENITr )r r r r� r) Nr r� r r r0 ZprimaryFziYou cannot unassign the primary private ip address ({}) on an eni ips on eni: {} attempted to remove: {} r� r r )r? r� r r r r! z&boto_ec2.unassign_private_ip_addressesr zNips on eni: {} attempted to remove: {} could not remove the following ips: {} zremoved ips: {}z-ips on eni: {} ips that would be removed: {} z ips on network interface: {}r ) rE rF rG rH r rI rJ r r� r� rL rM r )r r� r? r� r r r r! r" r� r� Zprimary_private_ipr� Z ips_to_remover� r� Zips_not_removedr r r �private_ips_absent� s� �� �� � �� � � � �� �� � ��r� )NNNNNN)NNNN) NNNNNTNNNNNN)FNNNN)Trh )*NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNFNNNN)NNFNNNNN) NNNNNNNNN)NNNNNNNNNFNNNNN)NNNFNNNN)NNNNNNN) �__doc__�loggingr r Zsalt.utils.datarE Zsalt.utils.dictupdaterF rO Zsalt.exceptionsr r � getLogger�__name__r r r& r( rW rN rQ rg ro r� r� r� r� r� r� r� r r r r �<module> s 4 � < � * �g �6 � � ' � �` � z � �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings