File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/boto_elb.cpython-310.pyc
Back
o ;j[� � @ s� d Z ddlZddlZddlZddlZddlZddlZddlm Z e� e �Z dd� Z d(d d �Z d)d d�ZdZdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd)d$d%�Zd&d'� Z dS )*a< Manage ELBs .. versionadded:: 2014.7.0 Create and destroy ELBs. Be aware that this interacts with Amazon's services, and so may incur charges. This module uses ``boto``, which can be installed via package, or pip. This module accepts explicit elb credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More information available `here <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_. If IAM roles are not used you need to specify them either in a pillar file or in the minion's config file: .. code-block:: yaml elb.keyid: GKTADJGHEIQSXMKKRBJ08H elb.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile, either passed in as a dict, or as a string to pull from pillars or minion config: .. code-block:: yaml myprofile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 .. code-block:: yaml Ensure myelb ELB exists: boto_elb.present: - name: myelb - region: us-east-1 - availability_zones: - us-east-1a - us-east-1c - us-east-1d - keyid: GKTADJGHEIQSXMKKRBJ08H - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs - listeners: - elb_port: 443 instance_port: 80 elb_protocol: HTTPS instance_protocol: HTTP certificate: 'arn:aws:iam::1111111:server-certificate/mycert' policies: - my-ssl-policy - cookie-policy - elb_port: 8210 instance_port: 8210 elb_protocol: TCP - backends: - instance_port: 80 policies: - enable-proxy-protocol - health_check: target: 'HTTP:80/' - attributes: cross_zone_load_balancing: enabled: true access_log: enabled: true s3_bucket_name: 'mybucket' s3_bucket_prefix: 'my-logs' emit_interval: 5 connecting_settings: idle_timeout: 60 - cnames: - name: mycname.example.com. zone: example.com. ttl: 60 - name: myothercname.example.com. zone: example.com. - security_groups: - my-security-group - policies: - policy_name: my-ssl-policy policy_type: SSLNegotiationPolicyType policy: Protocol-TLSv1.2: true Protocol-SSLv3: false Server-Defined-Cipher-Order: true ECDHE-ECDSA-AES128-GCM-SHA256: true - policy_name: cookie-policy policy_type: LBCookieStickinessPolicyType policy: {} # no policy means this is a session cookie - policy_name: enable-proxy-protocol policy_type: ProxyProtocolPolicyType policy: ProxyProtocol: true # Using a profile from pillars Ensure myelb ELB exists: boto_elb.present: - name: myelb - region: us-east-1 - profile: myelbprofile # Passing in a profile Ensure myelb ELB exists: boto_elb.present: - name: myelb - region: us-east-1 - profile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs It's possible to specify attributes from pillars by specifying a pillar. You can override the values defined in the pillard by setting the attributes on the resource. The module will use the default pillar key 'boto_elb_attributes', which allows you to set default attributes for all ELB resources. Setting the attributes pillar: .. code-block:: yaml my_elb_attributes: cross_zone_load_balancing: enabled: true connection_draining: enabled: true timeout: 20 access_log: enabled: true s3_bucket_name: 'mybucket' s3_bucket_prefix: 'my-logs' emit_interval: 5 Overriding the attribute values on the resource: .. code-block:: yaml Ensure myelb ELB exists: boto_elb.present: - name: myelb - region: us-east-1 - attributes_from_pillar: my_elb_attributes # override cross_zone_load_balancing:enabled - attributes: cross_zone_load_balancing: enabled: false - profile: myelbprofile It's possible to specify cloudwatch alarms that will be setup along with the ELB. Note the alarm name will be defined by the name attribute provided, plus the ELB resource name. .. code-block:: yaml Ensure myelb ELB exists: boto_elb.present: - name: myelb - region: us-east-1 - profile: myelbprofile - alarms: UnHealthyHostCount: name: 'ELB UnHealthyHostCount **MANAGED BY SALT**' attributes: metric: UnHealthyHostCount namespace: AWS/ELB statistic: Average comparison: '>=' threshold: 1.0 period: 600 evaluation_periods: 6 unit: null description: ELB UnHealthyHostCount alarm_actions: ['arn:aws:sns:us-east-1:12345:myalarm'] insufficient_data_actions: [] ok_actions: ['arn:aws:sns:us-east-1:12345:myalarm'] You can also use alarms from pillars, and override values from the pillar alarms by setting overrides on the resource. Note that 'boto_elb_alarms' will be used as a default value for all resources, if defined and can be used to ensure alarms are always set for a resource. Setting the alarms in a pillar: .. code-block:: yaml my_elb_alarm: UnHealthyHostCount: name: 'ELB UnHealthyHostCount **MANAGED BY SALT**' attributes: metric: UnHealthyHostCount namespace: AWS/ELB statistic: Average comparison: '>=' threshold: 1.0 period: 600 evaluation_periods: 6 unit: null description: ELB UnHealthyHostCount alarm_actions: ['arn:aws:sns:us-east-1:12345:myalarm'] insufficient_data_actions: [] ok_actions: ['arn:aws:sns:us-east-1:12345:myalarm'] Overriding the alarm values on the resource: .. code-block:: yaml Ensure myelb ELB exists: boto_elb.present: - name: myelb - region: us-east-1 - profile: myelbprofile - alarms_from_pillar: my_elb_alarm # override UnHealthyHostCount:attributes:threshold - alarms: UnHealthyHostCount: attributes: threshold: 2.0 Tags can also be set: .. versionadded:: 2016.3.0 .. code-block:: yaml Ensure myelb ELB exists: boto_elb.present: - name: myelb - region: us-east-1 - profile: myelbprofile - tags: MyTag: 'My Tag Value' OtherTag: 'My Other Value' � N)�SaltInvocationErrorc C s dt v rdS dS )z) Only load if boto is available. �boto_elb.existsZboto_elb)Fz#boto_elb module could not be loaded)�__salt__� r r �H/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/boto_elb.py� __virtual__� s r �internet-facing�boto_elb_attributes�boto_elb_alarms�boto_elb_policiesTc $ C s@ t d | i �}|rtjj�||�n|}| ddi d�}t|tttd�f�s5d}t � |� |�|dd�� |S t|t�r?|� d �}t | ||||||||||� }|�|d d � |d |d g�d �� |d rh|d n|d |d< |d du rv|S t d | ||||�} | s�td r�|S |r�t| |||||�}|�tjj�|d |d �d � |d |d g�d �� |d r�|d n|d |d< |d du r�|S t| |||||�}|�tjj�|d |d �d � |d |d g�d �� |d r�|d n|d |d< |d du r�|S | �r�t d | ||||�} | �r�| D ]u} d}d} | �d| d d�� d| v �r*| �d�} | dk�rFdD ]} | | v�r>t� �| �n| | | | < �q1td d i | ��}|�tjj�|d |d �d � |d |d g�d �� |d �rs|d n|d |d< |d du �r�| S �qt| | | ||||�}|�tjj�|d |d �d � |d |d g�d �� |d �r�|d n|d |d< |d du �r�|S t| | |||||||� }|�tjj�|d |d �d � |d |d g�d �� |d �r�|d n|d |d< |d du �r|S t| |||||�}|�tjj�|d |d �d � |d |d g�d �� |d �r/|d n|d |d< |d du �r>|S |�sCg }|�r\d}!|D ]}"|t d |"|||||!d�7 }�qJ|�r�td �r�t d | |d||||��r�|d d | � d �7 < d|d< |S t d | |d||||�}#|#�s�|d d 7 < d|d< |S )!aB Ensure the ELB exists. name Name of the ELB. availability_zones A list of availability zones for this ELB. listeners A list of listener lists; example:: [ ['443', 'HTTPS', 'arn:aws:iam::1111111:server-certificate/mycert'], ['8443', '80', 'HTTPS', 'HTTP', 'arn:aws:iam::1111111:server-certificate/mycert'] ] subnets A list of subnet IDs in your VPC to attach to your LoadBalancer. subnet_names A list of subnet names in your VPC to attach to your LoadBalancer. security_groups The security groups assigned to your LoadBalancer within your VPC. Must be passed either as a list or a comma-separated string. For example, a list: .. code-block:: yaml - security_groups: - secgroup-one - secgroup-two Or as a comma-separated string: .. code-block:: yaml - security_groups: secgroup-one,secgroup-two scheme The type of a LoadBalancer, ``internet-facing`` or ``internal``. Once set, can not be modified. health_check A dict defining the health check for this ELB. attributes A dict defining the attributes to set on this ELB. Unknown keys will be silently ignored. See the :mod:`salt.modules.boto_elb.set_attributes` function for recognized attributes. attributes_from_pillar name of pillar dict that contains attributes. Attributes defined for this specific state will override those from pillar. cnames A list of cname dicts with attributes needed for the DNS add_record state. By default the boto_route53.add_record state will be used, which requires: name, zone, ttl, and identifier. See the boto_route53 state for information about these attributes. Other DNS modules can be called by specifying the provider keyword. the cnames dict will be passed to the state as kwargs. See the :mod:`salt.states.boto_route53` state for information about these attributes. alarms: a dictionary of name->boto_cloudwatch_alarm sections to be associated with this ELB. All attributes should be specified except for dimension which will be automatically set to this ELB. See the :mod:`salt.states.boto_cloudwatch_alarm` state for information about these attributes. alarms_from_pillar: name of pillar dict that contains alarm settings. Alarms defined for this specific state will override those from pillar. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. wait_for_sync Wait for an INSYNC change status from Route53. tags dict of tags instance_ids list of instance ids. The state will ensure that these, and ONLY these, instances are registered with the ELB. This is additive with instance_names. instance_names list of instance names. The state will ensure that these, and ONLY these, instances are registered with the ELB. This is additive with instance_ids. � config.optionT� ��name�result�comment�changesNzQThe 'security_group' parameter must be either a list or a comma-separated string.F�r r �,r � r )r r r r �test�boto_elb.get_elb_configZ boto_route53ZCNAMEZdns_name)Z record_type�valueZprovider)�profile�key�keyid�region� wait_for_synczboto_route53.present)�pendingZ rebootingZrunningZstopping�stoppedzboto_ec2.find_instances)r r r r r Z in_stateszboto_elb.set_instancesz ELB z instances would be updated.z"Failed to set requested instances.r )r �salt�utils� dictupdate�update� isinstance�str�list�type�log�error�split� _elb_present�join�__opts__�_attributes_present�_health_check_present�pop�locals�get� __states__�_alarms_present�_policies_present� _tags_present)$r � listeners�availability_zones�subnets� subnet_names�security_groups�scheme� health_check� attributesZattributes_from_pillarZcnames�alarms�alarms_from_pillar�policies�policies_from_pillar�backendsr r r r r �tagsZ instance_idsZinstance_names�tmp�ret�msg�_ret�exists�lb�cnameZ dns_provider�pZrunning_states�n�successr r r �present s( � � �� ��� �� & ��� ���� � �� �� � � ��rO c sr | ddi d�}t d | ||||�}|s'd| � �}t�|� |�|dd�� |S t d | ||||�} d d � | D �� � fd d �|D �} | s[d �t|��d ��}t�|� |�d|i� |S td rpd| � d| � d�|d< d|d< |S t d | |||||�} | r�d| � d�}t� |� t � � � |�} |�|d� � �d� t | ��d�d�� |S d| � d �}t�|� |�|dd�� |S ) a Add EC2 instance(s) to an Elastic Load Balancer. Removing an instance from the ``instances`` list does not remove it from the ELB. name The name of the Elastic Load Balancer to add EC2 instances to. instances A list of EC2 instance IDs that this Elastic Load Balancer should distribute traffic to. This state will only ever append new instances to the ELB. EC2 instances already associated with this ELB will not be removed if they are not in the ``instances`` list. .. versionadded:: 2015.8.0 .. code-block:: yaml add-instances: boto_elb.register_instances: - name: myloadbalancer - instances: - instance-id1 - instance-id2 Tr r r zCould not find lb Fr z boto_elb.get_instance_healthc S s g | ] }|d dkr|d �qS )� descriptionz.Instance deregistration currently in progress.Z instance_idr ��.0r r r r � <listcomp>X s �z®ister_instances.<locals>.<listcomp>c s g | ]}|� vr|�qS r r rQ �Znodesr r rS ] s z Instance/s {} already exist.z[]r r �ELB z is set to register : �.Nr zboto_elb.register_instanceszLoad Balancer z has been changed� ��old�new)r r zLoad balancer z failed to add instances)r r( r) r# �formatr% �strip�debugr- �info�set�unionr, r& ) r Z instancesr r r r rF rJ rG ZhealthrZ �stater rT r �register_instances4 sL � � �� � rb Zboto_elb_listener_policiesc C s� ddi d�} t jj�|||f�std��|sg }|D ]_} t| �dk r&td��d| vr.td��d | vr6td ��d | vr>td ��| d �� | d < | d d krTd| vrTtd��| �dg �} | �dd �}| sh|d u rht }|ry| t d |i ��| d g �7 } q|r�g }|D ]>}t d d|||| | d�}d|v r�d� |d �| d< d| d< | S d|vr�d |� d �| d< d| d< | S |� |d � q�d }|r�t d |||| | �}|�d �}|s�d |� d!�| d< d| d< | S t d" ||||| | d#�}|s�d$� |�| d< d| d< | S t d% | ||| | �}|�sXt d& �r d'| � d(�| d< d | d< | S t d) | |||||||| | d*� }|�rJd+d i| d, d-< d+| i| d, d.< d'| � d/�| d< | S d| d< d0| � d1�| d< | S d'| � d2�| d< t| |||| | �}t jj�| d, |d, �| d,< d3�| d |d g�| d< |d �s�|d | d< | d du �r�| S t| |||| | �}t jj�| d, |d, �| d,< d3�| d |d g�| d< |d �s�|d | d< | d du �r�| S |�r t| |||| | �}t jj�| d, |d, �| d,< d3�| d |d g�| d< |d �s |d | d< | d du �r | S | S |�r?t| |||| | �}t jj�| d, |d, �| d,< d3�| d |d g�| d< |d �s?|d | d< | S )4NTr �r r r zWExactly one of availability_zones, subnets, subnet_names must be provided as arguments.� z\Listeners must have at minimum port, instance_port and protocol values in the provided list.�elb_portz+elb_port is a required value for listeners.� instance_portz0instance_port is a required value for listeners.Z elb_protocolz/elb_protocol is a required value for listeners.ZHTTPSZ certificatezOcertificate is a required value for listeners if HTTPS is set for elb_protocol.rA rB z pillar.getzboto_vpc.get_resource_id�subnet)r r r r r r) z Error looking up subnet ids: {}r Fr �idzSubnet z does not exist.z boto_vpc.get_subnet_association�vpc_idzSubnets z do not map to a valid vpc id.z"boto_secgroup.convert_to_group_ids)ri r r r r z:Security groups {} do not map to valid security group ids.r r rU z is set to be created.zboto_elb.create) r r8 r7 r9 r; r< r r r r �elbr rY rZ z created.zFailed to create � ELB.z present.r )r r! �dataZ exactly_oner �len�upper� setdefaultr2 �"DEFAULT_PILLAR_LISTENER_POLICY_KEYr r[ �appendr- �_security_groups_presentr" r# r, �_listeners_present�_zones_present�_subnets_present)r r8 r7 r9 r: r; r< r r r r rF �listenerrA Zpolicies_pillar�i�rZ_security_groupsri rI �createdrH r r r r+ � s � ��� �� � � ��� � (�%� � � � � r+ c C s� ddi d�}t d | ||||�}|s | � d�|d< d|d< |S |s#g }i }|D ] } t d | �} | || < q'i } |d D ] } t d | �} | | | < q:g } g } |�� D ] \}} || vr\| �| � qO| �� D ] \}} ||vrn| �| � qatd r�g }| sy| r�|�d | � d �� | D ]}|�d�t d |��� q�| D ]}|�d�t d |��� q�d |d< n |�d| � d�� d�|�|d< |S | r�dd� | D �}t d | |||||�}|r�d| � d�|d< n d| � d�|d< d|d< | �r t d | | ||||�}|�rd}d�|d |�| �g�|d< nd }d�|d |�| �g�|d< d|d< | �s"| �rHi |d d < |d |d d d < t d | ||||�}|d |d d d < |S d| � d�|d< |S ) NTr rc r �* ELB configuration could not be retrieved.r Fr z boto_elb.listener_dict_to_tupler7 r rU z set to have listeners modified:zListener {} added.zListener {} deleted.z Listeners already set on ELB rV r c S s g | ]}|d �qS )re r )rR �lr r r rS W s z&_listeners_present.<locals>.<listcomp>zboto_elb.delete_listenerszDeleted listeners on rk z Failed to delete listeners on zboto_elb.create_listenersz Created listeners on {0} ELB.� z&Failed to create listeners on {0} ELB.r rY rZ )r �itemsrq r- r[ r, )r r7 r r r r rF rJ Zexpected_listeners_by_tupler{ Zl_keyZactual_listeners_by_tuple� to_delete� to_create�trG rv Zports�deletedry r r r rs # s� � � �� �� � � �rs c C s ddi d�}t d | ||||�}|s | � d�|d< d|d< |S |s#g }d}t|�t|d �kr1d}|r{td rEd | � d �|d< d |d< |S t d | |||||�} | r[d| � d�|d< n d| � d�|d< d|d< d |d i|d d< d |i|d d< |S d| � d�|d< |S )NTr rc r rz r Fr r; r rU z& set to have security groups modified.z boto_elb.apply_security_groupsz Modified security_groups on rk z$Failed to modify security_groups on r rY rZ z#security_groups already set on ELB rV )r r_ r- ) r r; r r r r rF rJ Z change_needed�changedr r r rr x s8 ��rr c C s ddi d�}t d | ||||�}|s d|d< d| � d�|d < |S g }d |v r;|d } |d } | d | d kr;|�d � d |v r_|d } |d } | d | d ksZ| �d d�| �d �kr_|�d � d|v rx|d } |d }| d |d krx|�d� d|v r�|d �� D ]\}}t|d | �t|�kr�|�d� q�d|d v r�|d d }|�d�s�|�d�r�td��|r�td r�d| � d�|d < d |d< |S t d | |||||�}|r�d|i|d d< d|i|d d < d | � d�|d < |S d|d< d | � d�|d < |S d | � d�|d < |S ) NTr rc zboto_elb.get_attributesFr z&Failed to retrieve attributes for ELB rV r Zcross_zone_load_balancing�enabledZconnection_draining�timeouti, Zconnecting_settingsZ idle_timeoutZ access_logZs3_bucket_prefix�/z-s3_bucket_prefix can not start or end with /.r rU z set to have attributes set.zboto_elb.set_attributesr> r rY rZ zSet attributes on ELB z Failed to set attributes on ELB z Attributes already set on ELB ) r rq r2 r} r% � startswith�endswithr r- )r r> r r r r rF � _attributesZ attrs_to_setZczlbZ_czlbZcdZ_cd�csZ_cs�attr�valZsbp�was_setr r r r. � sj � � � ���r. c C s0 ddi d�}|s i }t d | ||||�}|s$d|d< d| � d�|d < |S d}|�� D ]\} } t|| �t| �kr:d}q*|r�td rOd | � d �|d < d |d< |S t d | |||||�} | r�d|i|d d< t d | ||||�}d|i|d d< d| � d�|d < |S d|d< d| � d�|d < |S d| � d�|d < |S )NTr rc zboto_elb.get_health_checkFr z(Failed to retrieve health_check for ELB rV r r rU z set to have health check set.zboto_elb.set_health_checkr= r rY rZ zSet health check on ELB z"Failed to set health check on ELB z Health check already set on ELB )r r} r% r- ) r r= r r r r rF Z _health_checkZ need_to_setr� r� r� r r r r/ � sH �� � ���r/ c C s� ddi d�}t d | ||||�}|s d|d< d| � d�|d < |S g }g } |d } |D ] } | | vr5|�| � q*| D ] } | |vrC| �| � q8|sH| r�td rZd | � d �|d < d |d< |S |r~t d | |||||�} | rrd| � d�|d < n d| � d�|d < d|d< | r�t d | | ||||�} | r�d}d�|d |�| �g�|d < nd}d�|d |�| �g�|d < d|d< d |d i|d d< t d | ||||�}d |d i|d d< |S d| � d�|d < |S )NTr rc r Fr �Failed to retrieve ELB rV r r8 r rU z to have availability zones set.z"boto_elb.enable_availability_zonesz Enabled availability zones on rk z'Failed to enable availability zones on z#boto_elb.disable_availability_zonesz'Disabled availability zones on {0} ELB.r z0Failed to disable availability zones on {0} ELB.r rY rZ z&Availability zones already set on ELB )r rq r- r, r[ )r r8 r r r r rF rJ � to_enable� to_disableZ_zones�zoner� �disabledrG r r r rt � s\ � � � � �rt c C s� ddi d�}|s g }t d | ||||�}|s$d|d< d| � d�|d < |S g }g } |d } |D ] } | | vr9|�| � q.| D ] } | |vrG| �| � q<|sL| r�td r^d | � d �|d < d |d< |S |r�t d | |||||�} | rvd| � d�|d < n d| � d�|d < d|d< | r�t d | | ||||�} | r�d�|d d| � d�g�|d < nd�|d d| � d�g�|d < d|d< d |d i|d d< t d | ||||�}d |d i|d d< |S d| � d�|d < |S )NTr rc r Fr r� rV r r9 r rU z to have subnets set.zboto_elb.attach_subnetszAttached subnets on rk z Failed to attach subnets on zboto_elb.detach_subnetsr| zDetached subnets on z Failed to detach subnets on r rY rZ zSubnets already set on ELB )r rq r- r, )r r9 r r r r rF rJ r� r� Z_subnetsrg ZattachedZdetachedr r r ru & sh � � � � � ���ru c C s t d |i �}|rtjj�||�}| ddi d�}|�� D ]f\} } | d | d | d< | d | d d | d d< d | gi| d d < | d | d ||||d �} td di | ��} | �d �sb| d |d < | �di �i krt| d |d | d < d| v r�|d | d 7 < q |S )zAhelper method for present. ensure that cloudwatch_alarms are setr Tr r r| r r> rP ZLoadBalancerNameZ dimensions)r r> r r r r z boto_cloudwatch_alarm.presentr r r Nr )r r r! r" r# r} r3 r2 ) r r? r@ r r r r �currentrF �_r^ �kwargs�resultsr r r r4 ^ s2 �� �r4 c * s� |du rg }t d |g �} || }|du rg }t� } |D ]0} d| vr&td��d| vr.td��d| vr6td��| d | v rEtd �| d ���| �| d � q |D ]} | �d g �D ]} | | vrhtd �| d | | ���qWqO|D ]} | �d g �D ]} | | vr�td �| d | | ���qtqlddi d�}t d | ||||�}|s�| � d�|d< d|d< |S i }i � |D ]} t| �}| ||< |� | d < q�|�� }|d }t� }i }|D ]} � fdd�| �d g �D �|| d < q�i }|d D ]!} t| �d g ��}||| d < |D ]} t� d| ��r|�| � q�q�i }|D ]} � fdd�| �d g �D �|| d < �q i }|d D ]} t| �d g ��}||| d < �q'g }g } |D ] } | |v�rK| � | � �q?|D ]} | |v�r`| |v�r`|� | � �qOt� } |� � D ]\} }||�| t� �k�r|| �| � �qi|� � D ]\} }||�| t� �k�r�| �| � �q�t� } |� � D ]\} }||�| t� �k�r�| �| � �q�|� � D ]\} }||�| t� �k�r�| �| � �q�t d �r5g }!| �s�|�r|!� d | � d �� | D ] }"|!� d |"� d!�� �q�|D ] }"|!� d |"� d"�� �q�d|d< n |!� d#| � d$�� | D ] }#|!� d%|#� d&�� �q| D ] }$|!� d'|$� d&�� �q d(� |!�|d< |S | �r�| D ]E} t d) | | || d || d ||||d*�}%|%�rx| |d+ �| i �d,< d | � d-| � �}&d(� |d |&g�|d< d|d< �q:d|d< | S | D ]T} t d. | | t|�| g ��||||d/�}'|'�r�d0| � d1�}(t|�| g ��t|�| g ��d2�|d+ |(< d3�|| | | �}&d(� |d |&g�|d< d|d< �q�d|d< | S | D ]T} t d4 | | t|�| g ��||||d/�}'|'�r&d5| � d1�}(t|�| g ��t|�| g ��d2�|d+ |(< d6�|| | | �}&d(� |d |&g�|d< d|d< �q�d|d< | S |�ro|D ];} t d7 | | ||||d8�})|)�rg| |d+ �| i �d9< d | � d:| � �}&d(� |d |&g�|d< d|d< �q3d|d< | S |S );z;helper method for present. ensure that ELB policies are setNr � policy_namez-policy_name is a required value for policies.� policy_typez-policy_type is a required value for policies.�policyz)policy is a required value for listeners.z9Policy names must be unique: policy {} is declared twice.rA z4Listener {} on ELB {} refers to undefined policy {}.re z3Backend {} on ELB {} refers to undefined policy {}.rf Tr rc r rz r Fr c � h | ]}� | �qS r r �rR rL �Zcnames_by_namer r � <setcomp>� � �z$_policies_present.<locals>.<setcomp>r7 z ^ELBSecurityPolicy-\d{4}-\d{2}$c r� r r r� r� r r r� � r� rC r rU z set to have policies modified:zPolicy z added.� deleted.z Policies already set on ELB rV z Listener z policies updated.zBackend r zboto_elb.create_policy)r r� r� r� r r r r r rZ z was created on ELB z boto_elb.set_listener_policy)r �portrA r r r r Z listener_Z_policyrX z+Policy {} was created on ELB {} listener {}zboto_elb.set_backend_policyZbackend_z*Policy {} was created on ELB {} backend {}zboto_elb.delete_policy)r r� r r r r rY z was deleted from ELB )r r_ r r[ �addr2 � _policy_cname�keys�re�matchrq r} r- r, ro r& )*r rA rB r7 rC r r r r Zpillar_policiesZ policy_namesrL r{ �brF rJ Zpolicies_by_cnamerK Zexpected_policy_namesZactual_policy_namesZdefault_aws_policiesZ expected_policies_by_listenerZactual_policies_by_listenerZlistener_policiesZ expected_policies_by_backendZactual_policies_by_backendZbackend_policiesr~ r r� Zlisteners_to_updater� Zbackends_to_updaterG r� rv Zbackendry r Z policy_setZ policy_keyr� r r� r r5 } s� �� ���� ���� � �� � � � � � � � � � � � � � � � r5 c C sz | d }| d }| d }t tt|�� �dd� d��}t�tjj� t |���� � }|� d�r3|d d� }|� d |� d |� �S ) Nr� r� r� c S s t | d �S )Nr )r% )�xr r r �<lambda> s z _policy_cname.<locals>.<lambda>)r �Type����-) r% �sortedr& r} �hashlib�md5r r! Z stringutils�to_bytes� hexdigestr� )Z policy_dictr� r� r� Zcanonical_policy_reprZ policy_hashr r r r� { s �� r� c C s� | ddi d�}t d | ||||�}|rYtd r%d| � d�|d< d |d < |S t d | ||||�}|rKd | i|d d< d d i|d d< d| � d�|d< |S d|d < d| � d�|d< |S | � d�|d< |S )zH Ensure an ELB does not exist name name of the ELB Tr r r r rU z is set to be removed.r Nr zboto_elb.deleterj r rY rZ r� FzFailed to delete rk z ELB does not exist.)r r- )r r r r r rF rI r� r r r �absent� s$ ��r� c C sd ddi d�}|�r�t d | ||||�}|}i } g } |�d�rJ|d D ]'} | |�� vr4| | vr3| �| � q"|| |d | krD|| | | < |�| � q"| r�td rqd�t| �dkrZd nd d �| ��} d �|d | g�|d < d|d< nMt d | | ||||�} | s�d|d< d| � d�} d �|d | g�|d < |S d|d vr�t j j � |d ddi ii�|d< | D ]} |d | |d d d | < q�|s�| �r�td �r|r�d�t|�� �dkr�d nd d �|�� ��} d�|d | g�|d < d|d< | �rd�t| �� �dkr�dndd �| �� ��} d �|d | g�|d < n�t j j � || �}t d | |||||�} | �s;d|d< d } d �|d | g�|d < |S d|d v�rRt j j � |d ddi ii�|d< d |d v�rit j j � |d d di ii�|d< |D ].}|| |d d d |< d|v �r�|d �r�||d v �r�|d | |d d d |< �qk| �s�| �s�|�s�d } d �|d | g�|d < |S ) z1 helper function to validate tags on elb Tr rc r rD r z*The following tag{} set to be removed: {}.� zs arez isz, r r Nr zboto_elb.delete_tagsFz Error attempting to delete tag rV rY r z(The following tag{} set to be added: {}.r| z+The following tag {} set to be updated: {}.z values arezvalue iszboto_elb.set_tagsz Error attempting to set tags.rZ zTags are already set.) r r2 r� rq r0 r- r[ rm r, r r! r" r# )r rD r r r r rF rJ Z tags_to_addZtags_to_updateZtags_to_removeZ_tagrG rH Zall_tag_changes�tagr r r r6 � s� � � � � �� ��� ��� �r6 )NNNNr NNr NNr Nr NNNNNTNNN)NNNN) �__doc__r� �loggingr� Zsalt.utils.datar Zsalt.utils.dictupdateZsalt.utils.stringutilsZsalt.exceptionsr � getLogger�__name__r( r rO rb rp r+ rs rr r. r/ rt ru r4 r5 r� r� r6 r r r r �<module> sj m � 5 �I $U 7&18
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings