File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/boto_secgroup.cpython-310.pyc
Back
o ;j�d � @ s� d Z ddlZddlmZ ddlZddlmZmZ e� e �Z zddl Z ddl Z e� d��ej� dZW n ey= dZY nw dd � Z d*d d �Z d+d d �Zdd� Z d,dd�Zdd� Z d-dd�Z d+dd�Z d+dd�Z d*dd�Z d+d d �Z d*d d �Z d.d d!�Z d.d"d#�Z d*d$d%�Z d*d&d'�Z! d*d(d)�Z"dS )/a� Connection module for Amazon Security Groups .. versionadded:: 2014.7.0 :configuration: This module accepts explicit ec2 credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More Information available at: .. code-block:: text http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html If IAM roles are not used you need to specify them either in a pillar or in the minion's config file: .. code-block:: yaml secgroup.keyid: GKTADJGHEIQSXMKKRBJ08H secgroup.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs A region may also be specified in the configuration: .. code-block:: yaml secgroup.region: us-east-1 If a region is not specified, the default is us-east-1. It's also possible to specify key, keyid and region via a profile, either as a passed in dict, or as a string to pull from pillars or minion config: .. code-block:: yaml myprofile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 :depends: boto � N)� OrderedDict)�CommandExecutionError�SaltInvocationError�botoTFc C s0 t jjjddd�} | du rtd tdtd� | S )zg Only load if boto libraries exist and if boto libraries are greater than a given version. z2.4.0F)Zboto_verZ check_boto3Tzboto.assign_funcsZec2)�pack)�salt�utilsZversionsZcheck_boto_reqs� __utils__�__name__�__salt__)Z has_boto_reqs� r �N/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/boto_secgroup.py� __virtual__E s �r c C s6 t ||||d�}t|| |||||||d� } | rdS dS )z� Check to see if a security group exists. CLI Example: .. code-block:: bash salt myminion boto_secgroup.exists mysecgroup ��region�key�keyid�profile��name�vpc_id�vpc_name�group_idr r r r TF)� _get_conn� _get_group) r r r r r r r r �conn�groupr r r �existsW s � r c C s t d |||||d�}|�d�S )Nzboto_vpc.get_id)r r r r r �id)r �get)r r r r r r �datar r r �_vpc_name_to_id} s � r! c C st g }| D ]3}|� d�}|� d�}|� d�}|� d�}|D ]}|||d�}|�� D ]\} } | || < q(|�|� q q|S )a7 Split rules with combined grants into individual rules. Amazon returns a set of rules with the same protocol, from and to ports together as a single rule with a set of grants. Authorizing and revoking rules, however, is done as a split set of rules. This function splits the rules up. � ip_protocol�to_port� from_port�grants)r" r# r$ )r �items�append) �rules�split�ruler" r# r$ r% �grant�_ruler �valr r r � _split_rules� s � � r. c C s� |r|rt d��|r1z t||||||d�}W n tjjy0 } z t�| � W Y d} ~ dS d} ~ ww |r�|du rkt�d|� d|i} | j| d�} | D ] } | jdu rT| S qIt | �dkr_t d��t | �dkri| d S dS |r�t�d ||� ||d �} | j| d�} t | �dkr�| d S dS dS |r�z | j|gd �} W n tjjy� } z t�| � W Y d} ~ dS d} ~ ww t | �dkr�| d S dS dS ) z� Get a group object given a name, name and vpc_id/vpc_name or group_id. Return a boto.ec2.securitygroup.SecurityGroup object if the group is found, else return None. z:The params 'vpc_id' and 'vpc_name' are mutually exclusive.�r r r r r r Nzgetting group for %s� group-name)�filters� z8Security group belongs to more VPCs, specify the VPC ID!r z!getting group for %s in vpc_id %s)r0 r )� group_ids) r r! r � exception�BotoServerError�log�debug�get_all_security_groupsr �lenr )r r r r r r r r r �eZ group_filterZfiltered_groupsr �groupsr r r r � sn � � �� � � �� r c C s� g }|D ]w}t �d|| j� g d�}t� }|D ]^}t||�}|s!q|dkr[g }|D ],} t �d| � ddddd �} t� } | �� D ]\} } t| | �}|sKq?|| | < q?|�| � q)||d< q|d krft|�||< q|d krqt|�||< q|||< q|�|� q|S ) Nz examining rule %s for group %s)r" r$ r# r% r% zexamining grant %s for�source_group_name�source_group_owner_id�source_group_group_id�cidr_ip)r �owner_idr r? r$ r# )r6 r7 r r �getattrr& r' �int)�sgr( �_rulesr* �attrsr, �attrr- Z_grantsr+ Zg_attrsZ_grantZg_attrZ g_attr_mapZg_valr r r � _parse_rules� sB � rG c C s� t ||||d�}t| t�r| g} t|t�r|g} g d�}g } zD|j| ||d�} | D ]6} i } |D ]*} t| | d�}| dkr?|j}n| dv rIt| |�}n | dkrUdd � |� D �}|| | < q/| | g7 } q)| W S tjj y} } z t � |� g W Y d}~S d}~ww ) a{ Return a list of all Security Groups matching the given criteria and filters. Note that the ``groupnames`` argument only functions correctly for EC2 Classic and default VPC Security Groups. To find groups by name in other VPCs you'll want to use the ``group-name`` filter instead. The valid keys for the ``filters`` argument can be found in `AWS's API documentation <https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSecurityGroups.html>`_. CLI Example: .. code-block:: bash salt myminion boto_secgroup.get_all_security_groups filters='{group-name: mygroup}' r ) � descriptionr � instancesr r@ r r( � rules_egress�tagsr )� groupnamesr3 r1 Nr )r( rJ rI c S � g | ]}|j �qS r �r )�.0�ir r r � <listcomp>Q � z+get_all_security_groups.<locals>.<listcomp>) r � isinstance�strr8 rA r rG r r4 r5 r6 r7 )rL r3 r1 r r r r r Z interesting�ret�r�g�n�a�vr: r r r r8 s: � ��r8 c C sN t ||||d�}| �d�rt�d| � | S t|| ||||||d�}t|dd�S )z� Get a Group ID given a Group Name or Group Name and VPC ID CLI Example: .. code-block:: bash salt myminion boto_secgroup.get_group_id mysecgroup r zsg-z0group %s is a group id. get_group_id not called.)r r r r r r r r r N)r � startswithr6 r7 r rA ) r r r r r r r r r r r r � get_group_idZ s � r\ c C s| t �d| � g }| D ]+}t|||||||d�} | s.td r't �d|� g S td�|���|�t| �� q t �d|� |S )a Given a list of security groups and a vpc_id, convert_to_group_ids will convert all list items in the given list to security group ids. CLI Example: .. code-block:: bash salt myminion boto_secgroup.convert_to_group_ids mysecgroup vpc-89yhh7h z)security group contents %s pre-conversion)r r r r r r r �testzlSecurity Group `%s` could not be resolved to an ID. This may cause a failure when not running in test mode.z6Could not resolve Security Group name {} to a Group IDz*security group contents %s post-conversion) r6 r7 r\ Z__opts__�warningr �formatr' rT ) r; r r r r r r r3 r r r r r �convert_to_group_idsw s6 � ��� r` c C s� t ||||d�}t|| |||||||d� } | rMt� } | j| d< | j| d< | j| d< | j| d< | j| d< t| | j �} t| | j �} t | �| d< t | �| d < | S d S ) z� Get the configuration for a security group. CLI Example: .. code-block:: bash salt myminion boto_secgroup.get_config mysecgroup r r r r r@ rH rK r( rJ N) r r r r r r@ rH rK rG r( rJ r. ) r r r r r r r r r rC rU rD Z _rules_egressr r r � get_config� s2 � ra c C s� t ||||d�}|s3|r3z t||||||d�}W n tjjy2 } z t�| � W Y d} ~ dS d} ~ ww |�| ||�} | rDt�d| � dS d| � d�} t� | � dS ) z� Create a security group. CLI Example: .. code-block:: bash salt myminion boto_secgroup.create mysecgroup 'My Security Group' r r/ NFzCreated security group %s.Tz Failed to create security group �.) r r! r r4 r5 r6 r7 Zcreate_security_group�info�error) r rH r r r r r r r r: �created�msgr r r �create� s. � �� rg c C s~ t ||||d�}t|| |||||||d� } | r8|j| jd�} | r+t�d| j| j� dS d| � d�} t�| � dS t�d � dS ) z� Delete a security group. CLI Example: .. code-block:: bash salt myminion boto_secgroup.delete mysecgroup r r )r z%Deleted security group %s with id %s.Tz Failed to delete security group rb FzSecurity group not found.) r r Zdelete_security_groupr r6 rc r rd r7 ) r r r r r r r r r r Zdeletedrf r r r �delete s, � rh c C s t | | | | d�}t|| | ||| | | | d� }|r�z=d}|s+|j|||||||j|d�}n |j|||||j|d�}|rEt�d|j|j� W dS d�|j|j�}t� |� W d S t j j y� } z%|j d krjW Y d}~dS d�|j|j�}t� |� t� |� W Y d}~d S d}~ww t� d � d S ) z� Add a new rule to an existing security group. CLI Example: .. code-block:: bash salt myminion boto_secgroup.authorize mysecgroup ip_protocol=tcp from_port=80 to_port=80 cidr_ip='['10.0.0.0/8', '192.168.0.0/24']' r r N�Zsrc_security_group_nameZsrc_security_group_owner_idr" r$ r# r? r Zsrc_security_group_group_id�r" r$ r# r? r Z src_group_idz*Added rule to security group %s with id %sTz3Failed to add rule to security group {} with id {}.FzInvalidPermission.Duplicatez%Failed to add rule to security group.)r r Zauthorize_security_groupr Z authorize_security_group_egressr6 rc r r_ rd r r4 �EC2ResponseErrorZ error_code)r r< r= r" r$ r# r? r r> r r r r r r �egressr r Zaddedrf r: r r r � authorize4 sr � � � �� � �� rm c C s t | | | | d�}t|| | ||| | | | d� }|r|z=d}|s+|j|||||||j|d�}n |j|||||j|d�}|rEt�d|j|j� W dS d�|j|j�}t� |� W d S t j j y{ } zd�|j|j�}t� |� t� |� W Y d}~d S d}~ww t� d � d S ) z� Remove a rule from an existing security group. CLI Example: .. code-block:: bash salt myminion boto_secgroup.revoke mysecgroup ip_protocol=tcp from_port=80 to_port=80 cidr_ip='10.0.0.0/8' r r Nri rj z/Removed rule from security group %s with id %s.Tz8Failed to remove rule from security group {} with id {}.Fz*Failed to remove rule from security group.) r r Zrevoke_security_groupr Z revoke_security_group_egressr6 rc r r_ rd r r4 rk )r r< r= r" r$ r# r? r r> r r r r r r rl r r Zrevokedrf r: r r r �revoke� sr � � � �� � �� rn c C s� t | |f�r td��t| |||f�std��td d�}|||||d�} di i} | r/| g| d< |r7|| d d< |r?|| d d < |rS|�� D ] \} } | | d d | � �< qE| jdi | ��} t�d | | � | rkd d � | D �S g S )z� Given VPC properties, find and return matching VPC ids. Borrowed from boto_vpc; these could be refactored into a common library z/Only one of vpc_name or vpc_id may be provided.zOAt least one of the following must be provided: vpc_id, vpc_name, cidr or tags.zboto.get_connection_func�vpcr r1 Zvpc_ids�cidrztag:Nameztag:z5The filters criteria %s matched the following VPCs:%sc S rM r rN )rO ro r r r rQ rR z _find_vpcs.<locals>.<listcomp>Nr )�allr �anyr r& Z get_all_vpcsr6 r7 )r r rp rK r r r r Zlocal_get_connr Zfilter_parametersZtag_nameZ tag_valueZvpcsr r r � _find_vpcs� s2 � �rs c C s^ t ||||d�} t| ||||||||d� } | r)t| t�r#| �| � dS d} t| ��d} t| ��)a� Sets tags on a security group. .. versionadded:: 2016.3.0 tags a dict of key:value pair of tags to set on the security group name the name of the security group group_id the group id of the security group (in lie of a name/vpc combo) vpc_name the name of the vpc to search the named group for vpc_id the id of the vpc, in lieu of the vpc_name region the amazon region key amazon key keyid amazon keyid profile amazon profile CLI Example: .. code-block:: bash salt myminion boto_secgroup.set_tags "{'TAG1': 'Value1', 'TAG2': 'Value2'}" security_group_name vpc_id=vpc-13435 profile=my_aws_profile r r z'Tags must be a dict of tagname:tagvalue�%The security group could not be foundT)r r rS �dictZadd_tagsr ) rK r r r r r r r r r �secgrprf r r r �set_tags s( 1� �rw c C st t ||||d�} t| ||||||||d� } | r4t| t�r.i } | D ]} d| | < q | �| � dS d} t| ��d} t| ��)a� Deletes tags from a security group. .. versionadded:: 2016.3.0 tags a list of tags to remove name the name of the security group group_id the group id of the security group (in lie of a name/vpc combo) vpc_name the name of the vpc to search the named group for vpc_id the id of the vpc, in lieu of the vpc_name region the amazon region key amazon key keyid amazon keyid profile amazon profile CLI Example: .. code-block:: bash salt myminion boto_secgroup.delete_tags ['TAG_TO_DELETE1','TAG_TO_DELETE2'] security_group_name vpc_id=vpc-13435 profile=my_aws_profile r r NzATags must be a list of tagnames to remove from the security grouprt T)r r rS �listZ remove_tagsr )rK r r r r r r r r r rv Ztags_to_remove�tagrf r r r � delete_tagsc s. 1� �rz )NNNNNNNN)NNNNNN) NNNNNNNNN)NNNNNNN)NNNNNNNNNNNNNNNF)#�__doc__�logging� collectionsr Zsalt.utils.versionsr Zsalt.exceptionsr r � getLoggerr r6 r Zboto.ec2�setLevel�CRITICALZHAS_BOTO� ImportErrorr r r! r. r rG r8 r\ r` ra rg rh rm rn rs rw rz r r r r �<module> s / � �' � �N' �F � �1 �5 �. �/ �Z �Z �5 �L�
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings