File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/boto_vpc.cpython-310.pyc
Back
o ;jC� � @ sz d Z ddlZddlZddlZddlZddlZddlZddlm Z m Z dZ dZ dZ e�e�Zz ddlZddlZddlZddlmZ e�d��ej� d ZW n eyW d ZY nw zddlZe�d ��ej� d ZW n eyt d ZY nw d d � Z dd� Z d�dd�Z d�dd�Z d�dd�Z d�dd�Z! d�dd�Z"d�dd�Z# d�d d �Z$ d�d d �Z% d�d d!�Z& d�d"d#�Z' d�d$d%�Z( d�d&d'�Z) d�d(d)�Z* d�d*d+�Z+ d�d,d-�Z, d�d.d/�Z-d�d0d1�Z. d�d2d3�Z/ d�d4d5�Z0 d�d6d7�Z1d�d8d9�Z2 d�d:d;�Z3 d�d<d=�Z4 d�d>d?�Z5 d�d@dA�Z6 B d�dCdD�Z7 B d�dEdF�Z8 B d�dGdH�Z9 d�dIdJ�Z: Kd�dLdM�Z; d�dNdO�Z< d�dPdQ�Z= d�dRdS�Z> d�dTdU�Z? d�dVdW�Z@ d�dXdY�ZA d�dZd[�ZB d�d\d]�ZC d�d^d_�ZD d�d`da�ZE d�dbdc�ZF d�ddde�ZG d�dfdg�ZH d�dhdi�ZI d�djdk�ZJ d�dldm�ZK d�dndo�ZL d�dpdq�ZM d�drds�ZN d�dtdu�ZO d�dvdw�ZP d�dxdy�ZQ d�dzd{�ZR d�d|d}�ZS d�d~d�ZT d�d�d��ZU d�d�d��ZV d�d�d��ZW d�d�d��ZXd�d�� ZYd�d�� ZZd�d�� Z[d�d�� Z\d�d�� Z]d�d�� Z^ d�d�d��Z_ d�d�d��Z`d�d�� Za d�d�d��Zb d�d�d��Zcd�d�� Zd d�d�d��Ze d�d�d��Zf d�d�d��ZgdS )�at Connection module for Amazon VPC .. versionadded:: 2014.7.0 :depends: - boto >= 2.8.0 - boto3 >= 1.2.6 :configuration: This module accepts explicit VPC credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More Information available here__. .. __: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html If IAM roles are not used you need to specify them either in a pillar or in the minion's config file: .. code-block:: yaml vpc.keyid: GKTADJGHEIQSXMKKRBJ08H vpc.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs A region may also be specified in the configuration: .. code-block:: yaml vpc.region: us-east-1 If a region is not specified, the default is us-east-1. It's also possible to specify key, keyid and region via a profile, either as a passed in dict, or as a string to pull from pillars or minion config: .. code-block:: yaml myprofile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 .. versionchanged:: 2015.8.0 All methods now return a dictionary. Create and delete methods return: .. code-block:: yaml created: true or .. code-block:: yaml created: false error: message: error message Request methods (e.g., `describe_vpc`) return: .. code-block:: yaml vpcs: - {...} - {...} or .. code-block:: yaml error: message: error message .. versionadded:: 2016.11.0 Functions to request, accept, delete and describe VPC peering connections. Named VPC peering connections can be requested using these modules. VPC owner accounts can accept VPC peering connections (named or otherwise). Examples showing creation of VPC peering connection .. code-block:: bash # Create a named VPC peering connection salt myminion boto_vpc.request_vpc_peering_connection vpc-4a3e622e vpc-be82e9da name=my_vpc_connection # Without a name salt myminion boto_vpc.request_vpc_peering_connection vpc-4a3e622e vpc-be82e9da # Specify a region salt myminion boto_vpc.request_vpc_peering_connection vpc-4a3e622e vpc-be82e9da region=us-west-2 Check to see if VPC peering connection is pending .. code-block:: bash salt myminion boto_vpc.is_peering_connection_pending name=salt-vpc # Specify a region salt myminion boto_vpc.is_peering_connection_pending name=salt-vpc region=us-west-2 # specify an id salt myminion boto_vpc.is_peering_connection_pending conn_id=pcx-8a8939e3 Accept VPC peering connection .. code-block:: bash salt myminion boto_vpc.accept_vpc_peering_connection name=salt-vpc # Specify a region salt myminion boto_vpc.accept_vpc_peering_connection name=salt-vpc region=us-west-2 # specify an id salt myminion boto_vpc.accept_vpc_peering_connection conn_id=pcx-8a8939e3 Deleting VPC peering connection via this module .. code-block:: bash # Delete a named VPC peering connection salt myminion boto_vpc.delete_vpc_peering_connection name=salt-vpc # Specify a region salt myminion boto_vpc.delete_vpc_peering_connection name=salt-vpc region=us-west-2 # specify an id salt myminion boto_vpc.delete_vpc_peering_connection conn_id=pcx-8a8939e3 � N)�CommandExecutionError�SaltInvocationErrorZ provisioningzpending-acceptanceZactive)�BotoServerError�botoTF�boto3c C s t jjjddd�S )zg Only load if boto libraries exist and if boto libraries are greater than a given version. z2.8.0z1.2.6)Zboto_verZ boto3_ver)�salt�utilsZversionsZcheck_boto_reqs� r r �I/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/boto_vpc.py� __virtual__� s r c C s8 t r td tdtd� trtd tdddd d� d S d S ) Nzboto.assign_funcs�vpc)�packzboto3.assign_funcsZec2� _get_conn3Z _cache_id3)Zget_conn_funcnameZcache_id_funcnameZexactly_one_funcname)�HAS_BOTO� __utils__�__name__Z__salt__� HAS_BOTO3)�optsr r r �__init__� s ��r c C sT t || f�s td��|rt|||||d�} | S t| ||||d�s(t�d| � dS | S )a� Check whether a VPC with the given name or id exists. Returns the vpc_id or None. Raises SaltInvocationError if both vpc_id and vpc_name are None. Optionally raise a CommandExecutionError if the VPC does not exist. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.check_vpc vpc_name=myvpc profile=awsprofile z:One (but not both) of vpc_id or vpc_name must be provided.��vpc_name�region�key�keyid�profile)�vpc_idr r r r zVPC %s does not exist.N)� _exactly_oner �_get_id� _find_vpcs�log�info�r r r r r r r r r � check_vpc� s � �� � r" c K s` z�zt ||||d�}t|d| �} W n ty" td�d| ���w |r>t| |||||d�r>ddd| � d|� d�id �W S | di |��} | rxt| t�rQd d iW S t�d | | j � t || � t || � |rqt || | j ||||d � d | j d�W S |r�| � d|� d�} n| � d�} t� | � dd| id �W S ty� } zdtd | �d �W Y d} ~ S d} ~ ww )za Create a VPC resource. Returns the resource id if created, or False if not created. �r r r r Zcreate_�3{} function does not exist for boto VPC connection.F�messagezA z named z already exists.��created�errorr' TzA %s with id %s was created�� sub_resource� resource_idr r r r �r' �id� z was not created.�boto.get_errorNr )� _get_conn�getattr�AttributeError�format�_get_resource_id� isinstance�boolr r r- �_maybe_set_name_tag�_maybe_set_tags� _cache_id�warningr r ) �resource�name�tagsr r r r �kwargs�connZcreate_resource�r�er r r �_create_resource� sX ��� �� � ��rB c K s* t ||f�s td��zot||||d�}z t|d| �} W n ty, td�d| ���w |rIt| |||||d�}|sIdd| � d|� d�id �W S | |fi |��rbt|| |d ||||d � d d iW S |rm| � d|� d �} n| � d �} dd| id �W S ty� } zdt d | �d �W Y d} ~ S d} ~ ww )zM Delete a VPC resource. Returns True if successful, otherwise False. �2One (but not both) of name or id must be provided.r# Zdelete_r$ Fr% r. � does not exist.��deletedr( T)r* r+ � invalidater r r r rF z was not deleted.r/ N) r r r0 r1 r2 r3 r4 r9 r r ) r; r< r+ r r r r r> r? Zdelete_resourcerA r r r �_delete_resource0 sR ��� ��� ��rH c C s t ||f�s td��t||||d�}d| � �}|�d�s |d }t||�} i } |r/d|i| d< |r8|| | � d�< z | di | ��} W n ty[ } z| j�d�rVW Y d } ~ d S � d } ~ ww | r�t| �d krx|rtt|| | d j ||||d � | d S t d | � d|� d���d S )zj Get a VPC resource based on resource type and name or id. Cache the id if name was provided. rC r# �get_all_�s�tag:Name�filters�_ids� .NotFoundN� r r) zFound more than one z named "�"r ) r r r0 �endswithr1 r �code�lenr9 r- r ) r; r< r+ r r r r r? �f� get_resources�filter_parametersr@ rA r r r � _get_resourcel sJ �� � �rW c C s� t ||f�r td��t|||f�std��t||||d�}d| � �} | �d�s+| d } t|| �} i } |r:d|i| d< |rC|| | � d�< |rW|�� D ] \} } | | d d | � �< qIz | d i | ��}W |S ty{ } z|j�d �rvW Y d }~d S � d }~ww ) zI Get VPC resources based on resource type and name, id, or tags. z'Only one of name or id may be provided.zBAt least one of the following must be provided: id, name, or tags.r# rI rJ rK rL rM �tag:rN Nr ) �allr �anyr0 rQ r1 �itemsr rR )r; r< r+ r= r r r r r? rT rU rV �tag_name� tag_valuer@ rA r r r �_find_resources� s8 � � ��r^ c C s> t || ||||d�}|r|S t| |||||d�}|r |jS dS )z< Get an AWS id for a VPC resource by type and name. )r* r r r r �r< r r r r N)r9 rW r- )r; r< r r r r �_idr@ r r r r4 � s � ��r4 c C sP z dt | |||||d�iW S ty' } zdtd |�iW Y d}~S d}~ww )z� Get an AWS id for a VPC resource by type and name. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.get_resource_id internet_gateway myigw r- r# r( r/ N)r4 r r )r; r< r+ r r r r rA r r r �get_resource_id� s �� ��ra c C sX zdt t| |||||||d��iW S ty+ } zdtd |�iW Y d}~S d}~ww )a: Given a resource type and name, return {exists: true} if it exists, {exists: false} if it does not exist, or {error: {message: error text} on error. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.resource_exists internet_gateway myigw �exists�r< r+ r= r r r r r( r/ N)r6 r^ r r ) r; r< r+ r= r r r r rA r r r �resource_exists s$ ��� ��rd c C s� t | |f�r td��t||||d�}di i} | r | g| d< |r%|| d d< |r-|| d d< |rA|�� D ] \} } | | d d| � �< q3|jd i | ��} t�d| | � | rht| |||f�sad d � | D �S d d � | D �S g S )zA Given VPC properties, find and return matching VPC ids. z/Only one of vpc_name or vpc_id may be provided.r# rL �vpc_ids�cidrrK rX z5The filters criteria %s matched the following VPCs:%sc S s g | ]}|j r|j�qS r )� is_defaultr- ��.0r r r r � <listcomp>a � z _find_vpcs.<locals>.<listcomp>c S � g | ]}|j �qS r �r- rh r r r rj c � Nr )rY r r0 r[ � get_all_vpcsr �debugrZ ) r r rf r= r r r r r? rV r\ r] �vpcsr r r r 9 s, �r c C s� t | ||f�s td��| r t ||f�s t| ||||d�}|r |S t| ||||||d�}|rRt�dd�|�� t|�dkrN|d }| rLt| |||||d� |S td��t� d � d S ) zF Given VPC properties, return the VPC id if a match is found. zGAt least one of the following must be provided: vpc_name, cidr or tags.r# �r rf r= r r r r zMatching VPC: %sr. rO r z.Found more than one VPC matching the criteria.z No VPC found.N) rZ r r9 r r rp �joinrS r r ) r rf r= r r r r r re r r r r h sL � �� �� r c C sR zdt | ||||||d�iW S ty( } zdtd |�iW Y d}~S d}~ww )z� Given VPC properties, return the VPC id if a match is found. CLI Example: .. code-block:: bash salt myminion boto_vpc.get_id myvpc r- rr r( r/ N)r r r )r< rf r= r r r r rA r r r �get_id� s �� ��rt c C s� t | |||f�s td��zt| |||||||d�}W n1 tyK } z%td | �} | �di ��d�dkr=ddiW Y d } ~ S d | iW Y d } ~ S d } ~ ww dt|�iS ) a Given a VPC ID, check to see if the given VPC ID exists. Returns True if the given VPC ID exists and returns False if the given VPC ID does not exist. CLI Example: .. code-block:: bash salt myminion boto_vpc.exists myvpc zOAt least one of the following must be provided: vpc_id, vpc_name, cidr or tags.)r r rf r= r r r r r/ �awsrR �InvalidVpcID.NotFoundrb FNr( )rZ r r r r �getr6 ) r r< rf r= r r r r re �err�boto_errr r r rb � s. � � �� rb c C s� zOt |||| d�} | j| |d�} | rFt�d| j� t|| � t|| � t| | j||� t| | j|� |r?t || j|||| d� d| jd�W S t� d� ddiW S t yj } zdt d | �d �W Y d } ~ S d } ~ ww ) a� Given a valid CIDR block, create a VPC. An optional instance_tenancy argument can be provided. If provided, the valid values are 'default' or 'dedicated' An optional vpc_name argument can be provided. Returns {created: true} if the VPC was created and returns {created: False} if the VPC was not created. CLI Example: .. code-block:: bash salt myminion boto_vpc.create '10.0.0.0/24' r# )�instance_tenancyz The newly created VPC id is %sTr, zVPC was not createdr' Fr/ r& N) r0 Z create_vpcr r r- r7 r8 �_maybe_set_dns�_maybe_name_route_tabler9 r: r r ) � cidr_blockrz r �enable_dns_support�enable_dns_hostnamesr= r r r r r? r rA r r r �create� s2 � ��r� c C s� |r t �d� |}t|| f�std��zJt||||d�}| s6t||||||d�} | s6ddd|� d�id �W S |�| �rSt �d | � |rNt|| d ||||d � d d iW S t �d| � d diW S t yx } zdt d | �d �W Y d} ~ S d} ~ ww )aC Given a VPC ID or VPC name, delete the VPC. Returns {deleted: true} if the VPC was deleted and returns {deleted: false} if the VPC was not deleted. CLI Example: .. code-block:: bash salt myminion boto_vpc.delete vpc_id='vpc-6b1fe402' salt myminion boto_vpc.delete name='myvpc' zCboto_vpc.delete: name parameter is deprecated use vpc_name instead.z:One (but not both) of vpc_name or vpc_id must be provided.r# )r r= r r r r Fr% �VPC z not foundrE zVPC %s was deleted.T)r+ rG r r r r rF zVPC %s was not deleted.r/ N) r r: r r r0 r Z delete_vpcr r9 r r ) r r< r r= r r r r r? rA r r r �delete2 sV � ��� � ��r� c s@ zt ||||d�}t| |||||d�} W n1 tyE } z%td |�}|�di ��d�dkr7ddiW Y d}~S d |iW Y d}~S d}~ww | sLddiS d | i} z |jdi | ��} W n tyt } zd td |�iW Y d}~S d}~ww | r�| d � t�d � j� d } � fdd�| D �} | � dt � d�j i� d| iS ddiS )ay Describe a VPC's properties. If no VPC ID/Name is spcified then describe the default VPC. Returns a dictionary of interesting properties. .. versionchanged:: 2015.8.0 Added vpc_name argument CLI Example: .. code-block:: bash salt myminion boto_vpc.describe vpc_id=vpc-123456 salt myminion boto_vpc.describe vpc_name=myvpc r# r! r/ ru rR rv r Nr( re r z Found VPC: %s�r- r} rg �stater= �dhcp_options_idrz c � i | ]}|t � |��qS r �r1 �ri �k�r r r � <dictcomp>� rk z describe.<locals>.<dictcomp>r r ) r0 r r r rw ro r rp r- �updater1 r< ) r r r r r r r? rx ry rV rq �keys�_rr r� r �describez sD � �� �� r� c s d}zkt ||||d�} di i} | r| g| d< |r || d d< |r&|| d d< |r:|�� D ] \} } | | d d| � �< q,| jdi | ��} | rig }| D ]� � fdd �|D �}|�d t� d �ji� |�|� qHd |iW S d g iW S ty� } zd td |�iW Y d}~S d}~ww )a Describe all VPCs, matching the filter criteria if provided. Returns a list of dictionaries with interesting properties. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.describe_vpcs r� r# rL re rf rK rX c r� r r� r� r� r r r� � rk z!describe_vpcs.<locals>.<dictcomp>r rq r( r/ Nr ) r0 r[ ro r� r1 r< �appendr r )r r< rf r= r r r r r� r? rV r\ r] rq �retr� rA r r� r � describe_vpcs� s4 ��r� c C s� t | ||g�s td��di i}|r||d d< | r | |d d< |r'||d d< |r;|�� D ] \}}||d d|� �< q-|jd i |��}t�d||� |rSdd � |D �S d S ) zF Given subnet properties, find and return matching subnet ids zKAt least one of the following must be specified: subnet_name, cidr or tags.rL rf rK �VpcIdrX �9The filters criteria %s matched the following subnets: %sc S rl r rm )ri �subnetr r r rj ( rn z!_find_subnets.<locals>.<listcomp>FNr )rZ r r[ �get_all_subnetsr rp ) � subnet_namer rf r= r? rV r\ r] �subnetsr r r � _find_subnets s. � �r� c C s� zt | ||||| �} | sddd|p| � d�id�W S W n ty6 } zdtd | �d�W Y d} ~ S d} ~ ww td||| |||||| d � } | rZt|||| d �} | jd d i| d d� | S )am Given a valid VPC ID or Name and a CIDR block, create a subnet for the VPC. An optional availability zone argument can be provided. Returns True if the VPC subnet was created and returns False if the VPC subnet was not created. .. versionchanged:: 2015.8.0 Added vpc_name argument CLI Examples: .. code-block:: bash salt myminion boto_vpc.create_subnet vpc_id='vpc-6b1fe402' \ subnet_name='mysubnet' cidr_block='10.0.0.0/25' salt myminion boto_vpc.create_subnet vpc_name='myvpc' \ subnet_name='mysubnet', cidr_block='10.0.0.0/25' Fr% r� rD r& r/ Nr� ) r< r= r �availability_zoner} r r r r r# �ValueTr- )ZMapPublicIpOnLaunch�SubnetId)r" r r rB r Zmodify_subnet_attribute)r r} r r� r� r= r r r r Zauto_assign_public_ipv4rA Zsubnet_object_dict�conn3r r r � create_subnet- s: !�� ��� �r� c C � t d|| ||||d�S )aF Given a subnet ID or name, delete the subnet. Returns True if the subnet was deleted and returns False if the subnet was not deleted. .. versionchanged:: 2015.8.0 Added subnet_name argument CLI Example: .. code-block:: bash salt myminion boto_vpc.delete_subnet 'subnet-6a1fe403' r� �r; r< r+ r r r r �rH )� subnet_idr� r r r r r r r � delete_subnetm � �r� c C s� |r t �d� |}t| ||||f�std��z t|||| d�} W n ty: } zdtd | �iW Y d} ~ S d} ~ ww di i} | rF| g| d< |rN|| d d < |rV|| d d < |rj|�� D ] \} }|| d d | � �< q\|rr|| d d < z | jdi | ��}W n1 ty� } z%td | �}|� d i �� d�dkr�ddiW Y d} ~ S d|iW Y d} ~ S d} ~ ww t � d| |� |r�t � d|p�| � ddiS t � d|p�| � ddiS )aA Check if a subnet exists. Returns True if the subnet exists, otherwise returns False. .. versionchanged:: 2015.8.0 Added subnet_name argument Deprecated name argument CLI Example: .. code-block:: bash salt myminion boto_vpc.subnet_exists subnet_id='subnet-6a1fe403' zMboto_vpc.subnet_exists: name parameter is deprecated use subnet_name instead.z^At least one of the following must be specified: subnet id, cidr, subnet_name, tags, or zones.r# r( r/ NrL � subnet_idsrK rf rX r� ru rR zInvalidSubnetID.NotFoundrb Fz8The filters criteria %s matched the following subnets:%szSubnet %s exists.TzSubnet %s does not exist.r ) r r: rZ r r0 r r r[ r� rw rp r )r� r< r� rf r= Zzonesr r r r r? rx rV r\ r] r� ry r r r � subnet_exists� s\ �� �� ���r� c C s� zt ||||d�}|j| d�} W n ty* } zdtd |�iW Y d}~S d}~ww t� }| D ] }t�d|j� || v rLt�d|j|j� |� |j� q0|sSddiS t |�d kr_d|� � iS d t |�iS ) a Given a subnet (aka: a vpc zone identifier) or list of subnets, returns vpc association. Returns a VPC ID if the given subnets are associated with the same VPC ID. Returns False on an error or if the given subnets are associated with different VPC IDs. CLI Examples: .. code-block:: bash salt myminion boto_vpc.get_subnet_association subnet-61b47516 .. code-block:: bash salt myminion boto_vpc.get_subnet_association ['subnet-61b47516','subnet-2cb9785b'] r# )r� r( r/ Nz"examining subnet id: %s for vpc_idz+subnet id: %s is associated with vpc id: %sr rO re ) r0 r� r r �setr rp r- r �addrS �pop�list) r� r r r r r? rA re r� r r r �get_subnet_association� s* �� � � r� c s� z t d|| ||||d�� W n ty' } zdtd |�iW Y d}~S d}~ww � s.ddiS t�d� j� d}d� fdd �|D �i}t|d d |d d d||||d �} | r]| |d d < |S )aL Given a subnet id or name, describe its properties. Returns a dictionary of interesting properties. .. versionadded:: 2015.8.0 CLI Examples: .. code-block:: bash salt myminion boto_vpc.describe_subnet subnet_id=subnet-123456 salt myminion boto_vpc.describe_subnet subnet_name=mysubnet r� �r< r+ r r r r r( r/ NzFound subnet: %s�r- r} r� r= r c r� r r� r� �r� r r r� / rk z#describe_subnet.<locals>.<dictcomp>r- r )r? r r r r �#explicit_route_table_association_id)rW r r r rp r- � _get_subnet_explicit_route_table) r� r� r r r r rA r� r� �explicit_route_table_assocr r� r �describe_subnet sD � �� � ��r� c C s zst ||||d�}di i} |r|| d d< |r || d d< |r%|| d d< |jdd| i| ��} t�d| | � | s=dd iW S g } d } | D ]+} i }| D ]}t| |�rWt| |�||< qIt|d |d |d �}|ri||d< | �|� qCd| iW S ty� } zdt d |�iW Y d }~S d }~ww )a� Given a VPC ID or subnet CIDR, returns a list of associated subnets and their details. Return all subnets if VPC ID or CIDR are not provided. If a subnet id or CIDR is provided, only its associated subnet details will be returned. .. versionadded:: 2015.8.0 CLI Examples: .. code-block:: bash salt myminion boto_vpc.describe_subnets .. code-block:: bash salt myminion boto_vpc.describe_subnets subnet_ids=['subnet-ba1987ab', 'subnet-ba1987cd'] .. code-block:: bash salt myminion boto_vpc.describe_subnets vpc_id=vpc-123456 .. code-block:: bash salt myminion boto_vpc.describe_subnets cidr=10.0.0.0/21 r# rL ZvpcIdZ cidrBlockrK r� r� r� Nr� r- r )r? r� r( r/ r ) r0 r� r rp �hasattrr1 r� r� r r )r� Z subnet_namesr rf r r r r r? rV r� Z subnets_listr� �itemr� r� rA r r r �describe_subnets@ sJ & � ��� ��r� c C s� zM|s|r t ||||||�}|s ddd|p|� d�id�W S td| |||||d�}|�d�rK|rKt||||d �} | �|d |� t�d |d |pI|� |W S tyh } zdtd | �d�W Y d } ~ S d } ~ ww )a� Create an Internet Gateway, optionally attaching it to an existing VPC. Returns the internet gateway id if the internet gateway was created and returns False if the internet gateways was not created. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.create_internet_gateway \ internet_gateway_name=myigw vpc_name=myvpc Fr% r� rD r& �internet_gateway)r< r= r r r r r' r# r- z&Attached internet gateway %s to VPC %sr/ N) r" rB rw r0 Zattach_internet_gatewayr r r r ) �internet_gateway_namer r r= r r r r r@ r? rA r r r �create_internet_gateway� s6 �� � ��r� c C s� zR|r t d|||||d�} | sddd�|�id�W S |rHtd| ||||d�}|s3ddd�| �id�W S |jrHt||||d�}|�| |jd j� td| ||||d�W S tym } zdt d | �d�W Y d } ~ S d } ~ ww ) ax Delete an internet gateway (by name or id). Returns True if the internet gateway was deleted and otherwise False. .. versionadded:: 2015.8.0 CLI Examples: .. code-block:: bash salt myminion boto_vpc.delete_internet_gateway internet_gateway_id=igw-1a2b3c salt myminion boto_vpc.delete_internet_gateway internet_gateway_name=myigw r� r# Fr% �#internet gateway {} does not exist.rE �r+ r r r r r r/ N) r4 r3 rW � attachmentsr0 Zdetach_internet_gatewayr rH r r ) Zinternet_gateway_idr� �detachr r r r Zigwr? rA r r r �delete_internet_gateway� sd ���� � ��� �� ��r� ��pendingZ availablec C s t | ||||f�s td��dg i} | r| g| d< |r(td||||| d�}|s(dS |r5| d �d|gd�� |rEtd ||||| d�}|sEdS |rR| d �d |gd�� t|||| d�} g } td | jfd d d �| ��D ]} | �dg �D ]}|�d�|v r�| �|� qrqjt� d| | � | r�| S dS )zI Given gateway properties, find and return matching nat gateways zlAt least one of the following must be provided: nat_gateway_id, subnet_id, subnet_name, vpc_id, or vpc_name.�Filter� NatGatewayIdsr� r# Fz subnet-id��NameZValuesr �vpc-idzboto3.paged_callZ NextToken)Z marker_flagZ marker_arg� NatGateways�Statez>The filters criteria %s matched the following nat gateways: %s) rZ r r4 r� r r �describe_nat_gatewaysrw r rp )�nat_gateway_idr� r� r r �statesr r r r rV r� Z nat_gatewaysr� Zgwr r r �_find_nat_gateways s\ � � ��� � ���r� c C s t t| ||||||||| d� �S )aR Checks if a nat gateway exists. This function requires boto3 to be installed. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.nat_gateway_exists nat_gateway_id='nat-03b02643b43216fe7' salt myminion boto_vpc.nat_gateway_exists subnet_id='subnet-5b05942d' � r� r� r� r r r� r r r r )r6 r� r� r r r �nat_gateway_existsb s ��r� c C s t | ||||||||| d� S )a\ Return a description of nat gateways matching the selection criteria This function requires boto3 to be installed. CLI Example: .. code-block:: bash salt myminion boto_vpc.describe_nat_gateways nat_gateway_id='nat-03b02643b43216fe7' salt myminion boto_vpc.describe_nat_gateways subnet_id='subnet-5b05942d' r� )r� r� r r r r� � s �r� c C s zdt | |f�r td��|r&td|||||d�} | s%ddd|� d�id�W S ntd| ||||d �s<ddd| � d�id�W S t||||d�}|sQ|jd d �}|�d �}|j| |d �} d| �di ��d�d�W S ty } zdt d | �d�W Y d} ~ S d} ~ ww )a Create a NAT Gateway within an existing subnet. If allocation_id is specified, the elastic IP address it references is associated with the gateway. Otherwise, a new allocation_id is created and used. This function requires boto3 to be installed. Returns the nat gateway id if the nat gateway was created and returns False if the nat gateway was not created. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.create_nat_gateway subnet_name=mysubnet �5Only one of subnet_name or subnet_id may be provided.r� r# Fr% �Subnet rD r& r� r )ZDomain� AllocationId)r� r� TZ NatGateway� NatGatewayIdr, r/ N) rY r r4 rW r Zallocate_addressrw �create_nat_gatewayr r ) r� r� Z allocation_idr r r r r� �addressr@ rA r r r r� � sP ����� � ��r� � c C s zqt ||||d�}|j| gd�} | r| �ddg�d } |j| d� |rXt|dd�D ].} | rW| d d vrWt�d || t�dd �d � |j| gd�} | rW| �ddg�d } q) |rm| rm| �d �D ] } |j | �d�d� qaddiW S t y� } zdt d | �d�W Y d} ~ S d} ~ ww )a� Delete a nat gateway (by id). Returns True if the internet gateway was deleted and otherwise False. This function requires boto3 to be installed. .. versionadded:: 2016.11.0 nat_gateway_id Id of the NAT Gateway release_eips whether to release the elastic IPs associated with the given NAT Gateway Id region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. wait_for_delete whether to wait for delete of the NAT gateway to be in failed or deleted state after issuing the delete call. wait_for_delete_retries NAT gateway may take some time to be go into deleted or failed state. During the deletion process, subsequent release of elastic IPs may fail; this state will automatically retry this number of times to ensure the NAT gateway is in deleted or failed state before proceeding. CLI Examples: .. code-block:: bash salt myminion boto_vpc.delete_nat_gateway nat_gateway_id=igw-1a2b3c r# )r� r� Nr )r� ���r� )rF Zfailed� i� g @�@ZNatGatewayAddressesr� )r� rF TFr/ rE ) r r� rw �delete_nat_gateway�range�time�sleep�random�randintZrelease_addressr r ) r� Z release_eipsr r r r Zwait_for_deleteZwait_for_delete_retriesr� ZgwinfoZretry�addrrA r r r r� s6 8 �� ��r� c C s t d|| |||||||d� S )u� Given a valid VPN connection type, a static IP address and a customer gateway’s Border Gateway Protocol (BGP) Autonomous System Number, create a customer gateway. Returns the customer gateway id if the customer gateway was created and returns False if the customer gateway was not created. CLI Example: .. code-block:: bash salt myminion boto_vpc.create_customer_gateway 'ipsec.1', '12.1.2.3', 65534 �customer_gateway)�type� ip_address�bgp_asnr= r r r r )rB ) Zvpn_connection_typer� r� �customer_gateway_namer= r r r r r r r �create_customer_gatewayV s �r� c C r� )a Given a customer gateway ID or name, delete the customer gateway. Returns True if the customer gateway was deleted and returns False if the customer gateway was not deleted. .. versionchanged:: 2015.8.0 Added customer_gateway_name argument CLI Example: .. code-block:: bash salt myminion boto_vpc.delete_customer_gateway 'cgw-b6a247df' r� r� r� �Zcustomer_gateway_idr� r r r r r r r �delete_customer_gateway s �r� c C r� )aa Given a customer gateway ID, check if the customer gateway ID exists. Returns True if the customer gateway ID exists; Returns False otherwise. CLI Example: .. code-block:: bash salt myminion boto_vpc.customer_gateway_exists cgw-b6a247df salt myminion boto_vpc.customer_gateway_exists customer_gatway_name=mycgw r� r� )rd r� r r r �customer_gateway_exists� s �r� c C s� zQ|s|r t ||| | | | �}|s ddd|p|� d�id�W S td|| ||||| | | | d� } | �d�rO|rOt| | | | d �}|�| d |� t�d | d |pM|� | W S tyl } zdtd |�d�W Y d }~S d }~ww )aj Given valid DHCP options, create a DHCP options record, optionally associating it with an existing VPC. Returns True if the DHCP options record was created and returns False if the DHCP options record was not deleted. .. versionchanged:: 2015.8.0 Added vpc_name and vpc_id arguments CLI Example: .. code-block:: bash salt myminion boto_vpc.create_dhcp_options domain_name='example.com' \ domain_name_servers='[1.2.3.4]' ntp_servers='[5.6.7.8]' \ netbios_name_servers='[10.0.0.1]' netbios_node_type=1 \ vpc_name='myvpc' Fr% r� rD r& � dhcp_options) r< � domain_name�domain_name_servers� ntp_servers�netbios_name_servers�netbios_node_typer r r r r' r# r- z Associated options %s to VPC %sr/ N) r" rB rw r0 �associate_dhcp_optionsr r r r )r� r� r� r� r� �dhcp_options_namer= r r r r r r r@ r? rA r r r �create_dhcp_options� s: #�� ��r� c s� t | |f�s td��|s| rtd| ||||d�}|s di iS zt||||d�}|j|gd�� W n tyI } zdtd |�iW Y d}~S d}~ww � sPddiS d}d� fd d �|D �iS ) z� Return a dict with the current values of the requested DHCP options set CLI Example: .. code-block:: bash salt myminion boto_vpc.get_dhcp_options 'myfunnydhcpoptionsname' .. versionadded:: 2016.3.0 zTAt least one of the following must be specified: dhcp_options_name, dhcp_options_id.r� r# )Zdhcp_options_idsr( r/ N�r� r� r� r� r� c s i | ] }|� d j �|��qS )r )�optionsrw r� �r@ r r r� ; s z$get_dhcp_options.<locals>.<dictcomp>)rZ r r4 r0 Zget_all_dhcp_optionsr r ) r� r� r r r r r? rA r� r r� r �get_dhcp_options s4 �� ��r� c C r� )z� Delete dhcp options by id or name. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.delete_dhcp_options 'dopt-b6a247df' r� r� r� )r� r� r r r r r r r �delete_dhcp_options> s �r� c C s� zBt ||||||�}|sddd|p|� d�id�W S t||||d�}|�| |�r4t�d| |� dd iW S t�d | |� ddd id�W S ty] } zdtd |�d�W Y d }~S d }~ww )aq Given valid DHCP options id and a valid VPC id, associate the DHCP options record with the VPC. Returns True if the DHCP options record were associated and returns False if the DHCP options record was not associated. CLI Example: .. code-block:: bash salt myminion boto_vpc.associate_dhcp_options_to_vpc 'dhcp-a0bl34pp' 'vpc-6b1fe402' Fr% r� rD �� associatedr( r# z3DHCP options with id %s were associated with VPC %sr� Tz7DHCP options with id %s were not associated with VPC %sz%DHCP options could not be associated.r/ N)r" r0 r� r r r: r r ) r� r r r r r r r? rA r r r � associate_dhcp_options_to_vpc^ s4 � � �� ��r� c C �* |r t �d� |}td|| |||||d�S )z� Check if a dhcp option exists. Returns True if the dhcp option exists; Returns False otherwise. CLI Example: .. code-block:: bash salt myminion boto_vpc.dhcp_options_exists dhcp_options_id='dhcp-a0bl34pp' zYboto_vpc.dhcp_options_exists: name parameter is deprecated use dhcp_options_name instead.r� rc �r r: rd )r� r< r� r= r r r r r r r �dhcp_options_exists� s ��r� c C sr |p| } z t | ||||| �} W n ty* } zdtd | �d�W Y d} ~ S d} ~ ww | s8ddd| � d�id�S t||f�rBtd��|r\td ||||| d �}|s[ddd |� d�id�S n|rstd ||||| d �ssddd |� d�id�S td || |||| d�} | �d�r�|r�zt |||| d �} | � | d |�}W n ty� } zdtd | �d�W Y d} ~ S d} ~ ww || d< | S )aF Given a vpc_id, creates a network acl. Returns the network acl id if successful, otherwise returns False. .. versionchanged:: 2015.8.0 Added vpc_name, subnet_id, and subnet_name arguments CLI Example: .. code-block:: bash salt myminion boto_vpc.create_network_acl 'vpc-6b1fe402' Fr/ r& Nr% r� rD r� r� r# r� r� � network_acl)r< r r r r r r' r- �association_id) r" r r rY r r4 rW rB rw r0 �associate_network_acl)r r �network_acl_namer� r� r= r r r r r` rA r@ r? r� r r r �create_network_acl� sn ��� � ���� �� ��r� c C sv |r0t d|||||d�}|r0|jr0|jd j}zt||||d�} | �|� W n ty/ Y nw td|| ||||d�S )a� Delete a network acl based on the network_acl_id or network_acl_name provided. CLI Examples: .. code-block:: bash salt myminion boto_vpc.delete_network_acl network_acl_id='acl-5fb85d36' \ disassociate=false .. code-block:: bash salt myminion boto_vpc.delete_network_acl network_acl_name='myacl' \ disassociate=true r� r_ r r# r� )rW � associationsr� r0 �disassociate_network_aclr rH ) �network_acl_idr� Z disassociater r r r r� r� r? r r r �delete_network_acl s4 � ��r c C r� )z� Checks if a network acl exists. Returns True if the network acl exists or returns False if it doesn't exist. CLI Example: .. code-block:: bash salt myminion boto_vpc.network_acl_exists network_acl_id='acl-5fb85d36' zWboto_vpc.network_acl_exists: name parameter is deprecated use network_acl_name instead.r� rc r� )r r< r� r= r r r r r r r �network_acl_existsI s ��r c C s� |rt d|||||d�} | sddd|� d�id�S |r2t d|||||d�}|s2ddd |� d�id�S z,t||||d�}|�| |�} | rPt�d | |� d | d �W S t�d | |� dddid�W S tyy } zdtd | �d�W Y d} ~ S d} ~ ww )a� Given a network acl and subnet ids or names, associate a network acl to a subnet. CLI Example: .. code-block:: bash salt myminion boto_vpc.associate_network_acl_to_subnet \ network_acl_id='acl-5fb85d36' subnet_id='subnet-6a1fe403' .. code-block:: bash salt myminion boto_vpc.associate_network_acl_to_subnet \ network_acl_id='myacl' subnet_id='mysubnet' r� r# Fr% z Network ACL rD r� r� r� z4Network ACL with id %s was associated with subnet %sT)r� r- z8Network ACL with id %s was not associated with subnet %sz ACL could not be assocaited.r/ N)r4 r0 r� r r r: r r ) r r� r� r� r r r r r? r� rA r r r � associate_network_acl_to_subnetr sV �� �� � �� ��r c C s� t || f�s td��t||f�rtd��z<|r/td|||||d�} | s/ddd|� d�id �W S |s3|r<t||||||�}t||||d�}|j| |d �} d | d �W S tyk } zdtd | �d �W Y d} ~ S d} ~ ww )z� Given a subnet ID, disassociates a network acl. CLI Example: .. code-block:: bash salt myminion boto_vpc.disassociate_network_acl 'subnet-6a1fe403' z@One (but not both) of subnet_id or subnet_name must be provided.z/Only one of vpc_id or vpc_name may be provided.r� r# Fr% r� rD �� disassociatedr( )r T)r r� r/ N) r r rY r4 r" r0 r r r ) r� r r� r r r r r r? r� rA r r r r � s: � �� ��r c C sf | rd}nd}t || f�std��dD ]}t� | d u r#t|� d���q|r0td|| | ||d�} | s?|dd d d �|p;| �iiS t|t�rc|d krKd }nzt�|�}W n t yb } zt|��d }~ww z3t | | ||d�}| rr|j }n|j }|| |||||||| | d� }|r�t �d|� nt �d|� ||iW S ty� } z|dd td |�iW Y d }~S d }~ww )N�replacedr' �JOne (but not both) of network_acl_id or network_acl_name must be provided.)� rule_number�protocol� rule_actionr} � is required.r� r# Fr( r% � Network ACL {} does not exist.rY r� )�egress� icmp_code� icmp_type�port_range_from� port_range_tozNetwork ACL entry was %sz Network ACL entry was not %sr/ )r r �localsr4 r3 r5 �str�socket�getprotobyname�OSErrorr0 �replace_network_acl_entry�create_network_acl_entryr r r: r r )r r r r r} r r� r r r r �replacer r r r Zrkey�vrA r? rT r' r r r �_create_network_acl_entry� s| ������ ��� ��r c C s t � }tdi |��S )z� Creates a network acl entry. CLI Example: .. code-block:: bash salt myminion boto_vpc.create_network_acl_entry 'acl-5fb85d36' '32767' \ 'all' 'deny' '0.0.0.0/0' egress=true Nr �r r �r r r r r} r r� r r r r r r r r r> r r r r I s r c C s t � }tdddi|��S )z� Replaces a network acl entry. CLI Example: .. code-block:: bash salt myminion boto_vpc.replace_network_acl_entry 'acl-5fb85d36' '32767' \ 'all' 'deny' '0.0.0.0/0' egress=true r TNr r r r r r r j s r c C s� t || f�s td��dD ]}t� | du r t|� d���q |r)td|||||d�} | s7ddd �|p2| �id �S z"t||||d�} | j| ||d �} | rPt�d � nt� d � d| iW S t yt } zdt d | �d �W Y d} ~ S d} ~ ww )z� Deletes a network acl entry. CLI Example: .. code-block:: bash salt myminion boto_vpc.delete_network_acl_entry 'acl-5fb85d36' '32767' r )r r Nr r� r# Fr% r rE )r z Network ACL entry was deletedzNetwork ACL was not deletedrF r/ ) r r r r4 r3 r0 �delete_network_acl_entryr r r: r r ) r r r r� r r r r r r? rF rA r r r r � sJ ������� ��r c C sH t | |||||�} | sddd|p| � d�id�S td||| ||||d�S )a Creates a route table. .. versionchanged:: 2015.8.0 Added vpc_name argument CLI Examples: .. code-block:: bash salt myminion boto_vpc.create_route_table vpc_id='vpc-6b1fe402' \ route_table_name='myroutetable' salt myminion boto_vpc.create_route_table vpc_name='myvpc' \ route_table_name='myroutetable' Fr% r� rD r& � route_table)r= r r r r r )r" rB )r r �route_table_namer= r r r r r r r �create_route_table� s ��r" c C r� )z� Deletes a route table. CLI Examples: .. code-block:: bash salt myminion boto_vpc.delete_route_table route_table_id='rtb-1f382e7d' salt myminion boto_vpc.delete_route_table route_table_name='myroutetable' r r� r� )�route_table_idr! r r r r r r r �delete_route_table� r� r$ c C r� )z� Checks if a route table exists. CLI Example: .. code-block:: bash salt myminion boto_vpc.route_table_exists route_table_id='rtb-1f382e7d' zWboto_vpc.route_table_exists: name parameter is deprecated use route_table_name instead.r rc r� )r# r< r! r= r r r r r r r �route_table_exists s ��r% c C sh t ||f�s td��t |||| f�std��z�t||| | d�} di i} |r*|g| d< |r2|| d d< |rF|�� D ] \}}|| d d|� �< q8| jdi | ��}t|�dkrXtd ��| |||| d �}|d jD ])}|j|j|j |j | d �}t |�� �t |�� �A }|s�t � d | � d di W S qet �d| � d diW S ty� } zdtd |�iW Y d}~S d}~ww )z� Checks if a route exists. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.route_exists destination_cidr_block='10.0.0.0/20' gateway_id='local' route_table_name='test' zTAt least one of the following must be specified: route table name or route table id.ztAt least one of the following must be specified: gateway id, instance id, interface id or VPC peering connection id.r# rL Zroute_table_idsrK rX rO z Found more than one route table.)�destination_cidr_block� gateway_id� instance_id� interface_id�vpc_peering_connection_idr zRoute %s exists.rb TzRoute %s does not exist.Fr( r/ Nr )rZ r r0 r[ �get_all_route_tablesrS �routesr& r' r( r) r� r r r: r r )r& r! r# r' r( r) r= r r r r r* r? rV r\ r] � route_tablesZ route_checkZ route_matchZ route_dictZ route_comprA r r r � route_exists; sZ �� �� � ��r. c C s� t ||f�r td��|r#td|||||d�}|s#ddd|� d�id�S t | |f�r-td ��|rFtd |||||d�} | sFddd |� d�id�S zt||||d�}|�| |�} t�d | |� d | iW S ty{ } zdtd | �d�W Y d} ~ S d} ~ ww )av Given a route table and subnet name or id, associates the route table with the subnet. CLI Example: .. code-block:: bash salt myminion boto_vpc.associate_route_table 'rtb-1f382e7d' 'subnet-6a1fe403' .. code-block:: bash salt myminion boto_vpc.associate_route_table route_table_name='myrtb' \ subnet_name='mysubnet' r� r� r# Fr% r� rD r� z?Only one of route_table_name or route_table_id may be provided.r z Route table z,Route table %s was associated with subnet %sr� r/ N) rY r r4 r0 �associate_route_tabler r r r ) r# r� r! r� r r r r r? r� rA r r r r/ � sP � �� ��� � ��r/ c C s~ z#t ||||d�}|�| �rt�d| � ddiW S t�d| � ddiW S ty> } zdtd |�d�W Y d }~S d }~ww ) z� Disassociates a route table. association_id The Route Table Association ID to disassociate CLI Example: .. code-block:: bash salt myminion boto_vpc.disassociate_route_table 'rtbassoc-d8ccddba' r# z:Route table with association id %s has been disassociated.r Tz>Route table with association id %s has not been disassociated.Fr/ r N)r0 �disassociate_route_tabler r r: r r )r� r r r r r? rA r r r r0 � s" � � ��r0 c C sn zt ||||d�}|�| |�} t�d|| � d| d�W S ty6 } zdtd |�d�W Y d}~S d}~ww ) z� Replaces a route table association. CLI Example: .. code-block:: bash salt myminion boto_vpc.replace_route_table_association 'rtbassoc-d8ccddba' 'rtb-1f382e7d' r# z6Route table %s was reassociated with association id %sT)r r� Fr/ �r r( N)r0 Z*replace_route_table_association_with_assocr r r r )r� r# r r r r r? rA r r r � replace_route_table_association� s �� ��r2 c C s t || f�s td��t |||||| |||f �std��|du r#td��z�|r=td|| | | | d�} | s=ddd �|�id �W S |rVtd || | | | d�}|sVddd �|�id �W S |rotd || | | | d�}|soddd�|�id �W S |r�t|| | | | d�}|s�ddd�|�id �W S |d d } |r�t|| | | | d�}|s�ddd�|�id �W S |d d } W n ty� } zdtd |�d �W Y d}~S d}~ww | s�td| |||||| | | | d� S zt| | | | d�}|j | || d�}d|� d�d�W S t�y } zdtd |�d �W Y d}~S d}~ww )z� Creates a route. If a nat gateway is specified, boto3 must be installed CLI Example: .. code-block:: bash salt myminion boto_vpc.create_route 'rtb-1f382e7d' '10.0.0.0/16' gateway_id='vgw-a1b2c3' �JOne (but not both) of route_table_id or route_table_name must be provided.z�Only one of gateway_id, internet_gateway_name, instance_id, interface_id, vpc_peering_connection_id, nat_gateway_id, nat_gateway_subnet_id, nat_gateway_subnet_name or vpc_peering_connection_name may be provided.N�#destination_cidr_block is required.r r# Fr% � route table {} does not exist.r& r� r� Zvpc_peering_connectionz)VPC peering connection {} does not exist.)r� r r r r z"nat gateway for {} does not exist.r r� )r� r r r r r/ �route) r# r& r' r( r) r* r r r r )� RouteTableId�DestinationCidrBlockr� Tr, ) r r r4 r3 r� r r rB r � create_routerw )r# r& r! r' r� r( r) r* Zvpc_peering_connection_namer r r r r� Znat_gateway_subnet_nameZnat_gateway_subnet_idZgwsrA r� r� r r r r9 s ��� ����� ���� ���� ���� ���� � ���� ��r9 c C s� t || f�s td��|du rtd��z|r,td|||||d�} | s,ddd�|�id �W S W n tyH } zdtd |�d �W Y d}~S d}~ww td | |||||d �S ) z� Deletes a route. CLI Example: .. code-block:: bash salt myminion boto_vpc.delete_route 'rtb-1f382e7d' '10.0.0.0/16' r3 Nr4 r r# Fr% r5 r& r/ r6 )r; r+ r& r r r r )r r r4 r3 r r rH )r# r& r! r r r r rA r r r � delete_route� sJ ������ ���r: c C s� t || f�s td��|du rtd��zD|r,td||||| d�} | s,ddd�|�id �W S t|||| d�} | j| ||||| d �rKt�d | |� d d iW S t�d| |� d diW S t yq } zdt d | �d �W Y d} ~ S d} ~ ww )z� Replaces a route. CLI Example: .. code-block:: bash salt myminion boto_vpc.replace_route 'rtb-1f382e7d' '10.0.0.0/16' gateway_id='vgw-a1b2c3' r3 Nr4 r r# Fr% r5 r1 )r' r( r) r* z7Route with cidr block %s on route table %s was replacedr Tz;Route with cidr block %s on route table %s was not replacedr/ ) r r r4 r3 r0 � replace_router r r: r r ) r# r& r! r' r( r) r r r r r* r? rA r r r r; s` ������� � ��r; c C s� t | |||f�s td��z�t||||d�}dg i} | r | g| d< |r-| d �d|gd�� |r:| d �d|gd�� |rS|�� D ]\} } | d �d| � �| gd�� q@|jd#i | ���d g �} | sdg W S g } d d d d dd�}ddddddd�}ddd dd�}| D ]U}i }|�� D ]G\}}||v r�|dkr�t|||�||< q�|d kr�t|||�||< q�|d kr�i ||< |�|g �D ]}|�d �|| |�d �< q�q�|�|�||< q�| �|� q�| W S ty� } zd t d! |�iW Y d"}~S d"}~ww )$a! Given route table properties, return details of all matching route tables. This function requires boto3 to be installed. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt myminion boto_vpc.describe_route_tables vpc_id='vpc-a6a9efc3' zcAt least one of the following must be specified: route table id, route table name, vpc_id, or tags.r# �FiltersZ RouteTableIdsr� r� rK rX Z RouteTablesr7 r� �TagsZRoutesZ Associations)r- r r= r, r� r8 Z GatewayIdZInstanceZNetworkInterfaceIdr� �VpcPeeringConnectionId)r& r' r( r) r� r* ZRouteTableAssociationIdZMainr� )r- �mainr# r� r, r� r= r� �Keyr( r/ Nr ) rZ r r r� r[ �describe_route_tablesrw � _key_remapr r )r# r! r r= r r r r r� rV r\ r] r- Ztablesr� Z route_keysZ assoc_keysr� r ZoutkeyZinkeyZtagitemrA r r r rA Z s� � ����� ���� ��rA c C s | j |||||d�S )Nr� )r� )r? r� r� r� r� r� r r r �_create_dhcp_options� s �rC c C s& | r|� d| � t�d|| � d S d S )Nr� z%s is now named as %s)�add_tagr rp )r< �objr r r r7 � s �r7 c C s` | r.z|� | � W n ty! | �� D ] \}}|�||� qY nw t�dd�| �|� d S d S )Nz'The following tags: %s were added to %sz, )Zadd_tagsr2 r[ rD r rp rs )r= rE �tag�valuer r r r8 � s ���r8 c C sH |r| j ||d� t�d||� |r"| j ||d� t�d||� d S d S )N)r r~ z$DNS support was set to: %s on vpc %s)r r z&DNS hostnames was set to: %s on vpc %s)Zmodify_vpc_attributer rp )r? �vpcidZ dns_supportZ dns_hostnamesr r r r{ � s �r{ c C s� | j d|id�}|st�d� d S d }|D ]}t|di �D ] }t|dd�r)|} nq q|s4t�d� d S |� d�}t||� t�d||� d S ) Nr �rL z no default route table foundr� r? Fz-default-tablez1Default route table name was set to: %s on vpc %s)r+ r r: r1 r7 rp )r? rH r r- Z default_table�tableZ associationr< r r r r| � s$ �� r| c C sH g }t || �D ]}i }|D ]}t||�rt ||�||< q |�|� q|S �N)r1 r� r� )r r� r� � elements_list�r_item�elementZr_keyr r r � _key_iter s � rO c C sP g }|� | g �D ] }i }|�� D ]\}}||v r |� |�||< q|�|� q|S rK )rw r[ r� )r r� r� rL rM rN Zr_outkeyZr_inkeyr r r rB s � rB c C s` |s t ||||d�}|r.|jd|id�}|D ]}|jD ]} | j| kr,| js,| j S qqdS )zk helper function to find subnet explicit route table associations .. versionadded:: 2016.11.0 r# r rI N)r0 r+ r� r� r? r- ) r� r r? r r r r Zvpc_route_tablesZvpc_route_tableZrt_associationr r r r� s ��r� c C s� t ||| | d�} |rt|| �rtd��t| |f�s td��t||f�s'td��|r;t|||| | d�} | s;dd�|�iS |rPt|||| | d�}|sPdd|� d �iS | || d �} |r_| �d |i� |rh| �d |i� zTt�d � |sy| j d i | ��}n| j d i | ��}|� di �}|� dd�}d|� d�}t�|� |r�t�d� | j |gd|d�gd� t�d� |d|� d�7 }d|iW S t j jy� } zt�d� dtd |�iW Y d }~S d }~ww ) aS Request a VPC peering connection between two VPCs. .. versionadded:: 2016.11.0 requester_vpc_id ID of the requesting VPC. Exclusive with requester_vpc_name. requester_vpc_name Name tag of the requesting VPC. Exclusive with requester_vpc_id. peer_vpc_id ID of the VPC to create VPC peering connection with. This can be a VPC in another account. Exclusive with peer_vpc_name. peer_vpc_name Name tag of the VPC to create VPC peering connection with. This can only be a VPC in the same account and same region, else resolving it into a vpc ID will almost certainly fail. Exclusive with peer_vpc_id. name The name to use for this VPC peering connection. peer_owner_id ID of the owner of the peer VPC. Defaults to your account ID, so a value is required if peering with a VPC in a different account. peer_region Region of peer VPC. For inter-region vpc peering connections. Not required for intra-region peering connections. .. versionadded:: 3005 region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. dry_run If True, skip application and return status. CLI Example: .. code-block:: bash # Create a named VPC peering connection salt myminion boto_vpc.request_vpc_peering_connection vpc-4a3e622e vpc-be82e9da name=my_vpc_connection # Without a name salt myminion boto_vpc.request_vpc_peering_connection vpc-4a3e622e vpc-be82e9da # Specify a region salt myminion boto_vpc.request_vpc_peering_connection vpc-4a3e622e vpc-be82e9da region=us-west-2 r# zXA VPC peering connection with this name already exists! Please specify a different name.zAExactly one of requester_vpc_id or requester_vpc_name is requiredz8Exactly one of peer_vpc_id or peer_vpc_name is required.r r( z&Could not resolve VPC name {} to an IDzCould not resolve VPC name � to an ID)r� Z PeerVpcId�DryRunZ PeerOwnerIdZ PeerRegionz(Trying to request vpc peering connectionZVpcPeeringConnectionr> �ERRORz VPC peering z requested.z)Adding name tag to vpc peering connectionr� )r@ r� )Z Resourcesr= z*Applied name tag to vpc peering connectionz With name �.�msgz0Got an error while trying to request vpc peeringr/ Nr )r � _vpc_peering_conn_id_for_namer r r r3 r� r rp Z create_vpc_peering_connectionrw Z create_tags�botocore� exceptions� ClientErrorr( r )Zrequester_vpc_idZrequester_vpc_nameZ peer_vpc_idZ peer_vpc_namer< Z peer_owner_idZ peer_regionr r r r �dry_runr? Zpeering_paramsZ vpc_peeringZpeeringZpeering_conn_idrT rx r r r � request_vpc_peering_connection+ s| K� � ���� �� � ��rZ c C s> d| gd�dt ttgd�g}|j|d��dg �}dd� |D �S )a :param name: The name of the VPC peering connection. :type name: String :param conn: The boto aws ec2 connection. :return: The id associated with this peering connection Returns the VPC peering connection ids given the VPC peering connection name. rK r� � status-code�r< �VpcPeeringConnectionsc S s g | ]}|d �qS )r> r )ri �xr r r rj � s z/_get_peering_connection_ids.<locals>.<listcomp>)�ACTIVE�PENDING_ACCEPTANCE� PROVISIONING� describe_vpc_peering_connectionsrw )r< r? rL Zpeeringsr r r �_get_peering_connection_ids� s � �rc c C s t ||||d�}dt| |�iS )a Returns any VPC peering connection id(s) for the given VPC peering connection name. VPC peering connection ids are only returned for connections that are in the ``active``, ``pending-acceptance`` or ``provisioning`` state. .. versionadded:: 2016.11.0 :param name: The string name for this VPC peering connection :param region: The aws region to use :param key: Your aws key :param keyid: The key id associated with this aws account :param profile: The profile to use :return: dict CLI Example: .. code-block:: bash salt myminion boto_vpc.describe_vpc_peering_connection salt-vpc # Specify a region salt myminion boto_vpc.describe_vpc_peering_connection salt-vpc region=us-west-2 r# z VPC-Peerings)r rc )r< r r r r r? r r r � describe_vpc_peering_connection� s rd � c C s� t | |f�s td��t||||d�}|r"t||�} | s"td�|���zt�d� |j|| d� ddiW S tj j yT } zt� d� d t d |�iW Y d }~S d }~ww ) a� Request a VPC peering connection between two VPCs. .. versionadded:: 2016.11.0 :param conn_id: The ID to use. String type. :param name: The name of this VPC peering connection. String type. :param region: The AWS region to use. Type string. :param key: The key to use for this connection. Type string. :param keyid: The key id to use. :param profile: The profile to use. :param dry_run: The dry_run flag to set. :return: dict Warning: Please specify either the ``vpc_peering_connection_id`` or ``name`` but not both. Specifying both will result in an error! CLI Example: .. code-block:: bash salt myminion boto_vpc.accept_vpc_peering_connection name=salt-vpc # Specify a region salt myminion boto_vpc.accept_vpc_peering_connection name=salt-vpc region=us-west-2 # specify an id salt myminion boto_vpc.accept_vpc_peering_connection conn_id=pcx-8a8939e3 zIOne (but not both) of vpc_peering_connection_id or name must be provided.r# z�No ID found for this VPC peering connection! ({}) Please make sure this VPC peering connection exists or invoke this function with a VPC peering connection IDz'Trying to accept vpc peering connection�rQ r> rT z VPC peering connection accepted.z/Got an error while trying to accept vpc peeringr( r/ N) r r r rU r3 r rp � accept_vpc_peering_connectionrV rW rX r( r ) �conn_idr< r r r r rY r? rx r r r rg � s. � � � ��rg c C sH t �d� t| |�}|sdg}|d S t|�dkr td�| ���|d S )z. Get the ID associated with this name z$Retrieving VPC peering connection idNrO z�Found multiple VPC peering connections with the same name!! Please make sure you have only one VPC peering connection named {} or invoke this function with a VPC peering connection IDr )r rp rc rS r r3 )r< r? Zidsr r r rU 3 s �� rU c C s� t | |f�s td��t||||d�}|r#t||�} | s#td|� d���zt�d� |j|| d� ddiW S tjj y[ } zt d |�} t� d |pJ| | � d | iW Y d }~S d }~ww ) a� Delete a VPC peering connection. .. versionadded:: 2016.11.0 conn_id The connection ID to check. Exclusive with conn_name. conn_name The connection name to check. Exclusive with conn_id. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. dry_run If True, skip application and simply return projected status. CLI Example: .. code-block:: bash # Create a named VPC peering connection salt myminion boto_vpc.delete_vpc_peering_connection conn_name=salt-vpc # Specify a region salt myminion boto_vpc.delete_vpc_peering_connection conn_name=salt-vpc region=us-west-2 # specify an id salt myminion boto_vpc.delete_vpc_peering_connection conn_id=pcx-8a8939e3 �5Exactly one of conn_id or conn_name must be provided.r# z(Couldn't resolve VPC peering connection rP z'Trying to delete vpc peering connectionrf rT z VPC peering connection deleted.r/ z#Failed to delete VPC peering %s: %sr( N) r r r rU r rp � delete_vpc_peering_connectionrV rW rX r r( ) rh � conn_namer r r r rY r? rx rA r r r rj H s. 0� � � ��rj c C s� t | |f�s td��t||||d�}| r |j| gd��dg �}nd|gd�dtttgd�g}|j|d��dg �}|s<d S t|�d krKtd � | pH|���|d d d } | tkS )ai Check if a VPC peering connection is in the pending state. .. versionadded:: 2016.11.0 conn_id The connection ID to check. Exclusive with conn_name. conn_name The connection name to check. Exclusive with conn_id. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. CLI Example: .. code-block:: bash salt myminion boto_vpc.is_peering_connection_pending conn_name=salt-vpc # Specify a region salt myminion boto_vpc.is_peering_connection_pending conn_name=salt-vpc region=us-west-2 # specify an id salt myminion boto_vpc.is_peering_connection_pending conn_id=pcx-8a8939e3 ri r# )ZVpcPeeringConnectionIdsr] rK r� r[ r\ FrO �iFound more than one ID for the VPC peering connection ({}). Please call this function with an ID instead.r �Status�Code) r r r rb rw r_ r` ra rS r3 ) rh rk r r r r r? rq rL �statusr r r � is_peering_connection_pending� s8 &��� �� � �rp c C s� t | |f�s td��t ||f�std��|r)t|||||d�}|s)t�d|� dS t||||d�}d|gd�d tttgd�g} | rK| d | gd�g7 } n | d |gd�g7 } |j | d �� d g �} | sbdS t | �dkrqtd� | pn|���| d d d } t | tk�S )a� Check if a VPC peering connection is in the pending state, and requested from the given VPC. .. versionadded:: 2016.11.0 conn_id The connection ID to check. Exclusive with conn_name. conn_name The connection name to check. Exclusive with conn_id. vpc_id Is this the ID of the requesting VPC for this peering connection. Exclusive with vpc_name. vpc_name Is this the Name of the requesting VPC for this peering connection. Exclusive with vpc_id. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. CLI Example: .. code-block:: bash salt myminion boto_vpc.is_peering_connection_pending name=salt-vpc ri z3Exactly one of vpc_id or vpc_name must be provided.r z&Could not resolve VPC name %s to an IDFr# zrequester-vpc-info.vpc-idr� r[ zvpc-peering-connection-idrK r\ r] rO rl r rm rn )r r r" r r: r r_ r` ra rb rw rS r3 r6 ) rh rk r r r r r r r? rL rq ro r r r �#peering_connection_pending_from_vpc� s@ /� � � � � rq )NNNNNN)NNNNNNN)NNNN)NNNNNNNN) NNNNNNNNN)NNNNN) NNNNNNNNNNF) NNNNNNNNNN)NNFNNNN) NNNNNr� NNNN)FNNNNFr� ) NNNNNNNNNNNNN)NNNNNNNNNNNFNNNN)NNNNNNNNNNNNNNN) NNNNNNNNNNN)NNNNNNNNNNNNNNNN) NNNNNNNNNNNF)re re NNNNF)NNNNNNF)h�__doc__�loggingr� r r� Zsalt.utils.compatr Zsalt.utils.versionsZsalt.exceptionsr r ra r` r_ � getLoggerr r r Zboto.vpcrV Zboto.exceptionr �setLevel�CRITICALr � ImportErrorr r r r r" rB rH rW r^ r4 ra rd r r rt rb r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r r r" r$ r% r. r/ r0 r2 r9 r: r; rA rC r7 r8 r{ r| rO rB r� rZ rc rd rg rU rj rp rq r r r r �<module> s~ � � �) �D �> �< � / �" �- �0 �: �% �5 �; �I �I � D( �A � � R/ �6 �S �9 �S �G �- �) �M �Y �* �$ �" �C �: �" �4 �+ �Y �7 �* �L �7 �W �" �# �> �- � �* �W �G �$ � � : �> �O �j � � � �" �= �I �L�
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings