File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/boto_vpc.cpython-310.pyc
Back
o ;j� � @ s� d Z ddlZddlm mZ dZe�e�Zdd� Z d1dd�Z d2dd �Z d3d d �Z d4d d �Z d5dd�Zdd� Z d4dd�Z d6dd�Z d7dd�Z d8dd�Z d6dd �Z d2d d �Z d6d d �Zd9d!d"�Z d6d#d$�Z d:d%d&�Z d6d'd(�Z d;d)d*�Z d;d+d,�Z d4d-d.�Z d4d/d0�Z dS )<aB Manage VPCs ================= .. versionadded:: 2015.8.0 :depends: - boto >= 2.8.0 - boto3 >= 1.2.6 Create and destroy VPCs. Be aware that this interacts with Amazon's services, and so may incur charges. This module accepts explicit vpc credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More information available `here <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_. If IAM roles are not used you need to specify them either in a pillar file or in the minion's config file: .. code-block:: yaml vpc.keyid: GKTADJGHEIQSXMKKRBJ08H vpc.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile, either passed in as a dict, or as a string to pull from pillars or minion config: .. code-block:: yaml myprofile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 .. code-block:: yaml aws: region: us-east-1: profile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 .. code-block:: jinja Ensure VPC exists: boto_vpc.present: - name: myvpc - cidr_block: 10.10.11.0/24 - dns_hostnames: True - region: us-east-1 - keyid: GKTADJGHEIQSXMKKRBJ08H - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs Ensure subnet exists: boto_vpc.subnet_present: - name: mysubnet - vpc_id: vpc-123456 - cidr_block: 10.0.0.0/16 - region: us-east-1 - profile: myprofile {% set profile = salt['pillar.get']('aws:region:us-east-1:profile' ) %} Ensure internet gateway exists: boto_vpc.internet_gateway_present: - name: myigw - vpc_name: myvpc - profile: {{ profile }} Ensure route table exists: boto_vpc.route_table_present: - name: my_route_table - vpc_id: vpc-123456 - routes: - destination_cidr_block: 0.0.0.0/0 instance_id: i-123456 - subnet_names: - subnet1 - subnet2 - region: us-east-1 - profile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs .. versionadded:: 2016.11.0 Request, accept and delete VPC peering connections. VPC peering connections can be named allowing the name to be used throughout the state file. Following example shows how to request and accept a VPC peering connection. .. code-block:: yaml accept the vpc peering connection: boto_vpc.accept_vpc_peering_connection: - conn_name: salt_vpc_peering - region: us-west-2 - require: - boto_vpc: request a vpc peering connection request a vpc peering connection: boto_vpc.request_vpc_peering_connection: - requester_vpc_id: vpc-4a3d522e - peer_vpc_id: vpc-ae81e9ca - region: us-west-2 - conn_name: salt_vpc_peering VPC peering connections need not be named. In this case the VPC peering connection ID should be used in the state file. .. code-block:: yaml accept the vpc peering connection: boto_vpc.accept_vpc_peering_connection: - conn_id: pcx-1873c371 - region: us-west-2 VPC peering connections can be deleted, as shown below. .. code-block:: yaml delete a named vpc peering connection: boto_vpc.delete_vpc_peering_connection: - conn_name: salt_vpc_peering Delete also accepts a VPC peering connection id. .. code-block:: yaml delete a vpc peering connection by id: boto_vpc.delete_vpc_peering_connection: - conn_id: pcx-1873c371 � NZboto_vpcc C s$ d} d}dt v r tS dd�| |�fS )z) Only load if boto is available. z2.8.0z1.2.6�boto_vpc.existsFzbThe following libraries are required to run the boto_vpc state module: boto >= {} and boto3 >= {}.)�__salt__�__virtualname__�format)Z boto_versionZ boto3_version� r �H/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/boto_vpc.py� __virtual__� s �r c C s | ddi d�} t d | ||||| d�} d| v r(d| d< d �| d d �| d < | S | �d �s�td r?d| � d�| d < d| d< | S t d ||| ||||||| d� } | �d�sed| d< d�| d d �| d < | S t d | d |||| d�} ddi| d d< | | d d< d| � d �| d < | S d | d < | S ) a Ensure VPC exists. name Name of the VPC. cidr_block The range of IPs in CIDR format, for example: 10.0.0.0/24. Block size must be between /16 and /28 netmask. instance_tenancy Instances launched in this VPC will be ingle-tenant or dedicated hardware. dns_support Indicates whether the DNS resolution is supported for the VPC. dns_hostnames Indicates whether the instances launched in the VPC get DNS hostnames. tags A list of tags. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. T� ��name�result�comment�changesr �r �tags�region�key�keyid�profile�errorFr zFailed to create VPC: {}.�messager �exists�test�VPC � is set to be created.Nzboto_vpc.create) �instance_tenancy�vpc_nameZenable_dns_supportZenable_dns_hostnamesr r r r r �createdzError in creating VPC: {}.zboto_vpc.describe�id)�vpc_idr r r r �vpcr �old�new� created.z VPC present.�r r �get�__opts__) r � cidr_blockr Z dns_supportZ dns_hostnamesr r r r r �ret�r� _describer r r �present� sL 0 � � � r+ c C s | ddi d�}t d | |||||d�}d|v r(d|d< d �|d d �|d < |S |�d �}|s8| � d �|d < |S td rJd| � d�|d < d|d< |S t d | |||||d�}|d skd|d< d �|d d �|d < |S d|i|d d< ddi|d d< d| � d�|d < |S )a� Ensure VPC with passed properties is absent. name Name of the VPC. tags A list of tags. All tags must match. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r zboto_vpc.get_idr r Fr zFailed to delete VPC: {}.r r r z VPC does not exist.r r � is set to be removed.Nzboto_vpc.delete)r r r r r r �deletedr r r! r" � deleted.r$ ) r r r r r r r( r) �_idr r r �absent s6 � �r0 c C s | ddi d�}|||||d�}t d || | | | | d�}d|v r0d|d < d �|d d �|d < |S |�d �r;d|d < |S td rMd| � d�|d < d|d < |S t d |||||| | ||| | | | d� }|�d�svd|d < d�|d d �|d < |S ddi|d d< d|i|d d< d| � d�|d < |S ) a� Ensure a set of DHCP options with the given settings exist. Note that the current implementation only SETS values during option set creation. It is unable to update option sets in place, and thus merely verifies the set exists via the given name and/or dhcp_options_id param. name (string) Name of the DHCP options. vpc_name (string) Name of a VPC to which the options should be associated. Either vpc_name or vpc_id must be provided. vpc_id (string) Id of a VPC to which the options should be associated. Either vpc_name or vpc_id must be provided. domain_name (string) Domain name to be assiciated with this option set. domain_name_servers (list of strings) The IP address(es) of up to four domain name servers. ntp_servers (list of strings) The IP address(es) of up to four desired NTP servers. netbios_name_servers (list of strings) The IP address(es) of up to four NetBIOS name servers. netbios_node_type (string) The NetBIOS node type (1, 2, 4, or 8). For more information about the allowed values, see RFC 2132. The recommended is 2 at this time (broadcast and multicast are currently not supported). tags (dict of key:value pairs) A set of tags to be added. region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (various) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. .. versionadded:: 2016.3.0 Tr r )� domain_name�domain_name_servers� ntp_servers�netbios_name_servers�netbios_node_typez boto_vpc.dhcp_options_exists)�dhcp_options_id�dhcp_options_namer r r r r Fr z$Failed to validate DHCP options: {}.r r r z DHCP options already present.r � DHCP options z are set to be created.Nz boto_vpc.create_dhcp_options) r1 r2 r3 r4 r5 r7 r r r r r r r r z!Failed to create DHCP options: {}� dhcp_optionsr r! r" r# r$ )r r6 r r r1 r2 r3 r4 r5 r r r r r r( Z_newr) r r r �dhcp_options_present< sj Q� � � � �r: c C s | ddi d�}t d d| ||||d�}d|v r(d|d < d �|d d �|d < |S |�d �}|s9d| � d�|d < |S td rKd| � d�|d < d|d < |S t d |d ||||d�}|�d�snd|d < d�|d d �|d < |S d|i|d d< ddi|d d< d| � d�|d < |S )a; Ensure a set of DHCP options with the given settings exist. name (string) Name of the DHCP options set. dhcp_options_id (string) Id of the DHCP options set. region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (various) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. .. versionadded:: 2016.3.0 Tr r �boto_vpc.get_resource_idr9 �r r r r r r Fr z"Failed to delete DHCP options: {}.r r r r8 z do not exist.r z are set to be deleted.Nz boto_vpc.delete_dhcp_options)r6 r r r r r- z!Failed to delete DHCP options: {}r r! r" r. r$ ) r r6 r r r r r( r) r/ r r r �dhcp_options_absent� s> ! � � � �r= Fc C s� | ddi d�} t d | ||||| d�}d|v r(d| d< d �|d d �| d < | S d }d }d }| s2| r�d }d}| rF| }t d | |||| d�}n| rU| }t d | |||| d�}|r~d|v r~|d r~| rod}t d | |||| d�}n| r~d}t d | |||| d�}|s�d| d< d�|�| d < | S |�d�s�td r�d| � d�| d < d | d< | S t d | ||| ||||||| d� }|�d�s�d| d< d�|d d �| d < | S t d |d |||| d �}d d i| d d < || d d < d| � d!�| d < nd"| d < |�r�|�st d | |||| d#�}t||d d ��s�td �r)d$|� �}d%�| d |g�| d < d | d< | S d&|d v �r_t�d'� t d( |d d& |||| d)�}|d* �s_d+�| �}d%�| d |g�| d < d| d< | S d | d v�rl|| d d < t d, |d | |||| d-�}d|v �r�d.�| ||d d �}d%�| d |g�| d < d| d< | S d/|� d0�}d%�| d |g�| d < d | d v�r�t d | |||| d#�| d d < | S |d1 | d d d d&< | S d%�| d d2|� �g�| d < | S )3a Ensure a subnet exists. name Name of the subnet. cidr_block The range if IPs for the subnet, in CIDR format. For example: 10.0.0.0/24. Block size must be between /16 and /28 netmask. vpc_name Name of the VPC in which the subnet should be placed. Either vpc_name or vpc_id must be provided. vpc_id Id of the VPC in which the subnet should be placed. Either vpc_name or vpc_id must be provided. availability_zone AZ in which the subnet should be placed. tags A list of tags. route_table_id A route table ID to explicitly associate the subnet with. If both route_table_id and route_table_name are specified, route_table_id will take precedence. .. versionadded:: 2016.11.0 route_table_name A route table name to explicitly associate the subnet with. If both route_table_id and route_table_name are specified, route_table_id will take precedence. .. versionadded:: 2016.11.0 region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r zboto_vpc.subnet_exists)� subnet_namer r r r r r Fr z Failed to create subnet: {}.r r Nzboto_vpc.route_table_exists��route_table_idr r r r ��route_table_namer r r r r � boto_vpc.describe_route_tablesz0The specified route table {} could not be found.r �Subnet r zboto_vpc.create_subnet) r> r' �availability_zone�auto_assign_public_ipv4r r r r r r r r zFailed to create subnet: {}zboto_vpc.describe_subnetr )� subnet_idr r r r �subnetr r! r" r# zSubnet present.�r> r r r r z0Subnet is set to be associated with route table � Z#explicit_route_table_association_idz.Need to disassociate from existing route table�!boto_vpc.disassociate_route_table�r r r r Z disassociatedz>Unable to disassociate subnet {} with its current route table.� boto_vpc.associate_route_table)r@ r> r r r r �6Failed to associate subnet {} with route table {}: {}.z0Subnet successfully associated with route table �.Zassociation_idz.Subnet is already associated with route table )r r r% r& �_verify_subnet_association�join�log�debug)r r' r r rE r r r r r r@ rB rF r( r) �route_table_descr* ZrtidZrtZroute_table_found�msgZdrt_retZart_retr r r �subnet_present s> A� ����� � � � � � � � ���� ���rV c C s0 | rd| v r| d D ] }|d |kr dS q dS )a Helper function verify a subnet's route table association route_table_desc the description of a route table, as returned from boto_vpc.describe_route_tables subnet_id the subnet id to verify .. versionadded:: 2016.11.0 � associationsrG TFr )rT rG Z associationr r r rP s �rP c C s | ddi d�}t d d| ||||d�}d|v r(d|d < d �|d d �|d < |S |�d �}|s8| � d�|d < |S td rLd�| |d �|d < d|d < |S t d | ||||d�}|�d�smd|d < d�|d d �|d < |S d|i|d d< ddi|d d< d| � d�|d < |S )ae Ensure subnet with passed properties is absent. name Name of the subnet. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r r; rH r< r Fr z Failed to delete subnet: {}.r r r z subnet does not exist.r z$Subnet {} ({}) is set to be removed.Nzboto_vpc.delete_subnetrI r- zFailed to delete subnet: {}r r! r" rD r. r$ ) r rG r r r r r( r) r/ r r r � subnet_absent s6 � � rX c C s | ddi d�}t d d| ||||d�} d| v r(d|d < d �| d d �|d < |S | �d �std r?d| � d�|d < d|d < |S t d | |||||||d�} | �d�scd|d < d�| d d �|d < |S ddi|d d< d| d i|d d< d| � d�|d < |S d| � d�|d < |S ) ah Ensure an internet gateway exists. name Name of the internet gateway. vpc_name Name of the VPC to which the internet gateway should be attached. vpc_id Id of the VPC to which the internet_gateway should be attached. Only one of vpc_name or vpc_id may be provided. tags A list of tags. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r zboto_vpc.resource_exists�internet_gatewayr< r Fr z&Failed to create internet gateway: {}.r r r r �Internet gateway r Nz boto_vpc.create_internet_gateway)�internet_gateway_namer r r r r r r r z%Failed to create internet gateway: {}r r! r r" r# � present.r$ ) r r r r r r r r r( r) r r r �internet_gateway_presentN sT (� � � �r] c C s | ddi d�}t d d| ||||d�}d|v r(d|d < d �|d d �|d < |S |d }|s8d| � d�|d < |S td rJd| � d�|d < d|d < |S t d | |||||d�}|�d�sld|d < d �|d d �|d < |S d|i|d d< ddi|d d< d| � d�|d < |S )a� Ensure the named internet gateway is absent. name Name of the internet gateway. detach First detach the internet gateway from a VPC, if attached. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r r; rY r< r Fr z&Failed to delete internet gateway: {}.r r r rZ � does not exist.r r, Nz boto_vpc.delete_internet_gateway)r[ �detachr r r r r- r r! r" r. )r r r& r% ) r r_ r r r r r( r) Zigw_idr r r �internet_gateway_absent� sR � �� �r` c C sf | ddi d�} t | |||||| | d�} | d | d< d�| d | d g�| d< | d sD| d | d< | d d u r8| S | d d u rDtd rD| S t| ||||| | d �} t�| d | d �| d< d�| d | d g�| d< | d sz| d | d< | d d u rz| S t| |||||| | d �} t�| d | d �| d< d�| d | d g�| d< | d s�| d | d< | d d u r�| S | S )a� Ensure route table with routes exists and is associated to a VPC. This function requires boto3 to be installed if nat gatewyas are specified. Example: .. code-block:: yaml boto_vpc.route_table_present: - name: my_route_table - vpc_id: vpc-123456 - routes: - destination_cidr_block: 0.0.0.0/0 internet_gateway_name: InternetGateway - destination_cidr_block: 10.10.11.0/24 instance_id: i-123456 - destination_cidr_block: 10.10.12.0/24 interface_id: eni-123456 - destination_cidr_block: 10.10.13.0/24 instance_name: mygatewayserver - subnet_names: - subnet1 - subnet2 name Name of the route table. vpc_name Name of the VPC with which the route table should be associated. vpc_id Id of the VPC with which the route table should be associated. Either vpc_name or vpc_id must be provided. routes A list of routes. Each route has a cidr and a target. subnet_ids A list of subnet ids to associate subnet_names A list of subnet names to associate tags A list of tags. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r )r r r r r r r r r rJ r r FNr )rB �routesr r r r r )rB � subnet_ids� subnet_namesr r r r r )�_route_table_presentrQ r& �_routes_present� dictupdate�update�_subnets_present) r r r ra rb rc r r r r r r( Z_retr r r �route_table_present� sf I� � � ri c C s | ddi d�}t d d| ||||d�} d| v r(d|d < d �| d d �|d < |S | �d �} | s�td rCd| � d�} | |d < d |d < |S t d | |||||||d�} | �d�sgd|d < d �| d d �|d < |S dd i|d d< d| d i|d d< d| � d�|d < |S d| � d| � d�|d < |S )NTr r r; � route_table)Zresourcer r r r r r Fr z!Failed to create route table: {}.r r r r � Route table r zboto_vpc.create_route_table)rB r r r r r r r r r r! r" r# z (z ) present.r$ ) r r r r r r r r r( r) r/ rU r r r rd l sX � � � �rd c C s� | ddi d�}t d | |||||d�}d|v r+d�| |d d �} | |d < d |d < |S |d }g } |�rRh d �} |D �]} i } | �� D ]\}}|| v rQ| | | |< qC| �d�r�t d d| d ||||d�}d|v r�d�| �d�|d d �} | |d < d |d < | S |d d u r�d| � d�} | |d < d |d < | S |d | d< | �d�r�t d d| d ||||d�}d|v r�d�| �d�|d d �} | |d < d |d < | S |d d u r�d| � d�} | |d < d |d < | S |d | d< | �d ��r d }t d | d |||||d �}|d u �r d �| d �} | |d < d |d < | S || d!< | �d"��rLt d# | d" ||||d$�}|�sDd%} | |d < d |d < | S |d d& | d'< | �| � q:g }g }| D ]}||d( v�rh|�t|�� �qX|d( D ]}|| v�r�|�d�d)k�r�|�|� �qn|�s�|�rDtd* �r�d+| � d,�} | |d < d |d < |S |�r�|D ];}t d- |d |d. ||||d/�}|d0 �s�d1�|d. | |d d �} | |d < d |d < | S d2�|d. | �|d < �q�|�r"|D ]<}t d3 d;|d ||||d4�|��}|d5 �sd6�|d. | |d d �} | |d < d |d < | S d7�|d. | �|d < �q�d(|d( i|d8 d9< t d | |||||d�}d(|d d( i|d8 d:< |S )<NTr r rC �rB r r r r r r z9Could not retrieve configuration for route table {}: {}`.r r Fr r > � instance_id� gateway_id�vpc_peering_connection_id�destination_cidr_block�nat_gateway_idZ interface_idr[ r; rY r< z/Error looking up id for internet gateway {}: {}r rZ r^ rn Zvpc_peering_connection_nameZvpc_peering_connectionz5Error looking up id for VPC peering connection {}: {}zVPC peering connection ro Z instance_name)�pendingZ rebootingZrunningZstopping�stoppedzboto_ec2.get_id)r r r r r Z in_stateszInstance {} does not exist.rm Znat_gateway_subnet_name� boto_vpc.describe_nat_gatewaysrI �Nat gateway does not exist.� NatGatewayIdrq ra �localr rk z set to have routes modified.zboto_vpc.delete_routerp )r@ rp r r r r r- z2Failed to delete route {} from route table {}: {}.z%Deleted route {} from route table {}.zboto_vpc.create_router? r z0Failed to create route {} in route table {}: {}.z#Created route {} in route table {}.r r! r" r )r r �itemsr% �append�dictr& )rB ra r r r r r r( rj rU Z_routesZ route_keys�iZ_r�k�vr) Zrunning_states� to_delete� to_createZroute�resr r r re � s^ � � � �� ��� � � � � � � ��� � ��re c s� | ddi d�}|s g }|rV|D ]F} t d d| ||||d�} d| v r6d�| d d �} | |d < d |d < | S | d d u rNd| � d�} | |d < d |d < | S |�| d � qt d | |||||d�} | ssd�| �} | |d < d |d < |S dd� | d D �� � fdd�|D �} g }| d D ]}|d |vr�|d d ur�|�|d � q�| s�|�rGtd r�d�| �} | |d < d |d < |S |r�|D ]/}t d |||||�} d| v r�d�|| | d d �} | |d < d |d < | S d �|| �|d < q�| �r'| D ]4}t d | d |||||d �} d| v �r d �|| | d d �} | |d < d |d < | S d �|| �|d < q�d!| d i|d" d#< t d | |||||d�}d!|d i|d" d$< |S )%NTr r r; rH r< r z Error looking up subnet ids: {}r r Fr r rD r^ rC rl z4Could not retrieve configuration for route table {}.c S s g | ]}|d �qS )rG r ��.0�xr r r � <listcomp>� s z$_subnets_present.<locals>.<listcomp>rW c s g | ]}|� vr|�qS r r r� �Z assoc_idsr r r� � s rG r z:Subnet associations for route table {} set to be modified.rK z0Failed to dissociate {} from route table {}: {}.z*Dissociated subnet {} from route table {}.rM )r@ rG r r r r rN z)Associated subnet {} with route table {}.Zsubnets_associationsr r! r" )r r ry r& )rB rb rc r r r r r r( r{ r) rU rj r r~ r� Zr_ascZsnZnew_subr r� r rh k s� � �� � � �� �� �� ��rh c C s | ddi d�}t d d| ||||d�}d|v r%d|d < |d d |d < |S |d }|s5d | � d�|d < |S td rGd | � d�|d < d|d < |S t d | ||||d�}d|v rgd|d < d�|d d �|d < |S d|i|d d< ddi|d d< d | � d�|d < |S )ab Ensure the named route table is absent. name Name of the route table. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r r; rj r< r Fr r r r rk r^ r r, Nzboto_vpc.delete_route_tablerA z Failed to delete route table: {}r r! r" r. )r r& r )r r r r r r( r) �rtbl_idr r r �route_table_absent� s: � � �r� c C s� | ddi d�}t d ||||||d�} | s`td r%d} | |d< d |d < |S t d |||||||d �} | �d �sHd|d < d�| d d �|d< |S dd i|d d< d| d i|d d< d|d< |S | d } | �d�} d| � d�|d< |S ) a� Ensure a nat gateway exists within the specified subnet This function requires boto3. .. versionadded:: 2016.11.0 Example: .. code-block:: yaml boto_vpc.nat_gateway_present: - subnet_name: my-subnet name Name of the state subnet_name Name of the subnet within which the nat gateway should exist subnet_id Id of the subnet within which the nat gateway should exist. Either subnet_name or subnet_id must be provided. allocation_id If specified, the elastic IP address referenced by the ID is associated with the gateway. Otherwise, a new allocation_id is created and used. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r rt �r> rG r r r r r z!Nat gateway is set to be created.r Nr zboto_vpc.create_nat_gateway)r> rG r r r r � allocation_idr Fz!Failed to create nat gateway: {}.r r � nat_gatewayr r! r r" zNat gateway created.r rv � Nat gateway r\ )r r& r% r ) r r> rG r r r r r� r( r) rU �instr/ r r r �nat_gateway_present sL 3�� � r� c C s� | ddi d�}t d ||||||d�} | sd|d< |S td r)d |d< d |d < |S | D ];} | �d �} t d | d||||d|d�} d| v rWd|d < d�| d d �|d< | S d�|d d| � d�f�|d< q+d| i|d d< dd i|d d< |S )a Ensure the nat gateway in the named subnet is absent. This function requires boto3. .. versionadded:: 2016.11.0 name Name of the state. subnet_name Name of the subnet within which the nat gateway should exist subnet_id Id of the subnet within which the nat gateway should exist. Either subnet_name or subnet_id must be provided. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. wait_for_delete_retries NAT gateway may take some time to be go into deleted or failed state. During the deletion process, subsequent release of elastic IPs may fail; this state will automatically retry this number of times to ensure the NAT gateway is in deleted or failed state before proceeding. Default is set to 0 for backward compatibility. Tr r rt r� ru r r z!Nat gateway is set to be removed.Nr rv zboto_vpc.delete_nat_gateway)rq Z release_eipsr r r r Zwait_for_delete�wait_for_delete_retriesr Fz Failed to delete nat gateway: {}r z, r� r. r� r r! r" )r r& r% r rQ ) r r> rG r r r r r� r( r) Zgwr� r r r �nat_gateway_absenty sL 1� � � r� c C s� t �d� td ||||||d�}| di dd�}|s)d|d< |d �d d i� |S td r8|d �d d i� |S d } t �d| � t| ||||||d�} d| v r_d�| d �|d< d|d< |S |d �d| d d�� |S )a� Accept a VPC pending requested peering connection between two VPCs. name Name of this state conn_id The connection ID to accept. Exclusive with conn_name. String type. conn_name The name of the VPC peering connection to accept. Exclusive with conn_id. String type. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. .. versionadded:: 2016.11.0 Example: .. code-block:: yaml boto_vpc.accept_vpc_peering_connection: - conn_name: salt_peering_connection # usage with vpc peering connection id and region boto_vpc.accept_vpc_peering_connection: - conn_id: pbx-1873d472 - region: us-west-2 z-Called state to accept VPC peering connection�&boto_vpc.is_peering_connection_pending��conn_id� conn_namer r r r T�Boto VPC peering state�r r r r r r r! z<No pending VPC peering connection found. Nothing to be done.r z8Pending VPC peering connection found and can be acceptedz&boto_vpc.accept_vpc_peering_connectionz4Calling `%s()` to accept this VPC peering connection)r� r r r r r r z Failed to accept VPC peering: {}r Fr rU �r! r" )rR rS r rg r& r ) r r� r� r r r r rr r( Zfunr r r r � accept_vpc_peering_connection� sR 1� ��� � r� c C s� t �d� | di dd�} |r td ||| | | d��dg �} ng } | r(d| d < | S td r4| s2d | d < | S t �d � td ||||||||| | | d� }d|v r]d�|d �| d < d| d< | S | d �d|d d�� | S )a7 name Name of the state requester_vpc_id ID of the requesting VPC. Exclusive with requester_vpc_name. String type. requester_vpc_name Name tag of the requesting VPC. Exclusive with requester_vpc_id. String type. peer_vpc_id ID of the VPC tp crete VPC peering connection with. This can be a VPC in another account. Exclusive with peer_vpc_name. String type. peer_vpc_name Name tag of the VPC tp crete VPC peering connection with. This can only be a VPC the same account and region. Exclusive with peer_vpc_id. String type. conn_name The (optional) name to use for this VPC peering connection. String type. peer_owner_id ID of the owner of the peer VPC. String type. If this isn't supplied AWS uses your account ID. Required if peering to a different account. peer_region Region of peer VPC. For inter-region vpc peering connections. Not required for intra-region peering connections. .. versionadded:: 3005 region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. .. versionadded:: 2016.11.0 Example: .. code-block:: yaml request a vpc peering connection: boto_vpc.request_vpc_peering_connection: - requester_vpc_id: vpc-4b3522e - peer_vpc_id: vpc-ae83f9ca - conn_name: salt_peering_connection z.Called state to request VPC peering connectionTr� r� �(boto_vpc.describe_vpc_peering_connectionrL � VPC-Peeringsz:VPC peering connection already exists, nothing to be done.r r z&VPC peering connection will be createdz.Called module to create VPC peering connectionz'boto_vpc.request_vpc_peering_connection)r � peer_owner_id� peer_regionr r r r r z!Failed to request VPC peering: {}Fr r r rU r� �rR rS r r% r& r rg )r �requester_vpc_id�requester_vpc_name� peer_vpc_id� peer_vpc_namer� r� r� r r r r r( �vpc_idsr r r r � request_vpc_peering_connection: sP C� �� �r� c C s� | ddi d�} t d ||| | | d�r>t d ||||| | | d�r4d�||p'|p'|�| d < t�| d � | S t| ||| | | d �S t| ||||||||| | | d � S ) at name Name of the state requester_vpc_id ID of the requesting VPC. Exclusive with requester_vpc_name. requester_vpc_name Name tag of the requesting VPC. Exclusive with requester_vpc_id. peer_vpc_id ID of the VPC tp crete VPC peering connection with. This can be a VPC in another account. Exclusive with peer_vpc_name. peer_vpc_name Name tag of the VPC tp crete VPC peering connection with. This can only be a VPC in the same account, else resolving it into a vpc ID will fail. Exclusive with peer_vpc_id. conn_name The name to use for this VPC peering connection. peer_owner_id ID of the owner of the peer VPC. Defaults to your account ID, so a value is required if peering with a VPC in a different account. peer_region Region of peer VPC. For inter-region vpc peering connections. Not required for intra-region peering connections. .. versionadded:: 3005 region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. .. versionadded:: 2016.11.0 Example: .. code-block:: yaml ensure peering twixt local vpc and the other guys: boto_vpc.vpc_peering_connection_present: - requester_vpc_name: my_local_vpc - peer_vpc_name: some_other_guys_vpc - conn_name: peering_from_here_to_there - peer_owner_id: 012345654321 Tr r r� )r� r r r r z,boto_vpc.peering_connection_pending_from_vpc)r� r r r r r r z;VPC peering {} already requested - pending acceptance by {}r )r r� r r r r ) r r� r� r� r� r� r� r� r r r r )r r rR �infor� r� ) r r� r� r� r� r� r� r� r r r r r( r r r � vpc_peering_connection_present� sR J �� ����r� c C s t | ||||||�S )N)� delete_vpc_peering_connection)r r� r� r r r r r r r � vpc_peering_connection_absent# s �r� c C s� t �d� | di dd�}|r td |||||d��dg �}n|g}|s)d|d < |S td r5|r3d |d < |S t �d � td ||||||d�} d| v rYd�| d �|d < d|d< |S |d �d| d d�� |S )a� name Name of the state conn_id ID of the peering connection to delete. Exclusive with conn_name. conn_name The name of the peering connection to delete. Exclusive with conn_id. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. .. versionadded:: 2016.11.0 Example: .. code-block:: yaml delete a vpc peering connection: boto_vpc.delete_vpc_peering_connection: - region: us-west-2 - conn_id: pcx-4613b12e Connection name can be specified (instead of ID). Specifying both conn_name and conn_id will result in an error. .. code-block:: yaml delete a vpc peering connection: boto_vpc.delete_vpc_peering_connection: - conn_name: salt_vpc_peering z-Called state to delete VPC peering connectionTr� r� r� rL r� z,No VPC connection found, nothing to be done.r r z'VPC peering connection would be deletedz.Called module to delete VPC peering connectionz&boto_vpc.delete_vpc_peering_connectionr� r z Failed to delete VPC peering: {}Fr r r rU r� r� ) r r� r� r r r r r( r� r r r r r� , sF 0� �� � r� )NNNNNNNN)NNNNN) NNNNNNNNNNNNN)NNNNNN) NNNNNNNNNNF)NNNNNNN)FNNNN) NNNNNNNNNN)NNNN)NNNNNNNr ) NNNNNNNNNNN) �__doc__�loggingZsalt.utils.dictupdate�utilsrf r � getLogger�__name__rR r r+ r0 r: r= rV rP rX r] r` ri rd re rh r� r� r� r� r� r� r� r� r r r r �<module> s" � [: � �K � j �< �X �J � �> � E � v; �` �^ �f �u �w � �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings