File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/sdb/__pycache__/confidant.cpython-310.pyc
Back
o ;j� � @ sh d Z ddlZddlZz ddlZddlZdZW n ey! dZY nw e�e �Z dZ dd� Z d dd �Z dS ) a7 An SDB module for getting credentials from confidant. Configuring the Confidant module ================================ The module can be configured via sdb in the minion config: .. code-block:: yaml confidant: driver: confidant # The URL of the confidant web service url: 'https://confidant-production.example.com' # The context to use for KMS authentication auth_context: from: example-production-iad to: confidant-production-iad user_type: service # The KMS master key to use for authentication auth_key: "alias/authnz" # Cache file for KMS auth token token_cache_file: /run/confidant/confidant_token # The duration of the validity of a token, in minutes token_duration: 60 # key, keyid and region can be defined in the profile, but it's generally # best to use IAM roles or environment variables for AWS auth. keyid: 98nh9h9h908h09kjjk key: jhf908gyeghehe0he0g8h9u0j0n0n09hj09h0 region: us-east-1 :depends: confidant-common, confidant-client Module Documentation ==================== � NTF� confidantc C s t rtS dS )z9 Only return if requests and boto are installed. F)�HAS_LIBS�__virtualname__� r r �F/opt/saltstack/salt/lib/python3.10/site-packages/salt/sdb/confidant.py� __virtual__9 s r c C sP dddd�}t �|�}|�dd�rd|d< |�| �S |�dd�}z|d }|d }|d }|d }W n ttfyI d } t�| � |�| � Y S w |�dd�} |�dd�} |�dd�} |�d�} |�dd�}tjj |||| || | | |d� }z |j |dd�}W n tjj y� |�| � Y S w |d s�|�| �S tj � |�}d|d< |�| �S )a� Read pillar data from Confidant via its API. CLI Example: .. code-block:: bash salt myminion sdb.get 'sdb://confidant/credentials' Valid keys are: credentials, credentials_metadata, result. credentials returns a dict of joined credential_pairs, credentials_metadata returns a dict of metadata relevant to the credentials mapped to the confidant service, and result returns a bool that can be used to determine if the sdb call succeeded or failed to fetch credentials from confidant (or from local cache). If result is false, the data in credentials or credentials_metadata can't be trusted. FN)�resultZ credentialsZcredentials_metadata�disabledTr � token_version� �url�auth_key� auth_context�fromz3profile has undefined url, auth_key or auth_context�regionz us-east-1�token_duration�< �retries� �token_cache_file�backoff)Ztoken_lifetimer r r r r )Z decrypt_blind)�copy�deepcopy�get�KeyError� TypeError�log�debugr �clientZConfidantClientZ get_serviceZTokenCreationError� formatterZ combined_credential_pair_format)�keyZprofile�retZ profile_datar r r r Zrole�msgr r r r r r �datar r r r C sT � � � r )N)�__doc__r �loggingZconfidant.clientr Zconfidant.formatterr � ImportError� getLogger�__name__r r r r r r r r �<module> s % �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings