File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/k8s.cpython-310.pyc
Back
o ;jib � @ sz d Z ddlZddlZddlZddlZddlZddlZddl m m Z ddl ZdZ e�e�Zdd� ZdFdd�Zdd � Zd d � Zd d � Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Z dGd d �Z dGd d �Z dGd d!�Z dGd"d#�Z dHd%d&�Z!d'd(� Z"dFd)d*�Z#dId+d,�Z$d-d.� Z%d/d0� Z&d1d2� Z'd3d4� Z(d5d6� Z)d7d8� Z*dJd:d;�Z+d<d=� Z, ?dKd@dA�Z- 9 9 ?dLdBdC�Z.dMdDdE�Z/dS )Na Salt module to manage Kubernetes cluster .. versionadded:: 2016.3.0 Roadmap: * Add creation of K8S objects (pod, rc, service, ...) * Add replace of K8S objects (pod, rc, service, ...) * Add deletion of K8S objects (pod, rc, service, ...) * Add rolling update * Add (auto)scalling � NZk8sc C s t S )z*Load load if python-requests is installed.)�__virtualname__� r r �D/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/k8s.py� __virtual__ s r c C s� d}| dur| S dt jv rt j�d�} nUtd d�r!td d�} nHt j�|�s.td dd�rgtd d|�}t�dtj�}t j j � |��}|� � D ]}|�|�}qH|rW|�d �} W d � n1 saw Y nd } t�d | � | S ) z^Try to guees the kubemaster url from environ, then from `/etc/kubernetes/config` file z/etc/kubernetes/configNZKUBERNETES_MASTERz config.getz k8s:masterz k8s:config� z!KUBE_MASTER=['"]--master=(.*)['"]� zhttp://127.0.0.1:8080z$Discoverd k8s API server address: %s)�os�environ�get�__salt__�path�exists�re�compile� MULTILINE�salt�utils�files�fopen� readlines�match�group�log�debug)� apiserver_urlZdefault_configZconfigZ kubeapi_regexZfh_k8s�lineZ match_liner r r �_guess_apiserver% s. � � �� r c C sT ddi}t �d| |� tj| d|tjj�|�d�}|�d�r |S tjj� |�d��S )z,create any object in kubernetes based on URL� Content-Type�application/jsonzurl is: %s, data is: %s�POST��methodZ header_dict�data�error�body) r �trace�http�queryr r �json�dumpsr �loads��urlr" �headers�retr r r �_kpostA s � r/ c C sF ddi}t j| d|tjj�|�d�}|�d�r|S tjj�|�d��S )z)put any object in kubernetes based on URLr r �PUTr r# r$ )r& r' r r r( r) r r* r+ r r r �_kputR s � r1 c C sX ddi}t j| d|tjj�|�d�}|�d�r"t�d|�d�� |S tjj� |�d��S )z+patch any object in kubernetes based on URLr zapplication/json-patch+json�PATCHr r# zGot an error: %sr$ ) r& r' r r r( r) r r r# r* r+ r r r �_kpatchb s � r3 c C s^ t | t�r| �di ��dd�gS t | ttf�r-g }| D ]}|�|�di ��dd�� q|S dS )z4Get name or names out of json result from API server�metadata�namer z Unknown type)� isinstance�dictr �list�tuple�append)�obj�names�ir r r �_knames s r> c C s4 t �d�}|�| �rt�d| � dS t�d| � dS )z�Check that name is DNS subdomain: One or more lowercase rfc1035/rfc1123 labels separated by '.' with a maximum length of 253 charactersz^[a-z0-9\.-]{1,253}$z Name: %s is valid DNS subdomainTz#Name: %s is not valid DNS subdomainF)r r r r r )r5 Z dns_subdomainr r r �_is_dns_subdomain� s r? c C � t �d�}|�| �r dS dS )a Check that name is IANA service: An alphanumeric (a-z, and 0-9) string, with a maximum length of 15 characters, with the '-' character allowed anywhere except the first or the last character or adjacent to another '-' character, it must contain at least a (a-z) characterz^[a-z0-9]{1,15}$TF�r r r )r5 Z port_namer r r � _is_port_name� � rB c C r@ )z�Check that name is DNS label: An alphanumeric (a-z, and 0-9) string, with a maximum length of 63 characters, with the '-' character allowed anywhere except the first or last character, suitable for use as a hostname or segment in a domain namez^[a-z0-9][a-z0-9\.-]{1,62}$TFrA )r5 Z dns_labelr r r � _is_dns_label� rC rD c C s | du r t d d�S | S )z.Try to guess kube node ID using salt minion IDNz grains.get�id)r )�noder r r �_guess_node_id� s rG c C sj |� d| � �}t �|�}d|v rtjj�|�d��}n|�dd�dkr)d| � d�S |S |�di ��d i �S ) z Get all labels from a kube node.�/api/v1/nodes/r$ �statusr � �Node � doesn't existr4 �labels)r& r' r r r( r* r )rF r r, r. r r r � _get_labels� s rN c C sD |� d| � �}dd|d�g}t ||�}|�d�dkr d| � d�S |S ) z Replace labels dict by a new onerH �replacez/metadata/labels��opr �valuerI rJ rK rL �r3 r )rF r rM r, r" r. r r r � _set_labels� s rT c C s. t | �} t|�}|du rdS t| |�}d|iS )z� .. versionadded:: 2016.3.0 Get labels from the current node CLI Example: .. code-block:: bash salt '*' k8s.get_labels salt '*' k8s.get_labels kube-node.cluster.local http://kube-master.cluster.local NFrM )rG r rN )rF r r. r r r � get_labels� s rU c C s> | ddi d�}t |�}t|�}|du rdS t||�}| |vrT| |i|d< t|�|| < t|||�}|�d�dkrJt�d � i |d< d | � d �|d < |S d | � d�|d < |S |�| �t|�kr�| t|�i|d< t|�|| < t|||�}|�d�dkr�t�d � i |d< d| � d �|d < |S d | � d�|d < |S d | � d�|d < |S )a .. versionadded:: 2016.3.0 Set label to the current node CLI Example: .. code-block:: bash salt '*' k8s.label_present hw/disktype ssd salt '*' k8s.label_present hw/disktype ssd kube-node.cluster.local http://kube-master.cluster.local Tr �r5 �result�comment�changesNFrY rI � �Got 409, will try laterzCould not create label �, please retryrX �Label � createdzCould not update label z updatedz already set)rG r rN �strrT r r r )r5 rR rF r r. rM �resr r r � label_present� s< �� ��ra c s� � ddi d�}t |�}t|�}|du rdS t||�}� fdd�|�� D �}||kr3d� � d �|d < |S t|||�}|�d �d krSt�d � i |d< d� � d�|d < |S d� i|d< d� � d�|d < |S )a .. versionadded:: 2016.3.0 Delete label to the current node CLI Example: .. code-block:: bash salt '*' k8s.label_absent hw/disktype salt '*' k8s.label_absent hw/disktype kube-node.cluster.local http://kube-master.cluster.local Tr rV NFc s i | ] \}}|� kr||�qS r r ��.0�keyrR �r5 r r � <dictcomp>; s z label_absent.<locals>.<dictcomp>r] � already absentrX rI rZ r[ rY zCould not delete label r\ �deleted� absent)rG r rN �itemsrT r r r �r5 rF r r. Z old_labelsrM r` r re r � label_absent! s& � �rl c s� | � d�d � � ddi d�}t|�}t|�}|du r dS t||�}� fdd�|�� D �}||kr:d � � d �|d < |S t|||�}|�d �d krYt�d� i |d< d� � �|d < |S d� i|d< d � � d�|d < |S )a .. versionadded:: 2016.3.0 Delete label folder to the current node CLI Example: .. code-block:: bash salt '*' k8s.label_folder_absent hw salt '*' k8s.label_folder_absent hw/ kube-node.cluster.local http://kube-master.cluster.local �/Tr rV NFc s i | ] \}}|� � �s||�qS r )� startswithrb �Zfolderr r rf j s ��z'label_folder_absent.<locals>.<dictcomp>z Label folder rg rX rI rZ r[ rY z.Could not delete label folder {}, please retryrh ri ) �striprG r rN rj rT r r r �formatrk r ro r �label_folder_absentO s0 � � � �rr r c C s: | � d|� �}t �|�}|�d�rtjj�|�d��S dS )zEGet namespace is namespace is defined otherwise return all namespaces�/api/v1/namespaces/r$ N�r& r' r r r r( r* )r r5 r, r. r r r �_get_namespaces� s ru c C s@ |� d�}ddd| id�}t �d|� t||�}t �d|� |S )�+create namespace on the defined k8s clusterz/api/v1/namespaces� Namespace�v1r5 )�kind� apiVersionr4 z namespace creation requests: %sz result is: %s)r r% r/ )� namespacer r, r" r. r r r �_create_namespace� s r| c C sf | ddi d�}t |�}|du rdS t|| �s)t| |� | |d< d| � d�|d < |S d| � d �|d < |S ) a� .. versionadded:: 2016.3.0 Create kubernetes namespace from the name, similar to the functionality added to kubectl since v.1.2.0: .. code-block:: bash kubectl create namespaces namespace-name CLI Example: .. code-block:: bash salt '*' k8s.create_namespace namespace_name salt '*' k8s.create_namespace namespace_name http://kube-master.cluster.local Tr rV NFrY z Namespace r^ rX z already present)r ru r| )r5 r r. r r r �create_namespace� s �r} c C s" t |�}|du r dS t|| �}|S )a_ .. versionadded:: 2016.3.0 Get one or all kubernetes namespaces. If namespace parameter is omitted, all namespaces will be returned back to user, similar to following kubectl example: .. code-block:: bash kubectl get namespaces -o json In case namespace is set by user, the output will be similar to the one from kubectl: .. code-block:: bash kubectl get namespaces namespace_name -o json CLI Example: .. code-block:: bash salt '*' k8s.get_namespaces salt '*' k8s.get_namespaces namespace_name http://kube-master.cluster.local NF)r ru )r{ r r. r r r �get_namespaces� s r~ c C s@ |� d| � d|� �}t �|�}|�d�r tjj�|�d��S dS )z Get secrets of the namespace.rs � /secrets/r$ Nrt )r{ r5 r r, r. r r r � _get_secrets� s r� c C sJ |� d| � d|� �}dd|d�g}t ||�}|�d�dkr#d|� d �S |S ) z!Replace secrets data by a new oners r rO z/datarP rI rJ rK rL rS )r{ r5 r" r r, r. r r r �_update_secret� s r� c C s2 |� d| � d�}dd|| d�|d�}t ||�}|S )rv rs z/secretsrx ZSecret)r5 r{ )rz ry r4 r" )r/ )r{ r5 r" r r, �requestr. r r r �_create_secret� s � r� c C s8 t j�| �rt j�| �rt�d| � dS t�d| � dS )Nz File: %s is valid secret fileTz$File: %s does not exists or not fileF)r r r �isfiler r �warning)�filenamer r r �_is_valid_secret_file s r� c C sR t �d| � tjj�| d��}|�� }t�|�W d � S 1 s"w Y d S )NzEncoding secret file: %s�rb) r r% r r r r �read�base64� b64encode)r� �fr" r r r � _file_encode s $�r� c C s� | � dg �}|r5t|�D ]"\}}t�||� |� di ��� D ]\}}t�|�|| d |< q q || d< | S | � di ��� D ] \}}t�|�| d |< q=| S )Nrj r" )r � enumerater r% rj r� � b64decode)Zsecretsrj r= �secret�k�vr r r �_decode_secrets s �r� Fc C s< t |�}|du r dS |st| ||�}|S tt| ||��}|S )z� Get k8s namespaces CLI Example: .. code-block:: bash salt '*' k8s.get_secrets namespace_name salt '*' k8s.get_secrets namespace_name secret_name http://kube-master.cluster.local NF)r r� r� )r{ r5 r �decodeZbriefr. r r r � get_secrets+ s �r� c C s� zt j�| �}W n ty di f Y S w d}t�d|� |jr&|jdkrJtj� |j�}tj� |�}t� d|j� t |�rHt |�rH|t|�fS dS |j|v rjtd | |�}|s`t�d| � dS tj� |�t|�fS dS ) Nr )r r& �https�ftpZswiftZs3�filez parsed source looks like: %sr� z"Source is a regular local file: %sz cp.cache_filez$Source file: %s can not be retrieved)r r )�urllib�parse�urlparse� TypeErrorr r% �schemer r �abspath�basenamer r? r� r� r r� )�source�saltenvZ source_url�protosr� �snamer r r �_source_encodeD s* � � r� T�basec C s" t |�}t| ||||d|d�}|S )a� .. versionadded:: 2016.3.0 alias to k8s.create_secret with update=true CLI Example: .. code-block:: bash salt '*' k8s.update_secret namespace_name secret_name sources [apiserver_url] [force=true] [update=false] [saltenv='base'] sources are either dictionary of {name: path, name1: path} pairs or array of strings defining paths. Example of paths array: .. code-block:: bash ['/full/path/filename', "file:///full/path/filename", "salt://secret/storage/file.txt", "http://user:password@securesite.com/secret-file.json"] Example of dictionaries: .. code-block:: bash {"nameit": '/full/path/fiename', name2: "salt://secret/storage/file.txt"} optional parameters accepted: force=[true] default value is true if the to False, secret will not be created in case one of the files is not valid kubernetes secret. e.g. capital letters in secret name or _ in case force is set to True, wrong files will be skipped but secret will be created any way. saltenv=['base'] default value is base in case 'salt://' path is used, this parameter can change the visibility of files T)r �force�updater� )r � create_secret)r{ r5 �sourcesr r� r� r. r r r � update_secret_ s '� r� c C s |ddi d�}|s|ddi d�S t |�}t|| �s(|r!t| |� n|ddi d�S t| ||�}|rD|sDt�d|| � |dd|� d �i d�S i } |D ]w} t�d | � t| t�r�t� d | � | � � D ]0\} } t | |�\} }| | krtdkr�n n|d d | � d�7 < |r�q_| S || | < q_qHt| t �r�t | |�\} }| | kr�dkr�n n|r�|d d� | �7 < qH| S || | < qHt� d| � |�r|�r| s�|d d7 < d|d< |S |�d�r�| |�d�kr�t| || |�}d|d < d|d< |S t�d� d|d < |S t| || |�}|S )a� .. versionadded:: 2016.3.0 Create k8s secrets in the defined namespace from the list of files CLI Example: .. code-block:: bash salt '*' k8s.create_secret namespace_name secret_name sources salt '*' k8s.create_secret namespace_name secret_name sources http://kube-master.cluster.local sources are either dictionary of {name: path, name1: path} pairs or array of strings defining paths. Example of paths array: .. code-block:: bash ['/full/path/filename', "file:///full/path/filename", "salt://secret/storage/file.txt", "http://user:password@securesite.com/secret-file.json"] Example of dictionaries: .. code-block:: bash {"nameit": '/full/path/fiename', name2: "salt://secret/storage/file.txt"} optional parameters accepted: update=[false] default value is false if set to false, and secret is already present on the cluster - warning will be returned and no changes to the secret will be done. In case it is set to "true" and secret is present but data is differ - secret will be updated. force=[true] default value is true if the to False, secret will not be created in case one of the files is not valid kubernetes secret. e.g. capital letters in secret name or _ in case force is set to True, wrong files will be skipped but secret will be created any way. saltenv=['base'] default value is base in case 'salt://' path is used, this parameter can change the visibility of files Tr rV FzNo source availablezNamespace doesn't existsz"Secret %s is already present on %szSecret z is already presentz source is: %szsource is dictionary: %srX z Source file z! is missing or name is incorrect z/Source file {} is missing or name is incorrect zsecret data is: %sz5Could not find source files or your sources are emptyrW r" zUpdated secretrY z3Secret has not been changed on cluster, skipping itz,Has not been changed on cluster, skipping it)r ru r| r� r �infor r6 r7 r% rj r� r_ rq r r� r� )r{ r5 r� r r� r� r� r. r� r" r� r� r� r� �encodedr` r r r r� � s� 4� � � � � � ���� � ��r� c C s� |ddi d�}t |�}|du rdS t|| �s |ddi d�S |� d| � d|� �}tj|d d �}|�d �r>d |� d | � d�|d< |S )a^ .. versionadded:: 2016.3.0 Delete kubernetes secret in the defined namespace. Namespace is the mandatory parameter as well as name. CLI Example: .. code-block:: bash salt '*' k8s.delete_secret namespace_name secret_name salt '*' k8s.delete_secret namespace_name secret_name http://kube-master.cluster.local Tr rV NFz5Namespace doesn't exists, can't delete anything therers r ZDELETE)r! r$ zRemoved secret z in z namespacerX )r ru r& r' r )r{ r5 r r� r. r, r` r r r � delete_secret s � r� )N)NN)r )r N)r NFF)NTr� )NFFr� )NT)0�__doc__r� �loggingr r � urllib.parser� Zsalt.utils.filesr Zsalt.utils.httpr r& Zsalt.utils.jsonr � getLogger�__name__r r r r/ r1 r3 r> r? rB rD rG rN rT rU ra rl rr ru r| r} r~ r� r� r� r� r� r� r� r� r� r� r� r r r r �<module> s` : . 3 #% �9 �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings