File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/wheel/__pycache__/key.cpython-310.pyc
Back
o ;j�6 � @ s d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl m Z ddd�Z e� e�Zdd� Zd d � Zd d � Zd+dd�Zd+dd�Zdd� Zdd� Zd+dd�Zd+dd�Zdd� Zd d � Zd,d d �Zd,d d!�Z d-d#d$�Z d.d%d&�Z d/d'd(�Z d0d)d*�Z dS )1a? Wheel system wrapper for the Salt key system to be used in interactions with the Salt Master programmatically. The key module for the wheel system is meant to provide an internal interface for other Salt systems to interact with the Salt Master. The following usage examples assume that a WheelClient is available: .. code-block:: python import salt.config import salt.wheel opts = salt.config.master_config('/etc/salt/master') wheel = salt.wheel.WheelClient(opts) Note that importing and using the ``WheelClient`` must be performed on the same machine as the Salt Master and as the same user that runs the Salt Master, unless :conf_master:`external_auth` is configured and the user is authorized to execute wheel functions. The function documentation starts with the ``wheel`` reference from the code sample above and use the :py:class:`WheelClient` functions to show how they can be called from a Python interpreter. The wheel key functions can also be called via a ``salt`` command at the CLI using the :mod:`saltutil execution module <salt.modules.saltutil>`. � N)�clean�list�print)�list_�key_strc C �: t j�t�� }|�| �W d � S 1 sw Y dS )a� List all the keys under a named status. Returns a dictionary. match The type of keys to list. The ``pre``, ``un``, and ``unaccepted`` options will list unaccepted/unsigned keys. ``acc`` or ``accepted`` will list accepted/signed keys. ``rej`` or ``rejected`` will list rejected keys. Finally, ``all`` will list all keys. .. code-block:: python >>> wheel.cmd('key.list', ['accepted']) {'minions': ['minion1', 'minion2', 'minion3']} N)�salt�key�get_key�__opts__Z list_status��match�skey� r �B/opt/saltstack/salt/lib/python3.10/site-packages/salt/wheel/key.pyr 0 s $�r c C s8 t j�t�� } | �� W d � S 1 sw Y dS )a� List all the keys. Returns a dictionary containing lists of the minions in each salt-key category, including ``minions``, ``minions_rejected``, ``minions_denied``, etc. Returns a dictionary. .. code-block:: python >>> wheel.cmd('key.list_all') {'local': ['master.pem', 'master.pub'], 'minions_rejected': [], 'minions_denied': [], 'minions_pre': [], 'minions': ['minion1', 'minion2', 'minion3']} N)r r r r Zall_keys)r r r r �list_allC s $�r c C r )z1 List all the keys based on a glob match N)r r r r � name_matchr r r r r T s $�r Fc C �@ t j�t��}|j| ||d�W d � S 1 sw Y dS )a Accept keys based on a glob match. Returns a dictionary. match The glob match of keys to accept. include_rejected To include rejected keys in the match along with pending keys, set this to ``True``. Defaults to ``False``. include_denied To include denied keys in the match along with pending keys, set this to ``True``. Defaults to ``False``. .. code-block:: python >>> wheel.cmd('key.accept', ['minion1']) {'minions': ['minion1']} )�include_rejected�include_deniedN�r r r r �accept�r r r r r r r r \ � �$�r c C r )a` Accept keys based on a dict of keys. Returns a dictionary. match The dictionary of keys to accept. include_rejected To include rejected keys in the match along with pending keys, set this to ``True``. Defaults to ``False``. .. versionadded:: 2016.3.4 include_denied To include denied keys in the match along with pending keys, set this to ``True``. Defaults to ``False``. .. versionadded:: 2016.3.4 Example to move a list of keys from the ``minions_pre`` (pending) directory to the ``minions`` (accepted) directory: .. code-block:: python >>> wheel.cmd('key.accept_dict', { 'minions_pre': [ 'jerry', 'stuart', 'bob', ], }) {'minions': ['jerry', 'stuart', 'bob']} )� match_dictr r Nr r r r r � accept_dictv s "�$�r c C r )a- Delete keys based on a glob match. Returns a dictionary. match The glob match of keys to delete. .. code-block:: python >>> wheel.cmd_async({'fun': 'key.delete', 'match': 'minion1'}) {'jid': '20160826201244808521', 'tag': 'salt/wheel/20160826201244808521'} N�r r r r Z delete_keyr r r r �delete� s $�r c C s< t j�t��}|j| d�W d � S 1 sw Y dS )a� Delete keys based on a dict of keys. Returns a dictionary. match The dictionary of keys to delete. .. code-block:: python >>> wheel.cmd_async({'fun': 'key.delete_dict', 'match': { 'minions': [ 'jerry', 'stuart', 'bob', ], }}) {'jid': '20160826201244808521', 'tag': 'salt/wheel/20160826201244808521'} )r Nr r r r r � delete_dict� s $�r c C r )aM Reject keys based on a glob match. Returns a dictionary. match The glob match of keys to reject. include_accepted To include accepted keys in the match along with pending keys, set this to ``True``. Defaults to ``False``. include_denied To include denied keys in the match along with pending keys, set this to ``True``. Defaults to ``False``. .. code-block:: python >>> wheel.cmd_async({'fun': 'key.reject', 'match': 'minion1'}) {'jid': '20160826201244808521', 'tag': 'salt/wheel/20160826201244808521'} )�include_acceptedr N�r r r r �reject�r r r r r r r r! � r r! c C r )a Reject keys based on a dict of keys. Returns a dictionary. match The dictionary of keys to reject. include_accepted To include accepted keys in the match along with pending keys, set this to ``True``. Defaults to ``False``. .. versionadded:: 2016.3.4 include_denied To include denied keys in the match along with pending keys, set this to ``True``. Defaults to ``False``. .. versionadded:: 2016.3.4 .. code-block:: python >>> wheel.cmd_async({'fun': 'key.reject_dict', 'match': { 'minions': [ 'jerry', 'stuart', 'bob', ], }}) {'jid': '20160826201244808521', 'tag': 'salt/wheel/20160826201244808521'} )r r r Nr r" r r r � reject_dict� s �$�r# c C r )a_ Return information about the key. Returns a dictionary. match The key to return information about. .. code-block:: python >>> wheel.cmd('key.key_str', ['minion1']) {'minions': {'minion1': '-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0B ... TWugEQpPt\niQIDAQAB\n-----END PUBLIC KEY-----'}} N)r r r r r r r r r r s $�r c C sd d} t j�td | �}tjj�|d��}tjj� |� � �}W d � n1 s'w Y d| |iiS )a Returns master's public key. Returns a dictionary .. code-block:: python >>> wheel.cmd('key.master_key_str') {'local': {'master.pub': '-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0B ... TWugEQpPt\niQIDAQAB\n-----END PUBLIC KEY-----'}} � master.pub�pki_dir�rN�local) �os�path�joinr r �utils�files�fopen� stringutils� to_unicode�read)�keynameZpath_to_pubkey�fp_Zkeyvaluer r r �master_key_str s � r3 c C sL |du rt d }tj�t ��}|�| |�W d � S 1 s w Y dS )au Return the matching key fingerprints. Returns a dictionary. match The key for with to retrieve the fingerprint. hash_type The hash algorithm used to calculate the fingerprint .. code-block:: python >>> wheel.cmd('key.finger', ['minion1']) {'minions': {'minion1': '5d:f6:79:43:5e:d4:42:3f:57:b8:45:a8:7e:a4:6e:ca'}} N� hash_type)r r r r �finger)r r4 r r r r r5 , s $�r5 c C s@ d}| du r t d } tjjjtj�t d |�| d�}d||iiS )a$ Return the fingerprint of the master's public key hash_type The hash algorithm used to calculate the fingerprint .. code-block:: python >>> wheel.cmd('key.finger_master') {'local': {'master.pub': '5d:f6:79:43:5e:d4:42:3f:57:b8:45:a8:7e:a4:6e:ca'}} r$ Nr4 r% )Zsum_typer' )r r r+ �cryptZ pem_fingerr( r) r* )r4 r1 Z fingerprintr r r � finger_masterC s � r7 � c C s | du rt �t�d���� } nt�| �} ddd�}tj� t d | |�}d� |d|� d�� �}tj j�|��}tj j�|�� �|d< W d � n1 sLw Y tj j�|��}tj j�|�� �|d < W d � n1 snw Y tj j�� rt�|d � t�|� t�|� |S ) a Generate a key pair. No keys are stored on the master. A key pair is returned as a dict containing pub and priv keys. Returns a dictionary containing the ``pub`` and ``priv`` keys with their generated values. id\_ Set a name to generate a key pair for use with salt. If not specified, a random name will be specified. keysize The size of the key pair to generate. The size must be ``2048``, which is the default, or greater. If set to a value less than ``2048``, the key size will be rounded up to ``2048``. .. code-block:: python >>> wheel.cmd('key.gen') {'pub': '-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBC ... BBPfamX9gGPQTpN9e8HwcZjXQnmg8OrcUl10WHw09SDWLOlnW+ueTWugEQpPt\niQIDAQAB\n -----END PUBLIC KEY-----', 'priv': '-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEA42Kf+w9XeZWgguzv ... QH3/W74X1+WTBlx4R2KGLYBiH+bCCFEQ/Zvcu4Xp4bIOPtRKozEQ==\n -----END RSA PRIVATE KEY-----'} N� � )�priv�pubr% z{}.pub�.r; r< � )�hashlib�sha512r( �urandom� hexdigestr �filenamer r6 �gen_keysr �format�rindexr+ r, r- r. r/ r0 �platformZ is_windows�chmod�remove)�id_�keysize�retr; r< r2 r r r �genY s" � � rM c C s� t �| �} t| |�}tj�td d| �}tj�|�r |s i S tj j � |d��}|� tj j �|d �� W d � |S 1 s>w Y |S )a� Generate a key pair then accept the public key. This function returns the key pair in a dict, only the public key is preserved on the master. Returns a dictionary. id\_ The name of the minion for which to generate a key pair. keysize The size of the key pair to generate. The size must be ``2048``, which is the default, or greater. If set to a value less than ``2048``, the key size will be rounded up to ``2048``. force If a public key has already been accepted for the given minion on the master, then the gen_accept function will return an empty dictionary and not create a new key. This is the default behavior. If ``force`` is set to ``True``, then the minion's previously accepted key will be overwritten. .. code-block:: python >>> wheel.cmd('key.gen_accept', ['foo']) {'pub': '-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBC ... BBPfamX9gGPQTpN9e8HwcZjXQnmg8OrcUl10WHw09SDWLOlnW+ueTWugEQpPt\niQIDAQAB\n -----END PUBLIC KEY-----', 'priv': '-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEA42Kf+w9XeZWgguzv ... QH3/W74X1+WTBlx4R2KGLYBiH+bCCFEQ/Zvcu4Xp4bIOPtRKozEQ==\n -----END RSA PRIVATE KEY-----'} We can now see that the ``foo`` minion's key has been accepted by the master: .. code-block:: python >>> wheel.cmd('key.list', ['accepted']) {'minions': ['foo', 'minion1', 'minion2', 'minion3']} r% Zminionszw+r< N)r �idrM r( r) r* r �isfiler r+ r, r- �writer. Zto_str)rJ rK �forcerL Zacc_pathr2 r r r � gen_accept� s ( ��rR c C s@ t j�t��}|�| |||�W d � S 1 sw Y dS )z, Generate minion RSA public keypair N)r r r r rD )Zkeydirr1 rK �userr r r r rD � s $�rD c C sB t j�t��}|�| ||||�W d � S 1 sw Y dS )z. Generate master public-key-signature N)r r r r Zgen_keys_signature)r; r< Zsignature_pathZ auto_createrK r r r r � gen_signature� s $�rT )FF)N)Nr8 )r8 F)NNNN)FN)!�__doc__r? �loggingr( Z salt.cryptr Zsalt.keyZsalt.utils.cryptZsalt.utils.filesZsalt.utils.platformZsalt.utils.sanitizersr Z__func_alias__� getLogger�__name__�logr r r r r r r r! r# r r3 r5 r7 rM rR rD rT r r r r �<module> s> � * ' 2 2
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings