File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/kubeadm.cpython-310.pyc
Back
o ;j� � @ s d Z ddlZddlZddlZddlZddlmZ dZe� e �Z dZ ze W n ey0 i Z Y nw d;dd�Zd<d d �Zd d � Zd<d d�Zd=dd�Zdd� Z d>dd�Zd=dd�Zd=dd�Zd=dd�Zd;dd �Z d?d d �Zd@d d �Z d@d!d"�Z dAd#d$�Z dBd%d&�Z d?d'd(�Z d@d)d*�Z d@d+d,�Z!d@d-d.�Z"d=d/d0�Z# dCd1d2�Z$d=d3d4�Z% dDd5d6�Z& dEd7d8�Z' dBd9d:�Z(dS )Fz� Module for kubeadm :maintainer: Alberto Planas <aplanas@suse.com> :maturity: new :depends: None :platform: Linux � N)�CommandExecutionErrorz/etc/kubernetes/admin.conf�kubeadmc C sz | r| nt } d}z*tjj�| d��}t�d|�� tj�� d�}W d � W |S 1 s+w Y W |S t y< Y |S w )z( Return the API server endpoint N�rz^\s*server: https?://(.*)$� ) � ADMIN_CFG�salt�utils�filesZfopen�re�search�read� MULTILINE�group� Exception)�configZendpointZfp_� r �H/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/kubeadm.py�_api_server_endpoint s" �� �� ��r Fc C s2 t � }|s| rtdd� t � }|r|d d S dS )z( Return a valid bootstrap token z$Token created by kubeadm salt module)� descriptionr �tokenN)� token_list� token_create)�create_if_needed�tokensr r r �_token0 s r c C s@ g d�} t d d�| �dd�}|d rt|d ��d�|d �S ) N)�opensslZx509z-pubkeyz-inz/etc/kubernetes/pki/ca.crt�|r �rsaz-pubinz-outformZderz 2>/dev/nullr r Zdgstz-sha256z-hexr Zsedz 's/^.* //'� cmd.run_all� T)Z python_shell�retcode�stderrz sha256:{}�stdout)�__salt__�joinr �format��cmd�resultr r r � _discovery_token_ca_cert_hash< s r) c C s t � t| �t� d�}|S )ag .. versionadded:: 3001 Return the parameters required for joining into the cluster create_if_needed If the token bucket is empty and this parameter is True, a new token will be created. CLI Example: .. code-block:: bash salt '*' kubeadm.join_params salt '*' kubeadm.join_params create_if_needed=True )zapi-server-endpointr � discovery-token-ca-cert-hash)r r r) )r �paramsr r r � join_paramsZ s �r, c C sb ddg}d| fd|fg}|D ]\}}|r |� d|� �t|�g� q|� ddg� t�td |��S ) aU .. versionadded:: 3001 Return the version of kubeadm kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.version r �version� kubeconfig�rootfs�--z--output�jsonzcmd.run_stdout)�extend�strr1 �loadsr# �r. r/ r' � parameters� parameter�valuer r r r- u s �r- c C s( t d | �}|d rt|d ��|d S )z!Utility function to run commands.r r r! r" )r# r r& r r r �_cmd� s r9 c C s� g d�}| r |� | � d|fd|fd|fd|fd|fd|fd|fg} | D ]$\} } | rH| d v r<|�d | � �t�| �g� q$|�d | � �t| �g� q$t|�S ) a� .. versionadded:: 3001 Create bootstrap tokens on the server token Token to write, if None one will be generated. The token must match a regular expression, that by default is [a-z0-9]{6}.[a-z0-9]{16} config Path to kubeadm configuration file description A human friendly description of how this token is used groups List of extra groups that this token will authenticate, default to ['system:bootstrappers:kubeadm:default-node-token'] ttl The duration defore the token is automatically deleted (1s, 2m, 3h). If set to '0' the token will never expire. Default value is 24h0m0s usages Describes the ways in which this token can be used. The default value is ['signing', 'authentication'] kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.token_create salt '*' kubeadm.token_create a1b2c.0123456789abcdef salt '*' kubeadm.token_create ttl='6h' salt '*' kubeadm.token_create usages="['signing']" )r r �creater r �groups�ttl�usagesr. r/ )r; r= r0 )�appendr2 r1 �dumpsr3 r9 ) r r r r; r< r= r. r/ r' r6 r7 r8 r r r r � s$ 8 � �r c C sR ddd| g}d|fd|fg}|D ]\}}|r"|� d|� �t|�g� qtt|��S )aJ .. versionadded:: 3001 Delete bootstrap tokens on the server token Token to write, if None one will be generated. The token must match a regular expression, that by default is [a-z0-9]{6}.[a-z0-9]{16} kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.token_delete a1b2c salt '*' kubeadm.token_create a1b2c.0123456789abcdef r r �deleter. r/ r0 )r2 r3 �boolr9 )r r. r/ r' r6 r7 r8 r r r � token_delete� s � rB c C �J g d�}d| fd|fg}|D ]\}}|r |� d|� �t|�g� qt|�S )a� .. versionadded:: 3001 Generate and return a bootstrap token, but do not create it on the server kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.token_generate )r r Zgenerater. r/ r0 �r2 r3 r9 r5 r r r �token_generate s �rE c C s� g d�}d| fd|fg}|D ]\}}|r |� d|� �t|�g� qt|��� }g }|rb|�d�}dd� t�d|�D �}|D ]$} t�d | �} t|�t| �krTt� d | � q=|� d d � t || �D �� q=|S ) a^ .. versionadded:: 3001 List bootstrap tokens on the server kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.token_list )r r �listr. r/ r0 r c S s g | ]}|� � �qS r )�lower)�.0�ir r r � <listcomp>Q s z token_list.<locals>.<listcomp>z(\w+(?:\s\w+)*)z(\S+(?:\s\S+)*)zError parsing line: '%s'c S s i | ]\}}||�qS r r )rH �keyr8 r r r � <dictcomp>Z s z token_list.<locals>.<dictcomp>) r2 r3 r9 � splitlines�popr �findall�len�log�errorr> �zip) r. r/ r' r6 r7 r8 �linesr �header�line�valuesr r r r / s$ � r c C sD g d�}d| fg}|D ]\}}|r |� d|� �t|�g� q t|�S )z� .. versionadded:: 3001 Renews certificates for a Kubernetes cluster rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.alpha_certs_renew )r �alpha�certsZrenewr/ r0 rD )r/ r' r6 r7 r8 r r r �alpha_certs_renew^ s �rZ c C sj ddddd| g}d|fd|fd|fd |fd |fd |fg}|D ]\} } | r0|� d | � �t| �g� q t|�S ) aH .. versionadded:: 3001 Outputs a kubeconfig file for an additional user client_name The name of the user. It will be used as the CN if client certificates are created apiserver_advertise_address The IP address the API server is accessible on apiserver_bind_port The port the API server is accessible on (default 6443) cert_dir The path where certificates are stored (default "/etc/kubernetes/pki") org The organization of the client certificate token The token that show be used as the authentication mechanism for this kubeconfig, instead of client certificates rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.alpha_kubeconfig_user client_name=user r rX r. �userz --client-name�apiserver-advertise-address�apiserver-bind-port�cert-dir�orgr r/ r0 rD ) Z client_name�apiserver_advertise_address�apiserver_bind_port�cert_dirr_ r r/ r' r6 r7 r8 r r r �alpha_kubeconfig_userx s -� �rc c C �P g d�}d| fd|fd|fg}|D ]\}}|r#|� d|� �t|�g� qt|�S )a2 .. versionadded:: 3001 Downloads the kubelet configuration from the cluster ConfigMap kubelet-config-1.X kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf kubelet_version The desired version for the kubelet rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.alpha_kubelet_config_download salt '*' kubeadm.alpha_kubelet_config_download kubelet_version='1.14.0' )r rX �kubeletr �downloadr. �kubelet-versionr/ r0 rD )r. �kubelet_versionr/ r' r6 r7 r8 r r r � alpha_kubelet_config_download� s � �ri c C sZ dddddd| g}d|fd|fd |fg}|D ]\}}|r(|� d |� �t|�g� qt|�S ) a9 .. versionadded:: 3001 Enables or updates dynamic kubelet configuration for a node node_name Name of the node that should enable the dynamic kubelet configuration kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf kubelet_version The desired version for the kubelet rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.alpha_kubelet_config_enable_dynamic node-1 r rX re r zenable-dynamicz --node-namer. rg r/ r0 rD )� node_namer. rh r/ r' r6 r7 r8 r r r �#alpha_kubelet_config_enable_dynamic� s" � � �rk c C sd g d�}|r |� d� d| fd|fd|fd|fg}|D ]\}}|r-|�d|� �t|�g� qt|�S )ab .. versionadded:: 3001 Converts a static Pod-hosted control plane into a selt-hosted one cert_dir The path where certificates are stored (default "/etc/kubernetes/pki") config Path to kubeadm configuration file kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf store_certs_in_secrets Enable storing certs in secrets rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.alpha_selfhost_pivot )r rX Z selfhostingZpivot�--forcez--store-certs-in-secretsr^ r r. r/ r0 �r> r2 r3 r9 ) rb r r. Zstore_certs_in_secretsr/ r' r6 r7 r8 r r r �alpha_selfhosting_pivot s $ � �rn c C s` g d�}d| fd|fd|fd|fd|fg}|D ]\}}|r)|� d|� �t|�g� qt|��� S )a� .. versionadded:: 3001 Print a list of images kubeadm will use config Path to kubeadm configuration file feature_gates A set of key=value pairs that describe feature gates for various features kubernetes_version Choose a specifig Kubernetes version for the control plane (default "stable-1") kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.config_images_list )r r �imagesrF r � feature-gates�kubernetes-versionr. r/ r0 �r2 r3 r9 rM ) r � feature_gates�kubernetes_versionr. r/ r' r6 r7 r8 r r r �config_images_listF s %� � ru c sx g d�}d| fd|fd|fd|fd|fd|fg}|D ]\}} | r,|� d|� �t| �g� qd � � fd d �t|��� D �S ) a� .. versionadded:: 3001 Pull images used by kubeadm config Path to kubeadm configuration file cri_socket Path to the CRI socket to connect feature_gates A set of key=value pairs that describe feature gates for various features kubernetes_version Choose a specifig Kubernetes version for the control plane (default "stable-1") kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.config_images_pull )r r ro Zpullr � cri-socketrp rq r. r/ r0 z[config/images] Pulled c s g | ]}|� � d ��qS )� )�replace)rH rV ��prefixr r rJ � s z&config_images_pull.<locals>.<listcomp>rr ) r � cri_socketrs rt r. r/ r' r6 r7 r8 r ry r �config_images_pull{ s )� �r| c C sV dddd| g}d|fd|fd|fg}|D ]\}}|r&|� d|� �t|�g� qt|�S ) a� .. versionadded:: 3001 Read an older version of the kubeadm configuration API types from a file, and output the similar config object for the newer version old_config Path to the kubeadm config file that is usin the old API version and should be converted new_config Path to the resulting equivalent kubeadm config file using the new API version. If not specified the output will be returned kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.config_migrate /oldconfig.cfg r r Zmigratez --old-configz new-configr. r/ r0 rD )Z old_configZ new_configr. r/ r' r6 r7 r8 r r r �config_migrate� s � �r} c C rd )aT .. versionadded:: 3001 Return default init configuration, that can be used for 'kubeadm init' component_config A comma-separated list for component config API object to print the default values for (valid values: KubeProxyConfiguration, KubeletConfiguration) kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.config_print_init_defaults )r r �printz init-defaults�component-configsr. r/ r0 rD �Zcomponent_configsr. r/ r' r6 r7 r8 r r r �config_print_init_defaults� � � �r� c C rd )aT .. versionadded:: 3001 Return default join configuration, that can be used for 'kubeadm join' component_config A comma-separated list for component config API object to print the default values for (valid values: KubeProxyConfiguration, KubeletConfiguration) kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.config_print_join_defaults )r r r~ z join-defaultsr r. r/ r0 rD r� r r r �config_print_join_defaults r� r� c C sR ddddd| g}d|fd|fg}|D ]\}}|r$|� d|� �t|�g� qt|�S ) a� .. versionadded:: 3001 Upload a configuration file to the in-cluster ConfigMap for kubeadm configuration config Path to a kubeadm configuration file kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.config_upload_from_file /config.cfg r r �uploadz from-filez--configr. r/ r0 rD )r r. r/ r' r6 r7 r8 r r r �config_upload_from_file1 s �r� c C s� g d�} d| fd|fd|fd|fd|fd|fd|fd |fd |fd | fd | fd | fd| fg }|D ]\}}|rA| � d|� �t|�g� q/t| �S )a� .. versionadded:: 3001 Create the in-cluster configuration file for the first time using flags apiserver_advertise_address The IP address the API server will advertise it's listening on apiserver_bind_port The port the API server is accessible on (default 6443) apiserver_cert_extra_sans Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate cert_dir The path where to save and store the certificates (default "/etc/kubernetes/pki") cri_socket Path to the CRI socket to connect feature_gates A set of key=value pairs that describe feature gates for various features kubernetes_version Choose a specifig Kubernetes version for the control plane (default "stable-1") node_name Specify the node name pod_network_cidr Specify range of IP addresses for the pod network service_cidr Use alternative range of IP address for service VIPs (default "10.96.0.0/12") service_dns_domain Use alternative domain for services (default "cluster.local") kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.config_upload_from_flags )r r r� z from-flagsr\ r] �apiserver-cert-extra-sansr^ rv rp rq � node-name�pod-network-cidr� service-cidr�service-dns-domainr. r/ r0 rD )r` ra �apiserver_cert_extra_sansrb r{ rs rt rj �pod_network_cidr� service_cidr�service_dns_domainr. r/ r' r6 r7 r8 r r r �config_upload_from_flagsS s( I� �r� c C rC )at .. versionadded:: 3001 View the kubeadm configuration stored inside the cluster kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.config_view )r r �viewr. r/ r0 rD r5 r r r � config_view� s �r� c C s� ddg}|r |� d� | r|� d� |r|� d� |r |� d� d| fd|fd |fd |fd |fd |fd |fd|fd| fd| fd| fd| fd|fd|fd|fd|fd|fd|fd|fd|fg}|D ]\}}|rr|�d|� �t|�g� q`t|�S ) a] .. versionadded:: 3001 Command to set up the Kubernetes control plane apiserver_advertise_address The IP address the API server will advertise it's listening on apiserver_bind_port The port the API server is accessible on (default 6443) apiserver_cert_extra_sans Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate cert_dir The path where to save and store the certificates (default "/etc/kubernetes/pki") certificate_key Key used to encrypt the control-plane certificates in the kubeadm-certs Secret config Path to a kubeadm configuration file control_plane_endpoint Specify a stable IP address or DNS name for the control plane cri_socket Path to the CRI socket to connect experimental_upload_certs Upload control-plane certificate to the kubeadm-certs Secret. ( kubeadm version =< 1.16 ) upload_certs Upload control-plane certificate to the kubeadm-certs Secret. ( kubeadm version > 1.16 ) feature_gates A set of key=value pairs that describe feature gates for various features ignore_preflight_errors A list of checks whose errors will be shown as warnings image_repository Choose a container registry to pull control plane images from kubernetes_version Choose a specifig Kubernetes version for the control plane (default "stable-1") node_name Specify the node name pod_network_cidr Specify range of IP addresses for the pod network service_cidr Use alternative range of IP address for service VIPs (default "10.96.0.0/12") service_dns_domain Use alternative domain for services (default "cluster.local") skip_certificate_key_print Don't print the key used to encrypt the control-plane certificates skip_phases List of phases to be skipped skip_token_print Skip printing of the default bootstrap token generated by 'kubeadm init' token The token to use for establishing bidirectional trust between nodes and control-plane nodes. The token must match a regular expression, that by default is [a-z0-9]{6}.[a-z0-9]{16} token_ttl The duration defore the token is automatically deleted (1s, 2m, 3h). If set to '0' the token will never expire. Default value is 24h0m0s rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.init pod_network_cidr='10.244.0.0/16' r �initz--experimental-upload-certsz--upload-certsz --skip-certificate-key-printz--skip-token-printr\ r] r� r^ �certificate-keyr zcontrol-plane-endpointrv rp �ignore-preflight-errorszimage-repositoryrq r� r� r� r� � skip-phasesr z token-ttlr/ r0 rm ) r` ra r� rb �certificate_keyZcontrol_plane_endpointr r{ Zexperimental_upload_certsZ upload_certsrs �ignore_preflight_errorsZimage_repositoryrt rj r� r� r� Zskip_certificate_key_print� skip_phasesZskip_token_printr Z token_ttlr/ r' r6 r7 r8 r r r r� � sF z � �r� c C s� ddg}| r |� | � | r|� d� | r|� d� | r |� d� d|fd|fd|fd |fd |fd |fd |fd |fd| fd| fd|fd|fd|fd|fg}|D ]\}}|r`|�d|� �t|�g� qNt|�S )a" .. versionadded:: 3001 Command to join to an existing cluster api_server_endpoint IP address or domain name and port of the API Server apiserver_advertise_address If the node should host a new control plane instance, the IP address the API Server will advertise it's listening on apiserver_bind_port If the node should host a new control plane instance, the port the API Server to bind to (default 6443) certificate_key Use this key to decrypt the certificate secrets uploaded by init config Path to a kubeadm configuration file cri_socket Path to the CRI socket to connect discovery_file For file-based discovery, a file or URL from which to load cluster information discovery_token For token-based discovery, the token used to validate cluster information fetched from the API Server discovery_token_ca_cert_hash For token-based discovery, validate that the root CA public key matches this hash (format: "<type>:<value>") discovery_token_unsafe_skip_ca_verification For token-based discovery, allow joining without 'discovery-token-ca-cert-hash' pinning experimental_control_plane Create a new control plane instance on this node (kubeadm version =< 1.16) control_plane Create a new control plane instance on this node (kubeadm version > 1.16) ignore_preflight_errors A list of checks whose errors will be shown as warnings node_name Specify the node name skip_phases List of phases to be skipped tls_bootstrap_token Specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node token Use this token for both discovery-token and tls-bootstrap-token when those values are not provided rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.join 10.160.65.165:6443 token='token' r r$ z---discovery-token-unsafe-skip-ca-verificationz --experimental-control-planez--control-planer\ r] r� r rv zdiscovery-filezdiscovery-tokenr* r� r� r� ztls-bootstrap-tokenr r/ r0 rm )Zapi_server_endpointr` ra r� r r{ Zdiscovery_fileZdiscovery_tokenZ discovery_token_ca_cert_hashZ+discovery_token_unsafe_skip_ca_verificationZexperimental_control_planeZ control_planer� rj r� Ztls_bootstrap_tokenr r/ r' r6 r7 r8 r r r r$ � s: _ � �r$ c C s\ g d�}d| fd|fd|fd|fd|fg}|D ]\}}|r)|� d|� �t|�g� qt|�S )a� .. versionadded:: 3001 Revert any changes made to this host by 'kubeadm init' or 'kubeadm join' cert_dir The path to the directory where the certificates are stored (default "/etc/kubernetes/pki") cri_socket Path to the CRI socket to connect ignore_preflight_errors A list of checks whose errors will be shown as warnings kubeconfig The kubeconfig file to use when talking to the cluster. The default values in /etc/kubernetes/admin.conf rootfs The path to the real host root filesystem CLI Example: .. code-block:: bash salt '*' kubeadm.join 10.160.65.165:6443 token='token' )r �resetrl r^ rv r� r. r/ r0 rD ) rb r{ r� r. r/ r' r6 r7 r8 r r r r� ' s %� �r� )N)F)NN)NNNNNNNN)NNNNNN)NNN)NNNFN)NNNNN) NNNNNNNNNNNNN)NNNNNNNNFFNNNNNNNNFNFNNN)NNNNNNNNNFFFNNNNNN))�__doc__r1 �loggingr Zsalt.utils.filesr Zsalt.exceptionsr r � getLogger�__name__rQ Z__virtualname__r# � NameErrorr r r) r, r- r9 r rB rE r rZ rc ri rk rn ru r| r} r� r� r� r� r� r� r$ r� r r r r �<module> s � � O $ / � >( �4 �7 �6 � ; + ( (# � a � H � �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings