File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/daemons/__pycache__/masterapi.cpython-310.pyc
Back
o ;js� � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zddl Zddl ZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zddl Zddl Zddl!Zddl"Zddl#Zddl$Zddl%Zddl&m'Z' ddlm(Z( zddl)Z)dZ*W n e+y� dZ*Y nw e�,e-�Z.dZ/e/fdd �Z0d d � Z1d d � Z2d dd�Z3dd� Z4d dd�Z5dd� Z6dd� Z7dd� Z8G dd� d�Z9G d d � d �Z:G d d � d �Z;dS )!z� This module contains all of the routines needed to set up a master server, this involves preparing the three listeners and the workers needed by the master. � N)�DEFAULT_TARGET_DELIM)� git_pillarTF) zsalt/job/*/publishzsalt/job/*/newzsalt/job/*/returnzsalt/key� salt/cloud/*� salt/run/*zsalt/cluster/*zsalt/wheel/*/newzsalt/wheel/*/returnr r c C s |D ] }t � | |�r dS qdS )NFT)�fnmatch)�tagZ blacklistZblack� r �J/opt/saltstack/salt/lib/python3.10/site-packages/salt/daemons/masterapi.py�valid_minion_tagJ s �r c C s� g }dd� | � dg �D �D ]6}d|v rCztjjj| |d tjtjtjd�}|� |� W q tj j yB | � dd�r;� t � d� Y q w q |S ) zF Clear out the ext pillar caches, used when the master starts c S s g | ]}|�qS r r )�.0�xr r r � <listcomp>V s z#init_git_pillar.<locals>.<listcomp>Z ext_pillar�git)Zper_remote_overridesZper_remote_onlyZ global_onlyZgit_pillar_verify_configTz Could not initialize git_pillar)�get�salt�utilsZgitfsZ GitPillarr ZPER_REMOTE_OVERRIDESZPER_REMOTE_ONLYZ GLOBAL_ONLY�append� exceptionsZFileserverConfigError�log�critical)�opts�retZ opts_dict�pillarr r r �init_git_pillarQ s& � ��r c C s* dD ]�}|| d v r�t j�| d |� d�d�}t j�|�rDt�d|� zt �|� W n tyC } z t�d||� W Y d}~nd}~ww t j�| d d |� d��}zt � |�}W n tya Y qw t � |d �D ])}t j�||�}zt �|� W qh ty� } z t�d ||� W Y d}~qhd}~ww qdS ) z/ Clean out the old fileserver backends )r Zhg�svnZfileserver_backend�cachedir�fszenvs.pzClearing %sfs env cachez%Unable to clear env cache file %s: %sNZ file_listsz*.pz&Unable to file_lists cache file %s: %s) �os�path�join�isfiler �debug�remove�OSErrorr �listdirr �filter)r ZbackendZ env_cache�excZfile_lists_dirZfile_lists_cachesZfile_lists_cacheZ cache_filer r r �clean_fsbackendi sB ���� ������r' c C s� |dur |}d}nt j�| �}d}z,|�� D ] }|�|�}|r-d|vs-|�dd�t�� k r2|�|� qW |r<|�� dS dS |rE|�� w w )a" Clean expired tokens from the master. If ``loadauth`` is provided, reuse the caller's LoadAuth instance rather than constructing a fresh one. Useful in long-running loops (e.g. Maintenance) to avoid recreating the auth/eauth_tokens LazyLoaders on every iteration. NFTZexpirer ) r �auth�LoadAuthZ list_tokens�get_tokr �timeZrm_token�destroy)r �loadauthZ _loadauth�_owned�tokZ token_datar r r �clean_expired_tokens� s( � �� � �r0 c C s� zKt j�| d d�}t j�|�sW d S tjj�|�D ].\}}}|D ]&}t j�||�}t j�|�s1q!t�� t j� |� tjj � | �krGt � |� q!qW d S t yZ t�d� Y d S w )Nr � publish_authz Unable to delete pub auth file)r r r �existsr r �os_walkr r+ �getmtime�jobZget_keep_jobs_secondsr" r# r �error)r � auth_cache�dirpath�dirnames� filenamesZ auth_fileZauth_file_pathr r r �clean_pub_auth� s& � ��� �r; c C s� d� | d �}|dur|}d}n tjj| ddd�}d}z ||jv r'|j| � W |r5t|d�r7|�� dS dS dS |rEt|d�rF|�� w w w )z� Clean out the old jobs from the job cache. If ``mminion`` is provided, reuse the caller's MasterMinion rather than constructing a fresh one. See ``clean_expired_tokens`` for the same rationale. z{}.clean_old_jobs�master_job_cacheNF�ZstatesZrendTr, )�formatr �minion� MasterMinion� returners�hasattrr, )r �mminion�fstrZ_mminionr. r r r �clean_old_jobs� s( � �� �rE c C s� d }t r zt�|�j}W n ty | d rY d S Y nw tjj�� r4t j � | d d� |� dd���}n t j � | d d|� d��}t j �|�rit�d|� tjj�� rdt �|t j�sdt �|tjtjB � t �|� tjj�� }tjj� d ��* tjj� |d ��}|� tjj � |�� W d � n1 s�w Y W d � n1 s�w Y t �|d � t r�|d ur�z t �!||d � W |S t"y� Y |S w |S ) N�client_acl_verifyr z.{}_key�\�_�.Z_keyzRemoving stale keyfile: %s� �w+i� ���)#�HAS_PWD�pwd�getpwnam�pw_uid�KeyErrorr r �platform� is_windowsr r r r> �replacer2 r r! �access�W_OK�chmod�stat�S_IRUSR�S_IWUSR�unlinkZcryptZ CrypticleZgenerate_key_string�filesZ set_umask�fopen�write� stringutils�to_str�chownr# )r �user�uid�keyfile�key�fp_r r r �mk_key� sH �� � �� � ��rg c C sl i }| d }t |�� �}| �d�r|�| d � |�tjj�� � tjj� � sn|s.| �d�rn| �d�}|rnt j � |�rnzt �t � |�j�}|t j@ sSt �||t jB � W n tym } z t�d||� W Y d}~nd}~ww |D ]}t�d|� t| |�}|dur�|||< qp| d r�tr�t�d � t�� D ]}|j}||vr�tjj j ||d �r�t| |�||< q�t�d � |S ) zv A key needs to be placed in the filesystem with permissions 0400 so clients are required to run as root. � publisher_aclrb Z external_authr zNUnable to set traversal permissions on cachedir %s for publisher_acl users: %sNz,Preparing the %s key for local communicationrF z?Beginning pwd.getpwall() call in masterapi access_keys function)� whitelistz9End pwd.getpwall() call in masterapi access_keys function) �set�keysr �addr r rb Zget_userrR rS r r �isdirrX �S_IMODE�st_mode�S_IXOTHrW r# r �warning�inforg rM ZprofilerN �getpwall�pw_namer_ Zcheck_whitelist_blacklist) r rk rh Z acl_usersr �currentr& rb re r r r � access_keys� sV �� ���� � �� rv c C sd z| j st�d� tj�d��| �� W dS ty1 } ztjd|tj d� W Y d}~dS d}~ww )zl Update the fileserver backends, requires that a salt.fileserver.Fileserver object be passed in zLNo fileservers loaded, the master will not be able to serve files to minionsz No fileserver backends availablez+Exception %s occurred in file server update)Zexc_info_on_loglevelN) Zserversr r6 r r ZSaltMasterError�update� Exception�logging�DEBUG)� fileserverr& r r r �fileserver_update8 s � ���r| c @ sJ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z ddd�Z dS )�AutoKeyzH Implement the methods to run auto key acceptance and rejection c C s i | _ || _d S �N)� signing_filesr ��selfr r r r �__init__R s zAutoKey.__init__c C s~ t jj�� rdS t jjj| jd dd�}t�|�}tj |j @ r!dS tj |j @ r=| j� dd�s0dS t� � dkr=|j|vr=dS dS )zI Check if the specified filename has correct permissions Trb F)�include_defaultZpermissive_pki_accessr )r r rR rS rb Z get_gid_listr r rX �S_IWOTHro �S_IWGRPr �getuid�st_gid)r� �filename�groupsZfmoder r r �check_permissionsV s zAutoKey.check_permissionsc s� |rt j�|�s dS | �|�st�d|� dS t j�|�}| j�|i ��d�|kr[|| j� |i �d< t j j � |d��}dd� dd� |D �D �| j| d< W d � n1 sVw Y t� fd d �| j| �dg �D ��S ) z@ Check a keyid for membership in a signing file F�*Wrong permissions for %s, ignoring content�mtime�rc S s g | ] }|� � �d �s|�qS )�#)�strip� startswith)r �entryr r r r s ��z.AutoKey.check_signing_file.<locals>.<listcomp>c S s g | ]}|� � �qS r )r� �r �liner r r r � s �dataNc 3 s � | ] }t jj�� |�V qd S r~ )r r r_ Z expr_matchr� ��keyidr r � <genexpr>� s � � �z-AutoKey.check_signing_file.<locals>.<genexpr>)r r r2 r� r rq r4 r r � setdefaultr r r\ r] �any)r� r� Z signing_filer� rf r r� r �check_signing_filep s � � �zAutoKey.check_signing_filec C s� t j�| jd d�}| j�dd�}|dkrMt�� dt|� }tjj� |�D ]&\}}}|D ] }t j�||�} t j� | �} | |k rKt � d| � t � | � q-q&t j�||�} t j�| �s\dS t � | � d S ) zG Check a keyid for membership in a autosign directory. Zpki_dirZminions_autosignZautosign_timeout�x r �< zAutosign keyid expired %sFT)r r r r r r+ �intr r r3 r4 r rq r" r2 ) r� r� Z autosign_dirZexpire_minutesZmin_time�root�dirsr: �fZ stub_filer� r r r �check_autosign_dir� s$ �� zAutoKey.check_autosign_dirc C s� |rd| j vr dS | j d }t�|�D ]^\}}}|D ]V}||v rptj�||�}| �|�s3t�d|� qtj j � |d��-}|D ]"} tj j � | ��� } | �d�rOq>|| | kr` W d � dS q>W d � n1 skw Y qqdS )zG Check for matching grains in the autosign_grains_dir. �autosign_grains_dirFr� r� r� NT)r r �walkr r r� r rq r r r\ r] r_ � to_unicoder� r� ) r� �autosign_grainsr� r� r� r: ZgrainZ grain_filer� r� r r r �check_autosign_grains� s4 � �� ���z AutoKey.check_autosign_grainsc C s | � || j�dd��S )zQ Checks if the specified keyid should automatically be rejected. Zautoreject_fileN)r� r r )r� r� r r r �check_autoreject� s zAutoKey.check_autorejectNc C sH | j d rdS | �|| j �dd��rdS | �|�rdS | �|�r"dS dS )zO Checks if the specified keyid should automatically be signed. Z auto_acceptTZ autosign_fileNF)r r� r r� r� )r� r� r� r r r �check_autosign� s zAutoKey.check_autosignr~ ) �__name__� __module__� __qualname__�__doc__r� r� r� r� r� r� r� r r r r r} M s r} c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd,d d �Zd,d d�Z d,dd�Z dd� Z d,dd�Z dd� Z dd� Zdd� Zdd � Zd d � Zd d � Zd,d!d"�Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+S )-� RemoteFuncsz� Funcitons made available to minions, this class includes the raw routines post validation that make up the minion access to the master c C s� || _ d | _d | _d | _d | _d | _d | _d | _tj jj d| j d | j dd�| _tj j � |�| _tj �| j �| _tjj| j d�| _tjj| j ddd�| _| �� tj�|�| _d S �NZmasterZsock_dirF)r �listen)�moptsr= )r �event� ckminions�tops�localrC �cache�wheel_r r � get_event�minions� CkMinions�loader�client�get_local_clientr? r@ � _RemoteFuncs__setup_fileserver�factoryr� r r r r� � s( �zRemoteFuncs.__init__c C sd t j�| j�| _| jj| _| jj| _| jj | _ | jj | _ | jj | _| jj| _| jj| _| jj| _dS )zK Set the local file objects from the file server interface N)r r{ Z Fileserverr �fs_Z serve_file� _serve_fileZ _find_file� _file_findZ file_hash� _file_hashZ file_list� _file_listZfile_list_emptydirs�_file_list_emptydirsZdir_list� _dir_listZ symlink_list� _symlink_list�envs� _file_envs�r� r r r Z__setup_fileserver� s z RemoteFuncs.__setup_fileserverc s d| j vrdS t| j d t�sdS t� fdd�dD ��r dS t�d� d �r(dS g }| j d D ] }t�|� d �rMt| j d | t�rM|�| j d | � q/d � d v rq� d �d �� d< g }� d D ] }|� |�� � qc|� d < | j j |� d � d � d � � d d �dd�S )zS Verify that the passed information authorized a minion to execute ZpeerFc 3 � � | ]}|� vV qd S r~ r �r re ��loadr r r� � � z6RemoteFuncs.__verify_minion_publish.<locals>.<genexpr>)�fun�arg�tgtr �idz publish.*r� r� �,r� r� �tgt_type�globT)Zpublish_validate) r � isinstance�dictr� �re�match�list�extend�splitr r� � auth_checkr )r� r� �permsr� Zarg_r� r r� r Z__verify_minion_publish� s8 � �z#RemoteFuncs.__verify_minion_publishc C s i }i }| � � }|D ] }||vrg ||< q ||d< | jd |d< | jd |d< | jd |d< |�d�r5|S | jd |d< | jd |d< | jd |d< | jd |d < | jd |d < | jd |d < | jd |d < | jd |d < | jd |d< | jd |d< | jd |d< | jd |d< |S )z9 Return the master options to the minion � file_rootsZtop_file_merging_strategyZ env_orderZ default_topZenv_onlyZrendererZfailhardZ state_topZstate_top_saltenv� nodegroupsZstate_auto_orderZ state_eventsZstate_aggregateZ jinja_envZ jinja_sls_envZjinja_lstrip_blocksZjinja_trim_blocks)r� r r )r� r� r� r� r� �saltenvr r r � _master_opts$ s4 � zRemoteFuncs._master_optsFc C s� |sd|vr t �d� i S tjj�| j|d �si S i }i }i }d|v r4|d }d|d v r4|d d }| jD ];}|| j�di �vrCq7ztjj j || j| ||d�dd�}W q7 t yr } zt �d |||d � W Y d }~q7d }~ww |S ) zC Return the results from master_tops if configured r� z.Received call for external nodes without an idr �grainsZ master_tops)r r� T)Z merge_listsz2Top function %s failed with error %s for minion %sN) r r6 r r �verify�valid_idr r� r � dictupdate�mergerx )r� r� � skip_verifyr r� r r� r& r r r � _master_topsB s< ����zRemoteFuncs._master_topsc s� |st �fdd�dD ��ri S t�d t�r(tt�d �d���}t|�dk}nt�d t�r6�d }d}ni S g }d| jv r�t| jd t�sIi S t� }| jd D ] }t � |�d �rot| jd | t�ro|� | jd | � qQ|D ]� t � fd d�|D ��r�|� � � qr|s�i S n|}i }t jj�| j�d �s�|S ��d �} | d ur�d �vr�| } n��d d�} | �� dkr�d} | �� dkr�d} t jj�| j�} | j�d | dd�} | d } i }| D ]�}| j�d|� �d�}t|t�s�q�|D ]p}||vr�q�|| }|| }t|t��rAt jjj|v �rA|t jjj }||�|i �v�rAd|v �rA| �|d |�dd��d }|�s3q�t jj� ||� d|� �|� t jj� |||�d ��rOq�|�r[||� |i �|< q�|||< q�q�|S ) zC Gathers the data from the specified minions' mine c 3 r� r~ r r� r� r r r� l r� z(RemoteFuncs._mine_get.<locals>.<genexpr>)r� r� r� r� r� � TZmine_getr� c 3 s � | ] }t �|� �V qd S r~ )r� r� )r �perm)r� r r r� � s � � expr_formNr� r� r Z pillar_exact�compoundZcompound_pillar_exactr� F)Zgreedyr� zminions/�mineZ allow_tgtZallow_tgt_type�:) r� r� �strr� rj r� �lenr r� r� r� rw r r r r� r� r �lowerr� r� � check_minionsr� �fetchr� ZMINE_ITEM_ACL_IDZMINE_ITEM_ACL_DATAr� Zset_dict_key_valueZminion_side_acl_deniedr� )r� r� r� � functionsZ _ret_dictZfunctions_allowedr� r� r r� Z match_typeZchecker�_resr� Zminion_side_aclr? Z mine_data�functionZ mine_entryZ mine_resultZ get_minionr )r� r� r � _mine_getg s� � �� � �� � � �$zRemoteFuncs._mine_getc C s� |s d|vs d|vr dS | j �dd�s| j �dd�rFd�|d �}d}|d }|�dd�s>| j�||�}t|t�r>|�|� | j�|||� d S ) z6 Store/update the mine data in cache. r� r� F�minion_data_cache�enforce_mine_cache� minions/{}r� �clearT) r r r> r� r� r� r� rw �store)r� r� r� �cbank�ckeyZnew_datar� r r r �_mine� s � zRemoteFuncs._minec C s� d|vsd|vr dS | j �dd�s| j �dd�rTd�|d �}d}z(| j�||�}t|t�s1W dS |d |v rG||d = | j�|||� W dS W dS tyS Y dS w dS ) zR Allow the minion to delete a specific function from its own mine r� r� Fr� r� r� r� T) r r r> r� r� r� r� r� r# )r� r� r� r� r� r r r � _mine_delete� s* � � ��zRemoteFuncs._mine_deletec C sH |sd|vrdS | j �dd�s| j �dd�r"| j�d�|d �d�S dS )zI Allow the minion to delete all of its own mine contents r� Fr� r� r� r� T)r r r� �flushr> )r� r� r� r r r � _mine_flush� s �zRemoteFuncs._mine_flushc s� t � fdd�dD ��r dS | jd rtj�� d �r dS tj�� d �s*d� d v r,dS tjj�| j� d �s9dS d | jd }d � v rQ� d d k rQt � d � dS � � dd �|krat � d|� dS t � d �� � d d � |krwt � d|� dS � d }d|v r�|� dd�}tj�|�}tj�| jd d� d d|�}tj�|�}tj�|�s�zt�|� W n ty� Y nw tj�|�rƈ d d kr�d}nd}tjj�||�� }� d r�|�� d � |�tjj�� d �� W d � dS 1 s�w Y dS )zm Allows minions to send files to the master, files are sent to the master file cache c 3 r� r~ r r� r� r r r� r� z)RemoteFuncs._file_recv.<locals>.<genexpr>)r� r �locFZ file_recvr z../r� i �file_recv_max_sizer r z#Invalid file pointer: load[loc] < 0�sizez&Exceeding file_recv_max_size limit: %sr� r� rG �/r r� r\ �ab�wbNT)r� r r r �isabsr r r� r� r r6 r r� rT �normpathr �dirnamerm �makedirsr# r r\ r] �seekr^ r_ r` )r� r� r r Zcpath�cdir�moderf r r� r � _file_recv� sV � � ��zRemoteFuncs._file_recvc s� t � fdd�dD ��r dS t�d� �d�� tjj| j� d � d � �d � �d ��� �d�| jj � �d i �d �}|� � }| j�d d�ro| j � d� � d �d� d |d�� | j�d�du ro| j�dditjj�� d dd�� |S )z7 Return the pillar data for the minion c 3 r� r~ r r� r� r r r� 6 r� z&RemoteFuncs._pillar.<locals>.<genexpr>)r� r� Fz Master _pillar using ext: %s�extr� r� r� �env�pillar_override)r r� r� r� )r� r Zminion_data_cache_eventsTZcommentzMinion data cache refreshZrefreshr? )r� r r! r r r Z get_pillarr rC r� Zcompile_pillarr� r� r> r� � fire_eventr �tagify)r� r� r r� r r� r �_pillar2 s2 � ��zRemoteFuncs._pillarc C s� d|vrdS d|vrd|vsd|vrdS d|v r]|d D ]>}d|v r'|d }n|}t |d �s8t�d|d � q | j�||d � |�d�durZ| j�|tjjj|d |d d �� q d S |d }| j�||� d S ) zd Receive an event from the minion and fire it on the master event interface r� F�eventsr r� z"Filtering blacklisted event tag %sZpretagN)�baseT) r r rq r� r r r r r )r� r� r� Z event_datar r r r � _minion_eventP s. ���zRemoteFuncs._minion_eventc sl t jj�t jj�| j��}t� fdd�dD ��rdS � d dkrJd�| jd �}| jj | � � d d�d �� d< d �| jd �}| jj | � d � � t � d � d � d � | j �� � d � | j �� t jj �� d d� d gd�� | j �� � | jd r�| j� d�r�dS d�| jd �}| j� d�r�|| jj v r�| jj | � d |� d�| jd �}| jj | � � dS )z> Handle the return data sent from the minions c 3 r� r~ r r� r� r r r� t r� z&RemoteFuncs._return.<locals>.<genexpr>��return�jidr� Fr �req� {}.prep_jidr< �nocache�r � {}.save_loadz Got return from %s for job %sr� r r5 Z job_cache� ext_job_cacheNz{}.update_endtimeZjob_cache_store_endtimez {}.returner)r r r Z jid_to_time�gen_jidr r� r> rC rA r r rr r� r r Z fire_ret_load)r� r� �endtimeZ prep_fstrZ saveload_fstrrD r r� r �_returnm s. � � zRemoteFuncs._returnc s� t � fdd�dD ��r dS d� v r&d�| jd �}| jj| � d � d � � d �� D ]\}}� d ||d �}d � v rB� d |d < | �|� q,dS ) zt Receive a syndic minion return and format it to look like returns from individual minions. c 3 r� r~ r r� r� r r r� � r� z-RemoteFuncs._syndic_return.<locals>.<genexpr>r Nr� r" r< r r )r r� r �out)r� r> r rC rA �itemsr& )r� r� rD re �itemr r r� r �_syndic_return� s �zRemoteFuncs._syndic_returnc s& d| j vri S t| j d t�si S t� fdd�dD ��r i S t� }| j d D ] }t�|� d �rDt| j d | t�rD|�| j d | � q&d}|D ] }t�|� d �rUd}qI|sbt � d � d � i S i }|�| j � |�� d t j j j� d � �d g �d �� d d| j d d�� t j�|�}|�� S )zS Execute a runner from a minion, return the runner's function data Zpeer_runc 3 r� r~ r r� r� r r r� � r� z,RemoteFuncs.minion_runner.<locals>.<genexpr>)r� r� r� r� Fr� Tz&Minion id %s is not who it says it is!r� �no_parse�r+ � conf_file)r� r� r� �docr- )r r� r� r� rj r� r� r� rw r rq r r �args� parse_inputr �runnerZRunner�run)r� r� r� r� Zgoodr� r r1 r r� r � minion_runner� sD �� ��� zRemoteFuncs.minion_runnerc s� |st � fdd�dD ��ri S tj�| jd d�}tj�|�s$t�|� tj�|� d �}tjj � |d�� }� d tjj � |� � �ksLi W d � S W d � n1 sVw Y | j�� d �S ) z� Request the return data from a specific jid, only allowed if the requesting minion also initialted the execution. c 3 r� r~ r r� r� r r r� � r� z&RemoteFuncs.pub_ret.<locals>.<genexpr>)r r� r r1 r r� r� N)r� r r r r rm r r r r\ r] r_ r� �readr� �get_cache_returns)r� r� r� r7 �jid_fnrf r r� r �pub_ret� s � �zRemoteFuncs.pub_retc C st | � |�si S |d tjjj|d |�dg �d�|�dd�|d |d |d d �}d|v rU|d �d �rO|d | jd v rM| jd |d |d< d |d< ni S |d |d< i }| jj di |��|d< | j � |d |d �}|d |d< t j �| jd d�}t j �|�s�t �|� t j �|t|d ��}tjj�|d��}|�tjj�|d �� W d � |S 1 s�w Y |S )� Publish a command initiated from a minion, this method executes minion restrictions so that the minion publication will only work if it is enabled in the config. The configuration on the master allows minions to be matched to salt functions, so the minions can only publish allowed salt functions The config will look like this: peer: .*: - .* This configuration will enable all minions to execute all commands. peer: foo.example.com: - test.* This configuration will only allow the minion foo.example.com to execute commands from the test module r� r� r+ r, r� r� r� r r� �r� r� r� r� r r� �noder� r� r r� r r1 rK Nr )�#_RemoteFuncs__verify_minion_publishr r r/ r0 r r� r r� Z cmd_asyncr� r� r r r rm r r� r\ r] r^ r_ r` )r� r� �pub_loadr r� r7 r6 rf r r r � minion_pub� s@ � � ��zRemoteFuncs.minion_pubc C s | � |�si S |d tjjj|d |�dg �d�|�dd�|d |d |d d �}d |v rOz t|d �|d < W n tyN d �|d �}t � |� i Y S w d |v ruz t|d �|d < W n tyt d �|d �}t � |� i Y S w d|v r�|d � d�r�|d | j d v r�| j d |d |d< d|d< ni S |d |d< d|d< i }| j jdi |��D ]6}|�dd�dkr�|}d|v r�|d |d< |�d�|d< |||d < q�|d ||d < d|v r�|d |d< q�| j �|d ��� D ] \}}||vr�|||< q�|�dd�dk�r |�d� |S )r8 r� r� r+ r, r� r� r� r r� r9 Ztmo�timeoutz!Failed to parse timeout value: {}r: r� r� T�rawZform� �fullr Z__jid__r Nr )r; r r r/ r0 r r� � ValueErrorr> r rq r� r r� Zcmd_iter�popr5 r( ) r� r� r< �msgr r? r� re �valr r r �minion_publish sl � � � � � � zRemoteFuncs.minion_publishc C sZ d|vrdS t j�| j��}|j|d |�dd�d� W d � dS 1 s&w Y dS )zE Allow a minion to request revocation of its own key r� FZpreserve_minion_cache)Zpreserve_minionsNT)r re ZKeyr Z delete_keyr )r� r� Zkeyapir r r � revoke_auth_ s � ��zRemoteFuncs.revoke_authc C sN | j d ur | j �� d | _ | jd ur| j�� d | _| jd ur'| j�� d | _| jd ur:t| jd�r7| j�� d | _| jd urMt| jd�rJ| j�� d | _| jd urrt| jd�ro| jjd urot| jjd�rk| jj�� d | j_d | _d | _t| d�r�| j d ur�t| j d�r�| j �� d | _ d | _ d | _ d | _ d | _ d | _d | _d | _d | _d S )Nr, r� r� )r� r, r� rC r� rB r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r, k sH zRemoteFuncs.destroyN)F)r� r� r� r� r� r� r; r� r� r� r r r r r r r& r* r3 r7 r= rF rG r, r r r r r� � s, % % a 4 $ *4J r� c @ sP e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dS )� LocalFuncsz; Set up methods for use only from the local system c C s� || _ || _d | _d | _d | _d | _d | _tjjj d| j d | j dd�| _tj j | j d�| _tjj � |�| _tj�|�| _tjj| j ddd�| _d S r� )r re r� r� r� r- rC r r r� r� r� r� r� r( r) r? r@ )r� r re r r r r� � s" �zLocalFuncs.__init__c C s0 | � |�\}}}| j�||�}|�d�}|rd|iS | j�|�dg �|d |d �}|�d�}|s<d|d�||�d�iS t|t�rGd|v rG|S z+|� d�} t j � | j ��} | �| |�di �|�W d � W S 1 skw Y W dS ty� } zt�d | � d| jj| jt| �d �iW Y d} ~ S d} ~ ww ) zJ Send a master control function back to the runner system r6 � auth_listr� �kwarg�username�9Authentication failure of type "{}" occurred for user {}.��name�messageN�)Exception occurred while introspecting %s)rN r/ rO )�_prep_auth_infor- �check_authenticationr r� � runner_checkr> r� r� rC r r1 Z RunnerClientr Z asynchronousrx r � exception� __class__r� r/ r� ) r� r� � auth_type�err_namere r� r6 rS rK r� Z runner_clientr& r r r r1 � sB � �� (� ����zLocalFuncs.runnerc C s� | � |�\}}}| jj|||dd�}|�d�}|r d|iS |�d�}|dkrN| j�|�dg �|d |d �}|sCd|d �||�d �iS t|t�rNd|v rN|S t j j � | j �} |�d�} t j jj| d d �} d | � �| | |d�} zL| j�| t j j�| dgd �� t j�| j ��} | j| fi |��}W d � n1 s�w Y || d< d| d< | j�| t j j�| dgd �� | | d�W S ty� } z/t�d| � d�| |jj|�| d< d| d< | j�| t j j�| dgd �� | | d�W Y d}~S d}~ww )zI Send a master control function back to the wheel system T)re Z show_usernamer6 rK rb rI r� rJ rL rM �wheel)�prefixzwheel.)r� r r rb �newNr �successr )r r� rP z&Exception occurred in wheel {}: {}: {}F)rQ r- rR r r� � wheel_checkr> r� r� r r r r$ r rC r� r r rX Z WheelClientZ call_funcrx r rT rU r� )r� r� rV rW re r� r6 rK r\ r r� r r� Z wheel_clientr r& r r r rX � sd � ��� � � � ��zLocalFuncs.wheelc C s" | j �|�}|st�d� dS |S )z� Create and return an authentication token, the clear load needs to contain the eauth key and the needed authentication creds. z0Authentication failure of type "eauth" occurred.r@ )r- �mk_tokenr rq )r� r� �tokenr r r r] ' s zLocalFuncs.mk_tokenc C s d|vrdS | j �|d �S )zZ Return the name associated with a token or False if the token is invalid r^ F)r- r* )r� r� r r r � get_token2 s zLocalFuncs.get_tokenc C s� |� di �}tj�| jd �}|�|d �s |�|d �r/t�d|d |d � dddd �iS |� di �� d t �}| j � |d |� d d �|�}|d }| � |�\}}} |dkra| j j||| d�} n| j �||�} | � dg �} | � d�} d|� d�} | r�t�| � dddd �iS |dks�|dkr�| r�| j j| |d |d |d |� d d �|dgd�}|s�t�| � dddd �iS |dkr�| � d�}||d< t�d|� n |dkr�| j �|�|d< | j� d �s�|s�d d |d �d �S |d! �sd"�| jd# �}| jj| |� d$d%�d&�|d!< | j�d|i|d! � |d! |d |d |d |d tjjj|d |� d'g �d(�|d)�}| j�|d*� | j�|tjj�|d! d+gd,�� | jd- �r�zd.�| jd- �}| jj| |d! |� W n# t �yu t� d/| jd- � Y n t �y� tj d0d1d2� Y nw zd.�| jd# �}| jj| |d! |� W n# t �y� t� d3| jd# � Y n t �y� tj d0d1d2� Y nw |d tjjj|d |� d'g �d(�|d |d! |d4 d5�}d6|v �r�|d6 |d6< d |v �r�|d |d < d7|v �r�|d7 |d7< d|v �r2d8|d v �r|d � d8�|d8< d9|d v �r"|d � d9�|d9< d:|d v �r2|d � d:�|d:< d|v �rLt� d;|d |d |d! � |d |d< n t� d<|d |d! � t�d=|� |d! |d �|d>�S )?zt This method sends out publications to the minions, it can only be used by the LocalClient. �kwargsZpublisher_acl_blacklistrb r� zp%s does not have permissions to run %s. Please contact your local administrator if you believe this is in error.r6 ZAuthorizationErrorz Authorization error occurred.rM � delimiterr� r� r� r� �re rI z Authentication failure of type "z " occurred.ZAuthenticationErrorz Authentication error occurred.r� zsaltutil.find_job)r� ri r^ rK z Minion tokenized user = "%s"�eauthZ order_mastersr� N)r r� )�encr� r r r< r Fr! r+ r, )r r� r� rb r� r� r� Znew_jobrZ r5 r# r" z_The specified returner used for the external job cache "%s" does not have a save_load function!z+The specified returner threw a stack trace:T)�exc_infoz]The specified returner used for the master job cache "%s" does not have a save_load function!r )r� r� r� r r r� �toZ ret_config�metadataZ ret_kwargsz(User %s Published command %s with jid %sz Published command %s with jid %sz Published command details %s)r Zpub) r r ZaclZ PublisherACLr Zuser_is_blacklistedZcmd_is_blacklistedr r6 r r� r� rQ r- rR rq r� r! Z load_namer> rC rA r� r r r/ r0 r rQ r rx rr )r� r� �extrarh ra r� r� rV rW re r� rI r6 �err_msgZ authorizedrK rD Z new_job_loadr< r r r �publish: s � ����� �� � �� ��� � � ���� �� � zLocalFuncs.publishc C s@ d }d|v r d}d}nd|v rd}d}nd}d}| j }|||fS )Nr^ ZTokenAuthenticationErrorrc ZEauthAuthenticationErrorrb ZUserAuthenticationErrorrb )r� r� re rV rW r r r rQ � s zLocalFuncs._prep_auth_infoc C s� | j d ur | j �� d | _ | jd ur| j�� d | _| jd ur'| j�� d | _| jd ur4| j�� d | _| jd ur[t| jd�rV| jjd urVt| jjd�rR| jj�� d | j_d | _d S d S )Nr� r, )r� r, r� rC r- r� rB r� r� r r r r, s& �zLocalFuncs.destroyN) r� r� r� r� r� r1 rX r] r_ rj rQ r, r r r r rH � s 1B E rH r~ )<r� r ry r r� rX r+ Zsalt.aclr Z salt.authZ salt.cacheZ salt.clientZ salt.cryptZsalt.exceptionsZsalt.fileserverZsalt.keyZ salt.minionZ salt.payloadZ salt.pillarZ salt.runnerZ salt.stateZsalt.utils.argsZsalt.utils.atomicfileZsalt.utils.dictupdateZsalt.utils.eventZsalt.utils.filesZsalt.utils.gitfsZsalt.utils.gzip_utilZsalt.utils.jidZsalt.utils.jobZsalt.utils.mineZsalt.utils.minionsZsalt.utils.pathZsalt.utils.platformZsalt.utils.stringutilsZsalt.utils.userZsalt.utils.verifyZ salt.wheelZ salt.defaultsr r rN rM � ImportError� getLoggerr� r ZMINION_EVENT_BLACKLISTr r r' r0 r; rE rg rv r| r} r� rH r r r r �<module> s� � " +9 F
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings