File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/__pycache__/minions.cpython-310.pyc
Back
o ;j� � @ s d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zddl Zddl ZddlZddlmZ ddlmZ ddlmZmZ dZzddlZdZW n ey] Y nw e�e�Z e� d�Z d d � Z d d � Z d d� Z!ddd�Z"G dd� d�Z#dS )za This module contains routines used to verify the matcher against the minions expected to return � N)� ipaddress)�DEFAULT_TARGET_DELIM)�CommandExecutionError�SaltCacheErrorFTam (?x) ( (?P<engine>G|P|I|J|L|N|S|E|R) # Possible target engines (?P<delimiter>(?<=G|P|I|J).)? # Optional delimiter for specific engines @)? # Engine+delimiter are separated by a '@' # character and are optional for the target (?P<pattern>.+)$c s� t |�}|}t |�| t |�krOt�d�� g d��� fdd�|D �sQ�fdd�|D �r=dd�|� }t�d| ||� |gS d d�|� }t�d | ||� |gS d S d S ) Nz^[A-Z]@)�(�[�{�\�?�}�]�)c s" g | ] }d |v s � � |�r|�qS )�*��match��.0�x)� group_type_re� �F/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/minions.py� <listcomp>5 s " z$_nodegroup_regex.<locals>.<listcomp>c s& g | ]� � � fd d��D �v r� �qS )c s g | ]}|� v r� �qS r r )r �y�r r r r 8 � z/_nodegroup_regex.<locals>.<listcomp>.<listcomp>r )r )� regex_charsr r r 8 s & zE@�,zXNodegroup '%s' (%s) detected as an expression. Assuming compound matching syntax of '%s'zL@z\Nodegroup '%s' (%s) detected as list of nodenames. Assuming compound matching syntax of '%s')�set�re�compile�join�log�debug)� nodegroup�words�opersZ opers_set�ret�joinedr )r r r �_nodegroup_regex- s2 ��� �r( c C s6 t �| �}|st�d| � dd| d�}|S |�� }|S )zaParse `target_expressing` splitting it into `engine`, `delimiter`, `pattern` - returns a dictzUnable to parse target "%s"N)�engine� delimiter�pattern)� TARGET_REXr r! �warning� groupdict)Ztarget_expressionr r& r r r � parse_targetP s ��r/ c C s� d}d}|� dd�rDtj�|�}| du r+|�d�D ]}|�d|� �d�}|du r)qqn |�d| � �d�}|durD|� dd�}|� dd�}| rK| ||fS d||fS ) z� Get the grains/pillar for a specific minion. If minion is None, it will return the grains/pillar for the first minion it finds. Return value is a tuple of the minion ID, grains, and pillar N�minion_data_cacheF�minions�minions/�data�grains�pillar)�get�salt�cache�factory�list�fetch)�minion�optsr4 r5 r8 �id_r3 r r r �get_minion_dataa s �� r? c C s� d}|du r t � }n | |v rt�d| � dS | |vr"t�d| � dS || }t|t�r0|�� }nt|ttf�r:|}n t�d| |� dS |�| � g }g d�}|D ]7} t| t�s[t| �} | |v re|� | � qPt | �dkr�| � d �r�d }|� t | d d� ||dd �� qP|� | � qP|r�|�d d� |� d� |�| � t�d| |� |s�|s�|s�t| ||�} | r�| S |S |}t| ||�} | r�| S t�d|| � |S )a# Recursively expand ``nodegroup`` from ``nodegroups``; ignore nodegroups in ``skip`` If a top-level (non-recursive) call finds no nodegroups, return the original nodegroup definition (for backwards compatibility). Keep track of recursive calls via `first_call` argument FNz9Failed nodegroup expansion: illegal nested nodegroup "%s"� z2Failed nodegroup expansion: unknown nodegroup "%s"z7Nodegroup '%s' (%s) is neither a string, list nor tuple��and�or�notr r � zN@T� )�skip� first_callr r r znodegroup_comp(%s) => %szFNo nested nodegroups detected. Using original nodegroup definition: %s)r r! �error� isinstance�str�splitr: �tuple�add�append�len� startswith�extend�nodegroup_comp�insert�remover" r( ) r# � nodegroupsrG rH Zexpanded_nodegroupZnglookupr$ r& r% �wordr' r r r rS y sp � � � �rS c @ s6 e Zd ZdZdd� Zdd� Zdd� Z dBd d �Zd d � Zd d� Z dCdd�Z dd� Z dd� Z dd� Z dd� Zdd� Zdd � Zd d � Zd d � Z dBd!d"�ZdDd$d%�ZdEd&d'�Zd(ed)fd*d+�ZdFd,d-�Zd.d/� Z ( # dGd0d1�Z ( # # #dHd2d3�Zd4d5� Z #dFd6d7�Z d8d9� Z d:d;� Z d<d=� Z dFd>d?�Z!dFd@dA�Z"d#S )I� CkMinionsaA Used to check what minions should respond from a target Note: This is a best-effort set of the minions that would match a target. Depending on master configuration (grains caching, etc.) and topology (syndics) the list may be a subset-- but we err on the side of too-many minions in this class. c C s> || _ tj�|�| _| j �dd�tjjv rd| _d S d| _d S )N� transportZzeromqr1 Zaccepted)r= r7 r8 r9 r6 rY Z TRANSPORTS�acc)�selfr= r r r �__init__� s zCkMinions.__init__c C s | � t|| jd �t|�S )z? Return minions found by looking at nodegroups rV )�_check_compound_minionsrS r= r �r[ �expr�greedyr r r �_check_nodegroup_minions� s �z"CkMinions._check_nodegroup_minionsc C s t �| �� |�g d�S )z? Return the minions found by looking via globs �r1 �missing)�fnmatch�filter� _pki_minionsr^ r r r �_check_glob_minions� s z CkMinions._check_glob_minionsFc sX t |t�rdd� |�d�D �}| �� � � fdd�|D �|r!g d�S � fdd�|D �d�S )z@ Return the minions found by looking via a list c S s g | ]}|r|�qS r r �r �mr r r r � s z1CkMinions._check_list_minions.<locals>.<listcomp>r c s g | ]}|� v r|�qS r r r �r1 r r r � r c s g | ]}|� vr|�qS r r r rj r r r � r rb )rJ rK rL rf )r[ r_ r` Zignore_missingr rj r �_check_list_minions� s ��z CkMinions._check_list_minionsc s& t �|�� � fdd�| �� D �g d�S )zM Return the minions found by looking via regular expressions c s g | ] }� � |�r|�qS r r rh �Zregr r r � � z1CkMinions._check_pcre_minions.<locals>.<listcomp>rb )r r rf r^ r rl r �_check_pcre_minions� s �z CkMinions._check_pcre_minionsc C sH g }t j�| jd | jd�}z t �t j�|�� W n ty" Y nw zf| jd rWt j�|�rWt � d� t j j j|dd��}t j�|�W d � W S 1 sOw Y |W S t j j�t �t j�| jd | j���D ] }|�d�s�t j�t j�| jd | j|��r�|�|� qj|W S ty� } zt �d |� |W Y d}~S d}~ww ) zb Retreive complete minion list from PKI dir. Respects cache if configured �pki_dirz .key_cacheZ key_cachez Returning cached minion list�rb)�modeN�.z;Encountered OSError while evaluating minions in PKI dir: %s)�os�pathr r= rZ �makedirs�dirname�OSError�existsr! r" r7 �utils�filesZfopen�payload�loadr3 �sorted_ignorecase�listdirrQ �isfilerO rI )r[ r1 Z pki_cache_fn�fn_�excr r r rf s< � "� ��� ����zCkMinions._pki_minionsc sV � j �dd�}� fdd�}|rBg } tjj�t�tj� � j d � j ���D ] } | � d�s@tj� tj� � j d � j | ��r@| � | � q$n |rH|� } ng g d�S |r�|rU|� } n| } | s^g g d�S t| �} t� } | D ]6} | | vrnqg| �| � � j�d| � �d �}|d u r�| �| � qg|�|�}tjjj|||||d �s�| �| � qg| | M } t| �} | g d�S ) u� Helper function to search for minions in master caches. Return only minions whose cached ``search_type`` data exists and matches the expression. Minions with no cache entry are excluded from the result regardless of ``greedy`` — otherwise grain/pillar targeting silently matches any offline minion whose cache directory has been pruned (#68976). ``greedy`` still controls which minions are *considered*: when greedy, every accepted minion key is considered (and any without cached data is dropped); when not greedy, only minions that already have a cache entry are considered. r0 Fc s � j �d�S )Nr1 )r8 r: r �r[ r r �list_cached_minions2 s z;CkMinions._check_cache_minions.<locals>.list_cached_minionsro rr rb r2 r3 N)r* � regex_match� exact_match)r= r6 r7 ry r3 r} rs r~ rt r rZ rQ r rO r rN r8 r; �discardZ subdict_matchr: )r[ r_ r* r` Z search_typer� r� � cache_enabledr� r1 r� �cminionsZ evaluatedr> �mdataZsearch_resultsr r� r �_check_cache_minions sZ �� �� � � z CkMinions._check_cache_minionsc C � | � |||d�S )z@ Return the minions found by looking via grains r4 �r� �r[ r_ r* r` r r r �_check_grain_minionsf � z CkMinions._check_grain_minionsc C � | j |||ddd�S )zJ Return the minions found by looking via grains with PCRE r4 T�r� r� r� r r r �_check_grain_pcre_minionsl � �z#CkMinions._check_grain_pcre_minionsc C r� )�@ Return the minions found by looking via pillar r5 r� r� r r r �_check_pillar_minionst r� z CkMinions._check_pillar_minionsc C r� )zJ Return the minions found by looking via pillar with PCRE r5 Tr� r� r� r r r �_check_pillar_pcre_minionsz r� z$CkMinions._check_pillar_pcre_minionsc C r� )r� r5 T)r� r� r� r r r �_check_pillar_exact_minions� r� z%CkMinions._check_pillar_exact_minionsc C s� | j �dd�}|r| �� }n|r| j�d�}ng g d�S |r�|r'| j�d�}n|}|du r2|g d�S |}zt�|�}W n' tyb zt�|�}W n ty_ t � d|� g g d� Y Y S w Y nw d|j � �}t |�}|D ]O}| j� d|� �d �} | du r�|s�|�|� qo| �d �} | du s�|| vr�d} n t|tjtjf�r�t|�| | v } n tjj�|| | �} | s�||v r�|�|� qot|�g d�S ) z@ Return the minions found by looking via ipcidr r0 Fr1 rb NzInvalid IP/CIDR target: %sZipvr2 r3 r4 )r= r6 rf r8 r: r � ip_address� Exception� ip_networkr! rI �versionr r; rU rJ � IPv4Address� IPv6AddressrK r7 ry �networkZ in_subnet) r[ r_ r` r� r1 r� �tgt�protor> r� r4 r r r r �_check_ipcidr_minions� sT ��� �z CkMinions._check_ipcidr_minionsc C s& t std��t| d�stj�| jd �| _z| j�|�W S tjj y� } zht � d|� | j� dd�}|rrg }t jj�t�tj�| jd | j���D ] }|�d�sftj�tj�| jd | j|��rf|�|� qJ|g d �W Y d }~S |r�| j�d �g d �W Y d }~S g g d �W Y d }~S d }~ww ) zJ Return the minions found by looking via range expression zYRange matcher unavailable (unable to import seco.range, module most likely not installed)�_rangeZ range_serverz%Range exception in compound match: %sr0 Fro rr rb Nr1 )� HAS_RANGEr �hasattr�seco�rangeZRanger= r� �expandZRangeExceptionr! rI r6 r7 ry r3 r} rs r~ rt r rZ rQ r rO r8 r: )r[ r_ r` r� r� �mlistr� r r r �_check_range_minions� s6 � �� � ��z CkMinions._check_range_minionsc C s | j |||dd�S )zp Return the minions found by looking via compound matcher Disable pillar glob matching T)� pillar_exact)r] r� r r r �$_check_compound_pillar_exact_minions� s z.CkMinions._check_compound_pillar_exact_minionsc C s� t |t�st |ttf�st�d� g g d�S t| �� �}t�d|� | j � di �}| j � dd��rG| j | j | j | j| jd| j| j| jd� }|rQ| j|d < | j|d < g }g } g d �} g } t |t�re|�� } n|dd� } | �r| �d �} t| �}| | v �r\|�r#|d dkr�| dv r�t�d| � g g d�S | dkr�|d dvr�|�d� |�d� |�tt|��� |�d� | �d� �nQ| dkr�|�d� �nF| dkr�|�d� �n;| dkr�|�| � | �| � �n+| dk�r| r�| d dkr�t�d|� g g d�S |�| � | �� | �r| d dk�r|�d� | �� n�t�d|� g g d�S | dk�rA|�d� |�tt|��� |�d� | �d� n�| dk�rQ|�| � | �| � n�t�d| � g g d�S |�r�|d �r�d |d k�rzt|d |�}|�ry|| } qk|� |d �}|�s�t�d |d | � g g d�S |d g}|d d v �r�|�|d! �p�d"� |�|� d#|d k�r�|�|�o�|d dk� ||� }|�tt|d$ ��� | �|d% � | �r�| d dk�r�|�d� | �� n$| �| d&�}|�tt|d$ ��� | �r| d dk�r|�d� | �� | sn|�d'd(� | D �� d)�|�}t�d*|� z tt |��}|| d�W S t �yF t�d+|� g g d� Y S w t|�g d�S ),zJ Return the minions found by looking via compound matcher z6Compound target that is neither string, list nor tuplerb z minions: %srV r0 FN) �G�P�I�J�L�N�S�E�Rr� r� rA r ���r )rB rC z(Invalid beginning operator after "(": %srD )�&�|r r� �-rB rC r� r z8Invalid compound expr (unexpected right parenthesis): %sz#Unhandled oper in compound expr: %sz-Expression may begin with binary operator: %sr) r� r+ z:Unrecognized target engine "%s" for target expression "%s")r� r� r� r� r* �:r� r1 rc Tc S s g | ]}d �qS )r r �r �itemr r r r t s z5CkMinions._check_compound_minions.<locals>.<listcomp>� z+Evaluating final compound matching expr: %szInvalid compound target: %s) rJ rK r: rM r! rI r rf r" r= r6 r� r� r� r� rk r� rn � _all_minionsr� rL �popr/ rO rS rR rg r �evalr� )r[ r_ r* r` r� r1 rV �ref�resultsZ unmatchedr% rc r$ rW Z target_infoZ decomposedr) Z engine_argsZ_resultsr r r r] � s� � � � � � � �d �z!CkMinions._check_compound_minionsNc C s� t � }| j�dd�r�| j�d�}|du r|S tjj�t | jd ��}| j�dd�r6|� tjj� | jd ��}d|v rL|� d� |� t tjjjdd ��� d |v rb|� d � |� t tjjjdd ��� |rf|}|D ]_}z | j�d |� �d �}W n ty Y qhw |du r�qh|�d i �}|�dg �D ]} | |v r�|r�|�|| f� n|�|� nq�|�dg �D ]} | |v r�|r�|�|| f� n|�|� nq�qh|S )zV Return a set of all connected minion ids, optionally within a subset r0 Fr1 NZ publish_portZdetect_remote_minionsZremote_minions_portz 127.0.0.1)Zinclude_loopbackz::1r2 r3 r4 �ipv4�ipv6)r r= r6 r8 r: r7 ry r� Zlocal_port_tcp�int�unionZremote_port_tcpr� �updateZip_addrsZ ip_addrs6r; r rN ) r[ ZsubsetZshow_ipr1 �search�addrsr> r� r4 r� r� r r r � connected_ids� sV � � � ��zCkMinions.connected_idsc C sn g }t jj�t�tj�| jd | j ���D ] }|� d�s1tj� tj�| jd | j |��r1|� |� q|g d�S )z? Return a list of all minions that have auth'd ro rr rb ) r7 ry r3 r} rs r~ rt r r= rZ rQ r rO )r[ r_ r� r� r r r r� � s �� � zCkMinions._all_minions�globTc C s� z_|du rd}t | d|� d�d�}|dv r ||||�}n|||�}d|d< | j�dd�d u rZtd t�r]tj�| j| j�d d ��}|�||�}|rS|d � |� d |d< |� � W |S W |S W |S t yu t � d||� g g d�}Y |S w )a Check the passed regex against the available minions' public keys stored for authentication. This should return a set of ids which match the regex, this will then be used to parse the returns to make sure everyone has checked back in. Nr@ Z_check_Z_minions)ZgrainZ grain_pcrer5 � pillar_pcrer� �compound�compound_pillar_exactF� ssh_minionsZenable_ssh_minionsTr� �rosterZflatr1 z5Failed matching available minions with %s pattern: %srb )�getattrr= r6 rJ rK r7 r� ZRoster�targetsrR Zdestroyr� r! � exception) r[ r_ �tgt_typer* r` Z check_func�_resr� r� r r r � check_minions� s: � �� �� �zCkMinions.check_minionsc C sn t | �|d��dg ��}|du r | �||�}t |d �}nt |�}t|�|�� }t|�t|�kr5|r5dS |S )ax Validate the target minions against the possible valid minions. If ``minions`` is provided, they will be compared against the valid minions. Otherwise, ``expr`` and ``tgt_type`` will be used to expand to a list of target minions. Return True if all of the requested minions are valid minions, otherwise return False. r� r1 NT)r r� r6 �bool� differencerP ) r[ �validr_ r� r1 Z expr_form� v_minionsr� Zd_boolr r r � validate_tgt� s zCkMinions.validate_tgtc C sn g }t |t�r |g}|D ]$}zt�||�r|�d� n|�d� W q ty0 t�d|� Y q w |o6t|�S )z� Validate a single regex to function comparison, the function argument can be a list of functions. It is all or nothing for a list of functions TFz Invalid regular expression: %s) rJ rK r r rO r� r! rI �all)r[ Zregex�fun�vals�funcr r r � match_check s � � zCkMinions.match_checkc C s� |}|� � dv r d}n|� � dkrd}| �||�} t| d �} | �||�} t| d �} t| �| ��} |r8| r8dS t|t�sC|g}|g}t� } i }|D ]V}t|t�ra|D ] }| �||�r_ dS qSqJt|t �rst |�dkrst � d |� qJ| � t|�� �� |D ]!}t| �|d��D ]}||v r�|| �|| � q�|| ||< q�q~qJt� }| D ] }|� t| �|d��� q�| | r�dS z&| D ] }g }t|| �D ] \}}|�| �||�� q�t|�s� W dS q�W dS ty� Y dS w ) N�r5 r� r� r� r� r1 FT� zMalformed ACL: %s)�lowerr� r r� r� rJ r: rK r� �dictrP r! �infor� �keysrR � enumeraterO �any� TypeError)r[ � auth_list�funs�argsr� r� �groups�publish_validate� v_tgt_typer� r� r1 �mismatchZallowed_minionsZauth_dictionaryZauth_list_entryr� �keyr Z allowed_minions_from_auth_listZ next_entryr< r� �numr r r �auth_check_expanded sp + � ���� �z CkMinions.auth_check_expandedc C s� | j �dd�r| �|||||||�S |rJ|} |�� dv r d} n|�� dkr'd} | �|| �} t| d �} | �||�} t| d �}t|�| ��} | rJdS t|t �sU|g}|g}zwt |�D ]o\}}| rh|| v rh W dS |D ]^}t|t �r}| � ||�r| W dS qjt|t �r�t|�d kr�qjtt|�� ��}| j||||d �r�|| }|r�|d nd }t|t �r�d |v r�t |�}|d = nd }| �|| |||�r� W dS qjqZW dS ty� Y dS w )z� Returns a bool which defines if the requested function is authorized. Used to evaluate the standard structure under external master authentication interfaces, like eauth, peer, peer_run, etc. z"auth.enable_expanded_auth_matchingFr� r� r� r� r1 Tr� rj r� NZ __kwarg__)r= r6 r� r� r� r r� r� rJ r: r� rK r� r� rP �next�iterr� r� �_CkMinions__fun_checkr� )r[ r� r� r� r� r� r� r� r1 Z whitelistr� r� r� r� r� r� �indr� Zfun_argsZ fun_kwargsr r r � auth_check� sf � � � ��� ��zCkMinions.auth_checkc C sF dd� |D �}|r!|D ]}|� d�|v r || D ]}|�|� qq |S )�� Returns a list of authorisation matchers that a user is eligible for. This list is a combination of the provided personal matchers plus the matchers of any group the user is in. c S s g | ] }|� d �r|�qS )�%)�endswithr� r r r r � rm z8CkMinions.fill_auth_list_from_groups.<locals>.<listcomp>r� )�rstriprO )r[ � auth_providerZ user_groupsr� Z group_namesZ group_name�matcherr r r �fill_auth_list_from_groups� s �z$CkMinions.fill_auth_list_from_groupsc C s� |du rg }|du r| j �d�}d}|D ].}|dkr |s q|�d�r1|�d�|v r0|�|| � qtjj�||�rBd}|�|| � q|sR|sRd|v rR|�|d � |S )r� NZpermissive_aclFr r� T) r= r6 r� r� rR r7 ry Z stringutilsZ expr_match)r[ r� �namer� r� Z permissiveZ name_matchedr r r r �fill_auth_list� s& ��zCkMinions.fill_auth_listc C r� )�/ Check special API permissions Zwheel�� spec_check�r[ r� r� r� r r r � wheel_check r� zCkMinions.wheel_checkc C r� )r Zrunnerr r r r r � runner_check r� zCkMinions.runner_checkc C sZ |sdS |dkr#|� d�}t|�dkrdddd�iS |d }|d }n| }}|D ]�}t|t�rR|d d krQ|d d � |ksN|d d � |ksN|d |� d �krQ dS q)t|t�r�t|�d kr^q)tt|�� ��} | d d kr�| d d � |kr�| �|| ||� d�|� d��r� dS | d d � |ks�| d |� d �kr�| �|| ||� d�|� d��r� dS q)dS )r FZcloudrr rF rI ZSaltInvocationErrorz2A command invocation error occurred: Check syntax.)r� �messager r� �@N�sT�arg�kwarg) rL rP rJ rK r� r� r� r� r� r6 ) r[ r� r� r� Zform�comps�mod_nameZfun_namer� r� r r r r sH �� 0� � ��zCkMinions.spec_checkc C s� t |t�s|g}|D ]7}t |t�r| �||�r dS q t |t�rAt|�dkr'q tt|�� ��}| �||�rA| � || ||�rA dS q dS )zn Check the given function name (fun) and its arguments (args) against the list of conditions. Tr� F) rJ r: rK r� r� rP r� r� r� �_CkMinions__args_check)r[ r� r� r� �kwargs�condZ fname_condr r r Z __fun_check> s$ � ��zCkMinions.__fun_checkc C s� t |t�s|g}|D ]p}t |t�sq |�dg �}d}t|�D ]%\}}|du s,t|�|kr0d} n|du r5q | �|t|| ��sCd} nq |sGq |�di �} | �� D ]#\} } |du s]| |vrad} n| du rfqQ| �| t|| ��std} nqQ|rz dS q dS )z] valid is a dicts: {'args': [...], 'kwargs': {...}} or a list of such dicts. r� TNFr ) rJ r: r� r6 r� rP r� rK �items) r[ r� r� r r Z cond_argsZgood�iZcond_argZ cond_kwargs�k�vr r r Z __args_checkV sD � ��zCkMinions.__args_check)F)FF)NF)N)NN)r� NF)r� NFNN)#�__name__� __module__� __qualname__�__doc__r\ ra rg rk rn rf r� r� r� r� r� r� r� r� r� r] r� r� r r� r� r� r� r� r� r r r r r� r r r r r rX � s\ � �G6 � 4 � - �} �L � ,rX )NT)$r rd �loggingrs r Z salt.cacher7 Z salt.payloadZ salt.rosterZsalt.transportZsalt.utils.dataZsalt.utils.filesZsalt.utils.networkZsalt.utils.stringutilsZsalt.utils.versionsZ salt._compatr Z salt.defaultsr Zsalt.exceptionsr r r� Z seco.ranger� � ImportError� getLoggerr r! r r, r( r/ r? rS rX r r r r �<module> sB � � # N
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings