Current File : //lib/python2.7/site-packages/salt/daemons/masterapi.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l
Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l! Z d d l" Z d d l# Z d d l! Z d d l$ Z d d l% Z d d l& Z d d l' Z d d l Z d d l( Z d d l) m* Z* d d l m+ Z+ d d l, m- Z- y d d l. Z. e/ Z0 Wn e1 k
r=e2 Z0 n Xe j3 e4 � Z5 d � Z6 d � Z7 d � Z8 d
� Z9 d � Z: d � Z; d
� Z< d � Z= d e> f d � � YZ? d e> f d � � YZ@ d e> f d � � YZA d S( u�
This module contains all of the routines needed to set up a master server, this
involves preparing the three listeners and the workers needed by the master.
i ( t absolute_importt print_functiont unicode_literalsN( t DEFAULT_TARGET_DELIM( t
git_pillar( t sixc
C@ s� g } x� g | j d g � D] } | ^ q D]� } d | k r, yH t j j j | | d d t j d t j d t j �} | j | � Wq� t j
j k
r� | j d t � r� � q� t
j d � q� Xq, q, W| S( uF
Clear out the ext pillar caches, used when the master starts
u
ext_pillaru gitt per_remote_overridest per_remote_onlyt global_onlyu git_pillar_verify_configu Could not initialize git_pillar( t gett saltt utilst gitfst GitPillarR t PER_REMOTE_OVERRIDESt PER_REMOTE_ONLYt GLOBAL_ONLYt appendt
exceptionst FileserverConfigErrort Truet logt critical( t optst rett xt opts_dictt pillar( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt init_git_pillarC s ,
c C@ sg x`d D]X} | | d k r t j j | d d j | � d � } t j j | � r� t j d | � y t j | � Wq� t k
r� } t j d | | � q� Xn t j j | d d
d j | � � } y t j
| � } Wn t k
r� q n Xxl t j | d � D]U } t j j | | � } y t j | � Wqt k
rW} t j d | | � qXqWq q Wd
S( u/
Clean out the old fileserver backends
u gitu hgu svnu fileserver_backendu cachediru {0}fsu envs.pu Clearing %sfs env cacheu% Unable to clear env cache file %s: %su
file_listsu *.pu& Unable to file_lists cache file %s: %sN( u gitu hgu svn(
t ost patht joint formatt isfileR t debugt removet OSErrorR t listdirt fnmatcht filter( R t backendt env_cachet exct file_lists_dirt file_lists_cachest file_lists_cachet
cache_file( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt clean_fsbackendZ s<
c C@ sv t j j | � } x] | j � D]O } | j | � } d | k s^ | j d d � t j � k r | j | � q q Wd S( u.
Clean expired tokens from the master
u expirei N( R
t autht LoadAutht list_tokenst get_tokR t timet rm_token( R t loadautht tokt
token_data( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt clean_expired_tokens� s
*c C@ s� y� t j j | d d � } t j j | � s2 d Sx� t j j j | � D]� \ } } } xu | D]m } t j j | | � } t j j | � s� q^ n t j � t j j | � | d d k r^ t j
| � q^ q^ WqH WWn$ t t f k
r� t
j d � n Xd S( Nu cachediru publish_authu keep_jobsi u Unable to delete pub auth file( R R R t existsR
R t os_walkR! R4 t getmtimeR# t IOErrorR$ R t error( R t
auth_cachet dirpatht dirnamest filenamest auth_filet auth_file_path( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt clean_pub_auth� s %
c C@ sU t j j | d t d t �} d j | d � } | | j k rQ | j | � n d S( u3
Clean out the old jobs from the job cache
t statest rendu {0}.clean_old_jobsu master_job_cacheN( R
t miniont MasterMiniont FalseR t returners( R t mminiont fstr( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt clean_old_jobs� s c C@ s� t rG d } y t j | � j } WqG t k
rC | d rD d SqG Xn t j j j � r� t
j j | d d j
| j d d � � � } n" t
j j | d d j
| � � } t
j j | � r#t j d | � t j j j � rt
j | t
j � rt
j | t j t j B� n t
j | � n t j j j � } t j j j d � �B t j j j | d � �# } | j t j j j! | � � Wd QXWd QXt
j | d � t r�| d k r�y t
j" | | d
� Wq�t# k
r�q�Xn | S( Nu client_acl_verifyu cachediru .{0}_keyu \u _u Removing stale keyfile: %si� u w+i� i����($ t HAS_PWDt Nonet pwdt getpwnamt pw_uidt KeyErrorR
R t platformt
is_windowsR R R R t replaceR: R R" t accesst W_OKt chmodt statt S_IRUSRt S_IWUSRt unlinkt cryptt Crypticlet generate_key_stringt filest set_umaskt fopent writet stringutilst to_strt chownR$ ( R t usert uidt keyfilet keyt fp_( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt mk_key� s8
( ( (
c C@ s5 i } | d } t | j � � } | j d � rE | j | d � n | j t j j j � � xF | D]> } t j d | � t
| | � } | d k re | | | <qe qe W| d r1t r1t j
d � xZ t j � D]L } | j } | | k r� t j j j | d | �r� t
| | � | | <q� q� Wt j
d � n | S( uv
A key needs to be placed in the filesystem with permissions 0400 so
clients are required to run as root.
u
publisher_aclu useru, Preparing the %s key for local communicationu client_acl_verifyu? Beginning pwd.getpwall() call in masterapi access_keys functiont whitelistu9 End pwd.getpwall() call in masterapi access_keys functionN( t sett keysR t addR
R Ri t get_userR t infoRn RP RO t profileRQ t getpwallt pw_nameRf t check_whitelist_blacklist( R Rq t
publisher_aclt acl_usersRi Rl ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt access_keys� s&
'c C@ sl y9 | j s. t j d � t j j d � � n | j � Wn, t k
rg } t j d | d t j �n Xd S( ul
Update the fileserver backends, requires that a salt.fileserver.Fileserver
object be passed in
uL No fileservers loaded, the master will not be able to serve files to minionsu No fileserver backends availableu+ Exception %s occurred in file server updatet exc_info_on_loglevelN(
t serversR R> R
R t SaltMasterErrort updatet Exceptiont loggingt DEBUG( t
fileserverR* ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt fileserver_update� s t AutoKeyc B@ sP e Z d Z d � Z d � Z d � Z d � Z d � Z d � Z d d � Z
RS( uH
Implement the methods to run auto key acceptance and rejection
c C@ s i | _ | | _ d S( N( t
signing_filesR ( t selfR ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt __init__ s c C@ s� t j j j � r t St j j j | j d d t �} t j
| � } t
j | j @r[ t St
j
| j @r� | j j d t � s� t St j � d k r� | j | k r� t Sn t S( uI
Check if the specified filename has correct permissions
u usert include_defaultu permissive_pki_accessi ( R
R RU RV R Ri t get_gid_listR RJ R R[ t S_IWOTHt st_modet S_IWGRPR t getuidt st_gid( R� t filenamet groupst fmode( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt check_permissions s "!c @ s3 | s t j j | � r t S| j | � sA t j d | � t St j j | � } | j j | i � j d � | k r| | j j
| i � d <t j j
j | d � �Y } g g | D] } | j � ^ q� D]! } | j � j d � s� | ^ q� | j | d <Wd QXn t � f d � | j | j d g � D� � S( u@
Check a keyid for membership in a signing file
u* Wrong permissions for %s, ignoring contentu mtimeu ru #u dataNc 3@ s' | ] } t j j j � | � Vq d S( N( R
R Rf t
expr_match( t .0t line( t keyid( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>E s ( R R R: RJ R� R t warningR< R� R t
setdefaultR
R Rb Rd t stript
startswitht any( R� R� t signing_filet mtimeRm R� t entry( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt check_signing_file3 s $[c C@ s# t j j | j d d � } | j j d d � } | d k r� t j � d t | � } x� t j j j | � D]s \ } } } xa | D]Y } t j j | | � } t j j
| � }
|
| k r� t j d | � t j
| � q� q� Wqm Wn t j j | | � } t j j | � st St j
| � t S( uG
Check a keyid for membership in a autosign directory.
u pki_diru minions_autosignu autosign_timeoutix i i< u Autosign keyid expired %s( R R R R R R4 t intR
R R; R< R R� R# R: RJ R ( R� R� t autosign_dirt expire_minutest min_timet roott dirsRB t ft stub_fileR� ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt check_autosign_dirH s %
c
C@ s | s d | j k r t S| j d } x� t j | � D]� \ } } } x� | D]� } | | k rM t j j | | � } | j | � s� t j d | � qM n t j
j j | d � �\ } xR | D]J } t j
j
j | � j � } | j d � r� q� n | | | k r� t Sq� WWd QXqM qM Wq7 Wt S( uG
Check for matching grains in the autosign_grains_dir.
u autosign_grains_diru* Wrong permissions for %s, ignoring contentu ru #N( R RJ R t walkR R R� R R� R
R Rb Rd Rf t
to_unicodeR� R� R (
R� t autosign_grainst autosign_grains_dirR� R� RB t graint
grain_fileR� R� ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt check_autosign_grains` s(
c C@ s | j | | j j d d � � S( uQ
Checks if the specified keyid should automatically be rejected.
u autoreject_fileN( R� R R RP ( R� R� ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt check_autoreject} s c C@ s` | j d r t S| j | | j j d d � � r6 t S| j | � rI t S| j | � r\ t St S( uO
Checks if the specified keyid should automatically be signed.
u auto_acceptu
autosign_fileN( R R R� R RP R� R� RJ ( R� R� R� ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt check_autosign� s
!N( t __name__t
__module__t __doc__R� R� R� R� R� R� RP R� ( ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyR� s t RemoteFuncsc B@ s� e Z d Z d � Z d � Z d � Z d � Z e d � Z e d � Z e d � Z
d � Z e d � Z d
� Z
d � Z d � Z d
� Z d � Z d � Z e d � Z d � Z d � Z d � Z RS( u�
Funcitons made available to minions, this class includes the raw routines
post validation that make up the minion access to the master
c C@ s� | | _ t j j j d | j d | j d d | j d t �| _ t j j | � | _ t j j j
| � | _ t j j
| j � | _
t j j d | j � | _ t j j | j d t d t �| _ | j � t j j | � | _ d S( Nu masteru sock_diru transportR t listent moptsRF RG ( R R
R t eventt get_eventRJ t payloadt Serialt serialt minionst CkMinionst ckminionst loadert topst clientt get_local_clientt localRH RI RL t _RemoteFuncs__setup_fileservert cachet factory( R� R ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyR� � s"
c C@ sy t j j | j � } | j | _ | j | _ | j | _ | j
| _ | j | _
| j | _ | j | _ | j | _ d S( uK
Set the local file objects from the file server interface
N( R
R� t
FileserverR t
serve_filet _serve_filet
_find_filet
_file_findt file_hasht
_file_hasht file_listt
_file_listt file_list_emptydirst _file_list_emptydirst dir_listt _dir_listt symlink_listt
_symlink_listt envst
_file_envs( R� t fs_( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt __setup_fileserver� s c @ so d | j k r t St | j d t � s- t St � f d � d
D� � rM t St j d � d � rg t Sg } xc | j d D]T } t j | � d � r{ t | j d | t � r� | j | j d | � q� q{ q{ Wd � d k r5� d j d � � d <g } x% � d D] } | j
| j � � q W| � d <n | j j | � d � d � d � j
d
d � d t �S( uS
Verify that the passed information authorized a minion to execute
u peerc 3@ s | ] } | � k Vq d S( N( ( R� Rl ( t load( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>� s u funu argu tgtu retu idu publish.*u ,u tgt_typeu globt publish_validate( u funu argu tgtu retu id( R RJ t
isinstancet dictR� t ret matcht listt extendt splitR R� t
auth_checkR R ( R� R� t permsR� t arg_t arg( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt __verify_minion_publish� s4 "
c C@ sb i } i } | j � } x' | D] } | | k r g | | <q q W| | d <| j d | d <| j d | d <| j d | d <| j d � r� | S| j d | d <| j d | d <| j d | d <| j d | d <| j d
| d
<| j d | d <| j d | d <| j d
| d
<| j d | d <| j d | d <| j d | d <| j d | d <| S( u9
Return the master options to the minion
u
file_rootsu top_file_merging_strategyu env_orderu default_topu env_onlyu rendereru failhardu state_topu state_top_saltenvu
nodegroupsu state_auto_orderu state_eventsu state_aggregateu jinja_envu
jinja_sls_envu jinja_lstrip_blocksu jinja_trim_blocks( R� R R ( R� R� R� t
file_rootsR� t saltenv( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _master_opts� s2
c C@ s6 | sI d | k r# t j d � i St j j j | j | d � sI i Sn i } i } i } d | k r� | d } d | d k r� | d d } q� n x� | j D]� } | | j j d i � k r� q� n y8 t j j j
| | j | d | d | � d t �} Wq� t k
r-} t j d | | | d � q� Xq� W| S(
uC
Return the results from master_tops if configured
u idu. Received call for external nodes without an idu optsu grainsu master_topsR t grainst merge_listsu2 Top function %s failed with error %s for minion %s(
R R> R
R t verifyt valid_idR R� R t
dictupdatet mergeR R� ( R� R� t skip_verifyR R� R t funR* ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _master_tops s.
8c
@ sQ | s) t � f d � d D� � r) i Sn d | j k r� t | j d t � sR i St � } xc | j d D]T } t j | � d � ri t | j d | t � r� | j | j d | � q� qi qi Wt � f d � | D� � s� i Sn i } t j
j j | j � d � s
| S� j
d � } | d k r`d � k r`t j
j j d d
j � d � � | } n � j
d d � } | j � d k r�d
} n | j � d k r�d } n t j
j j | j � } | j � d | d t �} | d }
xd |
D]\ } | j j d j | � d � } t | t � r�| j
� d � } | rI| | | <qIq�q�W| S( uC
Gathers the data from the specified minions' mine
c 3@ s | ] } | � k Vq d S( N( ( R� Rl ( R� ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>& s u idu tgtu funu mine_getc 3@ s% | ] } t j | � d � Vq d S( u funN( R� R� ( R� t perm( R� ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>1 s u expr_formu tgt_typeu Neonu� _mine_get: minion {0} uses pre-Nitrogen API key "expr_form". Accepting for backwards compatibility but this is not guaranteed after the Neon releaseu globu pillaru pillar_exactu compoundu compound_pillar_exactt greedyu minionsu minions/{0}u mine( u idu tgtu funN( R� R R� R� Rp R� R� R� R R
R R� R� R RP t versionst
warn_untilR t lowerR� R� t
check_minionsRJ R� t fetch(
R� R� R� R� R� R t expr_formt
match_typet checkert _resR� RH t fdata( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _mine_get! sR "
c C@ s� | s% d | k s d | k r% t Sn | j j d t � sO | j j d t � r� d j | d � } d } | j d t � s� | j j | | � } t | t � r� | j | d � | | d <q� n | j j | | | d � n t
S( u&
Return the mine data
u idu datau minion_data_cacheu enforce_mine_cacheu minions/{0}u mineu clear( RJ R R R R� R� R� R� R t storeR ( R� R� R� t cbankt ckeyt data( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _mineU s * c C@ s� d | k s d | k r t S| j j d t � sF | j j d t � r� d j | d � } d } y` | j j | | � } t | t � s� t S| d | k r� | | d =| j j | | | � n Wq� t k
r� t SXn t
S( uR
Allow the minion to delete a specific function from its own mine
u idu funu minion_data_cacheu enforce_mine_cacheu minions/{0}u mine( RJ R R R R� R� R� R� R R$ R ( R� R� R R R ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _mine_deleteg s *
c C@ se | r d | k r t S| j j d t � sA | j j d t � ra | j j d j | d � d � St S( uI
Allow the minion to delete all of its own mine contents
u idu minion_data_cacheu enforce_mine_cacheu minions/{0}u mine( RJ R R R� t flushR R ( R� R� R� ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _mine_flush{ s
* c @ s� t � f d � d D� � r t S| j d sD t j j � d � rH t St j j � d � sn d � d k rr t St j j j | j � d � s� t Sd | j d } d � k r� � d d k r� t
j d
� t S� j d d � | k r� t
j d | � t St
� d
� � j d d � | k r9t
j d | � t S� d } d | k rv| j d d � } t j j | � } n t j j | j d d � d d | � } t j j | � } t j j | � s�y t j | � Wq�t j k
r�q�Xn t j j | � r� d d k rd } n d } t j j j | | � �E } � d rX| j � d � n | j t j j j � d
� � Wd QXt S( um
Allows minions to send files to the master, files are sent to the
master file cache
c 3@ s | ] } | � k Vq d S( N( ( R� Rl ( R� ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>� s u idu pathu locu file_recvu ../i u file_recv_max_sizei u# Invalid file pointer: load[loc] < 0u sizeu& Exceeding file_recv_max_size limit: %su datau :u \u /u cachediru minionsu filesu abu wbN( u idu pathu loci ( R� RJ R R R t isabsR
R R� R� R R> R t lenRW t normpathR t dirnamet isdirt makedirsR! Rb Rd t seekRe Rf Rg R ( R� R� t file_recv_max_sizeR
t cpatht cdirt modeRm ( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt
_file_recv� s\ $&
&
"
&c @ sF t � f d � d D� � r t St j d � j d � � t j j | j � d � d � j d � j d � � � j d � | j j
d � j d i � �} | j � } | j j d
t � rB| j j
d j � d � d i � d d 6| d
6� | j j d � t k rB| j j i d d 6t j j j � d d d � � qBn | S( u7
Return the pillar data for the minion
c 3@ s | ] } | � k Vq d S( N( ( R� Rl ( R� ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>� s u idu grainsu Master _pillar using ext: %su extu saltenvu envt pillar_overrideu pillar_overrideu minion_data_cacheu minions/{0}u datau pillaru minion_data_cache_eventsu Minion data cache refreshu commentu refreshu minion( u idu grains( R� RJ R R" R R
R t
get_pillarR RL t functionst compile_pillarR� R R R R� t
fire_eventR t tagify( R� R� R R ( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _pillar� s& 9c
C@ s� d | k r t Sd | k r8 d | k s4 d | k r8 t Sd | k r� x� | d D]� } d | k rn | d } n | } | j j | | d � | j d � d k rO | j j | t j j j | d d | d �� qO qO Wn | d } | j j | | � t S( ud
Receive an event from the minion and fire it on the master event
interface
u idu eventsu tagu datau pretagt baseN( RJ R� R R RP R
R R R ( R� R� R� t
event_datat tag( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt
_minion_event� s $
:
c @ s� t j j j t j j j | j � � } t � f d � d D� � rG t S� d d k r� d j | j d � } | j j
| d � j d t � � � d <d
j | j d � } | j j
| � d � � n t j
d � d � d � | j j � � d � | j j � t j j j � d d � d g d
� � | j j � � | j d sb| j j d � rfd Sd j | j d � } | j j d � r�| | j j
k r�| j j
| � d | � n d j | j d � } | j j
| � � d S( u>
Handle the return data sent from the minions
c 3@ s | ] } | � k Vq d S( N( ( R� Rl ( R� ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>� s u returnu jidu idu requ {0}.prep_jidu master_job_cachet nocacheu nocacheu
{0}.save_loadu Got return from %s for job %su retu jobu job_cacheu
ext_job_cacheNu {0}.update_endtimeu job_cache_store_endtimeu {0}.returner( u returnu jidu id( R
R t jidt jid_to_timet gen_jidR R� RJ R RL RK R R Rt R� R R t
fire_ret_load( R� R� t endtimet prep_fstrt
saveload_fstrRM ( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _return� s( ' ) 6 c @ s� t � f d � d
D� � r d Sd � k rd d j | j d � } | j j | � d � d � n xj t j � d � D]U \ } } i � d d 6| d 6| d 6} d � k r� � d | d <n | j | � qx Wd S( ut
Receive a syndic minion return and format it to look like returns from
individual minions.
c 3@ s | ] } | � k Vq d S( N( ( R� Rl ( R� ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr> s u returnu jidu idu loadu
{0}.save_loadu master_job_cacheu outN( u returnu jidu id( R� RP R R RL RK R t iteritemsR* ( R� R� RM Rl t itemR ( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt _syndic_return s "
c @ s� d | j k r i St | j d t � s- i St � f d � d D� � rM i St � } xc | j d D]T } t j | � d � rd t | j d | t � r� | j | j d | � q� qd qd Wt } x- | D]% } t j | � d � r� t
} q� q� W| st j d � d � i Si } | j | j � | j i � d d 6t
j j j � d d � j d g � �d 6� d d 6t d 6| j d
d
6� t
j j | � } | j � S( uS
Execute a runner from a minion, return the runner's function data
u peer_runc 3@ s | ] } | � k Vq d S( N( ( R� Rl ( R� ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>1 s u funu argu idu& Minion id %s is not who it says it is!t no_parseu no_parseu docu conf_file( u funu argu id( R R� R� R� Rp R� R� R� R RJ R R R� R
R t argst parse_inputR t runnert Runnert run( R� R� R� R� t goodR� R R1 ( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt
minion_runner) s: "
c @ s� | r' t � f d � d D� � r' i St j j | j d d � } t j j | � se t j | � n t j j | � d � } t j j j
| d � �0 } � d t j j j | j
� � k s� i SWd QX| j j � d � Sd S( u�
Request the return data from a specific jid, only allowed
if the requesting minion also initialted the execution.
c 3@ s | ] } | � k Vq d S( N( ( R� Rl ( R� ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pys <genexpr>T s u jidu idu cachediru publish_authu rN( u jidu id( R� R R R R R R R
R Rb Rd Rf R� t readR� t get_cache_returns( R� R� R� R? t jid_fnRm ( ( R� s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt pub_retO s #
%
c C@ s� | j | � s i Si | d d 6t j j j | d d | j d g � �d 6| j d d � d 6| d d 6| d d 6| d d 6} d | k r� | d j d
� r� | d | j d k r� | j d | d | d <d | d <q� i Sq� | d | d <n i } | j j | � | d
<| j
j | d | d � } | d | d <t j
j | j d d � } t j
j | � s}t j | � n t j
j | t j | d
� � } t j j j | d � �' } | j t j j j | d � � Wd QX| S( u�
Publish a command initiated from a minion, this method executes minion
restrictions so that the minion publication will only work if it is
enabled in the config.
The configuration on the master allows minions to be matched to
salt functions, so the minions can only publish allowed salt functions
The config will look like this:
peer:
.*:
- .*
This configuration will enable all minions to execute all commands.
peer:
foo.example.com:
- test.*
This configuration will only allow the minion foo.example.com to
execute commands from the test module
u funu argR. u no_parseu tgt_typeu globu tgtu retu idu nodeu
nodegroupsu compoundu jidu minionsu cachediru publish_authu w+N( t# _RemoteFuncs__verify_minion_publishR
R R/ R0 R R� R R� t cmd_asyncR� R� R R R R R R t text_typeRb Rd Re Rf Rg ( R� R� t pub_loadR R R? R8 Rm ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt
minion_pubc sB
"&c C@ s� | j | � s i Si | d d 6t j j j | d d | j d g � �d 6| j d d � d 6| d d 6| d d 6| d d 6} d
| k r� y t | d
� | d <Wq� t k
r� d j | d
� } t j
| � i SXn d | k r<y t | d � | d <Wq<t k
r8d j | d � } t j
| � i SXn d | k r�| d j d
� r�| d | j d k r�| j d | d | d <d | d <q�i Sq�| d | d <n t
| d <i } x� | j j | � D]� } | j d d � d k r8| } d | k r| d | d <n | j d � | d <| | | d <q�| d | | d <d | k r�| d | d <q�q�WxF t j | j j | d � � D]% \ } } | | k r�| | | <q�q�W| j d d � d k r�| j d � n | S( u�
Publish a command initiated from a minion, this method executes minion
restrictions so that the minion publication will only work if it is
enabled in the config.
The configuration on the master allows minions to be matched to
salt functions, so the minions can only publish allowed salt functions
The config will look like this:
peer:
.*:
- .*
This configuration will enable all minions to execute all commands.
peer:
foo.example.com:
- test.*
This configuration will only allow the minion foo.example.com to
execute commands from the test module
u funu argR. u no_parseu tgt_typeu globu tgtu retu idu tmou timeoutu" Failed to parse timeout value: {0}u nodeu
nodegroupsu compoundu rawu formu u fullu jidu __jid__u return( R: R
R R/ R0 R R� t
ValueErrorR R R� R� R R R� t cmd_itert popR R+ R7 ( R� R� R= t msgR RH R Rl t val( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt minion_publish� sh
, c C@ sL d | k r t St j j | j � } | j | d d | j d t � �t S( uE
Allow a minion to request revocation of its own key
u idt preserve_minionsu preserve_minion_cache( RJ R
Rl t KeyR t
delete_keyR R ( R� R� t keyapi( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt revoke_auth� s
( R� R� R� R� R� R: R� RJ R� R R R R
R R R! R* R- R5 R9 R> RD RI ( ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyR� � s( $ ! 4
= ! & 8 Lt
LocalFuncsc B@ sM e Z d Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( u;
Set up methods for use only from the local system
c C@ s� | | _ t j j | � | _ | | _ t j j j d | j d | j d d | j d t �| _ t j
j d | j � | _ t j j
j | � | _ t j j | � | _ t j j | j d t d t �| _ t j j | � | _ d S( Nu masteru sock_diru transportR R� R� RF RG ( R R
R� R� R� Rl R R� R� RJ R� R� R� R� R� R� R0 R1 R6 RH RI RL t wheelt Wheelt wheel_( R� R Rl ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyR� � s"
c C@ so | j | � \ } } } | j j | | � } | j d � } | rM i | d 6S| j j | j d g � | d | d � } | j d � } | s� i i | d 6d j | | � d 6d 6St | t � r� d | k r� | SyG | j d � } t
j j | j
� }
|
j | | j d i � | � SWnO t k
rj} t j d � i i | j j d 6| j d
6t j | � d 6d 6SXd S( uJ
Send a master control function back to the runner system
u erroru auth_listu funu kwargu usernameu nameu; Authentication failure of type "{0}" occurred for user {1}.u messageu) Exception occurred while introspecting %su argsN( t _prep_auth_infoR6 t check_authenticationR R� t runner_checkR R� R� RA R
R1 t RunnerClientR t asynchronousR� R t exceptiont __class__R� R/ R R< ( R� R� t auth_typet err_nameRl R� R> RP t usernameR� t
runner_clientR* ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyR1 s6
c C@ s| | j | � \ } } } | j j | | d | d t �} | j d � } | rY i | d 6S| j d � } | d k r� | j j | j d g � | d | d � } | s� i i | d 6d
j | | � d 6d 6St | t � r� d | k r� | Sn t
j j j
| j � } | j d � }
t
j j j | d d
�} i d j |
� d 6| d 6| d 6| d 6} y� | j j | t
j j j | d g d
� � | j j |
| � }
|
| d <t | d <| j j | t
j j j | d g d
� � i | d 6| d 6SWn� t k
rw} t j d |
� d j |
| j j | � | d <t | d <| j j | t
j j j | d g d
� � i | d 6| d 6SXd S( uI
Send a master control function back to the wheel system
Rl t
show_usernameu erroru usernameu useru auth_listu funu kwargu nameu; Authentication failure of type "{0}" occurred for user {1}.u messaget prefixu wheelu wheel.{0}u jidu tagu newu returnu successu retu datau) Exception occurred while introspecting %su) Exception occurred in wheel {0}: {1}: {2}N( RN R6 RO R R R� t wheel_checkR R� R� R
R R# R% R RA R� R R RM t call_funcR� R RS RT R� RJ ( R� R� RU RV Rl R� R> RW R[ R# R� R R R R* ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyRK @ s\
+
+
+
c C@ s- | j j | � } | s) t j d � d S| S( u�
Create and return an authentication token, the clear load needs to
contain the eauth key and the needed authentication creds.
u0 Authentication failure of type "eauth" occurred.u ( R6 t mk_tokenR R� ( R� R� t token( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyR] � s
c C@ s$ d | k r t S| j j | d � S( uZ
Return the name associated with a token or False if the token is invalid
u token( RJ R6 R3 ( R� R� ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt get_token� s c
C@ s� | j d i � } t j j | j d � } | j | d � sQ | j | d � r� t j d | d | d � i i d d 6d d 6d
6S| j d i � j d t � } | j
j | d | j d
d � | � } | d } | j | � \ } } } | d k r| j
j | | d | �}
n | j
j | | � }
|
j d g � } |
j d
� } d j | � }
| r�t j |
� i i d d 6d d 6d
6S| d k s�| d k rw| rw| j
j | | d | d | d | j d
d � d | d d g �} | st j |
� i i d d 6d d 6d
6S| d k rO|
j d � } | | d <t j d | � qw| d k rw| j
j | � | d <qwn | j j d � s�| s�i d d 6i d; d 6| d 6d! 6Sn | d s�d" j | j d# � } | j j | d$ | j d% t � � | d <n | j j i | d 6| d � i | d d 6| d
d
6| d d 6| d d 6| d d 6t j j j | d d& | j d' g � �d 6| d 6} | j j | d( � | j j | t j j j | d d) g d* � � | j d+ ray5 d, j | j d+ � } | j j | | d | � Wqat k
r:t j d- | j d+ � qat k
r]t j d. d/ t! �qaXn y5 d, j | j d# � } | j j | | d | � WnK t k
r�t j d0 | j d# � n$ t k
r�t j d. d/ t! �n Xi | d d 6t j j j | d d& | j d' g � �d 6| d d 6| d d 6| d1 d1 6} d2 | k r_| d2 | d2 <n d
| k r|| d
| d
<n d3 | k r�| d3 | d3 <n d | k r&d4 | d k r�| d j d4 � | d4 <n d5 | d k r�| d j d5 � | d5 <n d6 | d k r&| d j d6 � | d6 <q&n d | k ret j" d7 | d | d | d � | d | d <n t j" d8 | d | d � t j d9 | � i i | d d 6| d 6d1 6| d: 6S(< ut
This method sends out publications to the minions, it can only be used
by the LocalClient.
u kwargsu publisher_acl_blacklistu useru funup %s does not have permissions to run %s. Please contact your local administrator if you believe this is in error.u AuthorizationErroru nameu Authorization error occurred.u messageu erroru delimiteru tgtu tgt_typeu globu minionsRl u auth_listu. Authentication failure of type "{0}" occurred.u AuthenticationErroru Authentication error occurred.u argR� Ro u saltutil.find_jobu tokenu usernameu Minion tokenized user = "%s"u eauthu
order_mastersu clearu encu jidu loadu {0}.prep_jidu master_job_cacheR" u nocacheR. u no_parseu new_jobu newu jobu
ext_job_cacheu
{0}.save_loadu_ The specified returner used for the external job cache "%s" does not have a save_load function!u+ The specified returner threw a stack trace:t exc_infou] The specified returner used for the master job cache "%s" does not have a save_load function!u retu idu tou
ret_configu metadatau
ret_kwargsu( User %s Published command %s with jid %su Published command %s with jid %su Published command details %su pubN(# R R
t aclt PublisherACLR t user_is_blacklistedt cmd_is_blacklistedR R> R R� R� RN R6 RO R R� R� R" t load_nameRP RL RK RJ R� R R R/ R0 R RT R R� R Rt ( R� R� t extraRy t delimiterR R� RU RV Rl R� t auth_listR> t err_msgt
authorizedRW RM t new_job_loadR= ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt publish� s�
,
/
c C@ s^ d } d | k r! d } d } n0 d | k r< d } d } n d } d } | j } | | | f S( Nu tokenu TokenAuthenticationErroru eauthu EauthAuthenticationErroru useru UserAuthenticationError( RP Rl ( R� R� Rl RU RV ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyRN W s (
R� R� R� R� R1 RK R] R_ Rl RN ( ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyRJ � s + @ �(B R� t
__future__R R R R& R� R R� R4 R[ t salt.aclR
t
salt.cryptt
salt.cachet salt.clientt salt.exceptionst salt.payloadt salt.pillart
salt.statet salt.runnert salt.autht
salt.wheelt salt.miniont salt.keyt salt.fileservert salt.utils.argst salt.utils.atomicfilet salt.utils.dictupdatet salt.utils.eventt salt.utils.filest salt.utils.gitfst salt.utils.verifyt salt.utils.minionst salt.utils.gzip_utilt salt.utils.jidt salt.utils.patht salt.utils.platformt salt.utils.stringutilst salt.utils.usert salt.utils.versionst
salt.defaultsR R t salt.extR RQ R RO t ImportErrorRJ t getLoggerR� R R R/ R9 RE RN Rn R{ R� t objectR� R� RJ ( ( ( s: /usr/lib/python2.7/site-packages/salt/daemons/masterapi.pyt <module> sx
* - �� � a
Mini Shell