Current File : //lib/python2.7/site-packages/salt/proxy/esxcluster.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m
Z
d d l m Z d g Z
y d d l Z e Z Wn e k
r� e Z n Xi Z i Z e j e � Z d Z d � Z d � Z d � Z d
� Z d � Z d � Z d S(
u�
Proxy Minion interface module for managing VMWare ESXi clusters.
Dependencies
============
- pyVmomi
- jsonschema
Configuration
=============
To use this integration proxy module, please configure the following:
Pillar
------
Proxy minions get their configuration from Salt's Pillar. This can now happen
from the proxy's configuration file.
Example pillars:
``userpass`` mechanism:
.. code-block:: yaml
proxy:
proxytype: esxcluster
cluster: <cluster name>
datacenter: <datacenter name>
vcenter: <ip or dns name of parent vcenter>
mechanism: userpass
username: <vCenter username>
passwords: (required if userpass is used)
- first_password
- second_password
- third_password
``sspi`` mechanism:
.. code-block:: yaml
proxy:
proxytype: esxcluster
cluster: <cluster name>
datacenter: <datacenter name>
vcenter: <ip or dns name of parent vcenter>
mechanism: sspi
domain: <user domain>
principal: <host kerberos principal>
proxytype
^^^^^^^^^
To use this Proxy Module, set this to ``esxdatacenter``.
cluster
^^^^^^^
Name of the managed cluster. Required.
datacenter
^^^^^^^^^^
Name of the datacenter the managed cluster is in. Required.
vcenter
^^^^^^^
The location of the VMware vCenter server (host of ip) where the datacenter
should be managed. Required.
mechanism
^^^^^^^^
The mechanism used to connect to the vCenter server. Supported values are
``userpass`` and ``sspi``. Required.
Note:
Connections are attempted using all (``username``, ``password``)
combinations on proxy startup.
username
^^^^^^^^
The username used to login to the host, such as ``root``. Required if mechanism
is ``userpass``.
passwords
^^^^^^^^^
A list of passwords to be used to try and login to the vCenter server. At least
one password in this list is required if mechanism is ``userpass``. When the
proxy comes up, it will try the passwords listed in order.
domain
^^^^^^
User domain. Required if mechanism is ``sspi``.
principal
^^^^^^^^
Kerberos principal. Rquired if mechanism is ``sspi``.
protocol
^^^^^^^^
If the ESXi host is not using the default protocol, set this value to an
alternate protocol. Default is ``https``.
port
^^^^
If the ESXi host is not using the default port, set this value to an
alternate port. Default is ``443``.
Salt Proxy
----------
After your pillar is in place, you can test the proxy. The proxy can run on
any machine that has network connectivity to your Salt Master and to the
vCenter server in the pillar. SaltStack recommends that the machine running the
salt-proxy process also run a regular minion, though it is not strictly
necessary.
To start a proxy minion one needs to establish its identity <id>:
.. code-block:: bash
salt-proxy --proxyid <proxy_id>
On the machine that will run the proxy, make sure there is a configuration file
present. By default this is ``/etc/salt/proxy``. If in a different location, the
``<configuration_folder>`` has to be specified when running the proxy:
file with at least the following in it:
.. code-block:: bash
salt-proxy --proxyid <proxy_id> -c <configuration_folder>
Commands
--------
Once the proxy is running it will connect back to the specified master and
individual commands can be runs against it:
.. code-block:: bash
# Master - minion communication
salt <cluster_name> test.ping
# Test vcenter connection
salt <cluster_name> vsphere.test_vcenter_connection
States
------
Associated states are documented in
:mod:`salt.states.esxcluster </ref/states/all/salt.states.esxcluster>`.
Look there to find an example structure for Pillar as well as an example
``.sls`` file for configuring an ESX cluster from scratch.
i ( t absolute_importt print_functiont unicode_literalsN( t EsxclusterProxySchema( t mergeu
esxclusterc C@ s t r
t St d f S( uA
Only load if the vsphere execution module is available.
u) The esxcluster proxy module did not load.( t HAS_JSONSCHEMAt __virtualname__t False( ( ( s9 /usr/lib/python2.7/site-packages/salt/proxy/esxcluster.pyt __virtual__� s c C@ s@ t j d t j � � t j d � t j � } t j d | � t | j d i � t j d i � � } t j d | � y t
j | | � Wn+ t
j j
k
r� } t j j | � � n Xx d D] } | | t | <q� Wt d d
k rKd | k rt j j d � � n d
| k r)t j j d � � n x� d D] } | | t | <q0Wna d | k rlt j j d � � n d | k r�t j j d � � n x d D] } | | t | <q�W| j d � t d <| j d � t d <t d d
k r<t j d � y t � \ } } | t d <Wq<t j j k
r8} t j d | � t SXn t S( uq
This function gets called when the proxy starts up. For
login
the protocol and port are cached.
u. Initting esxcluster proxy module in process %su! Validating esxcluster proxy inputu schema = %su proxyu proxy_conf = %su vcenteru
datacenteru clusteru mechanismu userpassu usernameuL Mechanism is set to 'userpass', but no 'username' key found in proxy config.u passwordsuM Mechanism is set to 'userpass', but no 'passwords' key found in proxy config.u domainuF Mechanism is set to 'sspi', but no 'domain' key found in proxy config.u principaluI Mechanism is set to 'sspi', but no 'principal' key found in proxy config.u protocolu portuO Retrieving credentials and testing vCenter connection for mehchanism 'userpass'u passwordu Error: %s( u vcenteru
datacenteru clusteru mechanism( u usernameu passwords( u domainu principal( t logt debugt ost getpidR t serializet traceR t gett
__pillar__t
jsonschemat validatet
exceptionst ValidationErrort saltt InvalidConfigErrort DETAILSt find_credentialst SaltSystemExitt criticalR t True( t optst schemat
proxy_conft exct keyt usernamet passwordt err( ( s9 /usr/lib/python2.7/site-packages/salt/proxy/esxcluster.pyt init� sP
'
c C@ s t S( ug
Returns True.
CLI Example:
.. code-block:: bash
salt esx-cluster test.ping
( R ( ( ( s9 /usr/lib/python2.7/site-packages/salt/proxy/esxcluster.pyt ping s
c C@ s t j d � d S( u_
Shutdown the connection to the proxy device. For this proxy,
shutdown is a no-op.
u% esxcluster proxy shutdown() called...N( R R
( ( ( s9 /usr/lib/python2.7/site-packages/salt/proxy/esxcluster.pyt shutdown s c C@ s� d t k r* d t k r* t d t d f St d } x6 | D]. } | t d <t d � s^ q; n t d | f SWt j j d � � d S( u]
Cycle through all the possible credentials and return the first one that
works.
u usernameu passwordu passwordsu vsphere.test_vcenter_connectionu3 Cannot complete login due to incorrect credentials.N( R t __salt__R R t VMwareConnectionError( t passwordsR" ( ( s9 /usr/lib/python2.7/site-packages/salt/proxy/esxcluster.pyR s
c C@ s t S( u2
Function that returns the cached details
( R ( ( ( s9 /usr/lib/python2.7/site-packages/salt/proxy/esxcluster.pyt get_details1 s ( t __doc__t
__future__R R R t loggingR t salt.exceptionsR t salt.config.schemas.esxclusterR t salt.utils.dictupdateR t __proxyenabled__R R R t ImportErrorR t GRAINS_CACHER t getLoggert __name__R R R R$ R% R& R R* ( ( ( s9 /usr/lib/python2.7/site-packages/salt/proxy/esxcluster.pyt <module>� s,
?
Mini Shell