Current File : //lib/python2.7/site-packages/salt/sdb/confidant.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z y" d d l Z d d l Z e
Z Wn e k
ru e
Z n Xe j e � Z d Z d � Z d d � Z d S( u7
An SDB module for getting credentials from confidant.
Configuring the Confidant module
================================
The module can be configured via sdb in the minion config:
.. code-block:: yaml
confidant:
driver: confidant
# The URL of the confidant web service
url: 'https://confidant-production.example.com'
# The context to use for KMS authentication
auth_context:
from: example-production-iad
to: confidant-production-iad
user_type: service
# The KMS master key to use for authentication
auth_key: "alias/authnz"
# Cache file for KMS auth token
token_cache_file: /run/confidant/confidant_token
# The duration of the validity of a token, in minutes
token_duration: 60
# key, keyid and region can be defined in the profile, but it's generally
# best to use IAM roles or environment variables for AWS auth.
keyid: 98nh9h9h908h09kjjk
key: jhf908gyeghehe0he0g8h9u0j0n0n09hj09h0
region: us-east-1
:depends: confidant-common, confidant-client
Module Documentation
====================
i ( t absolute_importt print_functiont unicode_literalsNu confidantc C@ s t r
t St Sd S( u9
Only return if requests and boto are installed.
N( t HAS_LIBSt __virtualname__t False( ( ( s6 /usr/lib/python2.7/site-packages/salt/sdb/confidant.pyt __virtual__: s c C@ s� i t d 6d d 6d d 6} t j | � } | j d t � rS t | d <| j | � S| j d d � } y, | d } | d } | d } | d
} Wn4 t t f k
r� d } t j | � | j | � SX| j d d
� }
| j d d � } | j d d � } | j d � }
| j d d � } t
j j | | | d | d | d |
d |
d | d | �} y | j
| d t �} Wn! t
j j k
r�| j | � SX| d s�| j | � St
j j | � } t | d <| j | � S( un
Read pillar data from Confidant via its API.
CLI Example:
salt myminion sdb.get 'sdb://confidant/credentials'
Valid keys are: credentials, credentials_metadata, result. credentials
returns a dict of joined credential_pairs, credentials_metadata returns a
dict of metadata relevant to the credentials mapped to the confidant
service, and result returns a bool that can be used to determine if the sdb
call succeeded or failed to fetch credentials from confidant (or from local
cache). If result is false, the data in credentials or credentials_metadata
can't be trusted.
u resultu credentialsu credentials_metadatau disabledu
token_versioni u urlu auth_keyu auth_contextu fromu3 profile has undefined url, auth_key or auth_contextu regionu us-east-1u token_durationi< u retriesi u token_cache_fileu backofft token_lifetimet
token_versiont token_cache_filet regiont retriest backofft
decrypt_blindN( R t Nonet copyt deepcopyt gett Truet KeyErrort TypeErrort logt debugt confidantt clientt ConfidantClientt get_servicet TokenCreationErrort formattert combined_credential_pair_format( t keyt profilet rett profile_dataR t urlt auth_keyt auth_contextt rolet msgR
t token_durationR R R R t data( ( s6 /usr/lib/python2.7/site-packages/salt/sdb/confidant.pyR D sR
( t __doc__t
__future__R R R R t loggingt confidant.clientR t confidant.formatterR R t ImportErrorR t getLoggert __name__R R R R R ( ( ( s6 /usr/lib/python2.7/site-packages/salt/sdb/confidant.pyt <module>% s
Mini Shell