Current File : //lib/python2.7/site-packages/salt/states/azurearm_resource.pyo
�
���^c @@ s� d Z d d l m Z d d l Z d d l Z d d l Z d Z e j e � Z
d � Z e e e d � Z
e d � Z e e e e e e e e e d e e e e d � Z e d
� Z e e e e e d � Z e d � Z d S(
s�
Azure (ARM) Resource State Module
.. versionadded:: 2019.2.0
:maintainer: <devops@decisionlab.io>
:maturity: new
:depends:
* `azure <https://pypi.python.org/pypi/azure>`_ >= 2.0.0
* `azure-common <https://pypi.python.org/pypi/azure-common>`_ >= 1.1.8
* `azure-mgmt <https://pypi.python.org/pypi/azure-mgmt>`_ >= 1.0.0
* `azure-mgmt-compute <https://pypi.python.org/pypi/azure-mgmt-compute>`_ >= 1.0.0
* `azure-mgmt-network <https://pypi.python.org/pypi/azure-mgmt-network>`_ >= 1.7.1
* `azure-mgmt-resource <https://pypi.python.org/pypi/azure-mgmt-resource>`_ >= 1.1.0
* `azure-mgmt-storage <https://pypi.python.org/pypi/azure-mgmt-storage>`_ >= 1.0.0
* `azure-mgmt-web <https://pypi.python.org/pypi/azure-mgmt-web>`_ >= 0.32.0
* `azure-storage <https://pypi.python.org/pypi/azure-storage>`_ >= 0.34.3
* `msrestazure <https://pypi.python.org/pypi/msrestazure>`_ >= 0.4.21
:platform: linux
:configuration: This module requires Azure Resource Manager credentials to be passed as a dictionary of
keyword arguments to the ``connection_auth`` parameter in order to work properly. Since the authentication
parameters are sensitive, it's recommended to pass them to the states via pillar.
Required provider parameters:
if using username and password:
* ``subscription_id``
* ``username``
* ``password``
if using a service principal:
* ``subscription_id``
* ``tenant``
* ``client_id``
* ``secret``
Optional provider parameters:
**cloud_environment**: Used to point the cloud driver to different API endpoints, such as Azure GovCloud. Possible values:
* ``AZURE_PUBLIC_CLOUD`` (default)
* ``AZURE_CHINA_CLOUD``
* ``AZURE_US_GOV_CLOUD``
* ``AZURE_GERMAN_CLOUD``
Example Pillar for Azure Resource Manager authentication:
.. code-block:: yaml
azurearm:
user_pass_auth:
subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617
username: fletch
password: 123pass
mysubscription:
subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617
tenant: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF
client_id: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF
secret: XXXXXXXXXXXXXXXXXXXXXXXX
cloud_environment: AZURE_PUBLIC_CLOUD
Example states using Azure Resource Manager authentication:
.. code-block:: jinja
{% set profile = salt['pillar.get']('azurearm:mysubscription') %}
Ensure resource group exists:
azurearm_resource.resource_group_present:
- name: my_rg
- location: westus
- tags:
how_awesome: very
contact_name: Elmer Fudd Gantry
- connection_auth: {{ profile }}
Ensure resource group is absent:
azurearm_resource.resource_group_absent:
- name: other_rg
- connection_auth: {{ profile }}
i ( t absolute_importNt azurearm_resourcec C@ s d t k r t St S( sV
Only make this state available if the azurearm_resource module is available.
s0 azurearm_resource.resource_group_check_existence( t __salt__t __virtualname__t False( ( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pyt __virtual__a s c
K@ s& i | d 6t d 6d d 6i d 6} t | t � s? d | d <| Si } t d | | � } | rt d | | � } t d | j d
i � | p� i � | d <| d s� t | d <d j | � | d <| St d rvd
j | � | d <d | d <i | j d
i � d 6| d 6| d <| Sn_ t d rvd j | � | d <d | d <i i d 6i | d 6| d 6| d 6| d
6d 6| d <| S| j
� } | j | � t d | | d | d
| | �} t d | | � } | rt | d <d j | � | d <i i d 6| d 6| d <| Sd j | | j d � � | d <| S( s
.. versionadded:: 2019.2.0
Ensure a resource group exists.
:param name:
Name of the resource group.
:param location:
The Azure location in which to create the resource group. This value cannot be updated once
the resource group is created.
:param managed_by:
The ID of the resource that manages this resource group. This value cannot be updated once
the resource group is created.
:param tags:
A dictionary of strings can be passed as tag metadata to the resource group object.
:param connection_auth:
A dict with subscription and authentication parameters to be used in connecting to the
Azure Resource Manager API.
Example usage:
.. code-block:: yaml
Ensure resource group exists:
azurearm_resource.resource_group_present:
- name: group1
- location: eastus
- tags:
contact_name: Elmer Fudd Gantry
- connection_auth: {{ profile }}
t namet resultt t commentt changessH Connection information must be specified via connection_auth dictionary!s0 azurearm_resource.resource_group_check_existences$ azurearm_resource.resource_group_gets dictdiffer.deep_difft tagss& Resource group {0} is already present.t tests) Resource group {0} tags would be updated.t oldt news$ Resource group {0} would be created.t locationt
managed_bys1 azurearm_resource.resource_group_create_or_updates$ Resource group {0} has been created.s* Failed to create resource group {0}! ({1})t errorN( R t
isinstancet dictR t __utils__t gett Truet formatt __opts__t Nonet copyt update(
R R R R t connection_autht kwargst rett groupt presentt group_kwargs( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pyt resource_group_presenth sj %
)
c C@ ss i | d 6t d 6d d 6i d 6} t | t � s? d | d <| Si } t d | | � } | s t | d <d j | � | d <| St d r� t d
| | � } d j | � | d <d | d <i | d 6i d
6| d <| St d
| | � } t d | | � } | r
t } n t d | | � } | s\t | d <d j | � | d <i | d 6i d
6| d <| Sd j | � | d <| S( sC
.. versionadded:: 2019.2.0
Ensure a resource group does not exist in the current subscription.
:param name:
Name of the resource group.
:param connection_auth:
A dict with subscription and authentication parameters to be used in connecting to the
Azure Resource Manager API.
R R R R R
sH Connection information must be specified via connection_auth dictionary!s0 azurearm_resource.resource_group_check_existences% Resource group {0} is already absent.R s$ azurearm_resource.resource_group_gets$ Resource group {0} would be deleted.R
R s' azurearm_resource.resource_group_deletes$ Resource group {0} has been deleted.s$ Failed to delete resource group {0}!N( R R R R R R R R ( R R R R R t deleted( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pyt resource_group_absent� sH
t jinjac $ K@ s i | d 6t d 6d d 6i d 6} t | t � s? d | d <| S| rb | rb | rb d | d <| St d � | | | g D� � d k r� d
| d <| S| s� | r� | s� | s� | s� | s� | s� | r� d | d <| Si } | r y t j | � } Wq3t k
r} d j | � | d <| SXn| r3yD t d
d |
| | | d d d t
d d d |
| � \ } } } Wn* t k
r�} d j | | � | d <| SX| s�d j | � | d <| Sy4 t j j
j | d � � } t j | � } Wd QXWn* t k
r} d j | | � | d <| SX| r3t j j
j | � q3n | } | sE| r&| j d � rf| j d � } n | j d i � j d � } | j d i � j d � } | j d i � j d � } | j d i � j d � } | j d i � j d � } | j d i � j d � } | j d i � j d � } n t d | d d | �} d | k r�| r�| j � | j d d � j � k r�i | j d � d! 6| d" 6| d d <n | p�d j � | j d d � j � k r�i | j d � d! 6| d" 6| d d <n | p�d j � | j d# d � j � k rAi | j d# � d! 6| d" 6| d d# <n | pJd j � | j d d � j � k r�i | j d � d! 6| d" 6| d d <n t d$ | j d% i � | p�i � } | r�| | d d% <n t d$ | j d i � | p�i � } | r | | d d <n t d$ | j d i � | p*i � } | rG| | d d <n | d srt | d <d& j | � | d <| St d' r�d( j | � | d <d | d <| SnP i i d! 6i | d 6| d 6| d 6| d# 6| d 6| d 6| d 6| d% 6d" 6| d <t d' rd) j | � | d <d | d <| St | t � rEt j t j | � � } n t | t � rot j t j | � � } n | j � } | j | � t d* d | d% | d | d | d# | d | d | d | | � } d | k r�t | d <d+ j | � | d <| Sd, j | | j d � � | d <| S(- s�
.. versionadded:: 2019.2.0
Ensure a security policy definition exists.
:param name:
Name of the policy definition.
:param policy_rule:
A YAML dictionary defining the policy rule. See `Azure Policy Definition documentation
<https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition#policy-rule>`_ for details on the
structure. One of ``policy_rule``, ``policy_rule_json``, or ``policy_rule_file`` is required, in that order of
precedence for use if multiple parameters are used.
:param policy_rule_json:
A text field defining the entirety of a policy definition in JSON. See `Azure Policy Definition documentation
<https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition#policy-rule>`_ for details on the
structure. One of ``policy_rule``, ``policy_rule_json``, or ``policy_rule_file`` is required, in that order of
precedence for use if multiple parameters are used. Note that the `name` field in the JSON will override the
``name`` parameter in the state.
:param policy_rule_file:
The source of a JSON file defining the entirety of a policy definition. See `Azure Policy Definition
documentation <https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition#policy-rule>`_ for
details on the structure. One of ``policy_rule``, ``policy_rule_json``, or ``policy_rule_file`` is required,
in that order of precedence for use if multiple parameters are used. Note that the `name` field in the JSON
will override the ``name`` parameter in the state.
:param skip_verify:
Used for the ``policy_rule_file`` parameter. If ``True``, hash verification of remote file sources
(``http://``, ``https://``, ``ftp://``) will be skipped, and the ``source_hash`` argument will be ignored.
:param source_hash:
This can be a source hash string or the URI of a file that contains source hash strings.
:param source_hash_name:
When ``source_hash`` refers to a hash file, Salt will try to find the correct hash by matching the
filename/URI associated with that hash.
:param policy_type:
The type of policy definition. Possible values are NotSpecified, BuiltIn, and Custom. Only used with the
``policy_rule`` parameter.
:param mode:
The policy definition mode. Possible values are NotSpecified, Indexed, and All. Only used with the
``policy_rule`` parameter.
:param display_name:
The display name of the policy definition. Only used with the ``policy_rule`` parameter.
:param description:
The policy definition description. Only used with the ``policy_rule`` parameter.
:param metadata:
The policy definition metadata defined as a dictionary. Only used with the ``policy_rule`` parameter.
:param parameters:
Required dictionary if a parameter is used in the policy rule. Only used with the ``policy_rule`` parameter.
:param connection_auth:
A dict with subscription and authentication parameters to be used in connecting to the
Azure Resource Manager API.
Example usage:
.. code-block:: yaml
Ensure policy definition exists:
azurearm_resource.policy_definition_present:
- name: testpolicy
- display_name: Test Policy
- description: Test policy for testing policies.
- policy_rule:
if:
allOf:
- equals: Microsoft.Compute/virtualMachines/write
source: action
- field: location
in:
- eastus
- eastus2
- centralus
then:
effect: deny
- connection_auth: {{ profile }}
R R R R R
sH Connection information must be specified via connection_auth dictionary!sL One of "policy_rule", "policy_rule_json", or "policy_rule_file" is required!c s@ s | ] } | d k Vq d S( N( R ( t .0t x( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pys <genexpr>� s i sP Only one of "policy_rule", "policy_rule_json", or "policy_rule_file" is allowed!s] Policy definitions cannot be passed when "policy_rule_json" or "policy_rule_file" is defined!s& Unable to load policy rule json! ({0})s file.get_managedt skip_verifys. Unable to locate policy rule file "{0}"! ({1})s) Unable to locate policy rule file "{0}"!)t rNs, Unable to load policy rule file "{0}"! ({1})t
propertiest
policyRulet
policyTypet modet displayNamet descriptiont metadatat
parameterss' azurearm_resource.policy_definition_gett azurearm_log_levelt infoR t policy_typeR
R t display_names dictdiffer.deep_difft policy_rules) Policy definition {0} is already present.R s' Policy definition {0} would be updated.s' Policy definition {0} would be created.s4 azurearm_resource.policy_definition_create_or_updates' Policy definition {0} has been created.s- Failed to create policy definition {0}! ({1})( R R R t sumt jsont loadst ExceptionR R R t __env__t saltt utilst filest fopent loadt removeR t lowerR R R t dumpsR R ( R R6 R4 R- R5 R/ R0 R1 t policy_rule_jsont policy_rule_filet templatet source_hasht source_hash_nameR( R R R t temp_rulet exct sfnt
source_sumt comment_t prft policy_namet policyt rule_changest meta_changest
param_changest
policy_kwargs( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pyt policy_definition_present s [
%
$
****%%%
c C@ s1 i | d 6t d 6d d 6i d 6} t | t � s? d | d <| St d | d d | �} d
| k r� t | d <d j | � | d <| St d r� d
j | � | d <d | d <i | d 6i d 6| d <| St d | | � } | rt | d <d j | � | d <i | d 6i d 6| d <| Sd j | � | d <| S( sI
.. versionadded:: 2019.2.0
Ensure a policy definition does not exist in the current subscription.
:param name:
Name of the policy definition.
:param connection_auth:
A dict with subscription and authentication parameters to be used in connecting to the
Azure Resource Manager API.
R R R R R
sH Connection information must be specified via connection_auth dictionary!s' azurearm_resource.policy_definition_getR2 R3 R s( Policy definition {0} is already absent.R s' Policy definition {0} would be deleted.R
R s* azurearm_resource.policy_definition_deletes' Policy definition {0} has been deleted.s' Failed to delete policy definition {0}!N( R R R R R R R R ( R R R RP R# ( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pyt policy_definition_absent# s<
c K@ s� i | d 6t d 6d d 6i d 6} t | t � s? d | d <| St d | | d d | �}
d
|
k r| r� | j � |
j d d � j � k r� i |
j d � d 6| d
6| d d <n | j � |
d j � k r� i |
d d 6| d
6| d d <n |
d j d � d } | j � | j � k rFi | d 6| d
6| d d <n | pOd j � |
j d d � j � k r�i |
j d � d 6| d
6| d d <n | p�d j � |
j d d � j � k r�i |
j d � d 6| d
6| d d <n t d |
j d i � | p i � } | r&| | d d <n | d sQt | d <d j | � | d <| St
d r�d j | � | d <d | d <| SnI i i d 6i | d 6| d 6| d 6| d 6| d 6| d 6| d 6d
6| d <t
d r�d j | � | d <d | d <| St | t � r t j
t j | � � } n | j � }
|
j | � t d d | d | d | d | d | d | d | |
� }
d
|
k r�t | d <d j | � | d <| Sd j | |
j d
� � | d <| S( s�
.. versionadded:: 2019.2.0
Ensure a security policy assignment exists.
:param name:
Name of the policy assignment.
:param scope:
The scope of the policy assignment.
:param definition_name:
The name of the policy definition to assign.
:param display_name:
The display name of the policy assignment.
:param description:
The policy assignment description.
:param assignment_type:
The type of policy assignment.
:param parameters:
Required dictionary if a parameter is used in the policy rule.
:param connection_auth:
A dict with subscription and authentication parameters to be used in connecting to the
Azure Resource Manager API.
Example usage:
.. code-block:: yaml
Ensure policy assignment exists:
azurearm_resource.policy_assignment_present:
- name: testassign
- scope: /subscriptions/bc75htn-a0fhsi-349b-56gh-4fghti-f84852
- definition_name: testpolicy
- display_name: Test Assignment
- description: Test assignment for testing assignments.
- connection_auth: {{ profile }}
R R R R R
sH Connection information must be specified via connection_auth dictionary!s' azurearm_resource.policy_assignment_getR2 R3 R t typeR
R t scopet policy_definition_idt /i����t definition_nameR5 R/ s dictdiffer.deep_diffR1 s) Policy assignment {0} is already present.R s' Policy assignment {0} would be updated.s' Policy assignment {0} would be created.s* azurearm_resource.policy_assignment_creates' Policy assignment {0} has been created.s- Failed to create policy assignment {0}! ({1})N( R R R R RB R t splitR R R R R R8 R9 RC R R ( R RX R[ R5 R/ t assignment_typeR1 R R R RP t pa_nameRS RT ( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pyt policy_assignment_presentZ s� .
* **%
c C@ s7 i | d 6t d 6d d 6i d 6} t | t � s? d | d <| St d | | d d | �} d
| k r� t | d <d j | � | d <| St d r� d
j | � | d <d | d <i | d 6i d 6| d <| St d | | | � } | r t | d <d j | � | d <i | d 6i d 6| d <| Sd j | � | d <| S( sz
.. versionadded:: 2019.2.0
Ensure a policy assignment does not exist in the provided scope.
:param name:
Name of the policy assignment.
:param scope:
The scope of the policy assignment.
connection_auth
A dict with subscription and authentication parameters to be used in connecting to the
Azure Resource Manager API.
R R R R R
sH Connection information must be specified via connection_auth dictionary!s' azurearm_resource.policy_assignment_getR2 R3 R s( Policy assignment {0} is already absent.R s' Policy assignment {0} would be deleted.R
R s* azurearm_resource.policy_assignment_deletes' Policy assignment {0} has been deleted.s' Failed to delete policy assignment {0}!N( R R R R R R R R ( R RX R R RP R# ( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pyt policy_assignment_absent� sD
( t __doc__t
__future__R R8 t loggingt salt.utils.filesR< R t getLoggert __name__t logR R R" R$ R RU RV R_ R` ( ( ( sA /usr/lib/python2.7/site-packages/salt/states/azurearm_resource.pyt <module>R s$ m A � 7 �
Mini Shell