Current File : //lib/python2.7/site-packages/salt/states/boto_ec2.pyo
�
���^c + @@ s� d Z d d l m Z m Z m Z d d l Z d d l m Z m Z d d l m Z d d l
m Z d d l Z
d d l j j Z d d l m Z m Z e j e � Z d � Z e e e e e e d � Z e e e e d
� Z e e e e e e e e e e e e d � Z d � Z d
� Z e e e e e d � Z e d d � Z! e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e d �* Z" e e e e e e e e d � Z# e e e e e e e e e d � Z$ e e e e e d � Z% e e e e e e e e e e e e e e e d � Z& e e e e e e e e d � Z' e e e e e e e d � Z( d S( u�
Manage EC2
.. versionadded:: 2015.8.0
This module provides an interface to the Elastic Compute Cloud (EC2) service
from AWS.
The below code creates a key pair:
.. code-block:: yaml
create-key-pair:
boto_ec2.key_present:
- name: mykeypair
- save_private: /root/
- region: eu-west-1
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
.. code-block:: yaml
import-key-pair:
boto_ec2.key_present:
- name: mykeypair
- upload_public: 'ssh-rsa AAAA'
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
You can also use salt:// in order to define the public key.
.. code-block:: yaml
import-key-pair:
boto_ec2.key_present:
- name: mykeypair
- upload_public: salt://mybase/public_key.pub
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
The below code deletes a key pair:
.. code-block:: yaml
delete-key-pair:
boto_ec2.key_absent:
- name: mykeypair
- region: eu-west-1
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
i ( t absolute_importt print_functiont unicode_literalsN( t timet sleep( t six( t range( t SaltInvocationErrort CommandExecutionErrorc C@ s d t k r d St Sd S( u)
Only load if boto is available.
u boto_ec2.get_keyu boto_ec2N( t __salt__t False( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt __virtual__E s c
C@ s5 i | d 6t d 6d d 6i d 6} t d | | | | | � } t j d | � | d k r� d | k r� y t d | � } Wq� t k
r� } t j | � d
j | � | d <t | d <| SXn | st d r� d j | � | d <d | d <| S| ro| rot d
| | | | | | � }
|
rOt | d <d j | � | d <|
| d d <qt | d <d j | � | d <q1| r�| r�t d | | | | | | � } | r�t | d <d j | � | d <d | d d <| | d d <qt | d <d j | � | d <q1t | d <d | d <n t | d <d j | � | d <| S( u%
Ensure key pair is present.
u nameu resultu u commentu changesu boto_ec2.get_keyu exists is %su salt://u cp.get_file_stru File {0} not found.u testu! The key {0} is set to be created.u boto_ec2.create_keyu The key {0} is created.u newu Could not create key {0} u boto_ec2.import_keyu oldu0 You can either upload or download a private key u The key name {0} already existsN( t TrueR t logt debugt Nonet IOErrort formatR
t __opts__( t namet save_privatet
upload_publict regiont keyt keyidt profilet rett existst et createdt imported( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt key_presentO sX
c C@ s i | d 6t d 6d d 6i d 6} t d | | | | | � } | r� t d ro d j | � | d <d | d <| St d | | | | | � } t j d
| � | r� t | d <d j | � | d <| | d d <q t | d <d
j | � | d <n t | d <d j | � | d <| S( u
Deletes a key pair
u nameu resultu u commentu changesu boto_ec2.get_keyu testu! The key {0} is set to be deleted.u boto_ec2.delete_keyu exists is %su The key {0} is deleted.u oldu Could not delete key {0} u The key name {0} does not existN( R R R R R R
R R
( R R R R R R R t deleted( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt
key_absent� s.
c
C@ s� t j j j | | f � s* t d � � n | s? t d � � n t | t � s] t d � � n t | t � s{ t d � � n i | d 6t d 6d d 6i d 6}
t d
d | d | d
|
d | d | � } d | k r� t
|
d <d j | d d � |
d <|
S| d s*t d rud |
d <| rAd j
|
d d g � |
d <n | rgd j
|
d d g � |
d <n dI |
d <|
St d | d | d | d | d | d | d | d
|
d | d | � } d | k r�t
|
d <d j | d d � |
d <|
S| d | d <d j | � |
d <| d d |
d d <n
t | d d! | | |
| | � } t j |
d | d � |
d <| d |
d <| d s�| d |
d <|
d t
k r�|
Sn t | d | | |
| | � } t j |
d | d � |
d <d j
|
d | d g � |
d <| d s4| d |
d <|
d t
k r4|
Sn t | d d" | | |
| | � } t j |
d | d � |
d <d j
|
d | d g � |
d <| d s�| d |
d <|
S| rgd# | d k rGt d r�d j
|
d d$ g � |
d <qd| d% k rd% n dI } t d& d' | d | d
|
d | d | � } | rt d( d) dI d* dI d+ dI d, | d- d. | d d d dI d/ t
d | d
|
d | d | � } | sDt d0 d+ dI d, | d- d | d
|
d | d | � } t
|
d <d1 j | r�d2 n d3 � } d j
|
d | g � |
d <|
Sqdt
|
d <d j
|
d d4 g � |
d <|
Sqgd j
|
d d5 g � |
d <n | r�x| D]} d | k r�d6 } t | � � n t j d7 | � dI } d8 } d9 | d: <t
} d; | k r�| j d; � } n | rBd< | d k r| d d< | d= <qTd> | k r-| d> | d= <qTd? } t | � � n | d d@ | d= <dA | k rr| j dA � } n | d8 k r�dB | k r�| | dB <n dC | k r�|
| dC <n dD | k r�| | dD <n dE | k r�| | dE <q�n t dF j
| dG g � | � } t j dH | � t j |
d | d � |
d <d j
|
d | d g � |
d <| d st| d |
d <|
d t
k r�|
SqtqtWn |
S(J u�
Ensure the EC2 ENI exists.
.. versionadded:: 2016.3.0
name
Name tag associated with the ENI.
subnet_id
The VPC subnet ID the ENI will exist within.
subnet_name
The VPC subnet name the ENI will exist within.
private_ip_address
The private ip address to use for this ENI. If this is not specified
AWS will automatically assign a private IP address to the ENI. Must be
specified at creation time; will be ignored afterward.
description
Description of the key.
groups
A list of security groups to apply to the ENI.
source_dest_check
Boolean specifying whether source/destination checking is enabled on
the ENI.
allocate_eip
allocate and associate an EIP to the ENI. Could be 'standard' to
allocate Elastic IP to EC2 region or 'vpc' to get it for a
particular VPC
.. versionchanged:: 2016.11.0
arecords
A list of arecord dicts with attributes needed for the DNS add_record state.
By default the boto_route53.add_record state will be used, which requires: name, zone, ttl, and identifier.
See the boto_route53 state for information about these attributes.
Other DNS modules can be called by specifying the provider keyword.
By default, the private ENI IP address will be used, set 'public: True' in the arecord dict to use the ENI's public IP address
.. versionadded:: 2016.3.0
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string)
that contains a dict with region, key and keyid.
u@ One (but not both) of subnet_id or subnet_name must be provided.u groups is a required argument.u groups must be a list.u! source_dest_check must be a bool.u nameu resultu u commentu changesu boto_ec2.get_network_interfaceR R R R R u erroru' Error when attempting to find eni: {0}.u messageu testu ENI is set to be created.u u4 An EIP is set to be allocated/assocaited to the ENI.u A records are set to be created.u! boto_ec2.create_network_interfacet subnet_idt subnet_namet private_ip_addresst descriptiont groupsu Failed to create ENI: {0}u Created ENI {0}u idu descriptionu source_dest_checku allocationIdu8 An EIP is set to be allocated and assocaited to the ENI.u vpcu boto_ec2.allocate_eip_addresst domainu boto_ec2.associate_eip_addresst instance_idt
instance_namet public_ipt
allocation_idu
allocation_idt network_interface_idt allow_reassociationu boto_ec2.release_eip_addressuH Failed to assocaite the allocated EIP address with the ENI. The EIP {0}u was successfully released.u was NOT RELEASED.u! Failed to allocate an EIP addressu1 An EIP is already allocated/assocaited to the ENIu+ The arecord must contain a "name" property.u processing arecord %su boto_route53u Au record_typeu publicu publicIpu valueu public_ipus Unable to add an A record for the public IP address, a public IP address does not seem to be allocated to this ENI.u private_ip_addressu provideru profileu keyu keyidu regionu .u presentu" ret from dns_provider.present = %sN( t saltt utilst datat exactly_oneR t
isinstancet listt boolR R R
R R t joinR t _eni_attributet
dictupdatet updatet _eni_groupsR
R t popR t
__states__( R R" R# R$ R% R& t source_dest_checkt allocate_eipt arecordsR R R R R t rt
result_createt _retR' t eip_alloct msgt arecordt dns_providert public_ip_arecord( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt eni_present� s H"
!
!
!
!
c
C@ s i t d 6d d 6i d 6} | | | k r/ | St d rZ d j | � | d <d | d <| St d d | d d
| d | d | d
| d | d | � } d | k r� d } t | d <| j | | d d � | d <n3 d j | � | d <i | | d 6| d 6| d | <| S( Nu resultu u commentu changesu testu ENI set to have {0} updated.u+ boto_ec2.modify_network_interface_attributeR, u idt attrt valueR R R R u erroru Failed to update ENI {0}: {1}.u messageu Updated ENI {0}.u oldu new( R R R R R R
(
t metadataRH RI R R R R R t
result_updateRC ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyR6 � s&
!
! c C@ sp i t d 6d d 6i d 6} g | d D] } | d ^ q& } | j � t d | d | d d
| d | d | d
| �} | s� d | d <t | d <n | j � | | k r� | St d r� d | d <d | d <| St d d | d d d d | d
| d | d | d
| � }
d |
k rFd } t | d <| j |
d d � | d <n& d | d <i | d 6| d 6| d d <| S( Nu resultu u commentu changesu groupsu idu" boto_secgroup.convert_to_group_idst vpc_idu vpc_idR R R R u0 Could not find secgroup ids for provided groups.u testu ENI set to have groups updated.u+ boto_ec2.modify_network_interface_attributeR, RH RI u erroru! Failed to update ENI groups: {1}.u messageu Updated ENI groups.u oldu new( R t sortR R
R R R ( RJ R& R R R R R t gt group_idst _groupsRK RC ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyR9 � s8 !
"
!
c C@ s� i | d 6t d 6d d 6i d 6} t d d | d | d | d
| d | � } d | k r� t | d <d
j | d d � | d <| S| d s� t d r�d | d <d" | d <| Snt d r d | d <| r� d | d k r� d j | d d g � | d <n d" | d <| Sd | d d k r�t d d | d t d | d | d
| d | � } d | k r�t | d <d j | d d � | d <| Sn t d d | d | d | d
| d | � } d | k r�t | d <d j | d d � | d <| Sd j | � | d <d" | d d <| r�d | d k r�t d d d" d | d d d | d | d
| d | � }
|
s�d j | d d g � | d <t | d <| Sd j | d d g � | d <t | d d! <n | S(# u�
Ensure the EC2 ENI is absent.
.. versionadded:: 2016.3.0
name
Name tag associated with the ENI.
release_eip
True/False - release any EIP associated with the ENI
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string)
that contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_ec2.get_network_interfaceR R R R R u erroru' Error when attempting to find eni: {0}.u messageu testu ENI is set to be deleted.u allocationIdu u. Allocated/associated EIP is set to be releasedu idu
attachmentu! boto_ec2.detach_network_interfacet forceu Failed to detach ENI: {0}u! boto_ec2.delete_network_interfaceu Failed to delete ENI: {0}u Deleted ENI {0}u boto_ec2.release_eip_addressR* R+ u+ Failed to release EIP allocated to the ENI.u
EIP released.u eip releasedN( R R R
R R R R5 ( R t release_eipR R R R R R? t
result_detacht
result_deleteRA ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt
eni_absent� sh "
!
i, c K@ sQ i | d 6t d 6d d 6i d 6} t d d | d | | � sb d j d | � | d <t | d <| Sd
j d | � | d <i | | 6| d d <| s� | St � } x� t rLt d d | d
t | � } | r� | d j d k r� Pn t � | | k r?| rd j d | d j � | d <n d j d | � | d <t | d <| St d � q� W| S( uS
Create a snapshot from the given instance
.. versionadded:: 2016.3.0
u nameu resultu u commentu changesu boto_ec2.create_imaget ami_nameR) u# Failed to create new AMI {ami_name}u Created new AMI {ami_name}u newu boto_ec2.find_imagest return_objsi u availableu( AMI still in state {state} after timeoutt stateu1 AMI with name {ami_name} not found after timeout.i ( R R R R
R RX R ( R RV R) t wait_until_availablet wait_timeout_secondst kwargsR t starttimet images( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt snapshot_created& s2
c+ D H C@ sd i | d 6t d 6d d 6i d 6}+ t }, dk }- i }. t j j j | | f � s^ t d � � n |$ sp |% sp |& r� t j j j |$ |% |& f � r� t d � � n | r� t d
d | d |' d |( d |) d |* d |- � }/ |/ skt }, qkn� t d d | r� | n | d |' d |( d |) d |* d |- � }0 t |0 � s9t }, n2 t |0 � d k rat j
d � dl } n
|0 d } |, r"t d r�d j
| � |+ d <dl |+ d <|+ S| r�i | d 6|' d 6|( d 6|) d 6|* d 6}1 t d |1 � }2 t |2 � r�|2 d } q�| } n t d! | | r| n | d" | d# | d$ | d% | d& | d' |
d( | d) | d* |
d+ | d, | d- | d. | d/ | d0 | d1 | d2 | d3 | d4 | d5 | d6 | d7 | d8 | d9 | d: | d; | d< | d= | d> |! d |' d |( d |) d |* �!}3 |3 s�d? |3 k r"t |+ d <d@ j
| r| n | � |+ d <|+ S|3 d? } i i dA 6i dB 6|+ d <dl |+ d dA d? <| |+ d dB d? <|& rt d r�dC |+ d <dl |+ d <|+ S|
s�| r�dD n dl }4 t dE dF |4 d |' d |( d |) d |* � }3 |3 s�t |+ d <dG |+ d <|+ S|3 dH }% t j dI |3 dJ � q"t j dK � n |$ s.|% r!dL }5 dM }6 xy t |5 � D]k }7 t dN dO |$ dP |% d |' d |( d |) d |* � }3 |3 r�PqGt j dQ |5 |6 |$ p�|% � t j |6 � qGW|3 s�t |+ d <dR j
|$ p�|% � |+ d <|+ S|3 d dJ }8 |3 d j d? � rS|3 d d? | k r t |+ d <dS j
|$ r4|$ n |% |3 d d? � |+ d <|+ Sq!t d r~dT j
| � |+ d <dl |+ d <|+ St dU d | dV |$ dW |% d |' d |( d |) d |* � }3 |3 r�dB |+ d k r�i |+ d dB <n |8 |+ d dB dJ <q!t |+ d <dX j
| r
| n | � |+ d <|+ Sn |" r�x�t j |" � D]p\ }9 }: t dY |9 d | d |' d |( d |) d |* �}; t |; t � s�i n |; }; |; j |9 � |: k r�q7q7t d r�dZ j
|9 |; j |9 � |: � |. |9 <q7n y; t d[ d\ |9 d] |: d | d |' d |( d |) d |* � }3 Wn7 t k
rM}< t |+ d <d^ j
|9 |: | � |+ d <|+ SX|+ d rb|+ d n i i dA 6i dB 6|+ d <|; j |9 � |+ d dA |9 <|: |+ d dB |9 <q7Wn t d r|. r�|. |+ d dB <dl |+ d <qd_ j
| r�| n | � |+ d <t |+ d <n | r` | dl k r` t | � } t t d` da i | db 6d |' d |( d |) d |* � j | i � � }= t |= j � � }> t | j � � }? t |> |? � }@ t g |? |> D] }7 |7 | |7 f ^ q�� }A t g | D]4 }7 | j |7 � |= j |7 � k r�|7 | |7 f ^ q�� }B |A j |B � |A s( |@ r` t d r� dA |+ d k rP |+ d dA n i |+ d dA <dB |+ d k r| |+ d dB n i |+ d dB <|= |+ d dA dc <| |+ d dB dc <|+ d c dd j
| r� | n | � 7<q] |@ rZ
t de df | d" |@ d |' d |( d |) d |* � sZ
dg j
| r
| n | � }C t j |C � |+ d c dh |C 7<t |+ d <|+ Sn |A r�
t di df | d" |A d |' d |( d |) d |* � s�
dj j
| r�
| n | � }C t j |C � |+ d c dh |C 7<t |+ d <|+ Sn dA |+ d k r�
|+ d dA n i |+ d dA <dB |+ d k r( |+ d dB n i |+ d dB <|= |+ d dA dc <| |+ d dB dc <q` n |+ S(m u�
Ensure an EC2 instance is running with the given attributes and state.
name
(string) - The name of the state definition. Recommended that this
match the instance_name attribute (generally the FQDN of the instance).
instance_name
(string) - The name of the instance, generally its FQDN. Exclusive with
'instance_id'.
instance_id
(string) - The ID of the instance (if known). Exclusive with
'instance_name'.
image_id
(string) – The ID of the AMI image to run.
image_name
(string) – The name of the AMI image to run.
tags
(dict) - Tags to apply to the instance.
key_name
(string) – The name of the key pair with which to launch instances.
security_groups
(list of strings) – The names of the EC2 classic security groups with
which to associate instances
user_data
(string) – The Base64-encoded MIME user data to be made available to the
instance(s) in this reservation.
instance_type
(string) – The EC2 instance size/type. Note that only certain types are
compatible with HVM based AMIs.
placement
(string) – The Availability Zone to launch the instance into.
kernel_id
(string) – The ID of the kernel with which to launch the instances.
ramdisk_id
(string) – The ID of the RAM disk with which to launch the instances.
vpc_id
(string) - The ID of a VPC to attach the instance to.
vpc_name
(string) - The name of a VPC to attach the instance to.
monitoring_enabled
(bool) – Enable detailed CloudWatch monitoring on the instance.
subnet_id
(string) – The ID of the subnet within which to launch the instances for
VPC.
subnet_name
(string) – The name of the subnet within which to launch the instances
for VPC.
private_ip_address
(string) – If you’re using VPC, you can optionally use this parameter to
assign the instance a specific available IP address from the subnet
(e.g., 10.0.0.25).
block_device_map
(boto.ec2.blockdevicemapping.BlockDeviceMapping) – A BlockDeviceMapping
data structure describing the EBS volumes associated with the Image.
disable_api_termination
(bool) – If True, the instances will be locked and will not be able to
be terminated via the API.
instance_initiated_shutdown_behavior
(string) – Specifies whether the instance stops or terminates on
instance-initiated shutdown. Valid values are:
- 'stop'
- 'terminate'
placement_group
(string) – If specified, this is the name of the placement group in
which the instance(s) will be launched.
client_token
(string) – Unique, case-sensitive identifier you provide to ensure
idempotency of the request. Maximum 64 ASCII characters.
security_group_ids
(list of strings) – The IDs of the VPC security groups with which to
associate instances.
security_group_names
(list of strings) – The names of the VPC security groups with which to
associate instances.
additional_info
(string) – Specifies additional information to make available to the
instance(s).
tenancy
(string) – The tenancy of the instance you want to launch. An instance
with a tenancy of ‘dedicated’ runs on single-tenant hardware and can
only be launched into a VPC. Valid values are:”default” or “dedicated”.
NOTE: To use dedicated tenancy you MUST specify a VPC subnet-ID as well.
instance_profile_arn
(string) – The Amazon resource name (ARN) of the IAM Instance Profile
(IIP) to associate with the instances.
instance_profile_name
(string) – The name of the IAM Instance Profile (IIP) to associate with
the instances.
ebs_optimized
(bool) – Whether the instance is optimized for EBS I/O. This
optimization provides dedicated throughput to Amazon EBS and a tuned
configuration stack to provide optimal EBS I/O performance. This
optimization isn’t available with all instance types.
network_interfaces
(boto.ec2.networkinterface.NetworkInterfaceCollection) – A
NetworkInterfaceCollection data structure containing the ENI
specifications for the instance.
network_interface_name
(string) - The name of Elastic Network Interface to attach
.. versionadded:: 2016.11.0
network_interface_id
(string) - The id of Elastic Network Interface to attach
.. versionadded:: 2016.11.0
attributes
(dict) - Instance attributes and value to be applied to the instance.
Available options are:
- instanceType - A valid instance type (m1.small)
- kernel - Kernel ID (None)
- ramdisk - Ramdisk ID (None)
- userData - Base64 encoded String (None)
- disableApiTermination - Boolean (true)
- instanceInitiatedShutdownBehavior - stop|terminate
- blockDeviceMapping - List of strings - ie: [‘/dev/sda=false’]
- sourceDestCheck - Boolean (true)
- groupSet - Set of Security Groups or IDs
- ebsOptimized - Boolean (false)
- sriovNetSupport - String - ie: ‘simple’
target_state
(string) - The desired target state of the instance. Available options
are:
- running
- stopped
Note that this option is currently UNIMPLEMENTED.
public_ip:
(string) - The IP of a previously allocated EIP address, which will be
attached to the instance. EC2 Classic instances ONLY - for VCP pass in
an allocation_id instead.
allocation_id:
(string) - The ID of a previously allocated EIP address, which will be
attached to the instance. VPC instances ONLY - for Classic pass in
a public_ip instead.
allocate_eip:
(bool) - Allocate and attach an EIP on-the-fly for this instance. Note
you'll want to releaase this address when terminating the instance,
either manually or via the 'release_eip' flag to 'instance_absent'.
region
(string) - Region to connect to.
key
(string) - Secret key to be used.
keyid
(string) - Access key to be used.
profile
(variable) - A dict with region, key and keyid, or a pillar key (string)
that contains a dict with region, key and keyid.
.. versionadded:: 2016.3.0
u nameu resultu u commentu changesu pendingu rebootingu runningu stoppingu stoppedu7 Exactly one of image_id OR image_name must be provided.uH At most one of public_ip, allocation_id OR allocate_eip may be provided.u boto_ec2.existsR( R R R R t in_statesu boto_ec2.find_instancesR i uT Multiple instances matching criteria found - cannot determine a singular instance-idi u testu& The instance {0} is set to be created.u ami_nameu regionu keyu keyidu profileu boto_ec2.find_imagesu boto_ec2.runt tagst key_namet security_groupst user_datat
instance_typet placementt kernel_idt
ramdisk_idRL t vpc_namet monitoring_enabledR" R# R$ t block_device_mapt disable_api_terminationt$ instance_initiated_shutdown_behaviort placement_groupt client_tokent security_group_idst security_group_namest additional_infot tenancyt instance_profile_arnt instance_profile_namet
ebs_optimizedt network_interfacest network_interface_nameR, u instance_idu Failed to create instance {0}.u oldu newu New EIP would be allocated.u vpcu boto_ec2.allocate_eip_addressR' u Failed to allocate new EIP.u
allocation_idu" New EIP with address %s allocated.u public_ipu EIP not requested.i
i u boto_ec2.get_eip_address_infot addressest allocation_idsu8 Waiting up to %s secs for new EIP %s to become availableu Failed to lookup EIP {0}.u0 EIP {0} is already associated with instance {1}.u Instance {0} to be updated.u boto_ec2.associate_eip_addressR* R+ u% Failed to attach EIP to instance {0}.u boto_ec2.get_attributeuD The instance attribute {0} is set to be changed from '{1}' to '{2}'.u boto_ec2.set_attributet attributet attribute_valueu3 Failed to set attribute {0} to {1} on instance {2}.u$ Instance {0} is in the correct stateu boto_ec2.get_all_tagst filtersu resource-idu tagsu( Tags would be updated on instance {0}.u boto_ec2.delete_tagst resource_idsu) Error while deleting tags on instance {0}u u boto_ec2.create_tagsu) Error while creating tags on instance {0}( u pendingu rebootingu runningu stoppingu stoppedN( R R
R. R/ R0 R1 R R t lenR
R R R R t infoR R R t getR t iteritemsR2 t dictt sett keysR3 R8 t error(D R R) R( t image_idt
image_nameR` Ra Rb Rc Rd Re Rf Rg RL Rh Ri R" R# R$ Rj Rk Rl Rm Rn Ro Rp Rq Rr Rs Rt Ru Rv Rw R, t
attributest target_stateR* R+ R= R R R R R t _createt running_statest
changed_attrsR t instancest argst image_idsR? R' t triest secst tt ipt kt vt currR t curr_tagst currentt desiredt removet addt replaceRC ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt instance_presentM s� �
1
,
*-G
,,
,,c C@ s� i | d 6t d 6d d 6i d 6} d7 }
| s� yG t d d | rG | n | d
| d | d | d | d |
d | � } Wq� t k
r� } d8 | d <d j | p� | � | d <| SXn t d d | d
| d | d | d | d t d | � } t | � st | d <d j | � | d <| S| d }
t d d d | d
| d | d | d | �} | j d � t k r�t | d <d j | � | d <| St d r�d j | � | d <d8 | d <| St d d | d | d
| d | d | d | � } | st | d <d j | � | d <| Si | d 6| d d! <d8 | d d" <| r�t |
d# d8 � } | r�i | d$ 6| d% 6| d& 6| d' 6} d8 } d8 } d8 } t |
d( d8 � rt d) d* | | � } t | � r�d+ | d k r�| d d+ } | d j d, � } qt | d <d- j | � | d <| Sn |
j
} | rCt d. d/ | | � sCt j d0 | � qCn t d1 d2 | d3 | | � r�t j
d4 | py| d d5 � | p�| d d5 | d d! d5 <q�t | d <d6 j | � | d <| Sq�n | S(9 u�
Ensure an EC2 instance does not exist (is stopped and removed).
.. versionchanged:: 2016.11.0
name
(string) - The name of the state definition.
instance_name
(string) - The name of the instance.
instance_id
(string) - The ID of the instance.
release_eip
(bool) - Release any associated EIPs during termination.
region
(string) - Region to connect to.
key
(string) - Secret key to be used.
keyid
(string) - Access key to be used.
profile
(variable) - A dict with region, key and keyid, or a pillar key (string)
that contains a dict with region, key and keyid.
filters
(dict) - A dict of additional filters to use in matching the instance to
delete.
YAML example fragment:
.. code-block:: yaml
- filters:
vpc-id: vpc-abcdef12
u nameu resultu u commentu changesu pendingu rebootingu runningu stoppingu stoppedu boto_ec2.get_idR R R R R R_ R| u2 Couldn't determine current status of instance {0}.u boto_ec2.find_instancesR( RW u Instance {0} is already gone.i u boto_ec2.get_attributeu disableApiTerminationu4 Termination of instance {0} via the API is disabled.u testu& The instance {0} is set to be deleted.u boto_ec2.terminateu! Failed to terminate instance {0}.u instance_idu oldu newu
ip_addressu regionu keyu keyidu profileu vpc_idu boto_ec2.get_eip_address_infoRx u
allocation_idu association_idu- Can't determine AllocationId for address {0}.u! boto_ec2.disassociate_eip_addresst association_idu Failed to disassociate EIP %s.u boto_ec2.release_eip_addressR+ R* u Released EIP address %su public_ipu Failed to release EIP {0}.( u pendingu rebootingu runningu stoppingu stoppedN( R R R R R R~ R� R
R t getattrt
ip_addressR
t warningR ( R R) R( RR R R R R R| R R� R R� t instancet no_can_doR? R� t base_argsR* t alloc_idt assoc_id( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt instance_absent� s� &
"
#
c
C@ s� i | d 6t d 6d d 6i d 6}
i } d. } t j j j | | | | f � s^ t d � � n | sj | r� | r� t d � � n | r� | j i | d
6� n | r� | j i | d 6� n | rt d d | d | d | d | d | d | � } | sd j | � |
d <|
Sn | r.| j i | d 6� n | rK| j i | d 6� n i | d 6| d 6| d 6| d 6}
t d d | |
� } t | � d k r�d |
d <|
St | � d k r�d! j | � } t
j | � | |
d <t |
d <|
S| d" } t
j
d# | � t d$ r.d% j | � |
d <d/ |
d <|
St d& d' | d( t |
� r�d) j | � |
d <i i | d* 6d+ 6i d/ d* 6d, 6|
d <n d- j | � |
d <t |
d <|
S(0 u�
Ensure the EC2 volume is detached and absent.
.. versionadded:: 2016.11.0
name
State definition name.
volume_name
Name tag associated with the volume. For safety, if this matches more than
one volume, the state will refuse to apply.
volume_id
Resource ID of the volume.
instance_name
Only remove volume if it is attached to instance with this Name tag.
Exclusive with 'instance_id'. Requires 'device'.
instance_id
Only remove volume if it is attached to this instance.
Exclusive with 'instance_name'. Requires 'device'.
device
Match by device rather than ID. Requires one of 'instance_name' or
'instance_id'.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string)
that contains a dict with region, key and keyid.
u nameu resultu u commentu changesu pendingu rebootingu runningu stoppingu stoppedu^ Exactly one of 'volume_name', 'volume_id', 'instance_name', or 'instance_id' must be provided.uY Parameter 'device' is required when either 'instance_name' or 'instance_id' is specified.u volume-idu tag:Nameu boto_ec2.get_idR R R R R R_ uD Instance with Name {0} not found. Assuming associated volumes gone.u attachment.instance-idu attachment.deviceu regionu keyu keyidu profileu boto_ec2.get_all_volumesR| i u; Volume matching criteria not found, assuming already absentuB More than one volume matched criteria, can't continue in state {0}i u Matched Volume ID %su testu$ The volume {0} is set to be deleted.u boto_ec2.delete_volumet volume_idRQ u Volume {0} deleted.u volume_idu oldu newu Error deleting volume {0}.( u pendingu rebootingu runningu stoppingu stoppedN( R R. R/ R0 R1 R R8 R R R~ R
R� R
R R R ( R t volume_nameR� R) R( t deviceR R R R R R| R� R� t volsRC t vol( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt
volume_absent^ sb ,
!
"
)
c
C@ s. i | d 6t d 6d d 6i d 6} i | d 6| d 6| d 6| d 6| d
6| d 6} t d r� t | d
<t d | � } | d r� | j d � r� d | d <| d | d <d | d <q� n d | d <t | d <| St d | � } | d r| j d � r*d | d <| d | d <q*n d | d <t | d <| S( u
Ensure EC2 volume(s) matching the given filters have the defined tags.
.. versionadded:: 2016.11.0
name
State definition name.
tag_maps
List of dicts of filters and tags, where 'filters' is a dict suitable for passing
to the 'filters' argument of boto_ec2.get_all_volumes(), and 'tags' is a dict of
tags to be set on volumes as matched by the given filters. The filter syntax is
extended to permit passing either a list of volume_ids or an instance_name (with
instance_name being the Name tag of the instance to which the desired volumes are
mapped). Each mapping in the list is applied separately, so multiple sets of
volumes can be all tagged differently with one call to this function.
YAML example fragment:
.. code-block:: yaml
- filters:
attachment.instance_id: i-abcdef12
tags:
Name: dev-int-abcdef12.aws-foo.com
- filters:
attachment.device: /dev/sdf
tags:
ManagedSnapshots: true
BillingGroup: bubba.hotep@aws-foo.com
- filters:
instance_name: prd-foo-01.aws-foo.com
tags:
Name: prd-foo-01.aws-foo.com
BillingGroup: infra-team@aws-foo.com
- filters:
volume_ids: [ vol-12345689, vol-abcdef12 ]
tags:
BillingGroup: infra-team@aws-foo.com
authoritative
Should un-declared tags currently set on matched volumes be deleted? Boolean.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string)
that contains a dict with region, key and keyid.
u nameu resultu u commentu changesu tag_mapsu
authoritativeu regionu keyu keyidu profileu testu dry_runu boto_ec2.set_volumes_tagsu successu Tags would be updated.u' Error validating requested volume tags.u
Tags applied.u% Error updating requested volume tags.N( R R R R� R R
(
R t tag_mapst
authoritativeR R R R R R� R? ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt volumes_tagged� s2 <
c C@ sf i | d 6t d 6d d 6i d 6} i } i } dE } t j j j | | f � s^ t d � � n t j j j | | f � s� t d � � n | dF k r� t d
� � n i | d 6|
d 6| d
6| d 6} | rt d d | d | | � } | st d j | � � � qn t d d | d t | � } | d } | r�i } | j i | d 6� t d d | | � } t
| � d k r�d j | | � } t | � � n t
| � d k r�t d r�d j | | | � | d <dF | d <| St d d | j d | d! | d" | d# | d$ |
d% | d& t | � } d | k r6| d } n t d' j | � � � t d( d) i i | g d* 6d+ 6i | d, 6d- 6g | � } | d. t
k r�t d/ j | | | d � � � n dF | d0 <| | d0 <q�| d } n t d d1 | g d t | � } t
| � d k r"t d2 j | � � � n | d } | j | j k ret d3 j | | j | | j � � � n | j } | dF k r}| j dF k r}| | j k r�| | j k r�d4 j | | | � | d <| St d rd5 j | j | j | | | � | d <dF | d <| St d6 d7 | d8 t | � rYd9 j | | j | j � | d <| j | d: <| j | d; <q�t d< j | | j | j � � � n | | d: <dF | d; <t d r�d= j | | | � | d <dF | d <| St d> d7 | d | d? | | � r?d@ j | d dA j | | | � g � | d <| | d: <| | d; <i | dB 6| dC 6| d <n# dD j | | | � | d <t
| d <| S(G u_
Ensure the EC2 volume is present and attached.
..
name
State definition name.
volume_name
The Name tag value for the volume. If no volume with that matching name tag is found,
a new volume will be created. If multiple volumes are matched, the state will fail.
volume_id
Resource ID of the volume. Exclusive with 'volume_name'.
instance_name
Attach volume to instance with this Name tag.
Exclusive with 'instance_id'.
instance_id
Attach volume to instance with this ID.
Exclusive with 'instance_name'.
device
The device on the instance through which the volume is exposed (e.g. /dev/sdh)
size
The size of the new volume, in GiB. If you're creating the volume from a snapshot
and don't specify a volume size, the default is the snapshot size. Optionally specified
at volume creation time; will be ignored afterward. Requires 'volume_name'.
snapshot_id
The snapshot ID from which the new Volume will be created. Optionally specified
at volume creation time; will be ignored afterward. Requires 'volume_name'.
volume_type
The type of the volume. Optionally specified at volume creation time; will be ignored afterward.
Requires 'volume_name'.
Valid volume types for AWS can be found here:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
iops
The provisioned IOPS you want to associate with this volume. Optionally specified
at volume creation time; will be ignored afterward. Requires 'volume_name'.
encrypted
Specifies whether the volume should be encrypted. Optionally specified
at volume creation time; will be ignored afterward. Requires 'volume_name'.
kms_key_id
If encrypted is True, this KMS Key ID may be specified to encrypt volume with this key.
Optionally specified at volume creation time; will be ignored afterward.
Requires 'volume_name'.
e.g.: arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string)
that contains a dict with region, key and keyid.
u nameu resultu u commentu changesu runningu stoppedu= Exactly one of 'volume_name', 'volume_id', must be provided.uB Exactly one of 'instance_name', or 'instance_id' must be provided.u Parameter 'device' is required.u regionu keyu keyidu profileu boto_ec2.get_idR R_ u! Instance with Name {0} not found.u boto_ec2.find_instancesR( RW i u tag:Nameu boto_ec2.get_all_volumesR| i uI More than one volume matched volume name {0}, can't continue in state {1}u testuG The volume with name {0} is set to be created and attached on {1}({2}).u boto_ec2.create_volumet zone_namet sizet snapshot_idt volume_typet iopst encryptedt
kms_key_idt wait_for_creationu$ Error creating volume with name {0}.u boto_ec2.set_volumes_tagsR� u
volume_idsu filtersu Nameu tagsu successu6 Error updating requested volume {0} with name {1}. {2}u volume_idt
volume_idsu Volume {0} do not existu7 Volume {0} in {1} cannot attach to instance {2} in {3}.u' The volume {0} is attached on {1}({2}).uK The volume {0} is set to be detached from {1}({2} and attached on {3}({4}).u boto_ec2.detach_volumeR� t wait_for_detachementu% Volume {0} is detached from {1}({2}).u instance_idu deviceuI The volume {0} is already attached on instance {1}({2}). Failed to detachu1 The volume {0} is set to be attached on {1}({2}).u boto_ec2.attach_volumeR� u u# Volume {0} is attached on {1}({2}).u oldu newu0 Error attaching volume {0} to instance {1}({2}).( u runningu stoppedN( R R. R/ R0 R1 R R R R R8 R~ R Re R
t zonet attach_dataR( R� t devicR5 ( R R� R� R) R( R� R� R� R� R� R� R� R R R R R t old_dictt new_dictR� R� R� R� R| R� RC t _rtR� R� ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt volume_present s� J
"
c C@ se t j j j | | f � s* t d � � n | s? t d � � n i | d 6t d 6d d 6i g d 6g d 6d 6} i | d 6| d
6| d 6| d 6| d
6| d 6}
t d |
� } | r| j d i � j d � rx2 | d d D] } | d d j | d � q� Wn g }
x2 | D]* } | | d d k r|
j | � qqW|
r/t d s�i | d
6|
d 6| d 6| d 6| d 6| d
6| d 6} t d | � t d |
� } | r�| j d i � j d d � r�x2 | d d D] } | d d j | d � q�Wn g } x2 | D]* } | | d d k r | j | � q q W| r�t | d <d j d d j
| d d � d d j
|
� d d j
| � � | d <n d j d d j
|
� � | d <| d d | d d k r,i | d <q,qad j d d j
| d d � d d j
|
� � | d <i | d <d | d <n2 d j d d j
| d d � � | d <i | d <| S( ux
Ensure an ENI has secondary private ip addresses associated with it
name
(String) - State definition name
network_interface_id
(String) - The EC2 network interface id, example eni-123456789
private_ip_addresses
(List or String) - The secondary private ip address(es) that should be present on the ENI.
allow_reassignment
(Boolean) - If true, will reassign a secondary private ip address associated with another
ENI. If false, state will fail if the secondary private ip address is associated with
another ENI.
region
(string) - Region to connect to.
key
(string) - Secret key to be used.
keyid
(string) - Access key to be used.
profile
(variable) - A dict with region, key and keyid, or a pillar key (string) that contains a
dict with region, key and keyid.
uP Exactly one of 'network_interface_name', 'network_interface_id' must be provideduC You must provide the private_ip_addresses to associate with the ENIu nameu resultu u commentu oldu newu changesu network_interface_idu regionu keyu keyidu profileu boto_ec2.get_network_interfaceu private_ip_addressesu private_ip_addressu testu allow_reassignmentu$ boto_ec2.assign_private_ip_addressesuK ips on eni: {0}
attempted to add: {1}
could not add the following ips: {2}
u
- u added ips: {0}u- ips on eni: {0}
ips that would be added: {1}
u ips on eni: {0}N( R. R/ R0 R1 R R R R� t appendR R R
R R5 ( R Rw R, t private_ip_addressest allow_reassignmentR R R R R t get_eni_argst enit eni_pipt
ips_to_addt
private_ipt assign_ips_argst
ips_not_added( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt private_ips_present� s|
!
$
"
c C@ s� t j j j | | f � s* t d � � n | s? t d � � n t | t � sZ | g } n i | d 6t d 6d d 6i g d 6g d 6d 6} i | d 6| d
6| d 6| d 6| d
6| d 6} t d | � }
d } |
r=|
j
d i � j
d � r=xI |
d d D]6 } | d d j | d � | d r | d } q q Wn g }
x� | D]� } | | d d k rt|
j | � n | | k rJt | d <d j
| d d j | d d � d d j | � � | d <i | d <| SqJW|
r�t d spi | d
6|
d 6| d 6| d 6| d
6| d 6} t d | � t d | � }
|
r�|
j
d i � j
d d � r�x2 |
d d D] } | d d j | d � qhWn g } x2 | D]* } | | d d k r�| j | � q�q�W| r$t | d <d j
d d j | d d � d d j |
� d d j | � � | d <n d j
d d j |
� � | d <| d d | d d k r�i | d <q�q�d j
d d j | d d � d d j |
� � | d <i | d <d | d <n2 d j
d d j | d d � � | d <i | d <| S( u�
Ensure an ENI does not have secondary private ip addresses associated with it
name
(String) - State definition name
network_interface_id
(String) - The EC2 network interface id, example eni-123456789
private_ip_addresses
(List or String) - The secondary private ip address(es) that should be absent on the ENI.
region
(string) - Region to connect to.
key
(string) - Secret key to be used.
keyid
(string) - Access key to be used.
profile
(variable) - A dict with region, key and keyid, or a pillar key (string) that contains a
dict with region, key and keyid.
uP Exactly one of 'network_interface_name', 'network_interface_id' must be provideduE You must provide the private_ip_addresses to unassociate with the ENIu nameu resultu u commentu newu oldu changesu network_interface_idu regionu keyu keyidu profileu boto_ec2.get_network_interfaceu private_ip_addressesu private_ip_addressu primaryul You cannot unassign the primary private ip address ({0}) on an eni
ips on eni: {1}
attempted to remove: {2}
u
- u testu& boto_ec2.unassign_private_ip_addressesuQ ips on eni: {0}
attempted to remove: {1}
could not remove the following ips: {2}
u removed ips: {0}u/ ips on eni: {0}
ips that would be removed: {1}
u ips on network interface: {0}N( R. R/ R0 R1 R R2 R3 R R R R� R� R
R R5 R ( R Rw R, R� R R R R R R� R� t primary_private_ipR� t
ips_to_removeR� R� t ips_not_removed( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt private_ips_absente s�
!
$
"
() t __doc__t
__future__R R R t loggingR R t salt.extR t salt.ext.six.movesR t salt.utils.dataR. t salt.utils.dictupdateR/ R7 t salt.exceptionsR R t getLoggert __name__R
R R R R! R RG R6 R9 R
RU R^ R� R� R� R� R� R� R� ( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_ec2.pyt <module>4 s�
8" � % X' � � } f Z � {
Mini Shell