Current File : //lib/python2.7/site-packages/salt/states/boto_elb.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l
Z d d l Z d d l m
Z
d d l m Z e j e � Z d � Z d d d d d d d d d d d d d
d d d d d e d d d d � Z d d d d d � Z d
Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z! d � Z" d d d d d � Z# d � Z$ d S( u<
Manage ELBs
.. versionadded:: 2014.7.0
Create and destroy ELBs. Be aware that this interacts with Amazon's
services, and so may incur charges.
This module uses ``boto``, which can be installed via package, or pip.
This module accepts explicit elb credentials but can also utilize
IAM roles assigned to the instance through Instance Profiles. Dynamic
credentials are then automatically obtained from AWS API and no further
configuration is necessary. More information available `here
<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_.
If IAM roles are not used you need to specify them either in a pillar file or
in the minion's config file:
.. code-block:: yaml
elb.keyid: GKTADJGHEIQSXMKKRBJ08H
elb.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile, either
passed in as a dict, or as a string to pull from pillars or minion config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
.. code-block:: yaml
Ensure myelb ELB exists:
boto_elb.present:
- name: myelb
- region: us-east-1
- availability_zones:
- us-east-1a
- us-east-1c
- us-east-1d
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
- listeners:
- elb_port: 443
instance_port: 80
elb_protocol: HTTPS
instance_protocol: HTTP
certificate: 'arn:aws:iam::1111111:server-certificate/mycert'
policies:
- my-ssl-policy
- cookie-policy
- elb_port: 8210
instance_port: 8210
elb_protocol: TCP
- backends:
- instance_port: 80
policies:
- enable-proxy-protocol
- health_check:
target: 'HTTP:80/'
- attributes:
cross_zone_load_balancing:
enabled: true
access_log:
enabled: true
s3_bucket_name: 'mybucket'
s3_bucket_prefix: 'my-logs'
emit_interval: 5
connecting_settings:
idle_timeout: 60
- cnames:
- name: mycname.example.com.
zone: example.com.
ttl: 60
- name: myothercname.example.com.
zone: example.com.
- security_groups:
- my-security-group
- policies:
- policy_name: my-ssl-policy
policy_type: SSLNegotiationPolicyType
policy:
Protocol-TLSv1.2: true
Protocol-SSLv3: false
Server-Defined-Cipher-Order: true
ECDHE-ECDSA-AES128-GCM-SHA256: true
- policy_name: cookie-policy
policy_type: LBCookieStickinessPolicyType
policy: {} # no policy means this is a session cookie
- policy_name: enable-proxy-protocol
policy_type: ProxyProtocolPolicyType
policy:
ProxyProtocol: true
# Using a profile from pillars
Ensure myelb ELB exists:
boto_elb.present:
- name: myelb
- region: us-east-1
- profile: myelbprofile
# Passing in a profile
Ensure myelb ELB exists:
boto_elb.present:
- name: myelb
- region: us-east-1
- profile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
It's possible to specify attributes from pillars by specifying a pillar. You
can override the values defined in the pillard by setting the attributes on the
resource. The module will use the default pillar key 'boto_elb_attributes',
which allows you to set default attributes for all ELB resources.
Setting the attributes pillar:
.. code-block:: yaml
my_elb_attributes:
cross_zone_load_balancing:
enabled: true
connection_draining:
enabled: true
timeout: 20
access_log:
enabled: true
s3_bucket_name: 'mybucket'
s3_bucket_prefix: 'my-logs'
emit_interval: 5
Overriding the attribute values on the resource:
.. code-block:: yaml
Ensure myelb ELB exists:
boto_elb.present:
- name: myelb
- region: us-east-1
- attributes_from_pillar: my_elb_attributes
# override cross_zone_load_balancing:enabled
- attributes:
cross_zone_load_balancing:
enabled: false
- profile: myelbprofile
It's possible to specify cloudwatch alarms that will be setup along with the
ELB. Note the alarm name will be defined by the name attribute provided, plus
the ELB resource name.
.. code-block:: yaml
Ensure myelb ELB exists:
boto_elb.present:
- name: myelb
- region: us-east-1
- profile: myelbprofile
- alarms:
UnHealthyHostCount:
name: 'ELB UnHealthyHostCount **MANAGED BY SALT**'
attributes:
metric: UnHealthyHostCount
namespace: AWS/ELB
statistic: Average
comparison: '>='
threshold: 1.0
period: 600
evaluation_periods: 6
unit: null
description: ELB UnHealthyHostCount
alarm_actions: ['arn:aws:sns:us-east-1:12345:myalarm']
insufficient_data_actions: []
ok_actions: ['arn:aws:sns:us-east-1:12345:myalarm']
You can also use alarms from pillars, and override values from the pillar
alarms by setting overrides on the resource. Note that 'boto_elb_alarms'
will be used as a default value for all resources, if defined and can be
used to ensure alarms are always set for a resource.
Setting the alarms in a pillar:
.. code-block:: yaml
my_elb_alarm:
UnHealthyHostCount:
name: 'ELB UnHealthyHostCount **MANAGED BY SALT**'
attributes:
metric: UnHealthyHostCount
namespace: AWS/ELB
statistic: Average
comparison: '>='
threshold: 1.0
period: 600
evaluation_periods: 6
unit: null
description: ELB UnHealthyHostCount
alarm_actions: ['arn:aws:sns:us-east-1:12345:myalarm']
insufficient_data_actions: []
ok_actions: ['arn:aws:sns:us-east-1:12345:myalarm']
Overriding the alarm values on the resource:
.. code-block:: yaml
Ensure myelb ELB exists:
boto_elb.present:
- name: myelb
- region: us-east-1
- profile: myelbprofile
- alarms_from_pillar: my_elb_alarm
# override UnHealthyHostCount:attributes:threshold
- alarms:
UnHealthyHostCount:
attributes:
threshold: 2.0
Tags can also be set:
.. versionadded:: 2016.3.0
.. code-block:: yaml
Ensure myelb ELB exists:
boto_elb.present:
- name: myelb
- region: us-east-1
- profile: myelbprofile
- tags:
MyTag: 'My Tag Value'
OtherTag: 'My Other Value'
i ( t absolute_importt print_functiont unicode_literalsN( t SaltInvocationError( t sixc C@ s d t k r d St S( u)
Only load if boto is available.
u boto_elb.existsu boto_elb( t __salt__t False( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyt __virtual__� s u internet-facingu boto_elb_attributesu boto_elb_alarmsu boto_elb_policiesc $ C@ s. t d | i � } | r1 t j j j | | � n | } i | d 6t d 6d d 6i d 6} t | t j t t
d( � f � s� d } t j
| � | j i | d 6t d 6� | St | t j � r� | j d � } n t | | | | | | | | | | | � } | j i | d d 6d j | d | d g � d 6� | d rD| d n | d | d <| d t k rf| St d
| | | | | � } | r�t d r�| S| r=t | | | | | | � } | j i t j j j | d | d � d 6d j | d | d g � d 6� | d r| d n | d | d <| d t k r=| Sn t | | | | | | � } | j i t j j j | d | d � d 6d j | d | d g � d 6� | d r�| d n | d | d <| d t k r�| S|
r@t d | | | | | � } | r@x8|
D]-} d( } d
} | j i d d 6| d d 6� d | k rX| j d � } n | d
k r�x= d) D]2 } | | k r�t � j | � n | | | | <qkWn t d | � } | j i t j j j | d | d � d 6d j | d | d g � d 6� | d r| d n | d | d <| d t k r | Sq Wq@n t | | | | | | | � } | j i t j j j | d | d � d 6d j | d | d g � d 6� | d r�| d n | d | d <| d t k r�| St | |
| | | | | | | � } | j i t j j j | d | d � d 6d j | d | d g � d 6� | d rd| d n | d | d <| d t k r�| St | | | | | | � } | j i t j j j | d | d � d 6d j | d | d g � d 6� | d r| d n | d | d <| d t k r#| S| s2g } n | r�d* }! xF | D]; }" | t d d |" d | d! | d" | d# | d$ |! � 7} qEWn | r*t d r�t d% | | t | | | | � r'| d c d& j | � 7<d( | d <q'q*t d% | | t | | | | � }# |# s*| d c d' 7<t | d <q*n | S(+ uB
Ensure the ELB exists.
name
Name of the ELB.
availability_zones
A list of availability zones for this ELB.
listeners
A list of listener lists; example::
[
['443', 'HTTPS', 'arn:aws:iam::1111111:server-certificate/mycert'],
['8443', '80', 'HTTPS', 'HTTP', 'arn:aws:iam::1111111:server-certificate/mycert']
]
subnets
A list of subnet IDs in your VPC to attach to your LoadBalancer.
subnet_names
A list of subnet names in your VPC to attach to your LoadBalancer.
security_groups
The security groups assigned to your LoadBalancer within your VPC. Must
be passed either as a list or a comma-separated string.
For example, a list:
.. code-block:: yaml
- security_groups:
- secgroup-one
- secgroup-two
Or as a comma-separated string:
.. code-block:: yaml
- security_groups: secgroup-one,secgroup-two
scheme
The type of a LoadBalancer, ``internet-facing`` or ``internal``. Once
set, can not be modified.
health_check
A dict defining the health check for this ELB.
attributes
A dict defining the attributes to set on this ELB.
Unknown keys will be silently ignored.
See the :mod:`salt.modules.boto_elb.set_attributes` function for
recognized attributes.
attributes_from_pillar
name of pillar dict that contains attributes. Attributes defined for this specific
state will override those from pillar.
cnames
A list of cname dicts with attributes needed for the DNS add_record state.
By default the boto_route53.add_record state will be used, which requires: name, zone, ttl, and identifier.
See the boto_route53 state for information about these attributes.
Other DNS modules can be called by specifying the provider keyword.
the cnames dict will be passed to the state as kwargs.
See the :mod:`salt.states.boto_route53` state for information about
these attributes.
alarms:
a dictionary of name->boto_cloudwatch_alarm sections to be associated with this ELB.
All attributes should be specified except for dimension which will be
automatically set to this ELB.
See the :mod:`salt.states.boto_cloudwatch_alarm` state for information
about these attributes.
alarms_from_pillar:
name of pillar dict that contains alarm settings. Alarms defined for this specific
state will override those from pillar.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string)
that contains a dict with region, key and keyid.
wait_for_sync
Wait for an INSYNC change status from Route53.
tags
dict of tags
instance_ids
list of instance ids. The state will ensure that these, and ONLY these, instances
are registered with the ELB. This is additive with instance_names.
instance_names
list of instance names. The state will ensure that these, and ONLY these, instances
are registered with the ELB. This is additive with instance_ids.
u
config.optionu nameu resultu u commentu changesuQ The 'security_group' parameter must be either a list or a comma-separated string.u ,u u boto_elb.existsu testu boto_elb.get_elb_configu boto_route53u CNAMEu record_typeu dns_nameu valueu provideru profileu keyu keyidu regionu
wait_for_syncu boto_route53.presentu pendingu rebootingu runningu stoppingu stoppedu boto_ec2.find_instancest namet regiont keyt keyidt profilet in_statesu boto_elb.set_instancesu$ ELB {0} instances would be updated.u" Failed to set requested instances.N( u profileu keyu keyidu regionu
wait_for_sync( u pendingu rebootingu runningu stoppingu stopped( R t saltt utilst
dictupdatet updatet Truet
isinstanceR t string_typest listt typet Nonet logt errorR t splitt _elb_presentt joint __opts__t _attributes_presentt _health_check_presentt popt localst gett
__states__t _alarms_presentt _policies_presentt
_tags_presentt format($ R t listenerst availability_zonest subnetst subnet_namest security_groupst schemet health_checkt
attributest attributes_from_pillart cnamest alarmst alarms_from_pillart policiest policies_from_pillart backendsR R
R R t
wait_for_synct tagst instance_idst instance_namest tmpt rett msgt _rett existst lbt cnamet dns_providert pt running_statest nt success( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyt present s� v$"!
"" *"" *""
3*"" *""*""*""
c C@ sB i | d 6t d 6d d 6i d 6} t d | | | | | � } | s d j | � } t j | � | j i | d 6t d 6� | St d | | | | | � } g | D] }
|
d d
k r� |
d ^ q� } g | D] }
|
| k r� |
^ q� } t | � s?d j t j | � j
d
� � } t j | � | j i | d 6� | St d rmd j | | � | d <d | d <| St d | | | | | | � }
|
rd j | � } t j | � t � j | | � } | j i | d 6i d j | � d 6d j t | � � d 6d 6� n7 d j | � } t j | � | j i | d 6t d 6� | S( u
Add EC2 instance(s) to an Elastic Load Balancer. Removing an instance from
the ``instances`` list does not remove it from the ELB.
name
The name of the Elastic Load Balancer to add EC2 instances to.
instances
A list of EC2 instance IDs that this Elastic Load Balancer should
distribute traffic to. This state will only ever append new instances
to the ELB. EC2 instances already associated with this ELB will not be
removed if they are not in the ``instances`` list.
.. versionadded:: 2015.8.0
.. code-block:: yaml
add-instances:
boto_elb.register_instances:
- name: myloadbalancer
- instances:
- instance-id1
- instance-id2
u nameu resultu u commentu changesu boto_elb.existsu Could not find lb {0}u boto_elb.get_instance_healthu descriptionu. Instance deregistration currently in progress.u instance_idu Instance/s {0} already exist.u []u testu! ELB {0} is set to register : {1}.u boto_elb.register_instancesu" Load Balancer {0} has been changedu
u oldu newu) Load balancer {0} failed to add instancesN( R R R' R R R R t lenR t text_typet stript debugR R t infot sett unionR R ( R t instancesR R
R R R< R@ R= t healtht valuet nodest newt state( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyt register_instances� sB "
% !
#!
u boto_elb_listener_policiesc C@ sI i t d 6d d 6i d 6} t j j j | | | f � sH t d � � n | sW g } n x/| D]'} t | � d k r� t d � � n d | k r� t d � � n d
| k r� t d � � n d | k r� t d
� � n | d j � | d <| d d k rd | k rt d � � n | j d g � }
| j d d � } |
rU| d k rUt } n | r^ |
t d | i � j | d g � 7}
q^ q^ W| rFg } x� | D]� } t d d d | d | d | d | d |
�} d | k rd j
| d � | d <t | d <| Sd | k r.d j
| � | d <t | d <| S| j | d � q�Wn d } | r�t d | | | | |
� } | j d � } | s�d! j
| � | d <t | d <| St d" | d# | d | d | d | d |
�} | s�d$ j
| � | d <t | d <| Sn t d% | | | | |
� } | s�t d& rId' j
| � | d <d | d <| St d( d | d) | d* | d+ | d, | d- | d | d | d | d |
�
} | r�i d d. 6| d d/ <i | d. 6| d d0 <d1 j
| � | d <qEt | d <d2 j
| � | d <nMd3 j
| � | d <t | | | | | |
� } t j j j | d | d � | d <d4 j | d | d g � | d <| d s�| d | d <| d t k r�| Sn t | | | | | |
� } t j j j | d | d � | d <d4 j | d | d g � | d <| d s)| d | d <| d t k r)| Sn | r�t | | | | | |
� } t j j j | d | d � | d <d4 j | d | d g � | d <| d sE| d | d <| d t k r�| SqEn� | rEt | | | | | |
� } t j j j | d | d � | d <d4 j | d | d g � | d <| d sE| d | d <qEn | S(5 Nu resultu u commentu changesuW Exactly one of availability_zones, subnets, subnet_names must be provided as arguments.i u\ Listeners must have at minimum port, instance_port and protocol values in the provided list.u elb_portu+ elb_port is a required value for listeners.u
instance_portu0 instance_port is a required value for listeners.u elb_protocolu/ elb_protocol is a required value for listeners.u HTTPSu certificateuO certificate is a required value for listeners if HTTPS is set for elb_protocol.u policiesu policies_from_pillaru
pillar.getu boto_vpc.get_resource_idu subnetR R R
R R u erroru Error looking up subnet ids: {0}u idu Subnet {0} does not exist.u boto_vpc.get_subnet_associationu vpc_idu) Subnets {0} do not map to a valid vpc id.u" boto_secgroup.convert_to_group_idst vpc_idu; Security groups {0} do not map to valid security group ids.u boto_elb.existsu testu ELB {0} is set to be created.u boto_elb.createR) R( R* R, R- u elbu oldu newu ELB {0} created.u Failed to create {0} ELB.u ELB {0} present.u ( R R R t datat exactly_oneR RH t uppert
setdefaultR" R t" DEFAULT_PILLAR_LISTENER_POLICY_KEYR R' R t appendR t _security_groups_presentR R R t _listeners_presentt _zones_presentt _subnets_present( R R) R( R* R+ R, R- R R
R R R< t listenerR4 t policies_pillart it rt _security_groupsRV R? t createdR> ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR , s�
.
$!
$!
$!
$!
c C@ s� i t d 6d d 6i d 6} t d | | | | | � } | s^ d j | � | d <t | d <| S| sm g } n i } x( | D] } t d | � }
| | |
<qz Wi } x, | d D] } t d | � }
| | |
<q� Wg } g }
x9 t j | � D]( \ } } | | k r� |
j | � q� q� Wx9 t j | � D]( \ } } | | k r+| j | � q+q+Wt d r%g } |
ss| r�| j d
j | � � x. |
D]& } | j d j t d | � � � q�Wx. | D]& } | j d j t d | � � � q�Wd | d <n | j d
j | � � d j | � | d <| S| r�g | D] } | d ^ q2} t d | | | | | | � } | r�d j | � | d <q�d j | � | d <t | d <n |
r6t d | |
| | | | � } | r�d } d j | d | j | � g � | d <q6d } d j | d | j | � g � | d <t | d <n |
sB| r�i | d d <| d | d d d <t d | | | | | � } | d | d d d <n d
j | � | d <| S( Nu resultu u commentu changesu boto_elb.get_elb_configu- {0} ELB configuration could not be retrieved.u boto_elb.listener_dict_to_tupleu listenersu testu' ELB {0} set to have listeners modified:u Listener {0} added.u Listener {0} deleted.u! Listeners already set on ELB {0}.u u elb_portu boto_elb.delete_listenersu Deleted listeners on {0} ELB.u& Failed to delete listeners on {0} ELB.u boto_elb.create_listenersu Created listeners on {0} ELB.u u& Failed to create listeners on {0} ELB.u oldu new(
R R R' R R t iteritemsR\ R R R ( R R( R R
R R R< R@ t expected_listeners_by_tuplet lt l_keyt actual_listeners_by_tuplet to_deletet to_createt tR= Ra t portst deletedRf ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR^ � s�
)&
c
C@ si i t d 6d d 6i d 6} t d | | | | | � } | s^ d j | � | d <t | d <| S| sm g } n t } t | � t | d � k r� t } n | rRt d r� d j | � | d <d | d <| St d
| | | | | | � } | rd j | � | d <n d j | � | d <t | d <i | d d 6| d d
<i | d 6| d d <n d j | � | d <| S( Nu resultu u commentu changesu boto_elb.get_elb_configu- {0} ELB configuration could not be retrieved.u security_groupsu testu- ELB {0} set to have security groups modified.u boto_elb.apply_security_groupsu$ Modified security_groups on {0} ELB.u, Failed to modify security_groups on {0} ELB.u oldu newu' security_groups already set on ELB {0}.( R R R' R RM R R (
R R, R R
R R R< R@ t
change_neededt changed( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR] � s4
c C@ s� i t d 6d d 6i d 6} t d | | | | | � } | s^ t | d <d j | � | d <| Sg } d | k r� | d } | d }
| d |
d k r� | j d � q� n d | k r| d } | d } | d | d k s | j d
d � | j d
� k r| j d � qn d | k rZ| d }
| d } |
d
| d
k rZ| j d � qZn d | k rxW t j | d � D]B \ } } t j | d | � t j | � k rz| j d � qzqzWd | d k r| d d } | j d � s�| j
d � rt d � � qqn | r�t d rBd j | � | d <d | d <| St d | | | | | | � } | r�i | d 6| d d <i | d 6| d d <d j | � | d <q�t | d <d j | � | d <n d j | � | d <| S( Nu resultu u commentu changesu boto_elb.get_attributesu* Failed to retrieve attributes for ELB {0}.u cross_zone_load_balancingu enabledu connection_drainingu timeouti, u connecting_settingsu idle_timeoutu
access_logu s3_bucket_prefixu /u- s3_bucket_prefix can not start or end with /.u testu# ELB {0} set to have attributes set.u boto_elb.set_attributesu
attributesu oldu newu Set attributes on ELB {0}.u$ Failed to set attributes on ELB {0}.u" Attributes already set on ELB {0}.( R R R R' R\ R" R Rg RI t
startswitht endswithR R R ( R R/ R R
R R R< t _attributest attrs_to_sett czlbt _czlbt cdt _cdt cst _cst attrt valt sbpt was_set( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR s`
!
&
c C@ s� i t d 6d d 6i d 6} | s* i } n t d | | | | | � } | sm t | d <d j | � | d <| St } xH t j | � D]7 \ } }
t j | | � t j |
� k r� t } q� q� W| r�t d r� d j | � | d <d | d <| St d | | | | | | � } | rpi | d
6| d d <t d | | | | | � } i | d
6| d d <d
j | � | d <q�t | d <d j | � | d <n d j | � | d <| S( Nu resultu u commentu changesu boto_elb.get_health_checku, Failed to retrieve health_check for ELB {0}.u testu% ELB {0} set to have health check set.u boto_elb.set_health_checku health_checku oldu newu Set health check on ELB {0}.u& Failed to set health check on ELB {0}.u$ Health check already set on ELB {0}.( R R R R' R Rg RI R R ( R R. R R
R R R< t
_health_checkt need_to_setR} R~ R� ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR L s@
"
c C@ sa i t d 6d d 6i d 6} t d | | | | | � } | s^ t | d <d j | � | d <| Sg } g } | d }
x* | D]" } | |
k r{ | j | � q{ q{ Wx* |
D]" } | | k r� | j | � q� q� W| s� | rJt d rd j | � | d <d | d <| S| rft d
| | | | | | � } | rFd j | � | d <qfd j | � | d <t | d <n | r�t d
| | | | | | � }
|
r�d } d j | d | j | � g � | d <q�d } d j | d | j | � g � | d <t | d <n i | d d 6| d d <t d | | | | | � } i | d d 6| d d <n d j | � | d <| S( Nu resultu u commentu changesu boto_elb.get_elb_configu Failed to retrieve ELB {0}.u availability_zonesu testu' ELB {0} to have availability zones set.u" boto_elb.enable_availability_zonesu& Enabled availability zones on {0} ELB.u/ Failed to enable availability zones on {0} ELB.u# boto_elb.disable_availability_zonesu' Disabled availability zones on {0} ELB.u u0 Failed to disable availability zones on {0} ELB.u oldu newu* Availability zones already set on ELB {0}.( R R R R' R\ R R R ( R R) R R
R R R< R@ t to_enablet
to_disablet _zonest zonet enabledt disabledR= ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR_ q sX
)&
c C@ sd i t d 6d d 6i d 6} | s* g } n t d | | | | | � } | sm t | d <d j | � | d <| Sg } g } | d }
x* | D]" } | |
k r� | j | � q� q� Wx* |
D]" } | | k r� | j | � q� q� W| s� | rMt d rd j | � | d <d | d <| S| rut d
| | | | | | � } | rUd j | � | d <qud j | � | d <t | d <n | r�t d
| | | | | | � }
|
r�d j | d d j | � g � | d <q�d j | d d j | � g � | d <t | d <n i | d d 6| d d <t d | | | | | � } i | d d 6| d d <n d j | � | d <| S( Nu resultu u commentu changesu boto_elb.get_elb_configu Failed to retrieve ELB {0}.u subnetsu testu ELB {0} to have subnets set.u boto_elb.attach_subnetsu Attached subnets on {0} ELB.u$ Failed to attach subnets on {0} ELB.u boto_elb.detach_subnetsu u Detached subnets on {0} ELB.u$ Failed to detach subnets on {0} ELB.u oldu newu Subnets already set on ELB {0}.( R R R R' R\ R R R ( R R* R R
R R R< R@ R� R� t _subnetst subnett attachedt detached( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR` � s`
c
C@ s� t d | i � } | r4 t j j j | | � } n i | d 6t d 6d d 6i d 6} x%t j | � D]\ } }
| d |
d |
d <| d |
d d |
d d <i | g d
6|
d d <i |
d d 6|
d d 6| d 6| d
6| d 6| d 6} t d | � } | j d � s&| d | d <n | j d i � i k rW| d | d |
d <n d | k rf | d c | d 7<qf qf W| S( uA helper method for present. ensure that cloudwatch_alarms are setu
config.optionu nameu resultu u commentu changesu u
attributesu descriptionu LoadBalancerNameu
dimensionsu regionu keyu keyidu profileu boto_cloudwatch_alarm.present(
R R R R R R R Rg R# R" (
R R2 R3 R R
R R t currentR< t _RL t kwargst results( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR$ � s. "
c + C@ s� | d5 k r g } n t d | g � } | | } | d5 k rG g } n t � }
x� | D]� } d | k rx t d � � n d | k r� t d � � n d | k r� t d � � n | d |
k r� t d j | d � � � n |
j | d � qW WxY | D]Q } xH | j d g � D]4 } | |
k rt d
j | d | | � � � qqWq� WxY | D]Q }
xH |
j d g � D]4 } | |
k rkt d j |
d
| | � � � qkqkWqRWi t d 6d d 6i d 6} t d | | | | | � } | sd j | � | d <t | d <| Si } i } x2 | D]* } t | � } | | | <| | | d <qW| j
� } | d } t � } i } xE | D]= } t g | j d g � D] } | | ^ q�� | | d <qrWi } xk | d D]_ } t | j d g � � } | | | d <x0 | D]( } t j d | � r�| j | � q�q�Wq�Wi } xE | D]= }
t g |
j d g � D] } | | ^ qP� | |
d
<q4Wi } x8 | d D], }
t |
j d g � � } | | |
d
<q�Wg } g } x* | D]" } | | k r�| j
| � q�q�Wx9 | D]1 } | | k r�| | k r'| j
| � q'q�q�Wt � } xH t j | � D]7 \ } } | | j | t � � k rD| j | � qDqDWxH t j | � D]7 \ } } | | j | t � � k r�| j | � q�q�Wt � }! xH t j | � D]7 \ } } | | j | t � � k r�|! j | � q�q�WxH t j | � D]7 \ } } | | j | t � � k r.|! j | � q.q.Wt d rqg }" | s�| r�|" j
d j | � � x$ | D] }# |" j
d j |# � � q�Wx$ | D] }# |" j
d j |# � � q�Wd5 | d <n |" j
d j | � � x$ | D] }$ |" j
d j |$ � � qWx$ |! D] }% |" j
d j |% � � q:Wd j |" � | d <| S| rBx� | D]� } t d d | d! | d" | | d d# | | d d$ | d% | d& | d' | � }& |& r-| | d j | i � d( <d) j | | � }' d j | d |' g � | d <t | d <q~t | d <| Sq~Wn x� | D]� } t d* d | d+ | d, t | j | g � � d$ | d% | d& | d' | � }( |( r0d- j | � }) i t | j | g � � d. 6t | j | g � � d( 6| d |) <d/ j | | | | � }' d j | d |' g � | d <t | d <qIt | d <| SqIWx� |! D]� } t d0 d | d+ | d, t | j | g � � d$ | d% | d& | d' | � }( |( r0 d1 j | � }) i t | j | g � � d. 6t | j | g � � d( 6| d |) <d2 j | | | | � }' d j | d |' g � | d <t | d <qIt | d <| SqIW| r� x� | D]� } t d3 d | d! | d$ | d% | d& | d' | � }* |* r� | | d j | i � d. <d4 j | | � }' d j | d |' g � | d <t | d <qO t | d <| SqO Wn | S(6 u; helper method for present. ensure that ELB policies are setu
config.optionu policy_nameu- policy_name is a required value for policies.u policy_typeu- policy_type is a required value for policies.u policyu) policy is a required value for listeners.u: Policy names must be unique: policy {0} is declared twice.u policiesu7 Listener {0} on ELB {1} refers to undefined policy {2}.u elb_portu6 Backend {0} on ELB {1} refers to undefined policy {2}.u
instance_portu resultu u commentu changesu boto_elb.get_elb_configu- {0} ELB configuration could not be retrieved.u listenersu ^ELBSecurityPolicy-\d{4}-\d{2}$u backendsu testu& ELB {0} set to have policies modified:u Policy {0} added.u Policy {0} deleted.u Policies already set on ELB {0}.u Listener {0} policies updated.u Backend {0} policies updated.u u boto_elb.create_policyR t policy_namet policy_typet policyR R
R R u newu! Policy {0} was created on ELB {1}u boto_elb.set_listener_policyt portR4 u listener_{0}_policyu oldu. Policy {0} was created on ELB {1} listener {2}u boto_elb.set_backend_policyu backend_{0}_policyu- Policy {0} was created on ELB {1} backend {2}u boto_elb.delete_policyu# Policy {0} was deleted from ELB {1}N( R R RM R R' t addR" R R t
_policy_cnamet keyst ret matchR\ R Rg R R RZ R (+ R R4 R5 R( R6 R R
R R t pillar_policiest policy_namesRC Ri t bR< R@ t policies_by_cnamet cnames_by_nameRA t expected_policy_namest actual_policy_namest default_aws_policiest expected_policies_by_listenert actual_policies_by_listenert listener_policiest expected_policies_by_backendt actual_policies_by_backendt backend_policiesRl Rm R� t listeners_to_updateR� t backends_to_updateR= R� Ra t backendRf t commentt
policy_sett
policy_keyRp ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR% � sd
!
!
8
8
$
$
c C@ s� | d } | d } | d } t j t t t j | � � d d � �� } t j t j j j
t | � � � j � } | j
d � r� | d } n d j | | | � S( Nu policy_nameu policy_typeu policyR
c S@ s t j | d � S( Ni ( R RI ( t x( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyt <lambda>� s u Typei����u {0}-{1}-{2}( R RI t sortedR Rg t hashlibt md5R R t stringutilst to_bytest strt hexdigestRt R' ( t policy_dictR� R� R� t canonical_policy_reprt policy_hash( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR� � s
-$
c C@ s i | d 6t d 6d d 6i d 6} t d | | | | | � } | r� t d ro d j | � | d <d | d <| St d | | | | | � } | r� i | d
6| d d <i d d
6| d d <d
j | � | d <qt | d <d j | � | d <n d j | � | d <| S( uH
Ensure an ELB does not exist
name
name of the ELB
u nameu resultu u commentu changesu boto_elb.existsu testu ELB {0} is set to be removed.u boto_elb.deleteu elbu oldu newu ELB {0} deleted.u Failed to delete {0} ELB.u {0} ELB does not exist.N( R R R R' R R ( R R R
R R R< R? Rp ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyt absent� s" "
c C@ s� i t d 6d d 6i d 6} | r�t d | | | | | � } | } i } g }
| j d � r� x| | d D]m } | | j � k r� | |
k r� |
j | � q� qi | | | d | k r� | | | | <n | j | � qi Wn |
r t d rJd j t |
� d k r d
n d d j |
� � } d
j | d | g � | d <d | d <q t d | |
| | | | � }
|
s�t | d <d j |
� } d
j | d | g � | d <| Sd | d k r�t j
j j | d i i i d 6d 6� | d <n x/ |
D]$ } | d | | d d d | <q�Wn | s(| rtt d r | r�d j t | j � � d k r\d
n d d j | j � � � } d j | d | g � | d <d | d <n | rqd j t | j � � d k r�d n d d j | j � � � } d
j | d | g � | d <qqqtt j
j j | | � } t d | | | | | | � }
|
swt | d <d } d
j | d | g � | d <| Sd | d k r�t j
j j | d i i i d 6d 6� | d <n d | d k r�t j
j j | d i i i d 6d 6� | d <n xx | D]m } | | | d d d | <d | k r | d rm| | d k rj| d | | d d d | <qjqmq q Wn | r�|
r�| r�d } d
j | d | g � | d <q�n | S( u1
helper function to validate tags on elb
u resultu u commentu changesu boto_elb.get_elb_configu tagsu testu, The following tag{0} set to be removed: {1}.i u s areu isu , u u boto_elb.delete_tagsu# Error attempting to delete tag {0}.u oldu* The following tag{0} set to be added: {1}.u u- The following tag {0} set to be updated: {1}.u
values areu value isu boto_elb.set_tagsu Error attempting to set tags.u newu Tags are already set.N( R R R" R� R\ R R R' RH R R R R R R R ( R R8 R R
R R R< R@ t tags_to_addt tags_to_updatet tags_to_removet _tagR= R> t all_tag_changest tag( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyR& s�
-
1
%
!
!#
11
.#(% t __doc__t
__future__R R R t loggingR� R� t salt.utils.dataR t salt.utils.dictupdatet salt.utils.stringutilst salt.exceptionsR t salt.extR t getLoggert __name__R R R R RG RU R[ R R^ R] R R R_ R` R$ R% R� R� R& ( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_elb.pyt <module>� sD � @ z P 6 % 2 8 �
Mini Shell