Current File : //lib/python2.7/site-packages/salt/states/boto_vpc.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l m Z d d l j j
Z
d Z e j e
� Z d � Z d d d d d d d d d � Z d d d d d d � Z d d d d d d d d d d d d d d �
Z d d d d d d d
� Z d d d d d d d d d d e d � Z d � Z d d d d d d d
� Z d d d d d d d d � Z e d d d d d � Z d d d d d d d d d d d �
Z d d d d d d d d � Z d d d d d d � Z d d d d d d d d � Z d d d d d � Z d d d d d d d d � Z d d d d d d d d d � Z! d d d d d d d d � Z" d d d d d d d d d d d �
Z# d d d d d d d d d d d �
Z$ d d d d d d d � Z% d d d d d d d � Z& d S( uB
Manage VPCs
=================
.. versionadded:: 2015.8.0
:depends:
- boto >= 2.8.0
- boto3 >= 1.2.6
Create and destroy VPCs. Be aware that this interacts with Amazon's services,
and so may incur charges.
This module accepts explicit vpc credentials but can also utilize
IAM roles assigned to the instance through Instance Profiles. Dynamic
credentials are then automatically obtained from AWS API and no further
configuration is necessary. More information available `here
<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_.
If IAM roles are not used you need to specify them either in a pillar file or
in the minion's config file:
.. code-block:: yaml
vpc.keyid: GKTADJGHEIQSXMKKRBJ08H
vpc.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile,
either passed in as a dict, or as a string to pull from pillars or minion
config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
.. code-block:: yaml
aws:
region:
us-east-1:
profile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
.. code-block:: jinja
Ensure VPC exists:
boto_vpc.present:
- name: myvpc
- cidr_block: 10.10.11.0/24
- dns_hostnames: True
- region: us-east-1
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
Ensure subnet exists:
boto_vpc.subnet_present:
- name: mysubnet
- vpc_id: vpc-123456
- cidr_block: 10.0.0.0/16
- region: us-east-1
- profile: myprofile
{% set profile = salt['pillar.get']('aws:region:us-east-1:profile' ) %}
Ensure internet gateway exists:
boto_vpc.internet_gateway_present:
- name: myigw
- vpc_name: myvpc
- profile: {{ profile }}
Ensure route table exists:
boto_vpc.route_table_present:
- name: my_route_table
- vpc_id: vpc-123456
- routes:
- destination_cidr_block: 0.0.0.0/0
instance_id: i-123456
- subnet_names:
- subnet1
- subnet2
- region: us-east-1
- profile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
.. versionadded:: 2016.11.0
Request, accept and delete VPC peering connections.
VPC peering connections can be named allowing the name
to be used throughout the state file. Following
example shows how to request and accept a VPC
peering connection.
.. code-block:: yaml
accept the vpc peering connection:
boto_vpc.accept_vpc_peering_connection:
- conn_name: salt_vpc_peering
- region: us-west-2
- require:
- boto_vpc: request a vpc peering connection
request a vpc peering connection:
boto_vpc.request_vpc_peering_connection:
- requester_vpc_id: vpc-4a3d522e
- peer_vpc_id: vpc-ae81e9ca
- region: us-west-2
- conn_name: salt_vpc_peering
VPC peering connections need not be named. In this case
the VPC peering connection ID should be used in the state
file.
.. code-block:: yaml
accept the vpc peering connection:
boto_vpc.accept_vpc_peering_connection:
- conn_id: pcx-1873c371
- region: us-west-2
VPC peering connections can be deleted, as shown below.
.. code-block:: yaml
delete a named vpc peering connection:
boto_vpc.delete_vpc_peering_connection:
- conn_name: salt_vpc_peering
Delete also accepts a VPC peering connection id.
.. code-block:: yaml
delete a vpc peering connection by id:
boto_vpc.delete_vpc_peering_connection:
- conn_id: pcx-1873c371
i ( t absolute_importt print_functiont unicode_literalsN( t sixu boto_vpcc C@ s6 d } d } d t k r t St d j | | � f Sd S( u)
Only load if boto is available.
u 2.8.0u 1.2.6u boto_vpc.existsud The following libraries are required to run the boto_vpc state module: boto >= {0} and boto3 >= {1}.N( t __salt__t __virtualname__t Falset format( t boto_versiont
boto3_version( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt __virtual__� s c
C@ s� i | d 6t d 6d d 6i d 6}
t d d | d | d | d
| d | d | � } d
| k r� t |
d <d j | d
d � |
d <|
S| j d � s�t d r� d j | � |
d <d" |
d <|
St d | d | d | d | d | d | d | d
| d | d | � } | j d � s@t |
d <d j | d
d � |
d <|
St d d | d d | d
| d | d | � } i d" d 6|
d d <| |
d d <d j | � |
d <|
Sd! |
d <|
S(# u
Ensure VPC exists.
name
Name of the VPC.
cidr_block
The range of IPs in CIDR format, for example: 10.0.0.0/24. Block
size must be between /16 and /28 netmask.
instance_tenancy
Instances launched in this VPC will be ingle-tenant or dedicated
hardware.
dns_support
Indicates whether the DNS resolution is supported for the VPC.
dns_hostnames
Indicates whether the instances launched in the VPC get DNS hostnames.
tags
A list of tags.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_vpc.existst namet tagst regiont keyt keyidt profileu erroru Failed to create VPC: {0}.u messageu existsu testu VPC {0} is set to be created.u boto_vpc.createt instance_tenancyt vpc_namet enable_dns_supportt enable_dns_hostnamesu createdu Error in creating VPC: {0}.u boto_vpc.describet vpc_idu idu vpcu oldu newu VPC {0} created.u VPC present.N( t TrueR R R t gett __opts__t None(
R t
cidr_blockR t dns_supportt
dns_hostnamesR R
R R R t rett rt _describe( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt present� s> '
c
C@ s� i | d 6t d 6d d 6i d 6} t d d | d | d | d
| d | d | � } d
| k r� t | d <d j | d
d � | d <| S| j d � } | s� d j | � | d <| St d r� d j | � | d <d | d <| St d d | d | d | d
| d | d | � } | d sCt | d <d j | d
d � | d <| Si | d 6| d d <i d d 6| d d <d j | � | d <| S( u�
Ensure VPC with passed properties is absent.
name
Name of the VPC.
tags
A list of tags. All tags must match.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_vpc.get_idR R R
R R R u erroru Failed to delete VPC: {0}.u messageu idu {0} VPC does not exist.u testu VPC {0} is set to be removed.u boto_vpc.deleteR u deletedu vpcu oldu newu VPC {0} deleted.N( R R R R R R R ( R R R
R R R R R t _id( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt absent� s:
c C@ s� i | d 6t d 6d d 6i d 6} i | d 6| d 6| d 6| d 6| d
6} t d d | d
| d |
d | d | d |
� } d | k r� t | d <d j | d d � | d <| S| j d � r� d | d <| St d r� d j | � | d <d( | d <| St d d | d | d | d | d | d
| d | d | d! | d |
d | d | d |
�
} | j d" � s�t | d <d# j | d d � | d <| Si d( d$ 6| d d% <i | d$ 6| d d& <d' j | � | d <| Sd( S() u�
Ensure a set of DHCP options with the given settings exist.
Note that the current implementation only SETS values during option set
creation. It is unable to update option sets in place, and thus merely
verifies the set exists via the given name and/or dhcp_options_id param.
name
(string)
Name of the DHCP options.
vpc_name
(string)
Name of a VPC to which the options should be associated. Either
vpc_name or vpc_id must be provided.
vpc_id
(string)
Id of a VPC to which the options should be associated. Either
vpc_name or vpc_id must be provided.
domain_name
(string)
Domain name to be assiciated with this option set.
domain_name_servers
(list of strings)
The IP address(es) of up to four domain name servers.
ntp_servers
(list of strings)
The IP address(es) of up to four desired NTP servers.
netbios_name_servers
(list of strings)
The IP address(es) of up to four NetBIOS name servers.
netbios_node_type
(string)
The NetBIOS node type (1, 2, 4, or 8). For more information about
the allowed values, see RFC 2132. The recommended is 2 at this
time (broadcast and multicast are currently not supported).
tags
(dict of key:value pairs)
A set of tags to be added.
region
(string)
Region to connect to.
key
(string)
Secret key to be used.
keyid
(string)
Access key to be used.
profile
(various)
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
.. versionadded:: 2016.3.0
u nameu resultu u commentu changesu domain_nameu domain_name_serversu ntp_serversu netbios_name_serversu netbios_node_typeu boto_vpc.dhcp_options_existst dhcp_options_idt dhcp_options_nameR
R R R u erroru% Failed to validate DHCP options: {0}.u messageu existsu DHCP options already present.u testu' DHCP options {0} are set to be created.u boto_vpc.create_dhcp_optionst domain_namet domain_name_serverst ntp_serverst netbios_name_serverst netbios_node_typeR R R u createdu" Failed to create DHCP options: {0}u dhcp_optionsu oldu newu DHCP options {0} created.N( R R R R R R R ( R R# R R R% R& R' R( R) R R
R R R R t _newR ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt dhcp_options_present3 sR E
c C@ s� i | d 6t d 6d d 6i d 6} t d d d | d | d
| d | d | �} d
| k r� t | d <d j | d
d � | d <| S| j d � } | s� d j | � | d <| St d r� d j | � | d <d | d <| St d d | d d | d
| d | d | � } | j d � sCt | d <d j | d
d � | d <| Si | d 6| d d <i d d 6| d d <d j | � | d <| S( u;
Ensure a set of DHCP options with the given settings exist.
name
(string)
Name of the DHCP options set.
dhcp_options_id
(string)
Id of the DHCP options set.
region
(string)
Region to connect to.
key
(string)
Secret key to be used.
keyid
(string)
Access key to be used.
profile
(various)
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
.. versionadded:: 2016.3.0
u nameu resultu u commentu changesu boto_vpc.get_resource_idu dhcp_optionsR R
R R R u erroru# Failed to delete DHCP options: {0}.u messageu idu DHCP options {0} do not exist.u testu' DHCP options {0} are set to be deleted.u boto_vpc.delete_dhcp_optionsR# u deletedu" Failed to delete DHCP options: {0}u oldu newu DHCP options {0} deleted.N( R R R R R R R ( R R# R
R R R R R R! ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt dhcp_options_absent� s:
c
C@ s� i | d 6t d 6d d 6i d 6}
t d d | d | d | d
| d | d | � } d
| k r� t |
d <d j | d
d � |
d <|
Sd4 } d4 } d4 } |
s� | r�d4 } t } |
r� |
} t d d |
d | d
| d | d | � } n: | r&| } t d d | d | d
| d | d | � } n | r�d | k r�| d r�|
r|t } t d d |
d | d
| d | d | � } q�| r�t } t d d | d | d
| d | d | � } q�q�q�n | s�t |
d <d j | � |
d <|
Sn | j d � st d r#d j | � |
d <d4 |
d <|
St d d | d | d | d | d | d | d | d | d
| d | d | � } | j d � s�t |
d <d j | d
d � |
d <|
St d d! | d" d | d
| d | d | � } i d4 d# 6|
d d$ <| |
d d% <d& j | � |
d <n
d' |
d <| r�| sVt d d | d | d
| d | d | � } n t | | d# d" � s~t d r�d( j | � } d) j |
d | g � |
d <d4 |
d <|
Sd* | d# k rEt j
d+ � t d, | d# d* d | d
| d | d | �} | d- sEd. j | � } d) j |
d | g � |
d <t |
d <|
Sn d$ |
d k rf| |
d d$ <n t d/ d | d" d | d | d
| d | d | � } d
| k r�d0 j | | | d
d � } d) j |
d | g � |
d <t |
d <|
Sd1 j | � } d) j |
d | g � |
d <d% |
d k rat d d | d | d
| d | d | � |
d d% <q�| d2 |
d d% d# d* <q�d) j |
d d3 j | � g � |
d <n |
S(5 u
Ensure a subnet exists.
name
Name of the subnet.
cidr_block
The range if IPs for the subnet, in CIDR format. For example:
10.0.0.0/24. Block size must be between /16 and /28 netmask.
vpc_name
Name of the VPC in which the subnet should be placed. Either
vpc_name or vpc_id must be provided.
vpc_id
Id of the VPC in which the subnet should be placed. Either vpc_name
or vpc_id must be provided.
availability_zone
AZ in which the subnet should be placed.
tags
A list of tags.
route_table_id
A route table ID to explicitly associate the subnet with. If both route_table_id
and route_table_name are specified, route_table_id will take precedence.
.. versionadded:: 2016.11.0
route_table_name
A route table name to explicitly associate the subnet with. If both route_table_id
and route_table_name are specified, route_table_id will take precedence.
.. versionadded:: 2016.11.0
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_vpc.subnet_existst subnet_nameR R
R R R u erroru Failed to create subnet: {0}.u messageu boto_vpc.route_table_existst route_table_idt route_table_nameu existsu boto_vpc.describe_route_tableu1 The specified route table {0} could not be found.u testu Subnet {0} is set to be created.u boto_vpc.create_subnetR t availability_zonet auto_assign_public_ipv4R R u createdu Failed to create subnet: {0}u boto_vpc.describe_subnett subnet_idu idu subnetu oldu newu Subnet {0} created.u Subnet present.u3 Subnet is set to be associated with route table {0}u u# explicit_route_table_association_idu. Need to disassociate from existing route tableu! boto_vpc.disassociate_route_tableu
disassociatedu? Unable to disassociate subnet {0} with its current route table.u boto_vpc.associate_route_tableu9 Failed to associate subnet {0} with route table {1}: {2}.u4 Subnet successfully associated with route table {0}.u association_idu1 Subnet is already associated with route table {0}N( R R R R R R R t _verify_subnet_associationt joint logt debug( R R R R R0 R R
R R R R. R/ R1 R R t route_table_descR t rtidt rtt route_table_foundt msgt drt_rett art_ret( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt subnet_present� s� 8
c C@ sE | rA d | k rA x) | d D] } | d | k r t Sq WqA n t S( u
Helper function verify a subnet's route table association
route_table_desc
the description of a route table, as returned from boto_vpc.describe_route_table
subnet_id
the subnet id to verify
.. versionadded:: 2016.11.0
u associationsu subnet_id( R R ( R7 R2 t association( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyR3 � s c C@ s� i | d 6t d 6d d 6i d 6} t d d d | d | d
| d | d | �} d
| k r� t | d <d j | d
d � | d <| S| j d � } | s� d j | � | d <| St d r� d j | | d � | d <d | d <| St d d | d | d
| d | d | � } | j d � sFt | d <d j | d
d � | d <| Si | d 6| d d <i d d 6| d d <d j | � | d <| S( ue
Ensure subnet with passed properties is absent.
name
Name of the subnet.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_vpc.get_resource_idu subnetR R
R R R u erroru Failed to delete subnet: {0}.u messageu idu {0} subnet does not exist.u testu& Subnet {0} ({1}) is set to be removed.u boto_vpc.delete_subnetR- u deletedu Failed to delete subnet: {0}u oldu newu Subnet {0} deleted.N( R R R R R R R ( R R2 R
R R R R R R! ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt
subnet_absent� s<
c
C@ s� i | d 6t d 6d d 6i d 6} t d d d | d | d
| d | d | �} d
| k r� t | d <d j | d
d � | d <| S| j d � syt d r� d j | � | d <d | d <| St d d | d | d | d | d | d
| d | d | � } | j d � s4t | d <d j | d
d � | d <| Si d d 6| d d <i | d d 6| d d <d j | � | d <| Sd j | � | d <| S( uh
Ensure an internet gateway exists.
name
Name of the internet gateway.
vpc_name
Name of the VPC to which the internet gateway should be attached.
vpc_id
Id of the VPC to which the internet_gateway should be attached.
Only one of vpc_name or vpc_id may be provided.
tags
A list of tags.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_vpc.resource_existsu internet_gatewayR R
R R R u erroru' Failed to create internet gateway: {0}.u messageu existsu testu* Internet gateway {0} is set to be created.u boto_vpc.create_internet_gatewayt internet_gateway_nameR R R u createdu& Failed to create internet gateway: {0}u oldu idu newu Internet gateway {0} created.u Internet gateway {0} present.N( R R R R R R R (
R R R R R
R R R R R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt internet_gateway_present� s> !
c
C@ s� i | d 6t d 6d d 6i d 6} t d d d | d | d
| d | d | �} d
| k r� t | d <d j | d
d � | d <| S| d } | s� d j | � | d <| St d r� d j | � | d <d | d <| St d d | d | d | d
| d | d | � } | j d � s@t | d <d j | d
d � | d <| Si | d 6| d d <i d d 6| d d <d j | � | d <| S( u�
Ensure the named internet gateway is absent.
name
Name of the internet gateway.
detach
First detach the internet gateway from a VPC, if attached.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_vpc.get_resource_idu internet_gatewayR R
R R R u erroru' Failed to delete internet gateway: {0}.u messageu idu$ Internet gateway {0} does not exist.u testu* Internet gateway {0} is set to be removed.u boto_vpc.delete_internet_gatewayRA t detachu deletedu oldu newu Internet gateway {0} deleted.N( R R R R R R R ( R RC R
R R R R R t igw_id( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt internet_gateway_absent8 s>
c
C@ s# i | d 6t d 6d d 6i d 6} t d | d | d | d | d
| d | d | d
|
� } | d | d <d j | d | d g � | d <| d s� | d | d <| d t k r� | S| d d k r� t d r� | Sn t d | d | d | d
| d | d | d
|
� } t j | d | d � | d <d j | d | d g � | d <| d sx| d | d <| d t k rx| Sn t d | d | d | d | d
| d | d | d
|
� } t j | d | d � | d <d j | d | d g � | d <| d s | d | d <| d t k r | Sn | S( u�
Ensure route table with routes exists and is associated to a VPC.
This function requires boto3 to be installed if nat gatewyas are specified.
Example:
.. code-block:: yaml
boto_vpc.route_table_present:
- name: my_route_table
- vpc_id: vpc-123456
- routes:
- destination_cidr_block: 0.0.0.0/0
internet_gateway_name: InternetGateway
- destination_cidr_block: 10.10.11.0/24
instance_id: i-123456
- destination_cidr_block: 10.10.12.0/24
interface_id: eni-123456
- destination_cidr_block: 10.10.13.0/24
instance_name: mygatewayserver
- subnet_names:
- subnet1
- subnet2
name
Name of the route table.
vpc_name
Name of the VPC with which the route table should be associated.
vpc_id
Id of the VPC with which the route table should be associated.
Either vpc_name or vpc_id must be provided.
routes
A list of routes. Each route has a cidr and a target.
subnet_ids
A list of subnet ids to associate
subnet_names
A list of subnet names to associate
tags
A list of tags.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesR R R R R
R R R u u testR/ t routest
subnet_idst subnet_namesN(
R t _route_table_presentR4 R R R t _routes_presentt
dictupdatet updatet _subnets_present(
R R R RF RG RH R R
R R R R t _ret( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt route_table_presentv sB ?
!
!
!
c C@ s� i | d 6t d 6d d 6i d 6} t d d d d | d
| d | d | d
| � } d | k r� t | d <d j | d d � | d <| S| j d � }
|
s�t d r� d j | � } | | d <d | d <| St d d | d | d | d | d
| d | d | d
| � } | j d � sCt | d <d j | d d � | d <| Si d d 6| d d <i | d d 6| d d <d j | � | d <| Sd j | |
� | d <| S( Nu nameu resultu u commentu changesu boto_vpc.get_resource_idt resourceu route_tableR R
R R R u erroru" Failed to create route table: {0}.u messageu idu testu% Route table {0} is set to be created.u boto_vpc.create_route_tableR/ R R R u createdu oldu newu Route table {0} created.u Route table {0} ({1}) present.( R R R R R R R ( R R R R R
R R R R R R! R; ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyRI � sB
c C@ sL i | d 6t d 6d d 6i d 6} t d d | d | d | d
| d | d | � } d
| k r� d j | | d
d � } | | d <t | d <| S| d } g }
| r�t d@ � } x| D]�} i }
x: t j | � D]) \ } } | | k r� | | |
| <q� q� W| j d � r�t d d d | d d | d
| d | d | �} d
| k r�d j | j d � | d
d � } | | d <t | d <| S| d d k r�d j | � } | | d <t | d <| S| d |
d <n | j d � r�t d d d | d d | d
| d | d | �} d
| k r[d j | j d � | d
d � } | | d <t | d <| S| d d k r�d! j | � } | | d <t | d <| S| d |
d <n | j d" � r1dA } t d( d | d" d | d
| d | d | d) | � } | d k r$d* j | d" � } | | d <t | d <| S| |
d <n | j d+ � r�t d, d- | d+ d | d
| d | d | � } | s�d. } | | d <t | d <| S| d d/ |
d <n |
j |
� q� Wn g } g } x4 |
D], } | | d0 k r�| j t
| � � q�q�WxF | d0 D]: } | |
k r
| j d � d1 k rD| j | � qDq
q
W| sT| rHt d2 r�d3 j | � } | | d <d | d <| S| r5x� | D]� } t d4 d5 | d d6 | d d | d
| d | d | � } | d7 sd8 j | d | | d
d � } | | d <t | d <| Sd9 j | d | � | d <q�Wn | r�x� | D]� } t d: d5 | d d | d
| d | d | | � } | d; s�d< j | d | | d
d � } | | d <t | d <| Sd= j | d | � | d <qBWn i | d0 d0 6| d d> <t d d | d | d | d
| d | d | � } i | d d0 d0 6| d d? <n | S(B Nu nameu resultu u commentu changesu boto_vpc.describe_route_tablesR/ R R
R R R u erroru; Could not retrieve configuration for route table {0}: {1}`.u messagei u
gateway_idu instance_idu destination_cidr_blocku interface_idu vpc_peering_connection_idu nat_gateway_idu internet_gateway_nameu boto_vpc.get_resource_idu internet_gatewayR u1 Error looking up id for internet gateway {0}: {1}u idu$ Internet gateway {0} does not exist.u vpc_peering_connection_nameu vpc_peering_connectionu7 Error looking up id for VPC peering connection {0}: {1}u* VPC peering connection {0} does not exist.u
instance_nameu pendingu rebootingu runningu stoppingu stoppedu boto_ec2.get_idt in_statesu Instance {0} does not exist.u nat_gateway_subnet_nameu boto_vpc.describe_nat_gatewaysR- u Nat gateway does not exist.u NatGatewayIdu routesu localu testu, Route table {0} set to have routes modified.u boto_vpc.delete_routeR. t destination_cidr_blocku deletedu5 Failed to delete route {0} from route table {1}: {2}.u' Deleted route {0} from route table {1}.u boto_vpc.create_routeu createdu3 Failed to create route {0} in route table {1}: {2}.u% Created route {0} in route table {1}.u oldu new( u
gateway_idu instance_idu destination_cidr_blocku interface_idu vpc_peering_connection_idu nat_gateway_id( u pendingu rebootingu runningu stoppingu stopped( R R R R t setR t iteritemsR R t appendt dictR ( R/ RF R R
R R R R t route_tableR; t _routest
route_keyst it _rt kt vR t running_statest to_deletet to_createt routet res( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyRJ s�
!
!" c C@ s� i | d 6t d 6d d 6i d 6} | s1 g } n | r� x� | D]� } t d d d | d | d
| d | d | �}
d
|
k r� d j |
d
d � } | | d <t | d <| S|
d d k r� d j | � } | | d <t | d <| S| j |
d � q> Wn t d d | d | d | d
| d | d | � } | sZd j | � } | | d <t | d <| Sg | d D] }
|
d ^ qe} g | D] }
|
| k r�|
^ q�} g } xF | d D]: }
|
d | k r�|
d d k r�| j |
d � q�q�W| s�| r�t d r,d j | � } | | d <d | d <| S| r�x� | D]y } t d | | | | | � }
d
|
k r�d j | | |
d
d � } | | d <t | d <| Sd j | | � | d <q9Wn | r_x� | D]� } t d d | d d | d | d
| d | d | � }
d
|
k rBd j | | |
d
d � } | | d <t | d <| Sd! j | | � | d <q�Wn i | d d" 6| d d# <t d d | d | d | d
| d | d | � } i | d d" 6| d d$ <n | S(% Nu nameu resultu u commentu changesu boto_vpc.get_resource_idu subnetR R
R R R u erroru Error looking up subnet ids: {0}u messageu idu Subnet {0} does not exist.u boto_vpc.describe_route_tableR/ R u5 Could not retrieve configuration for route table {0}.u associationsu subnet_idu testu; Subnet associations for route table {0} set to be modified.u! boto_vpc.disassociate_route_tableu3 Failed to dissociate {0} from route table {1}: {2}.u, Dissociated subnet {0} from route table {1}.u boto_vpc.associate_route_tableR. R2 u9 Failed to associate subnet {0} with route table {1}: {2}.u+ Associated subnet {0} with route table {1}.u subnets_associationsu oldu new( R R R R R RU R ( R/ RG RH R R
R R R R RZ R R; RW t xt assoc_idsR` R_ t r_asct snt new_sub( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyRM � s�
!%
" c C@ so i | d 6t d 6d d 6i d 6} t d d d | d | d
| d | d | �} d
| k r| t | d <| d
d | d <| S| d } | s� d j | � | d <| St d r� d j | � | d <d | d <| St d d | d | d
| d | d | � } d
| k r.t | d <d j | d
d � | d <| Si | d 6| d d <i d d 6| d d <d j | � | d <| S( ub
Ensure the named route table is absent.
name
Name of the route table.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_vpc.get_resource_idu route_tableR R
R R R u erroru messageu idu Route table {0} does not exist.u testu% Route table {0} is set to be removed.u boto_vpc.delete_route_tableR/ u! Failed to delete route table: {0}u oldu newu Route table {0} deleted.N( R R R R R R ( R R
R R R R R t rtbl_id( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt route_table_absent� s>
c
C@ s\ i | d 6t d 6d d 6i d 6} t d d | d | d | d
| d | d | � } | s,t d
r� d }
|
| d <d | d <| St d d | d | d | d
| d | d | d | � } | j d � s� t | d <d j | d d � | d <| Si d d 6| d d <i | d d 6| d d <d | d <| S| d } | j d � } d j | � | d <| S( u�
Ensure a nat gateway exists within the specified subnet
This function requires boto3.
.. versionadded:: 2016.11.0
Example:
.. code-block:: yaml
boto_vpc.nat_gateway_present:
- subnet_name: my-subnet
name
Name of the state
subnet_name
Name of the subnet within which the nat gateway should exist
subnet_id
Id of the subnet within which the nat gateway should exist.
Either subnet_name or subnet_id must be provided.
allocation_id
If specified, the elastic IP address referenced by the ID is
associated with the gateway. Otherwise, a new allocation_id is created and used.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_vpc.describe_nat_gatewaysR- R2 R
R R R u testu! Nat gateway is set to be created.u boto_vpc.create_nat_gatewayt
allocation_idu createdu" Failed to create nat gateway: {0}.u erroru messageu nat_gatewayu oldu idu newu Nat gateway created.i u NatGatewayIdu Nat gateway {0} present.N( R R R R R R R (
R R- R2 R
R R R Rj R R R; t instR! ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt nat_gateway_present s> +
c C@ so i | d 6t d 6d d 6i d 6} t d d | d | d | d
| d | d | � } | sg d
| d <| St d r� d | d <d | d <| Sx� | D]� }
|
j d � } t d d | d t d | d
| d | d | d t d | � } d | k rt | d <d j | d d � | d <| Sd j | d d j | � f � | d <q� Wi | d 6| d d <i d d 6| d d <| S( u
Ensure the nat gateway in the named subnet is absent.
This function requires boto3.
.. versionadded:: 2016.11.0
name
Name of the state.
subnet_name
Name of the subnet within which the nat gateway should exist
subnet_id
Id of the subnet within which the nat gateway should exist.
Either subnet_name or subnet_id must be provided.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
wait_for_delete_retries
NAT gateway may take some time to be go into deleted or failed state.
During the deletion process, subsequent release of elastic IPs may fail;
this state will automatically retry this number of times to ensure
the NAT gateway is in deleted or failed state before proceeding.
Default is set to 0 for backward compatibility.
u nameu resultu u commentu changesu boto_vpc.describe_nat_gatewaysR- R2 R
R R R u Nat gateway does not exist.u testu! Nat gateway is set to be removed.u NatGatewayIdu boto_vpc.delete_nat_gatewayt nat_gateway_idt release_eipst wait_for_deletet wait_for_delete_retriesu erroru! Failed to delete nat gateway: {0}u messageu , u Nat gateway {0} deleted.u nat_gatewayu oldu newN( R R R R R R R R4 ( R R- R2 R
R R R Rp R R t gwRh ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt nat_gateway_absenta s@ *
*c
C@ sQ t j d � t d d | d | d | d | d | d | � } i | d 6t d
6i d 6d d
6} | s� t | d
<| d j i d d 6� | St d r� | d j i d d 6� | Sd } t j d | � t | d | d | d | d | d | d | � }
d |
k r*d j |
d � | d
<t | d
<| S| d j i d d 6|
d d 6� | S( u�
Accept a VPC pending requested peering connection between two VPCs.
name
Name of this state
conn_id
The connection ID to accept. Exclusive with conn_name. String type.
conn_name
The name of the VPC peering connection to accept. Exclusive with conn_id. String type.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
.. versionadded:: 2016.11.0
Example:
.. code-block:: yaml
boto_vpc.accept_vpc_peering_connection:
- conn_name: salt_peering_connection
# usage with vpc peering connection id and region
boto_vpc.accept_vpc_peering_connection:
- conn_id: pbx-1873d472
- region: us-west-2
u- Called state to accept VPC peering connectionu& boto_vpc.is_peering_connection_pendingt conn_idt conn_nameR
R R R u nameu resultu changesu Boto VPC peering stateu commentu< No pending VPC peering connection found. Nothing to be done.u oldu testu8 Pending VPC peering connection found and can be acceptedu& boto_vpc.accept_vpc_peering_connectionu4 Calling `%s()` to accept this VPC peering connectionR u erroru! Failed to accept VPC peering: {0}u u msgu new( R5 R6 R R RL R R R ( R Rs Rt R
R R R t pendingR t funt result( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt accept_vpc_peering_connection� s8 *
"
#c C@ sI t j d � i | d 6t d 6i d 6d d 6} | rl t d | d | d | d
| d |
�j d g � } n g } | r� d
| d <| St d r� | s� d | d <n | St j d � t d | | | | d | d | d | d | d
| d |
�}
d |
k r"d j |
d � | d <t | d <| S| d j i d d 6|
d d 6� | S( u�
name
Name of the state
requester_vpc_id
ID of the requesting VPC. Exclusive with requester_vpc_name. String type.
requester_vpc_name
Name tag of the requesting VPC. Exclusive with requester_vpc_id. String type.
peer_vpc_id
ID of the VPC tp crete VPC peering connection with. This can be a VPC in another account. Exclusive with peer_vpc_name. String type.
peer_vpc_name
Name tag of the VPC tp crete VPC peering connection with. This can only be a VPC the same account. Exclusive with peer_vpc_id. String type.
conn_name
The (optional) name to use for this VPC peering connection. String type.
peer_owner_id
ID of the owner of the peer VPC. String type. If this isn't supplied AWS uses your account ID. Required if peering to a different account.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
.. versionadded:: 2016.11.0
Example:
.. code-block:: yaml
request a vpc peering connection:
boto_vpc.request_vpc_peering_connection:
- requester_vpc_id: vpc-4b3522e
- peer_vpc_id: vpc-ae83f9ca
- conn_name: salt_peering_connection
u. Called state to request VPC peering connectionu nameu resultu changesu Boto VPC peering stateu commentu( boto_vpc.describe_vpc_peering_connectionR
R R R u VPC-Peeringsu: VPC peering connection already exists, nothing to be done.u testu& VPC peering connection will be createdu. Called module to create VPC peering connectionu' boto_vpc.request_vpc_peering_connectionR t
peer_owner_idu erroru" Failed to request VPC peering: {0}u u oldu msgu new( R5 R6 R R R R R R RL ( R t requester_vpc_idt requester_vpc_namet peer_vpc_idt
peer_vpc_nameRt Ry R
R R R R t vpc_idsRw ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt request_vpc_peering_connection sT 4
c C@ s/ i | d 6t d 6d d 6i d 6} t d d | d | d | d
| d |
� r� t d d | d
| d | d | d | d
| d |
� r� d j | | p� | p� | � | d <t j | d � | St d | d | d | d | d
| d |
� St d | d | d | d | d | d | d | d | d | d
| d |
� S( u�
name
Name of the state
requester_vpc_id
ID of the requesting VPC. Exclusive with requester_vpc_name.
requester_vpc_name
Name tag of the requesting VPC. Exclusive with requester_vpc_id.
peer_vpc_id
ID of the VPC tp crete VPC peering connection with. This can be a VPC in
another account. Exclusive with peer_vpc_name.
peer_vpc_name
Name tag of the VPC tp crete VPC peering connection with. This can only
be a VPC in the same account, else resolving it into a vpc ID will fail.
Exclusive with peer_vpc_id.
conn_name
The name to use for this VPC peering connection.
peer_owner_id
ID of the owner of the peer VPC. Defaults to your account ID, so a value
is required if peering with a VPC in a different account.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
.. versionadded:: 2016.11.0
Example:
.. code-block:: yaml
ensure peering twixt local vpc and the other guys:
boto_vpc.vpc_peering_connection_present:
- requester_vpc_name: my_local_vpc
- peer_vpc_name: some_other_guys_vpc
- conn_name: peering_from_here_to_there
- peer_owner_id: 012345654321
u nameu resultu u commentu changesu& boto_vpc.is_peering_connection_pendingRt R
R R R u, boto_vpc.peering_connection_pending_from_vpcR R u= VPC peering {0} already requested - pending acceptance by {1}R Rz R{ R| R} Ry ( R R R R5 t infoRx R ( R Rz R{ R| R} Rt Ry R
R R R R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt vpc_peering_connection_presentm s0 :
c C@ s t | | | | | | | � S( N( t delete_vpc_peering_connection( R Rs Rt R
R R R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt vpc_peering_connection_absent� s c
C@ s@ t j d � i | d 6t d 6i d 6d d 6} | rl t d | d | d | d
| d | �j d g � } n | g } | s� d
| d <| St d r� | r� d | d <n | St j d � t d d | d | d | d | d
| d | � } d | k rd j | d � | d <t | d <| S| d j i d d 6| d d 6� | S( u�
name
Name of the state
conn_id
ID of the peering connection to delete. Exclusive with conn_name.
conn_name
The name of the peering connection to delete. Exclusive with conn_id.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
.. versionadded:: 2016.11.0
Example:
.. code-block:: yaml
delete a vpc peering connection:
boto_vpc.delete_vpc_peering_connection:
- region: us-west-2
- conn_id: pcx-4613b12e
Connection name can be specified (instead of ID).
Specifying both conn_name and conn_id will result in an
error.
.. code-block:: yaml
delete a vpc peering connection:
boto_vpc.delete_vpc_peering_connection:
- conn_name: salt_vpc_peering
u- Called state to delete VPC peering connectionu nameu resultu changesu Boto VPC peering stateu commentu( boto_vpc.describe_vpc_peering_connectionR
R R R u VPC-Peeringsu, No VPC connection found, nothing to be done.u testu' VPC peering connection would be deletedu. Called module to delete VPC peering connectionu& boto_vpc.delete_vpc_peering_connectionRs Rt u erroru! Failed to delete VPC peering: {0}u u oldu msgu new( R5 R6 R R R R R R RL (
R Rs Rt R
R R R R R~ Rw ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyR� � s: /
0
(' t __doc__t
__future__R R R t loggingt salt.extR t salt.utils.dictupdatet utilsRK R t getLoggert __name__R5 R
R R R" R+ R, R R> R3 R@ RB RE RO RI RJ RM Ri Rl Rr Rx R R� R� R� ( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/boto_vpc.pyt <module>� sp J; yE� < D= b *| R<P O O h R
Mini Shell