Current File : //lib/python2.7/site-packages/salt/utils/vault.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l
Z d d l Z e j e
� Z e j d � j e j � d a d � Z d � Z d � Z d d e d � Z d � Z d
� Z d S( u�
:maintainer: SaltStack
:maturity: new
:platform: all
Utilities supporting modules for Hashicorp Vault. Configuration instructions are
documented in the execution module docs.
i ( t absolute_importt print_functiont unicode_literalsNu requestsc C@ sK y t s t j j t � a t SWn$ t k
rF } t j d | � t SXd S( Nu Could not load __salt__: %s(
t __salt__t saltt loadert minion_modst __opts__t Truet Exceptiont logt errort False( t e( ( s4 /usr/lib/python2.7/site-packages/salt/utils/vault.pyt __virtual__ s c C@ s� t d } t d } t j d d � d k r� d j | � } t j d | � t j t j j
| | � � } t d d d | | g �} nb d
j | � } t j d | | � t j t j j
| | � � } t d d d
| d | d t �} | st j
d � t j j | � � n t | t � sFt j
d | � t j j | � � n d | k r{t j
d | d � t j j | � � n i | d d 6| d d 6| j d d � d 6S( u`
Get a token with correct policies for the minion, and the url to the Vault
service
u idu pki_diru __roleu minionu {0}/minion.pemu4 Running on minion, signing token request with key %su publish.runneru vault.generate_tokent argu {0}/master.pemu; Running on master, signing token request for %s with key %su saltutil.runnert minion_idt signaturet impersonated_by_masteru` Failed to get token from master! No result returned - is the peer publish configuration correct?u; Failed to get token from master! Response is not a dict: %su erroru: Failed to get token from master! An error was returned: %su urlu tokenu verifyN( t
__grains__R t gett formatR
t debugt base64t b64encodeR t cryptt sign_messageR R R t
exceptionst CommandExecutionErrort
isinstancet dictt None( R t pki_dirt private_keyR t result( ( s4 /usr/lib/python2.7/site-packages/salt/utils/vault.pyt _get_token_and_url_from_master' sL
c C@ s� d � } d t k rW t j d d � d k rW d t k rM t j d � t � S| � SnH t t d t d d k t d
d k f � r� | � St j d � t � Sd S(
u
Get the connection details for calling Vault, from local configuration if
it exists, or from the master otherwise
c S@ sj t j d � y t d d d d k r t d j d d � } t � r t j d � d j t d d � } i t d d d
d
6} d t d d k r� t d d d | d <n t j | d | d
| �} | j d k r� d } t
j j | � � n | j
� d d t d d d <q n t d d d d k r�t d j d d � } t � r�d j t d d � } i t d d d d 6} t j | d | d
| �} | j d k r�d } t
j j | � � n | j
� d d t d d d <q�n i t d d d 6t d d d d 6t d j d d � d 6SWn7 t k
re} d j | j � } t
j j | � � n Xd S( Nu0 Using Vault connection details from local configu vaultu authu methodu approleu verifyu# Vault token expired. Recreating oneu {0}/v1/auth/approle/loginu urlu role_idu secret_idt jsont verifyi� u3 An error occured while getting a token from approleu client_tokenu tokenu
wrapped_tokenu {0}/v1/sys/wrapping/unwrapu
X-Vault-Tokent headersu- An error occured while unwrapping vault tokenuF Minion has "vault" config section, but could not find key "{0}" within( R
R R R R t _selftoken_expiredR t requestst postt status_codeR R R R$ t _wrapped_token_validt KeyErrort message( R% t urlt payloadt responset errmsgR& t err( ( s4 /usr/lib/python2.7/site-packages/salt/utils/vault.pyt _use_local_configd s@
& & u vaultu __roleu minionu masteru idu. Contacting master for Vault connection detailsu localu file_clientu master_typeu disableN( R R R R
R R# t any( R3 ( ( s4 /usr/lib/python2.7/site-packages/salt/utils/vault.pyt get_vault_connection_ s $$
-
c
K@ s� | s | rL t � } | d | d } } d | k rL | d | d <qL n d j | | � } i | d 6d d 6} t j | | d | | �} | r� | | | f S| Sd S(
u!
Make a request to Vault
u tokenu urlu verifyu {0}/{1}u
X-Vault-Tokenu application/jsonu Content-TypeR& N( R5 R R( t request(
t methodt resourcet tokent vault_urlt
get_token_urlt argst
connectionR. R& R0 ( ( s4 /usr/lib/python2.7/site-packages/salt/utils/vault.pyt make_request� s
c C@ s� y� t d j d d � } d j t d d � } d t d d k rH t Si t d d d d 6} t j | d | d | �} | j d
k r� t St SWn. t k
r� } t j
j d j | � � � n Xd S(
u>
Validate the current token exists and is still valid
u vaultu verifyu {0}/v1/auth/token/lookup-selfu urlu tokenu authu
X-Vault-TokenR& R% i� u' Error while looking up self token : {0}N( R R R R R R( R* R R R R R ( R% R. R& R0 R
( ( s4 /usr/lib/python2.7/site-packages/salt/utils/vault.pyR' � s c C@ s� y� t d j d d � } d j t d d � } d t d d k rH t Si t d d d d 6} t j | d | d | �} | j d
k r� t St SWn. t k
r� } t
j j d j | � � � n Xd S(
u>
Validate the wrapped token exists and is still valid
u vaultu verifyu {0}/v1/sys/wrapping/lookupu urlu tokenu authu
X-Vault-TokenR& R% i� u* Error while looking up wrapped token : {0}N(
R R R R R R( R) R* R R R R R ( R% R. R& R0 R
( ( s4 /usr/lib/python2.7/site-packages/salt/utils/vault.pyR+ � s ( t __doc__t
__future__R R R R t loggingR( t
salt.cryptR t salt.exceptionst salt.utils.versionst getLoggert __name__R
t setLevelt WARNINGR R R R# R5 R R> R' R+ ( ( ( s4 /usr/lib/python2.7/site-packages/salt/utils/vault.pyt <module> s 8 6
Mini Shell