Current File : //proc/227033/task/227033/root/usr/lib/python2.7/site-packages/salt/pillar/confidant.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z y" d d l Z d d l Z e
Z Wn e k
ru e
Z n Xe j e � Z d Z d � Z d d � Z d S( u�
An external pillar module for getting credentials from confidant.
Configuring the Confidant module
================================
The module can be configured via ext_pillar in the minion config:
.. code-block:: yaml
ext_pillar:
- confidant:
profile:
# The URL of the confidant web service
url: 'https://confidant-production.example.com'
# The context to use for KMS authentication
auth_context:
from: example-production-iad
to: confidant-production-iad
user_type: service
# The KMS master key to use for authentication
auth_key: "alias/authnz"
# Cache file for KMS auth token
token_cache_file: /run/confidant/confidant_token
# The duration of the validity of a token, in minutes
token_duration: 60
# key, keyid and region can be defined in the profile, but it's
# generally best to use IAM roles or environment variables for AWS
# auth.
keyid: 98nh9h9h908h09kjjk
key: jhf908gyeghehe0he0g8h9u0j0n0n09hj09h0
region: us-east-1
:depends: confidant-common, confidant-client
Module Documentation
====================
i ( t absolute_importt print_functiont unicode_literalsNu confidantc C@ s t r
t St Sd S( u9
Only return if requests and boto are installed.
N( t HAS_LIBSt __virtualname__t False( ( ( s9 /usr/lib/python2.7/site-packages/salt/pillar/confidant.pyt __virtual__< s c C@ s� | d k r i } n i t d 6d d 6d d 6} t j | � } | j d t � r_ t | d <| S| j d d � } y, | d } | d } | d
} | d } Wn+ t t f k
r� d }
t j |
� | SX| j d
d � } | j d d � } | j d d � }
| j d � } | j d d � } t
j j | | | d | d | d | d | d |
d | �} y | j
| d t �} Wn t
j j k
r�| SX| d s�| St
j j | � } t | d <| S( u6
Read pillar data from Confidant via its API.
u credentials_resultu credentialsu credentials_metadatau disabledu resultu
token_versioni u urlu auth_keyu auth_contextu fromu3 profile has undefined url, auth_key or auth_contextu regionu us-east-1u token_durationi< u retriesi u token_cache_fileu backofft token_lifetimet
token_versiont token_cache_filet regiont retriest backofft
decrypt_blindN( t NoneR t copyt deepcopyt gett Truet KeyErrort TypeErrort logt debugt confidantt clientt ConfidantClientt get_servicet TokenCreationErrort formattert combined_credential_pair_format( t minion_idt pillart profilet rett profile_dataR t urlt auth_keyt auth_contextt rolet msgR
t token_durationR R R R t data( ( s9 /usr/lib/python2.7/site-packages/salt/pillar/confidant.pyt
ext_pillarF s\
( t __doc__t
__future__R R R t loggingR t confidant.clientR t confidant.formatterR R t ImportErrorR t getLoggert __name__R R R R R* ( ( ( s9 /usr/lib/python2.7/site-packages/salt/pillar/confidant.pyt <module>' s
Mini Shell