Current File : //usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l
j j Z d d l Z d d l
m Z e j e � Z yW d d l Z d d l Z d d l Z d d l m Z e j d � j e j � e Z Wn e k
r� e Z n Xd � Z d � Z d � Z d d d d d d d
� Z! d d d d d � Z" d d d d d � Z# d d d d d d e d
d � Z$ e d d d d d d d � Z% d d d d d d d d d d d d e d
d � Z& d d d d d � Z' d � Z( d � Z) e d d d d e e d d d e d
d � Z* d � Z+ d d d d d d e e e d d e d
d �
Z, d d d d d d e e e d d e d
d �
Z- d e d d d d e e e d d e d
d �
Z. d � Z/ e d � Z0 d d e d d d d d d d d �
Z1 d S(! u.
Connection module for Amazon Route53
.. versionadded:: 2014.7.0
:configuration: This module accepts explicit route53 credentials but can also
utilize IAM roles assigned to the instance through Instance Profiles.
Dynamic credentials are then automatically obtained from AWS API and no
further configuration is necessary. More Information available at:
.. code-block:: yaml
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html
If IAM roles are not used you need to specify them either in a pillar or
in the minion's config file:
.. code-block:: yaml
route53.keyid: GKTADJGHEIQSXMKKRBJ08H
route53.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
A region may also be specified in the configuration:
.. code-block:: yaml
route53.region: us-east-1
If a region is not specified, the default is 'universal', which is what the boto_route53
library expects, rather than None.
It's also possible to specify key, keyid and region via a profile, either
as a passed in dict, or as a string to pull from pillars or minion config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
:depends: boto
i ( t absolute_importt print_functiont unicode_literalsN( t SaltInvocationError( t DNSServerErroru botoc C@ s t j j j d d d t � S( u,
Only load if boto libraries exist.
t boto_veru 2.35.0t check_boto3( t saltt utilst versionst check_boto_reqst False( ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt __virtual__M s c C@ s7 t j j j t � t r3 t d t d d t �n d S( Nu boto.assign_funcsu route53t pack( R R t compatt pack_dundert __name__t HAS_BOTOt __utils__t __salt__( t opts( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt __init__X s c C@ sb x[ | j � D]M } | j | k r
| j d j � d k rA t n t } | | k rZ | Sq
q
Wt S( u
With boto route53, zones can only be matched by name
or iterated over in a list. Since the name will be the
same for public and private zones in a split DNS situation,
iterate over the list and match the zone name and public/private
status.
u PrivateZoneu true( t get_zonest namet configt lowert TrueR ( t zonet _connt private_zonet _zonet
_private_zone( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt _get_split_zone^ s % c C@ s� t d | d | d | d | � } | r< | r< t d � � n d } xq| r�y� | r� | j d � ru | j d d � n | } t | j | � d d � } n | r� t | j | � d d � } n[ d } d } xL | d k r| j d
| d | � }
|
d d
} |
d j d d � } q� W| r"| Sg SWqE t
k
r�} | r�d | j k r^t j
d � n d | j k r}t j
d � n t j d � | d 8} qE n t j d | j � g SXqE Wd S( us
Return detailed info about one, or all, zones in the bound account.
If neither zone_id nor domain_name is provided, return all zones.
Note that the return format is slightly different between the 'all'
and 'single' description types.
zone_id
The unique identifier for the Hosted Zone
domain_name
The FQDN of the Hosted Zone (including final period)
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
CLI Example:
.. code-block:: bash
salt myminion boto_route53.describe_hosted_zones domain_name=foo.bar.com. profile='{"region": "us-east-1", "keyid": "A12345678AB", "key": "xblahblahblah"}'
t regiont keyt keyidt profileu5 At most one of zone_id or domain_name may be providedi
u /hostedzone/u u GetHostedZoneResponset start_markert zone_listu ListHostedZonesResponseu HostedZonesu
NextMarkeru
Throttlingu Throttled by AWS API.u PriorRequestNotCompleteuo The request was rejected by AWS API. Route 53 was still processing a prior requesti i u Could not list zones: %sN( t _get_connR t
startswitht replacet getattrt get_hosted_zonet Nonet get_hosted_zone_by_namet get_all_hosted_zonest getR t codet logt debugt timet sleept errort message( t zone_idt domain_nameR! R" R# R$ t connt retriest rett markert rt e( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt describe_hosted_zonesn sB "! '
c C@ s< t d | d | d | d | � } g | D] } | d ^ q( S( u�
List, by their FQDNs, all hosted zones in the bound account.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
CLI Example:
.. code-block:: bash
salt myminion boto_route53.list_all_zones_by_name
R! R" R# R$ u Name( R? ( R! R" R# R$ R; R= ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt list_all_zones_by_name� s c C@ sH t d | d | d | d | � } g | D] } | d j d d � ^ q( S( u�
List, by their IDs, all hosted zones in the bound account.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
CLI Example:
.. code-block:: bash
salt myminion boto_route53.list_all_zones_by_id
R! R" R# R$ u Idu /hostedzone/u ( R? R) ( R! R" R# R$ R; R= ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt list_all_zones_by_id� s i c C@ s6 | d k r d } n t d | d | d | d | � } | sH | d k r� t j j j d d � | d k rs | } n | d k r� | } q� n x� | d k r1y t | j | � � SWq� t k
r-}
| r$d |
j k r� t
j d
� n d |
j k rt
j d � n t j
d
� | d 8} q� n |
� q� Xq� Wd S( u�
Check for the existence of a Route53 hosted zone.
.. versionadded:: 2015.8.0
CLI Example::
salt myminion boto_route53.zone_exists example.org
u universalR! R" R# R$ u Neonu� The 'retry_on_rate_limit' and 'rate_limit_retries' arguments have been deprecated in favor of 'retry_on_errors' and 'error_retries' respectively. Their functionality will be removed, as such, their usage is no longer required.i u
Throttlingu Throttled by AWS API.u PriorRequestNotCompleteuo The request was rejected by AWS API. Route 53 was still processing a prior requesti i N( R, R' R R R t
warn_untilt boolt get_zoneR R0 R1 R2 R3 R4 ( R R! R" R# R$ t retry_on_rate_limitt rate_limit_retriest retry_on_errorst
error_retriesR9 R> ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt zone_exists� s2 !
c
C@ s� | d
k r d } n | rA | s) | rA d } t | � � qA n t d | d | d | d | � } | j | � }
|
r{ t S| j | d | d | d | �t S( u!
Create a Route53 hosted zone.
.. versionadded:: 2015.8.0
zone
DNS zone to create
private
True/False if the zone will be a private zone
vpc_id
VPC ID to associate the zone to (required if private is True)
vpc_region
VPC Region (required if private is True)
region
region endpoint to connect to
key
AWS key
keyid
AWS keyid
profile
AWS pillar profile
CLI Example::
salt myminion boto_route53.create_zone example.org
u universalu: vpc_id and vpc_region must be specified for a private zoneR! R" R# R$ R t vpc_idt
vpc_regionN( R, R R' RD R t create_zoneR ( R t privateRJ RK R! R" R# R$ t msgR9 R ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyRL s # !i5 u TCPu i i c C@ sg | d k r6 | d k r6 d } t j | � i | d 6St j j j | | | | d | d | d |
d | �} | d k r� d } n t d | d | d
| d | � } x� |
d k rby i | j | � d
6SWq� t k
r^} t j
| � | rId | j k r
t j
d � n d | j k r,t j
d � n t j
d � |
d 8}
q� n i t d | � d 6SXq� Wt S( uy
Create a Route53 healthcheck
.. versionadded:: 2018.3.0
ip_addr
IP address to check. ip_addr or fqdn is required.
fqdn
Domain name of the endpoint to check. ip_addr or fqdn is required
port
Port to check
hc_type
Healthcheck type. HTTP | HTTPS | HTTP_STR_MATCH | HTTPS_STR_MATCH | TCP
resource_path
Path to check
string_match
If hc_type is HTTP_STR_MATCH or HTTPS_STR_MATCH, the string to search for in the
response body from the specified resource
request_interval
The number of seconds between the time that Amazon Route 53 gets a response from
your endpoint and the time that it sends the next health-check request.
failure_threshold
The number of consecutive health checks that an endpoint must pass or fail for
Amazon Route 53 to change the current status of the endpoint from unhealthy to
healthy or vice versa.
region
Region endpoint to connect to
key
AWS key
keyid
AWS keyid
profile
AWS pillar profile
CLI Example::
salt myminion boto_route53.create_healthcheck 192.168.0.1
salt myminion boto_route53.create_healthcheck 192.168.0.1 port=443 hc_type=HTTPS resource_path=/ fqdn=blog.saltstack.furniture
u7 One of the following must be specified: fqdn or ip_addru errort fqdnt string_matcht request_intervalt failure_thresholdu universalR! R" R# R$ i u resultu
Throttlingu Throttled by AWS API.u PriorRequestNotCompleteuo The request was rejected by AWS API. Route 53 was still processing a prior requesti i u boto.get_errorN( R, R1 R5 t botot route53t healthcheckt HealthCheckR' t create_health_checkR R2 R0 R3 R4 R R ( t ip_addrRO R! R" R# R$ t portt hc_typet
resource_pathRP RQ RR RG RH RN t hc_R9 t exc( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt create_healthcheckT s> B
!
c C@ sc | d k r d } n t d | d | d | d | � } | j | � } | r_ | j | j � t St S( u�
Delete a Route53 hosted zone.
.. versionadded:: 2015.8.0
CLI Example::
salt myminion boto_route53.delete_zone example.org
u universalR! R" R# R$ N( R, R' RD t delete_hosted_zonet idR R ( R R! R" R# R$ R9 R ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt delete_zone� s
!c C@ s | j d d � S( Nu *u \052( R) ( R ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt _encode_name� s c C@ s | j d d � S( Nu \052u *( R) ( R ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt _decode_name� s c C@ s; | d k r d } n t d | d | d | d | � } | sH | d k r� t j j j d d � | d k rs | }
n | d k r� | } q� n x$| d k r�y� | r� t | | | � } n | j | � } | s� d j | � } t j
| � d S| j � } t j
� } t | � } | j | | d
| d |
�} PWq� t k
r�} |
r�d | j k rht j d
� n d | j k r�t j d � n t j d � | d 8} q� n | � q� Xq� W| r7t | j � | d <| j d | d <| j | d <| j | d <| j r7g | d <| d j | j � | d j | j � q7n | S( u�
Get a record from a zone.
CLI example::
salt myminion boto_route53.get_record test.example.org example.org A
u universalR! R" R# R$ u Neonu� The 'retry_on_rate_limit' and 'rate_limit_retries' arguments have been deprecated in favor of 'retry_on_errors' and 'error_retries' respectively. Their functionality will be removed, as such, their usage is no longer required.i u Failed to retrieve zone {0}t allt
identifieru
Throttlingu Throttled by AWS API.u PriorRequestNotCompleteuo The request was rejected by AWS API. Route 53 was still processing a prior requesti i u nameu valueu record_typeu ttlu
identifierN( R, R' R R R RB R RD t formatR1 R5 t uppert odictt OrderedDictRb t find_recordsR R0 R2 R3 R4 Rc R t resource_recordst typet ttlRe t appendt weight( R R t record_typet fetch_allR! R" R# R$ t split_dnsR Re RE RF RG RH R9 R RN t _typeR; t _recordR> ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt
get_record� s\ !
c C@ s8 d d d d d d d g } | | k r4 | j d � S| S( Nu Au MXu AAAAu TXTu SRVu SPFu NSu ,( t split( t valueRs t split_types( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt _munge_value" s
c C@ sf | d k r d } n t d | d | d | d | � } |
sH | d k r� t j j j d d � |
d k rs |
} n | d k r� | } q� n x� | d k r{ya | r� t | | | � } n | j | � } | s� d j | � } t j
| � t S| j � } PWq� t
k
rw} | rnd
| j k r2t j d � n d | j k rQt j d
� n t j d � | d 8} q� n | � q� Xq� Wt | | � } x� | d k rayG | d k r�d } n | j | | | | | � } t | j | |
� SWq�t
k
r]} | rTd
| j k rt j d � n d | j k r7t j d
� n t j d � | d 8} q�n | � q�Xq�Wd S( u�
Add a record to a zone.
CLI example::
salt myminion boto_route53.add_record test.example.org 1.1.1.1 example.org A
u universalR! R" R# R$ u Neonu� The 'retry_on_rate_limit' and 'rate_limit_retries' arguments have been deprecated in favor of 'retry_on_errors' and 'error_retries' respectively. Their functionality will be removed, as such, their usage is no longer required.i u Failed to retrieve zone {0}u
Throttlingu Throttled by AWS API.u PriorRequestNotCompleteuo The request was rejected by AWS API. Route 53 was still processing a prior requesti i i< N( R, R' R R R RB R RD Rf R1 R5 R Rg R R0 R2 R3 R4 Ry t
add_recordt _wait_for_syncR` ( R Rw R Rp Re Rm R! R" R# R$ t
wait_for_syncRr R RE RF RG RH R9 R RN Rs R> t _valuet status( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyRz ) sf !
c C@ s� | d k r d } n t d | d | d | d | � } | rQ t | | | � } n | j | � } | s� d j | � } t j | � t S| j � } |
s� | d k r� t j
j j d d � |
d k r� |
} n | d k r� | } q� n t
| | � } x� | d k r�yQ | j | | d
| �} | s*t S| j | | | | � } t | j | |
� SWq� t k
r�} | r�d | j k r�t j d � n d
| j k r�t j d � n t j d � | d 8} q� n | � q� Xq� Wd S( u�
Modify a record in a zone.
CLI example::
salt myminion boto_route53.modify_record test.example.org 1.1.1.1 example.org A
u universalR! R" R# R$ u Failed to retrieve zone {0}u Neonu� The 'retry_on_rate_limit' and 'rate_limit_retries' arguments have been deprecated in favor of 'retry_on_errors' and 'error_retries' respectively. Their functionality will be removed, as such, their usage is no longer required.i Re u
Throttlingu Throttled by AWS API.u PriorRequestNotCompleteuo The request was rejected by AWS API. Route 53 was still processing a prior requesti i N( R, R' R RD Rf R1 R5 R Rg R R R RB Ry Rj t
update_recordR{ R` R R0 R2 R3 R4 ( R Rw R Rp Re Rm R! R" R# R$ R| Rr R RE RF RG RH R9 R RN Rs R} t
old_recordR~ R> ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyR v sL !
c C@ s� | d k r d } n t d | d | d | d | � } |
rQ t | | | � } n | j | � } | s� d j | � } t j | � t S| j � } | s� |
d k r� t j
j j d d � | d k r� | } n |
d k r� |
} q� n x� | d k r�yN | j
| | d
| d | �} | s!t S| j | � } t | j | | � SWq� t k
r�} | r�d | j k r{t j d
� n d | j k r�t j d � n t j d � | d 8} q� n | � q� Xq� Wd S( u�
Modify a record in a zone.
CLI example::
salt myminion boto_route53.delete_record test.example.org example.org A
u universalR! R" R# R$ u Failed to retrieve zone {0}u Neonu� The 'retry_on_rate_limit' and 'rate_limit_retries' arguments have been deprecated in favor of 'retry_on_errors' and 'error_retries' respectively. Their functionality will be removed, as such, their usage is no longer required.i Rd Re u
Throttlingu Throttled by AWS API.u PriorRequestNotCompleteuo The request was rejected by AWS API. Route 53 was still processing a prior requesti i N( R, R' R RD Rf R1 R5 R Rg R R R RB Rj t
delete_recordR{ R` R R0 R2 R3 R4 ( R R Rp Re t all_recordsR! R" R# R$ R| Rr R RE RF RG RH R9 R RN Rs R� R~ R> ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyR� � sJ !
c K@ s� d } x� t r� y t | | � | � SWq t k
rO } t j d | | � d St k
r� } | r� | j d k r� t j d � t j
d � | d 8} q n t j d | | � d SXq Wd S( Ni u6 Function `%s()` not found for AWS connection object %su
Throttlingu. Throttled by AWS API. Will retry in 5 secondsi i u Failed calling %s(): %s( R R* t AttributeErrorR1 R5 R, R R0 R2 R3 R4 ( R9 t funct argst triesR> ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt _try_func� s
c C@ s� | t k r d } n | s t S| } t j d | � x� | d k r� | j | � } | j j j } | d k rr t S| d | k r� | n d } t j d | | � t j | � | | 8} q8 q8 Wt j d | � t
S( NiX u; Waiting up to %s seconds for Route53 changes to synchronizei u INSYNCi< uD Sleeping %s seconds waiting for changes to synch (current status %s)u, Route53 changes not synced after %s seconds.( R R1 t infot
get_changet GetChangeResponset
ChangeInfot StatusR3 R4 R5 R ( R~ R9 t waitt orig_waitt changet currentR4 ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyR{ s(
c
C@ s� | d% k r d } n | j d � s3 t d � � n t d | d | d | d |
� } | j | � } | r} t j d | � d% Si | d 6| d
6| d 6| d 6}
| r�t | | f � s� t d
� � n t d d | d | d | d | d | d |
� j d g � } | r;| r;g | D] } | d | k r| ^ q} n | sRt j
d � d% St | � d k r�t j
d g | D] } | d ^ qt� d% S| d } | r�| d } n | s�| d } n |
j i | d 6| d 6� n% t
| | | f � rt j d � n t | d |
� } | d% k r4t j
d | � d% S| j d i � } | j d i � j d d � j d! d � } t | | d" d# �} | s�t j
d$ | � d% S| S(& u�
Create a new Route53 Hosted Zone. Returns a Python data structure with information about the
newly created Hosted Zone.
domain_name
The name of the domain. This must be fully-qualified, terminating with a period. This is
the name you have registered with your domain registrar. It is also the name you will
delegate from your registrar to the Amazon Route 53 delegation servers returned in response
to this request.
caller_ref
A unique string that identifies the request and that allows create_hosted_zone() calls to
be retried without the risk of executing the operation twice. It can take several minutes
for the change to replicate globally, and change from PENDING to INSYNC status. Thus it's
best to provide some value for this where possible, since duplicate calls while the first
is in PENDING status will be accepted and can lead to multiple copies of the zone being
created. On the other hand, if a zone is created with a given caller_ref, then deleted,
a second attempt to create a zone with the same caller_ref will fail until that caller_ref
is flushed from the Route53 system, which can take upwards of 24 hours.
comment
Any comments you want to include about the hosted zone.
private_zone
Set True if creating a private hosted zone.
vpc_id
When creating a private hosted zone, either the VPC ID or VPC Name to associate with is
required. Exclusive with vpe_name. Ignored when creating a non-private zone.
vpc_name
When creating a private hosted zone, either the VPC ID or VPC Name to associate with is
required. Exclusive with vpe_id. Ignored when creating a non-private zone.
vpc_region
When creating a private hosted zone, the region of the associated VPC is required. If not
provided, an effort will be made to determine it from vpc_id or vpc_name, where possible.
If this fails, you'll need to provide an explicit value for this option. Ignored when
creating a non-private zone.
region
Region endpoint to connect to.
key
AWS key to bind with.
keyid
AWS keyid to bind with.
profile
Dict, or pillar key pointing to a dict, containing AWS region/key/keyid.
CLI Example::
salt myminion boto_route53.create_hosted_zone example.org
u universalu .u< Domain MUST be fully-qualified, complete with ending period.R! R" R# R$ u% Route53 hosted zone %s already existsu domain_nameu
caller_refu commentu private_zoneuC Either vpc_name or vpc_id is required when creating a private zone.u boto_vpc.describe_vpcsRJ R u vpcsu regionuC Private zone requested but a VPC matching given criteria not found.i uK Private zone requested but multiple VPCs matching given criteria found: %s.u idi u vpc_idu
vpc_regionuU Options vpc_id, vpc_name, and vpc_region are ignored when creating non-private zones.u create_hosted_zoneu Failed to create hosted zone %su CreateHostedZoneResponseu
ChangeInfou Idu u /change/R� iX u, Hosted zone %s not synced after 600 seconds.N( R, t endswithR R' R- R1 R� t _exactly_oneR R/ R5 t lent updatet anyR� t popR) R{ ( R8 t
caller_reft commentR RJ t vpc_nameRK R! R" R# R$ R9 t deetsR� t vpcst vt vpcR= R~ t synced( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt create_hosted_zone s^ ; !
,
*(2 t __doc__t
__future__R R R t loggingR3 t salt.utils.compatR t salt.utils.versionst salt.utils.odictR Rh t salt.exceptionsR t getLoggerR R1 RS t boto.route53t boto.route53.healthcheckt boto.route53.exceptionR t setLevelt CRITICALR R t ImportErrorR R R R R, R? R@ RA RI RL R^ Ra Rb Rc Ru Ry Rz R R� R� R{ R� ( ( ( s= /usr/lib/python2.7/site-packages/salt/modules/boto_route53.pyt <module>, sz
G - 6d F I : 9
Mini Shell