Current File : //usr/lib/python2.7/site-packages/salt/modules/k8s.pyc
�
���^c @@ s d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l
m Z d d l m
Z d d l Z d d l j j Z d d l Z d Z e j e � Z d � Z d d � Z d � Z d
� Z d � Z d � Z d
� Z d � Z! d � Z" d � Z# d � Z$ d � Z% d d d � Z& d d d � Z' d d d � Z( d d d � Z) d d � Z* d � Z+ d d � Z, d d d � Z- d � Z. d � Z/ d � Z0 d � Z1 d � Z2 d! � Z3 d d e4 e4 d" � Z5 d# � Z6 d e7 d$ d% � Z8 d e4 e4 d$ d& � Z9 d e7 d' � Z: d S(( u
Salt module to manage Kubernetes cluster
.. versionadded:: 2016.3.0
Roadmap:
* Add creation of K8S objects (pod, rc, service, ...)
* Add replace of K8S objects (pod, rc, service, ...)
* Add deletion of K8S objects (pod, rc, service, ...)
* Add rolling update
* Add (auto)scalling
i ( t absolute_importt unicode_literalst print_functionN( t six( t urlparseu k8sc C@ s t S( u* Load load if python-requests is installed.( t __virtualname__( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt __virtual__& s c C@ s# d } | d k r | Sd t j k r: t j j d � } n� t d d � r] t d d � } n� t j j | � s� t d d d � r t d d | � } t j d t j � } t
j j j
| � �E } x# | j � D] } | j | � } q� W| r | j d � } n Wd QXn d
} t j d | � | S( u^ Try to guees the kubemaster url from environ,
then from `/etc/kubernetes/config` file
u /etc/kubernetes/configu KUBERNETES_MASTERu
config.getu
k8s:masteru
k8s:configu u! KUBE_MASTER=['"]--master=(.*)['"]i Nu http://127.0.0.1:8080u$ Discoverd k8s API server address: %s( t Nonet ost environt gett __salt__t patht existst ret compilet MULTILINEt saltt utilst filest fopent readlinest matcht groupt logt debug( t
apiserver_urlt default_configt configt
kubeapi_regext fh_k8st linet
match_line( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _guess_apiserver+ s& % c C@ s� i d d 6} t j d | | � t j | d d d | d t j j j | � �} | j d � rc | St j j j | j d � � Sd
S( u. create any object in kubernetes based on URL u application/jsonu Content-Typeu url is: %s, data is: %st methodu POSTt header_dictt datau erroru bodyN(
R t tracet httpt queryR R t jsont dumpsR
t loads( t urlR$ t headerst ret( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _kpostF s
c C@ sp i d d 6} t j | d d d | d t j j j | � �} | j d � rP | St j j j | j d � � Sd S(
u+ put any object in kubernetes based on URL u application/jsonu Content-TypeR" u PUTR# R$ u erroru bodyN( R& R' R R R( R) R
R* ( R+ R$ R, R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _kputX s
c C@ s� i d d 6} t j | d d d | d t j j j | � �} | j d � ri t j d | j d � � | St j j j | j d � � Sd
S( u- patch any object in kubernetes based on URL u application/json-patch+jsonu Content-TypeR" u PATCHR# R$ u erroru Got an error: %su bodyN(
R& R' R R R( R) R
R t errorR* ( R+ R$ R, R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _kpatchi s
c C@ s� t | t � r. | j d i � j d d � g St | t t f � r� g } x3 | D]+ } | j | j d i � j d d � � qP W| Sd Sd S( u4 Get name or names out of json result from API serveru metadatau nameu u Unknown typeN( t
isinstancet dictR
t listt tuplet append( t objt namest i( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _knamey s
)c C@ sJ t j d � } | j | � r2 t j d | � t St j d | � t Sd S( u� Check that name is DNS subdomain: One or more lowercase rfc1035/rfc1123
labels separated by '.' with a maximum length of 253 characters u ^[a-z0-9\.-]{1,253}$u Name: %s is valid DNS subdomainu# Name: %s is not valid DNS subdomainN( R R R R R t Truet False( t namet
dns_subdomain( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _is_dns_subdomain� s c C@ s* t j d � } | j | � r" t St Sd S( u Check that name is IANA service: An alphanumeric (a-z, and 0-9) string,
with a maximum length of 15 characters, with the '-' character allowed
anywhere except the first or the last character or adjacent to another '-'
character, it must contain at least a (a-z) character u ^[a-z0-9]{1,15}$N( R R R R; R< ( R= t port_name( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt
_is_port_name� s c C@ s* t j d � } | j | � r" t St Sd S( u Check that name is DNS label: An alphanumeric (a-z, and 0-9) string,
with a maximum length of 63 characters, with the '-' character allowed
anywhere except the first or last character, suitable for use as a hostname
or segment in a domain name u ^[a-z0-9][a-z0-9\.-]{1,62}$N( R R R R; R< ( R= t dns_label( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt
_is_dns_label� s c C@ s | d k r t d d � S| S( u. Try to guess kube node ID using salt minion IDu
grains.getu idN( R R ( t node( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _guess_node_id� s c C@ s� d j | | � } t j | � } d | k rN t j j j | j d � � } n) | j d d � d k rs d j | � S| S| j d i � j d i � S( u Get all labels from a kube node.u {0}/api/v1/nodes/{1}u bodyu statusi i� u Node {0} doesn't existu metadatau labels( t formatR& R' R R R( R* R
( RD R R+ R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _get_labels� s !
c C@ se d j | | � } i d d 6d d 6| d 6g } t | | � } | j d � d k ra d j | � S| S(
u Replace labels dict by a new oneu {0}/api/v1/nodes/{1}u replaceu opu /metadata/labelsu pathu valueu statusi� u Node {0} doesn't exist( RF R1 R
( RD R t labelsR+ R$ R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _set_labels� s
c C@ sB t | � } t | � } | d k r( t St | | � } i | d 6S( u�
.. versionadded:: 2016.3.0
Get labels from the current node
CLI Example:
.. code-block:: bash
salt '*' k8s.get_labels
salt '*' k8s.get_labels kube-node.cluster.local http://kube-master.cluster.local
u labelsN( RE R! R R< RG ( RD R R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt
get_labels� s c C@ s� i | d 6t d 6d d 6i d 6} t | � } t | � } | d k rJ t St | | � } | | k r� i | | 6| d <t | � | | <t | | | � } | j d � d k r� t j
d � i | d <d j | � | d <q�d
j | � | d <n� | j | � t | � k r�i t | � | 6| d <t | � | | <t | | | � } | j d � d k r�t j
d � i | d <d j | � | d <q�d j | � | d <n d
j | � | d <| S( u
.. versionadded:: 2016.3.0
Set label to the current node
CLI Example:
.. code-block:: bash
salt '*' k8s.label_present hw/disktype ssd
salt '*' k8s.label_present hw/disktype ssd kube-node.cluster.local http://kube-master.cluster.local
u nameu resultu u commentu changesu statusi� u Got 409, will try lateru( Could not create label {0}, please retryu Label {0} createdu( Could not update label {0}, please retryu Label {0} updatedu Label {0} already setN( R; RE R! R R< RG t strRI R
R R RF ( R= t valueRD R R- RH t res( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt
label_present� s4 "
c C@ s4 i | d 6t d 6d d 6i d 6} t | � } t | � } | d
k rJ t St | | � } t g | j � D]$ \ } } | | k ri | | f ^ qi � } | | k r� d j | � | d <nx t | | | � } | j
d � d k r t j d � i | d <d
j | � | d <n$ i | d 6| d <d j | � | d <| S( u
.. versionadded:: 2016.3.0
Delete label to the current node
CLI Example:
.. code-block:: bash
salt '*' k8s.label_absent hw/disktype
salt '*' k8s.label_absent hw/disktype kube-node.cluster.local http://kube-master.cluster.local
u nameu resultu u commentu changesu Label {0} already absentu statusi� u Got 409, will try lateru( Could not delete label {0}, please retryu deletedu Label {0} absentN(
R; RE R! R R< RG R3 t itemsRF RI R
R R ( R= RD R R- t
old_labelst keyRL RH RM ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt label_absent' s$ " !
c
C@ sJ | j d � d } i | d 6t d 6d d 6i d 6} t | � } t | � } | d k r] t St | | � } t g | j � D]' \ } } | j | � s| | | f ^ q| � } | | k r� d j
| � | d <nx t | | | � } | j d � d k r"t
j d
� i | d <d j
| � | d <n$ i | d 6| d <d
j
| � | d <| S( u
.. versionadded:: 2016.3.0
Delete label folder to the current node
CLI Example:
.. code-block:: bash
salt '*' k8s.label_folder_absent hw
salt '*' k8s.label_folder_absent hw/ kube-node.cluster.local http://kube-master.cluster.local
u /u nameu resultu u commentu changesu Label folder {0} already absentu statusi� u Got 409, will try lateru/ Could not delete label folder {0}, please retryu deletedu Label folder {0} absentN( t stripR; RE R! R R< RG R3 RO t
startswithRF RI R
R R (
R= RD R t folderR- RP RQ RL RH RM ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt label_folder_absentV s& " $
u c C@ sT d j | | � } t j | � } | j d � rL t j j j | j d � � Sd Sd S( uE Get namespace is namespace is defined otherwise return all namespacesu {0}/api/v1/namespaces/{1}u bodyN( RF R& R' R
R R R( R* R ( R R= R+ R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _get_namespaces� s
c C@ sd d j | � } i d d 6d d 6i | d 6d 6} t j d | � t | | � } t j d | � | S(
u- create namespace on the defined k8s cluster u {0}/api/v1/namespacesu Namespaceu kindu v1u
apiVersionu nameu metadatau namespace creation requests: %su
result is: %s( RF R R% R. ( t namespaceR R+ R$ R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _create_namespace� s c C@ s� i | d 6t d 6d d 6i d 6} t | � } | d k r> t St | | � sz t | | � | | d <d j | � | d <n d j | � | d <| S( u�
.. versionadded:: 2016.3.0
Create kubernetes namespace from the name, similar to the functionality added to kubectl since v.1.2.0:
.. code-block:: bash
kubectl create namespaces namespace-name
CLI Example:
.. code-block:: bash
salt '*' k8s.create_namespace namespace_name
salt '*' k8s.create_namespace namespace_name http://kube-master.cluster.local
u nameu resultu u commentu changesu Namespace {0} createdu Namespace {0} already presentN( R; R! R R< RW RY RF ( R= R R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt create_namespace� s "
c C@ s/ t | � } | d k r t St | | � } | S( u`
.. versionadded:: 2016.3.0
Get one or all kubernetes namespaces.
If namespace parameter is omitted, all namespaces will be returned back to user, similar to following kubectl example:
.. code-block:: bash
kubectl get namespaces -o json
In case namespace is set by user, the output will be similar to the one from kubectl:
.. code-block:: bash
kubectl get namespaces namespace_name -o json
CLI Example:
.. code-block:: bash
salt '*' k8s.get_namespaces
salt '*' k8s.get_namespaces namespace_name http://kube-master.cluster.local
N( R! R R< RW ( RX R R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt get_namespaces� s
c C@ sW d j | | | � } t j | � } | j d � rO t j j j | j d � � Sd Sd S( u Get secrets of the namespace.u% {0}/api/v1/namespaces/{1}/secrets/{2}u bodyN( RF R& R' R
R R R( R* R ( RX R= R R+ R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _get_secrets� s c C@ sh d j | | | � } i d d 6d d 6| d 6g } t | | � } | j d � d k rd d j | � S| S(
u! Replace secrets data by a new oneu% {0}/api/v1/namespaces/{1}/secrets/{2}u replaceu opu /datau pathu valueu statusi� u Node {0} doesn't exist( RF R1 R
( RX R= R$ R R+ R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _update_secret� s
c C@ sU d j | | � } i d d 6d d 6i | d 6| d 6d 6| d 6} t | | � } | S(
u- create namespace on the defined k8s cluster u! {0}/api/v1/namespaces/{1}/secretsu v1u
apiVersionu Secretu kindu nameu namespaceu metadatau data( RF R. ( RX R= R$ R R+ t requestR- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _create_secret
s
c C@ sL t j j | � r8 t j j | � r8 t j d | � t St j d | � t S( Nu File: %s is valid secret fileu$ File: %s does not exists or not file( R R R
t isfileR R R; t warningR< ( t filename( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _is_valid_secret_file s
$c C@ sN t j d | � t j j j | d � � } | j � } t j | � SWd QXd S( Nu Encoding secret file: %su rb( R R% R R R R t readt base64t b64encode( Rb t fR$ ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _file_encode% s c C@ s� | j d g � } | r� xq t | � D]c \ } } t j | | � xD t j | j d i � � D]' \ } } t j | � | | d | <q] Wq% W| | d <| Sx@ t j | j d i � � D]# \ } } t j | � | d | <q� W| Sd S( Nu itemsu data( R
t enumerateR R% R t iteritemsRe t b64decode( t secretsRO R9 t secrett kt v( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _decode_secrets, s (#
(c C@ sS t | � } | d k r t S| s7 t | | | � } n t t | | | � � } | S( u�
Get k8s namespaces
CLI Example:
.. code-block:: bash
salt '*' k8s.get_secrets namespace_name
salt '*' k8s.get_secrets namespace_name secret_name http://kube-master.cluster.local
N( R! R R< R\ Rp ( RX R= R t decodet briefR- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt get_secrets; s
c C@ s y t | � } Wn t k
r- d i d f SXd } t j d
| � | j s] | j d k r� t j j | j � } t j j | � } t j d | j � t
| � rt | � r| t | � f SnX | j | k rt
d | | � } | s� t j d
| � d St j j | � t | � f Sd S( Nu u# Invalid format for source parameteru saltu httpu httpsu ftpu swiftu s3u fileu parsed source looks like: %su" Source is a regular local file: %su
cp.cache_fileu$ Source file: %s can not be retrieved( u saltu httpu httpsu ftpu swiftu s3u file( u u ( u u ( t _urlparset TypeErrorR R% t schemeR R t abspatht basenameR R? Rc Rh R Ra ( t sourcet saltenvt
source_urlt protosRb t sname( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt _source_encodeT s&
u basec C@ s: t | � } t | | | d | d | d t d | �} | S( u�
.. versionadded:: 2016.3.0
alias to k8s.create_secret with update=true
CLI Example:
.. code-block:: bash
salt '*' k8s.update_secret namespace_name secret_name sources [apiserver_url] [force=true] [update=false] [saltenv='base']
sources are either dictionary of {name: path, name1: path} pairs or array of strings defining paths.
Example of paths array:
.. code-block:: bash
['/full/path/filename', "file:///full/path/filename", "salt://secret/storage/file.txt", "http://user:password@securesite.com/secret-file.json"]
Example of dictionaries:
.. code-block:: bash
{"nameit": '/full/path/fiename', name2: "salt://secret/storage/file.txt"}
optional parameters accepted:
force=[true] default value is true
if the to False, secret will not be created in case one of the files is not
valid kubernetes secret. e.g. capital letters in secret name or _
in case force is set to True, wrong files will be skipped but secret will be created any way.
saltenv=['base'] default value is base
in case 'salt://' path is used, this parameter can change the visibility of files
R t forcet updateRz ( R! t
create_secretR; ( RX R= t sourcesR R Rz R- ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt
update_secreto s % c C@ s i | d 6t d 6d d 6i d 6} | sH i | d 6t d 6d d 6i d 6St | � } t | | � s� | ry t | | � q� i | d 6t d 6d d 6i d 6Sn t | | | � } | r� | r� t j d | | � i | d 6t d 6d j | � d 6i d 6Si } xC| D];}
t j d
|
� t
|
t � r�t j d |
� xt
j |
� D]s \ } } t | | � \ }
} |
| k o�d k n r�| d c d j | � 7<| r�qIq�| Sn | | | <qIWqt
|
t
j � rt |
| � \ }
} |
| k od k n r2| r+| d c d j |
� 7<qq2| Sn | | |
<qqWt j d
j | � � | r�| r�| s�| d c d 7<t | d <q| j d � r�| | j d � k r�t | | | | � } d | d <d | d <qt j d � d | d <n t | | | | � } | S( u�
.. versionadded:: 2016.3.0
Create k8s secrets in the defined namespace from the list of files
CLI Example:
.. code-block:: bash
salt '*' k8s.create_secret namespace_name secret_name sources
salt '*' k8s.create_secret namespace_name secret_name sources
http://kube-master.cluster.local
sources are either dictionary of {name: path, name1: path} pairs or array of strings defining paths.
Example of paths array:
.. code-block:: bash
['/full/path/filename', "file:///full/path/filename", "salt://secret/storage/file.txt", "http://user:password@securesite.com/secret-file.json"]
Example of dictionaries:
.. code-block:: bash
{"nameit": '/full/path/fiename', name2: "salt://secret/storage/file.txt"}
optional parameters accepted:
update=[false] default value is false
if set to false, and secret is already present on the cluster - warning will be returned and no changes to the secret will be done.
In case it is set to "true" and secret is present but data is differ - secret will be updated.
force=[true] default value is true
if the to False, secret will not be created in case one of the files is not
valid kubernetes secret. e.g. capital letters in secret name or _
in case force is set to True, wrong files will be skipped but secret will be created any way.
saltenv=['base'] default value is base
in case 'salt://' path is used, this parameter can change the visibility of files
u nameu resultu u commentu changesu No source availableu Namespace doesn't existsu" Secret %s is already present on %su Secret {0} is already presentu
source is: %su source is dictionary: %su0 Source file {0} is missing or name is incorrect
u secret data is: {0}u5 Could not find source files or your sources are emptyu datau Updated secretu3 Secret has not been changed on cluster, skipping itu, Has not been changed on cluster, skipping it( R; R< R! RW RY R\ R t infoRF R R2 R3 R% R Rj R~ t string_typesR
R] R_ ( RX R= R� R R R� Rz R- Rm R$ Ry Rn Ro R} t encodedRM ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyR� � s` ," #
$
c C@ s� i | d 6t d 6d d 6i d 6} t | � } | d k r> t St | | � sm i | d 6t d 6d d 6i d 6Sd j | | | � } t j | d d �} | j d
� r� d j | | � | d <n | S(
u^
.. versionadded:: 2016.3.0
Delete kubernetes secret in the defined namespace. Namespace is the mandatory parameter as well as name.
CLI Example:
.. code-block:: bash
salt '*' k8s.delete_secret namespace_name secret_name
salt '*' k8s.delete_secret namespace_name secret_name http://kube-master.cluster.local
u nameu resultu u commentu changesu5 Namespace doesn't exists, can't delete anything thereu% {0}/api/v1/namespaces/{1}/secrets/{2}R" u DELETEu bodyu# Removed secret {0} in {1} namespaceN( R; R! R R< RW RF R& R' R
( RX R= R R R- R+ RM ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt
delete_secret s " (; t __doc__t
__future__R R R R R t loggingt loggerRe t salt.extR t salt.ext.six.moves.urllib.parseR Rt t salt.utils.filesR t salt.utils.httpR R& t salt.utils.jsonR t getLoggert __name__R R R R! R. R/ R1 R: R? RA RC RE RG RI RJ RN RR RV RW RY RZ R[ R\ R] R_ Rc Rh Rp R< Rs R~ R; R� R� R� ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/k8s.pyt <module> sV
:/0 #&
,n
Mini Shell