Current File : //usr/lib/python2.7/site-packages/salt/proxy/vcenter.pyo
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m
Z
d d l m Z d g Z
y d d l Z e Z Wn e k
r� e Z n Xi Z e j e � Z d Z d � Z d � Z d � Z d
� Z d � Z d � Z d S(
uH
Proxy Minion interface module for managing VMWare vCenters.
:codeauthor: :email:`Rod McKenzie (roderick.mckenzie@morganstanley.com)`
:codeauthor: :email:`Alexandru Bleotu (alexandru.bleotu@morganstanley.com)`
Dependencies
============
- pyVmomi Python Module
pyVmomi
-------
PyVmomi can be installed via pip:
.. code-block:: bash
pip install pyVmomi
.. note::
Version 6.0 of pyVmomi has some problems with SSL error handling on certain
versions of Python. If using version 6.0 of pyVmomi, Python 2.6,
Python 2.7.9, or newer must be present. This is due to an upstream dependency
in pyVmomi 6.0 that is not supported in Python versions 2.7 to 2.7.8. If the
version of Python is not in the supported range, you will need to install an
earlier version of pyVmomi. See `Issue #29537`_ for more information.
.. _Issue #29537: https://github.com/saltstack/salt/issues/29537
Based on the note above, to install an earlier version of pyVmomi than the
version currently listed in PyPi, run the following:
.. code-block:: bash
pip install pyVmomi==5.5.0.2014.1.1
The 5.5.0.2014.1.1 is a known stable version that this original ESXi State
Module was developed against.
Configuration
=============
To use this proxy module, please use on of the following configurations:
.. code-block:: yaml
proxy:
proxytype: vcenter
vcenter: <ip or dns name of parent vcenter>
username: <vCenter username>
mechanism: userpass
passwords:
- first_password
- second_password
- third_password
proxy:
proxytype: vcenter
vcenter: <ip or dns name of parent vcenter>
username: <vCenter username>
domain: <user domain>
mechanism: sspi
principal: <host kerberos principal>
proxytype
^^^^^^^^^
The ``proxytype`` key and value pair is critical, as it tells Salt which
interface to load from the ``proxy`` directory in Salt's install hierarchy,
or from ``/srv/salt/_proxy`` on the Salt Master (if you have created your
own proxy module, for example). To use this Proxy Module, set this to
``vcenter``.
vcenter
^^^^^^^
The location of the VMware vCenter server (host of ip). Required
username
^^^^^^^^
The username used to login to the vcenter, such as ``root``.
Required only for userpass.
mechanism
^^^^^^^^
The mechanism used to connect to the vCenter server. Supported values are
``userpass`` and ``sspi``. Required.
passwords
^^^^^^^^^
A list of passwords to be used to try and login to the vCenter server. At least
one password in this list is required if mechanism is ``userpass``
The proxy integration will try the passwords listed in order.
domain
^^^^^^
User domain. Required if mechanism is ``sspi``
principal
^^^^^^^^
Kerberos principal. Rquired if mechanism is ``sspi``
protocol
^^^^^^^^
If the vCenter is not using the default protocol, set this value to an
alternate protocol. Default is ``https``.
port
^^^^
If the ESXi host is not using the default port, set this value to an
alternate port. Default is ``443``.
Salt Proxy
----------
After your pillar is in place, you can test the proxy. The proxy can run on
any machine that has network connectivity to your Salt Master and to the
vCenter server in the pillar. SaltStack recommends that the machine running the
salt-proxy process also run a regular minion, though it is not strictly
necessary.
On the machine that will run the proxy, make sure there is an ``/etc/salt/proxy``
file with at least the following in it:
.. code-block:: yaml
master: <ip or hostname of salt-master>
You can then start the salt-proxy process with:
.. code-block:: bash
salt-proxy --proxyid <id of the cluster>
You may want to add ``-l debug`` to run the above in the foreground in
debug mode just to make sure everything is OK.
Next, accept the key for the proxy on your salt-master, just like you
would for a regular minion:
.. code-block:: bash
salt-key -a <id you gave the vcenter host>
You can confirm that the pillar data is in place for the proxy:
.. code-block:: bash
salt <id> pillar.items
And now you should be able to ping the ESXi host to make sure it is
responding:
.. code-block:: bash
salt <id> test.ping
At this point you can execute one-off commands against the vcenter. For
example, you can get if the proxy can actually connect to the vCenter:
.. code-block:: bash
salt <id> vsphere.test_vcenter_connection
Note that you don't need to provide credentials or an ip/hostname. Salt
knows to use the credentials you stored in Pillar.
It's important to understand how this particular proxy works.
:mod:`Salt.modules.vsphere </ref/modules/all/salt.modules.vsphere>` is a
standard Salt execution module.
If you pull up the docs for it you'll see
that almost every function in the module takes credentials and a targets either
a vcenter or a host. When credentials and a host aren't passed, Salt runs commands
through ``pyVmomi`` against the local machine. If you wanted, you could run
functions from this module on any host where an appropriate version of
``pyVmomi`` is installed, and that host would reach out over the network
and communicate with the ESXi host.
i ( t absolute_importt print_functiont unicode_literalsN( t VCenterProxySchema( t mergeu vcenterc C@ s t r
t St d f S( uA
Only load if the vsphere execution module is available.
u& The vcenter proxy module did not load.( t HAS_JSONSCHEMAt __virtualname__t False( ( ( s6 /usr/lib/python2.7/site-packages/salt/proxy/vcenter.pyt __virtual__� s c C@ s@ t j d t j � � t j d � t j � } t j d | � t | j d i � t j d i � � } t j d | � y t
j | | � Wn+ t
j j
k
r� } t j j | � � n Xx d D] } | | t | <q� Wt d d k rKd | k rt j j d
� � n d | k r)t j j d � � n x� d D] } | | t | <q0Wna d
| k rlt j j d � � n d | k r�t j j d � � n x d D] } | | t | <q�W| j d � t d <| j d � t d <t d d k r<t j d � y t � \ } } | t d <Wq<t j j k
r8} t j d | � t SXn t S( um
This function gets called when the proxy starts up.
For login the protocol and port are cached.
u+ Initting vcenter proxy module in process %su, VCenter Proxy Validating vcenter proxy inputu schema = %su proxyu proxy_conf = %su vcenteru mechanismu userpassu usernameuL Mechanism is set to 'userpass' , but no 'username' key found in proxy configu passwordsuM Mechanism is set to 'userpass' , but no 'passwords' key found in proxy configu domainuF Mechanism is set to 'sspi' , but no 'domain' key found in proxy configu principaluI Mechanism is set to 'sspi' , but no 'principal' key found in proxy configu protocolu portuO Retrieving credentials and testing vCenter connection for mehchanism 'userpass'u passwordu Error: %s( u vcenteru mechanism( u usernameu passwords( u domainu principal( t logt infot ost getpidt traceR t serializeR t gett
__pillar__t
jsonschemat validatet
exceptionst ValidationErrort saltt InvalidConfigErrort DETAILSt find_credentialst SaltSystemExitt criticalR t True( t optst schemat
proxy_conft exct keyt usernamet passwordt err( ( s6 /usr/lib/python2.7/site-packages/salt/proxy/vcenter.pyt init� sP
'
c C@ s t S( uc
Returns True.
CLI Example:
.. code-block:: bash
salt vcenter test.ping
( R ( ( ( s6 /usr/lib/python2.7/site-packages/salt/proxy/vcenter.pyt ping s
c C@ s t j d � d S( u_
Shutdown the connection to the proxy device. For this proxy,
shutdown is a no-op.
u" VCenter proxy shutdown() called...N( R t debug( ( ( s6 /usr/lib/python2.7/site-packages/salt/proxy/vcenter.pyt shutdown- s c C@ s� d t k r* d t k r* t d t d f St d d } x6 | D]. } | t d <t d � sb q? n t d | f SWt j j d � � d S( u]
Cycle through all the possible credentials and return the first one that
works.
u usernameu passwordu proxyu passwordsu vsphere.test_vcenter_connectionu3 Cannot complete login due to incorrect credentials.N( R R t __salt__R R t VMwareConnectionError( t passwordsR" ( ( s6 /usr/lib/python2.7/site-packages/salt/proxy/vcenter.pyR 5 s
c C@ s t S( u2
Function that returns the cached details
( R ( ( ( s6 /usr/lib/python2.7/site-packages/salt/proxy/vcenter.pyt get_detailsM s ( t __doc__t
__future__R R R t loggingR t salt.exceptionsR t salt.config.schemas.vcenterR t salt.utils.dictupdateR t __proxyenabled__R R R t ImportErrorR R t getLoggert __name__R R R R$ R% R' R R+ ( ( ( s6 /usr/lib/python2.7/site-packages/salt/proxy/vcenter.pyt <module>� s*
>
Mini Shell