Current File : //usr/lib/python2.7/site-packages/salt/states/influxdb_user.py
# -*- coding: utf-8 -*-
'''
Management of InfluxDB users
============================
(compatible with InfluxDB version 0.9+)
'''
# Import Python libs
from __future__ import absolute_import, print_function, unicode_literals
def __virtual__():
'''
Only load if the influxdb module is available
'''
if 'influxdb.db_exists' in __salt__:
return 'influxdb_user'
return False
def present(name,
passwd,
admin=False,
grants=None,
**client_args):
'''
Ensure that given user is present.
name
Name of the user to manage
passwd
Password of the user
admin : False
Whether the user should have cluster administration
privileges or not.
grants
Optional - Dict of database:privilege items associated with
the user. Example:
grants:
foo_db: read
bar_db: all
**Example:**
.. code-block:: yaml
example user present in influxdb:
influxdb_user.present:
- name: example
- passwd: somepassword
- admin: False
- grants:
foo_db: read
bar_db: all
'''
create = False
ret = {'name': name,
'changes': {},
'result': True,
'comment': 'User {0} is present and up to date'.format(name)}
if not __salt__['influxdb.user_exists'](name, **client_args):
create = True
if __opts__['test']:
ret['comment'] = 'User {0} will be created'.format(name)
ret['result'] = None
return ret
else:
if not __salt__['influxdb.create_user'](
name, passwd, admin=admin, **client_args):
ret['comment'] = 'Failed to create user {0}'.format(name)
ret['result'] = False
return ret
else:
user = __salt__['influxdb.user_info'](name, **client_args)
if user['admin'] != admin:
if not __opts__['test']:
if admin:
__salt__['influxdb.grant_admin_privileges'](
name, **client_args)
else:
__salt__['influxdb.revoke_admin_privileges'](
name, **client_args)
if admin != __salt__['influxdb.user_info'](
name, **client_args)['admin']:
ret['comment'] = 'Failed to set admin privilege to ' \
'user {0}'.format(name)
ret['result'] = False
return ret
ret['changes']['Admin privileges'] = admin
if grants:
db_privileges = __salt__['influxdb.list_privileges'](
name, **client_args)
for database, privilege in grants.items():
privilege = privilege.lower()
if privilege != db_privileges.get(database, privilege):
if not __opts__['test']:
__salt__['influxdb.revoke_privilege'](
database, 'all', name, **client_args)
del db_privileges[database]
if database not in db_privileges:
ret['changes']['Grant on database {0} to user {1}'.format(
database, name)] = privilege
if not __opts__['test']:
__salt__['influxdb.grant_privilege'](
database, privilege, name, **client_args)
if ret['changes']:
if create:
ret['comment'] = 'Created user {0}'.format(name)
ret['changes'][name] = 'User created'
else:
if __opts__['test']:
ret['result'] = None
ret['comment'] = 'User {0} will be updated with the ' \
'following changes:'.format(name)
for k, v in ret['changes'].items():
ret['comment'] += '\n{0} => {1}'.format(k, v)
ret['changes'] = {}
else:
ret['comment'] = 'Updated user {0}'.format(name)
return ret
def absent(name, **client_args):
'''
Ensure that given user is absent.
name
The name of the user to manage
'''
ret = {'name': name,
'changes': {},
'result': True,
'comment': 'User {0} is not present'.format(name)}
if __salt__['influxdb.user_exists'](name, **client_args):
if __opts__['test']:
ret['result'] = None
ret['comment'] = 'User {0} will be removed'.format(name)
return ret
else:
if __salt__['influxdb.remove_user'](name, **client_args):
ret['comment'] = 'Removed user {0}'.format(name)
ret['changes'][name] = 'removed'
return ret
else:
ret['comment'] = 'Failed to remove user {0}'.format(name)
ret['result'] = False
return ret
return ret
Mini Shell