golden hour
/opt/saltstack/salt/lib/python3.10/site-packages/salt/daemons/__pycache__
⬆️ Go Up
Upload
File/Folder
Size
Actions
__init__.cpython-310.pyc
5.49 KB
Del
OK
masterapi.cpython-310.pyc
33.4 KB
Del
OK
Edit: masterapi.cpython-310.pyc
o �xe�� � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zddl Zddl ZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddlZddl Zddl Zddl Zddl Zddl Zddl!Zddl"Zddl#Zddl$Zddl%Zddl&m'Z' ddlm(Z( zddl)Z)dZ*W n e+y� dZ*Y nw e�,e-�Z.dd� Z/d d � Z0d d � Z1d d� Z2dd� Z3dd� Z4dd� Z5dd� Z6G dd� d�Z7G dd� d�Z8G dd � d �Z9dS ) z� This module contains all of the routines needed to set up a master server, this involves preparing the three listeners and the workers needed by the master. � N)�DEFAULT_TARGET_DELIM)� git_pillarTFc C s� g }dd� | � dg �D �D ]6}d|v rCztjjj| |d tjtjtjd�}|� |� W q tj j yB | � dd�r;� t � d� Y q w q |S ) zF Clear out the ext pillar caches, used when the master starts c S s g | ]}|�qS � r )�.0�xr r �J/opt/saltstack/salt/lib/python3.10/site-packages/salt/daemons/masterapi.py� <listcomp>A s z#init_git_pillar.<locals>.<listcomp>Z ext_pillar�git)Zper_remote_overridesZper_remote_onlyZ global_onlyZgit_pillar_verify_configTz Could not initialize git_pillar)�get�salt�utilsZgitfsZ GitPillarr ZPER_REMOTE_OVERRIDESZPER_REMOTE_ONLYZ GLOBAL_ONLY�append� exceptionsZFileserverConfigError�log�critical)�opts�retZ opts_dict�pillarr r r �init_git_pillar< s& � ��r c C s* dD ]�}|| d v r�t j�| d d�|�d�}t j�|�rDt�d|� zt �|� W n tyC } z t� d||� W Y d}~nd}~ww t j�| d d d�|��}zt � |�}W n tya Y qw t � |d �D ])}t j�||�}zt �|� W qh ty� } z t� d ||� W Y d}~qhd}~ww qdS ) z/ Clean out the old fileserver backends )r Zhg�svnZfileserver_backend�cachedirz{}fszenvs.pzClearing %sfs env cachez%Unable to clear env cache file %s: %sNZ file_listsz*.pz&Unable to file_lists cache file %s: %s) �os�path�join�format�isfiler �debug�remove�OSErrorr �listdir�fnmatch�filter)r ZbackendZ env_cache�excZfile_lists_dirZfile_lists_cachesZfile_lists_cacheZ cache_filer r r �clean_fsbackendT sB ���� ������r# c C sN t j�| �}|�� D ]}|�|�}d|vs |�dd�t�� k r$|�|� q dS )z. Clean expired tokens from the master Zexpirer N)r �auth�LoadAuthZ list_tokens�get_tokr �timeZrm_token)r �loadauth�tokZ token_datar r r �clean_expired_tokensv s ��r* c C s� zKt j�| d d�}t j�|�sW d S tjj�|�D ].\}}}|D ]&}t j�||�}t j�|�s1q!t�� t j� |� tjj � | �krGt � |� q!qW d S t yZ t�d� Y d S w )Nr � publish_authz Unable to delete pub auth file)r r r �existsr r �os_walkr r' �getmtime�jobZget_keep_jobs_secondsr r r �error)r � auth_cache�dirpath�dirnames� filenamesZ auth_fileZauth_file_pathr r r �clean_pub_auth� s& � ��� �r5 c C s> t jj| ddd�}d�| d �}||jv r |j| � dS dS )z3 Clean out the old jobs from the job cache F�ZstatesZrendz{}.clean_old_jobs�master_job_cacheN)r �minion� MasterMinionr � returners)r �mminion�fstrr r r �clean_old_jobs� s � �r= c C s� t r d }zt�|�j}W n ty | d rY d S Y nw tjj�� r4t j � | d d� |� dd���}n t j � | d d� |��}t j �|�rht�d|� tjj�� rct �|t j�sct �|tjtjB � t �|� tjj�� }tjj� d��* tjj� |d��}|� tjj � |�� W d � n1 s�w Y W d � n1 s�w Y t �|d � t r�|d ur�z t �!||d � W |S t"y� Y |S w |S ) N�client_acl_verifyr z.{}_key�\�_zRemoving stale keyfile: %s� �w+i� ���)#�HAS_PWD�pwd�getpwnam�pw_uid�KeyErrorr r �platform� is_windowsr r r r �replacer, r r �access�W_OK�chmod�stat�S_IRUSR�S_IWUSR�unlinkZcryptZ CrypticleZgenerate_key_string�filesZ set_umask�fopen�write� stringutils�to_str�chownr )r �user�uid�keyfile�key�fp_r r r �mk_key� sH �� � �� � ��r^ c C s� i }| d }t |�� �}| �d�r|�| d � |�tjj�� � |D ]}t� d|� t | |�}|dur8|||< q#| d rgt rgt� d� t �� D ]}|j}||vratjjj||d�rat | |�||< qHt� d� |S ) zv A key needs to be placed in the filesystem with permissions 0400 so clients are required to run as root. � publisher_aclrY z,Preparing the %s key for local communicationNr> z?Beginning pwd.getpwall() call in masterapi access_keys function)� whitelistz9End pwd.getpwall() call in masterapi access_keys function)�set�keysr �addr r rY Zget_userr �infor^ rD ZprofilerE �getpwall�pw_namerV Zcheck_whitelist_blacklist)r rb r_ Z acl_usersrY r\ r r r � access_keys� s. � �� rg c C sd z| j st�d� tj�d��| �� W dS ty1 } ztjd|tj d� W Y d}~dS d}~ww )zl Update the fileserver backends, requires that a salt.fileserver.Fileserver object be passed in zLNo fileservers loaded, the master will not be able to serve files to minionsz No fileserver backends availablez+Exception %s occurred in file server update)Zexc_info_on_loglevelN) Zserversr r0 r r ZSaltMasterError�update� Exception�logging�DEBUG)� fileserverr" r r r �fileserver_update� s � ���rm c @ sJ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z ddd�Z dS )�AutoKeyzH Implement the methods to run auto key acceptance and rejection c C s i | _ || _d S �N)� signing_filesr ��selfr r r r �__init__ s zAutoKey.__init__c C s~ t jj�� rdS t jjj| jd dd�}t�|�}tj |j @ r!dS tj |j @ r=| j� dd�s0dS t� � dkr=|j|vr=dS dS )zI Check if the specified filename has correct permissions TrY F)�include_defaultZpermissive_pki_accessr )r r rI rJ rY Z get_gid_listr r rO �S_IWOTH�st_mode�S_IWGRPr �getuid�st_gid)rr �filename�groupsZfmoder r r �check_permissions s zAutoKey.check_permissionsc s� |rt j�|�s dS | �|�st�d|� dS t j�|�}| j�|i ��d�|kr[|| j� |i �d< t j j � |d��}dd� dd� |D �D �| j| d< W d � n1 sVw Y t� fd d �| j| �dg �D ��S ) z@ Check a keyid for membership in a signing file F�*Wrong permissions for %s, ignoring content�mtime�rc S s g | ] }|� � �d �s|�qS )�#)�strip� startswith)r �entryr r r r 7 s ��z.AutoKey.check_signing_file.<locals>.<listcomp>c S s g | ]}|� � �qS r )r� �r �liner r r r 9 s �dataNc 3 s � | ] }t jj�� |�V qd S ro )r r rV Z expr_matchr� ��keyidr r � <genexpr>< s � � �z-AutoKey.check_signing_file.<locals>.<genexpr>)r r r, r| r �warningr. rp r � setdefaultr r rS rT �any)rr r� Z signing_filer~ r] r r� r �check_signing_file( s � � �zAutoKey.check_signing_filec C s� t j�| jd d�}| j�dd�}|dkrMt�� dt|� }tjj� |�D ]&\}}}|D ] }t j�||�} t j� | �} | |k rKt � d| � t � | � q-q&t j�||�} t j�| �s\dS t � | � d S ) zG Check a keyid for membership in a autosign directory. Zpki_dirZminions_autosignZautosign_timeout�x r �< zAutosign keyid expired %sFT)r r r r r r' �intr r r- r. r r� r r, ) rr r� Z autosign_dirZexpire_minutesZmin_time�root�dirsr4 �fZ stub_filer~ r r r �check_autosign_dirA s$ �� zAutoKey.check_autosign_dirc C s� |rd| j vr dS | j d }t�|�D ]^\}}}|D ]V}||v rptj�||�}| �|�s3t�d|� qtj j � |d��-}|D ]"} tj j � | ��� } | �d�rOq>|| | kr` W d � dS q>W d � n1 skw Y qqdS )zG Check for matching grains in the autosign_grains_dir. �autosign_grains_dirFr} r r� NT)r r �walkr r r| r r� r r rS rT rV � to_unicoder� r� ) rr �autosign_grainsr� r� r� r4 ZgrainZ grain_filer� r� r r r �check_autosign_grainsY s4 � �� ���z AutoKey.check_autosign_grainsc C s | � || j�dd��S )zQ Checks if the specified keyid should automatically be rejected. Zautoreject_fileN)r� r r )rr r� r r r �check_autorejectu s zAutoKey.check_autorejectNc C sH | j d rdS | �|| j �dd��rdS | �|�rdS | �|�r"dS dS )zO Checks if the specified keyid should automatically be signed. Z auto_acceptTZ autosign_fileNF)r r� r r� r� )rr r� r� r r r �check_autosign{ s zAutoKey.check_autosignro ) �__name__� __module__� __qualname__�__doc__rs r| r� r� r� r� r� r r r r rn s rn c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd,d d �Zd,d d�Z d,dd�Z dd� Z d,dd�Z dd� Z dd� Zdd� Zdd � Zd d � Zd d � Zd,d!d"�Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+S )-� RemoteFuncsz� Funcitons made available to minions, this class includes the raw routines post validation that make up the minion access to the master c C s� || _ tjjjd| j d | j dd�| _tjj�|�| _tj� | j �| _ tj j | j d�| _ tj j| j ddd�| _| �� tj�|�| _d S �NZmasterZsock_dirF)r �listen)�moptsr6 )r r r �event� get_event�minions� CkMinions� ckminions�loader�tops�client�get_local_client�localr8 r9 r; � _RemoteFuncs__setup_fileserver�cache�factoryrq r r r rs � s �zRemoteFuncs.__init__c C sR t j�| j�}|j| _|j| _|j| _ |j | _ |j | _ |j| _|j| _|j| _dS )zK Set the local file objects from the file server interface N)r rl Z Fileserverr Z serve_fileZ _serve_fileZ _find_fileZ _file_findZ file_hashZ _file_hashZ file_listZ _file_listZfile_list_emptydirsZ_file_list_emptydirsZdir_listZ _dir_listZ symlink_listZ _symlink_list�envs� _file_envs)rr Zfs_r r r Z__setup_fileserver� s z RemoteFuncs.__setup_fileserverc s d| j vrdS t| j d t�sdS t� fdd�dD ��r dS t�d� d �r(dS g }| j d D ] }t�|� d �rMt| j d | t�rM|�| j d | � q/d � d v rq� d �d �� d< g }� d D ] }|� |�� � qc|� d < | j j |� d � d � d � � d d �dd�S )zS Verify that the passed information authorized a minion to execute ZpeerFc 3 � � | ]}|� vV qd S ro r �r r\ ��loadr r r� � � � z6RemoteFuncs.__verify_minion_publish.<locals>.<genexpr>)�fun�arg�tgtr �idz publish.*r� r� �,r� r� �tgt_type�globT)Zpublish_validate) r � isinstance�dictr� �re�match�list�extend�splitr r� � auth_checkr )rr r� �permsr� Zarg_r� r r� r Z__verify_minion_publish� s8 � �z#RemoteFuncs.__verify_minion_publishc C s i }i }| � � }|D ] }||vrg ||< q ||d< | jd |d< | jd |d< | jd |d< |�d�r5|S | jd |d< | jd |d< | jd |d< | jd |d < | jd |d < | jd |d < | jd |d < | jd |d < | jd |d< | jd |d< | jd |d< | jd |d< |S )z9 Return the master options to the minion � file_rootsZtop_file_merging_strategyZ env_orderZ default_topZenv_onlyZrendererZfailhardZ state_topZstate_top_saltenv� nodegroupsZstate_auto_orderZ state_eventsZstate_aggregateZ jinja_envZ jinja_sls_envZjinja_lstrip_blocksZjinja_trim_blocks)r� r r )rr r� r� r� r� �saltenvr r r � _master_opts� s4 � zRemoteFuncs._master_optsFc C s� |sd|vr t �d� i S tjj�| j|d �si S i }i }i }d|v r4|d }d|d v r4|d d }| jD ];}|| j�di �vrCq7ztjj j || j| ||d�dd�}W q7 t yr } zt �d |||d � W Y d }~q7d }~ww |S ) zC Return the results from master_tops if configured r� z.Received call for external nodes without an idr �grainsZ master_tops)r r� T)Z merge_listsz2Top function %s failed with error %s for minion %sN) r r0 r r �verify�valid_idr r� r � dictupdateZmergeri )rr r� � skip_verifyr r� r r� r" r r r � _master_tops� s< ����zRemoteFuncs._master_topsc s� |st �fdd�dD ��ri S t�d t�r(tt�d �d���}t|�dk}nt�d t�r6�d }d}ni S g }d| jv r�t| jd t�sIi S t� }| jd D ] }t � |�d �rot| jd | t�ro|� | jd | � qQ|D ]� t � fd d�|D ��r�|� � � qr|s�i S n|}i }t jj�| j�d �s�|S ��d �} | d ur�d �vr�| } n��d d�} | �� dkr�d} | �� dkr�d} t jj�| j�} | j�d | dd�} | d } i }| D ]�}| j�d�|�d�}t|t�s�q�|D ]o}||vr�q�|| }|| }t|t��r@t jjj|v �r@|t jjj }||�|i �v�r@d|v �r@| �|d |�dd��d }|�s3q�t jj � |d�||�|� t jj� |||�d ��rNq�|�rZ||� |i �|< q�|||< q�q�|S ) zC Gathers the data from the specified minions' mine c 3 r� ro r r� r� r r r� r� z(RemoteFuncs._mine_get.<locals>.<genexpr>)r� r� r� r� r� � TZmine_getr� c 3 s � | ] }t �|� �V qd S ro )r� r� )r �perm)r� r r r� 5 s � � expr_formNr� r� r Z pillar_exact�compoundZcompound_pillar_exactr� F)Zgreedyr� � minions/{}�mineZ allow_tgtZallow_tgt_typez{}:{}) r� r� �strr� ra r� �lenr r� r� r� rh r r r r� r� r �lowerr� r� � check_minionsr� �fetchr r� ZMINE_ITEM_ACL_IDZMINE_ITEM_ACL_DATAr� Zset_dict_key_valueZminion_side_acl_deniedr� )rr r� r� � functionsZ _ret_dictZfunctions_allowedr� r� r r� Z match_typeZchecker�_resr� Zminion_side_aclr8 Z mine_data�functionZ mine_entryZ mine_resultZ get_minionr )r� r� r � _mine_get s� � �� � �� � � �$zRemoteFuncs._mine_getc C s� |s d|vs d|vr dS | j �dd�s| j �dd�rFd�|d �}d}|d }|�dd�s>| j�||�}t|t�r>|�|� | j�|||� d S ) z6 Store/update the mine data in cache. r� r� F�minion_data_cache�enforce_mine_cacher� r� �clearT) r r r r� r� r� r� rh �store)rr r� r� �cbank�ckeyZnew_datar� r r r �_miney s � zRemoteFuncs._minec C s� d|vsd|vr dS | j �dd�s| j �dd�rTd�|d �}d}z(| j�||�}t|t�s1W dS |d |v rG||d = | j�|||� W dS W dS tyS Y dS w dS ) zR Allow the minion to delete a specific function from its own mine r� r� Fr� r� r� r� T) r r r r� r� r� r� r� r )rr r� r� r� r� r r r � _mine_delete� s* � � ��zRemoteFuncs._mine_deletec C sH |sd|vrdS | j �dd�s| j �dd�r"| j�d�|d �d�S dS )zI Allow the minion to delete all of its own mine contents r� Fr� r� r� r� T)r r r� �flushr )rr r� r� r r r � _mine_flush� s �zRemoteFuncs._mine_flushc s� t � fdd�dD ��r dS | jd rtj�� d �r dS tj�� d �s*d� d v r,dS tjj�| j� d �s9dS d | jd }d � v rQ� d d k rQt � d � dS � � dd �|krat � d|� dS t � d �� � d d � |krwt � d|� dS � d }d|v r�|� dd�}tj�|�}tj�| jd d� d d|�}tj�|�}tj�|�s�zt�|� W n tj y� Y nw tj�|�rLj d d kr�d}nd}tjj�||�� }� d r�|�� d � |�tjj�� d �� W d � dS 1 s�w Y dS )zm Allows minions to send files to the master, files are sent to the master file cache c 3 r� ro r r� r� r r r� � r� z)RemoteFuncs._file_recv.<locals>.<genexpr>)r� r �locFZ file_recvr z../r� i �file_recv_max_sizer� r z#Invalid file pointer: load[loc] < 0�sizez&Exceeding file_recv_max_size limit: %sr� �:r? �/r r� rS �ab�wbNT)r� r r r �isabsr r r� r� r r0 r r� rK �normpathr �dirname�isdir�makedirsr rS rT �seekrU rV rW )rr r� r� r� Zcpath�cdir�moder] r r� r � _file_recv� sV � � ��zRemoteFuncs._file_recvc s� t � fdd�dD ��r dS t�d� �d�� tjj| j� d � d � �d � �d ��� �d�| jj � �d i �d �}|� � }| j�d d�ro| j � d� � d �d� d |d�� | j�d�du ro| j�dditjj�� d dd�� |S )z7 Return the pillar data for the minion c 3 r� ro r r� r� r r r� � r� z&RemoteFuncs._pillar.<locals>.<genexpr>)r� r� Fz Master _pillar using ext: %s�extr� r� r� �env�pillar_override)r� r� r� r� )r� r Zminion_data_cache_eventsTZcommentzMinion data cache refreshZrefreshr8 )r� r r r r r Z get_pillarr r; r� Zcompile_pillarr� r� r r� � fire_eventr �tagify)rr r� r r� r r� r �_pillar� s2 � ��zRemoteFuncs._pillarc C s� d|vrdS d|vrd|vsd|vrdS d|v rN|d D ]/}d|v r'|d }n|}| j �||d � |�d�durK| j �|tjj j|d |d d�� q d S |d }| j �||� d S ) zd Receive an event from the minion and fire it on the master event interface r� F�events�tagr� ZpretagN)�baseT)r� r� r r r r� )rr r� r� Z event_datar r r r � _minion_event s( ���zRemoteFuncs._minion_eventc sl t jj�t jj�| j��}t� fdd�dD ��rdS � d dkrJd�| jd �}| jj | � � d d�d �� d< d �| jd �}| jj | � d � � t � d � d � d � | j �� � d � | j �� t jj �� d d� d gd�� | j �� � | jd r�| j� d�r�dS d�| jd �}| j� d�r�|| jj v r�| jj | � d |� d�| jd �}| jj | � � dS )z> Handle the return data sent from the minions c 3 r� ro r r� r� r r r� " r� z&RemoteFuncs._return.<locals>.<genexpr>��return�jidr� Fr Zreq� {}.prep_jidr7 �nocache�r � {}.save_loadz Got return from %s for job %sr� r r/ Z job_cache� ext_job_cacheNz{}.update_endtimeZjob_cache_store_endtimez {}.returner)r r r Z jid_to_time�gen_jidr r� r r; r: r r rd r� r� r� Z fire_ret_load)rr r� �endtimeZ prep_fstrZ saveload_fstrr< r r� r �_return s. � � zRemoteFuncs._returnc s� t � fdd�dD ��r dS d� v r&d�| jd �}| jj| � d � d � � d �� D ]\}}� d ||d �}d � v rB� d |d < | �|� q,dS ) zt Receive a syndic minion return and format it to look like returns from individual minions. c 3 r� ro r r� r� r r r� E r� z-RemoteFuncs._syndic_return.<locals>.<genexpr>r Nr� r r7 r r )r r� r �out)r� r r r; r: �itemsr )rr r� r< r\ �itemr r r� r �_syndic_return? s �zRemoteFuncs._syndic_returnc s& d| j vri S t| j d t�si S t� fdd�dD ��r i S t� }| j d D ] }t�|� d �rDt| j d | t�rD|�| j d | � q&d}|D ] }t�|� d �rUd}qI|sbt � d � d � i S i }|�| j � |�� d t j j j� d � �d g �d �� d d| j d d�� t j�|�}|�� S )zS Execute a runner from a minion, return the runner's function data Zpeer_runc 3 r� ro r r� r� r r r� [ r� z,RemoteFuncs.minion_runner.<locals>.<genexpr>)r� r� r� r� Fr� Tz&Minion id %s is not who it says it is!r� �no_parse�r � conf_file)r� r� r� �docr )r r� r� r� ra r� r� r� rh r r� r r �args� parse_inputr �runnerZRunner�run)rr r� r� r� Zgoodr� r r r r� r � minion_runnerS sD �� ��� zRemoteFuncs.minion_runnerc s� |st � fdd�dD ��ri S tj�| jd d�}tj�|�s$t�|� tj�|� d �}tjj � |d�� }� d tjj � |� � �ksLi W d � S W d � n1 sVw Y | j�� d �S ) z� Request the return data from a specific jid, only allowed if the requesting minion also initialted the execution. c 3 r� ro r r� r� r r r� � r� z&RemoteFuncs.pub_ret.<locals>.<genexpr>)r r� r r+ r r r� N)r� r r r r r� r� r r rS rT rV r� �readr� �get_cache_returns)rr r� r� r1 �jid_fnr] r r� r �pub_ret} s � �zRemoteFuncs.pub_retc C st | � |�si S |d tjjj|d |�dg �d�|�dd�|d |d |d d �}d|v rU|d �d �rO|d | jd v rM| jd |d |d< d |d< ni S |d |d< i }| jj di |��|d< | j � |d |d �}|d |d< t j �| jd d�}t j �|�s�t �|� t j �|t|d ��}tjj�|d��}|�tjj�|d �� W d � |S 1 s�w Y |S )� Publish a command initiated from a minion, this method executes minion restrictions so that the minion publication will only work if it is enabled in the config. The configuration on the master allows minions to be matched to salt functions, so the minions can only publish allowed salt functions The config will look like this: peer: .*: - .* This configuration will enable all minions to execute all commands. peer: foo.example.com: - test.* This configuration will only allow the minion foo.example.com to execute commands from the test module r� r� r r r� r� r� r r� �r� r� r� r� r r� �noder� r� r r� r r+ rB Nr )�#_RemoteFuncs__verify_minion_publishr r r r r r� r r� Z cmd_asyncr� r� r r r r� r� r� rS rT rU rV rW )rr r� �pub_loadr r� r1 r r] r r r � minion_pub� s@ � � ��zRemoteFuncs.minion_pubc C s | � |�si S |d tjjj|d |�dg �d�|�dd�|d |d |d d �}d |v rOz t|d �|d < W n tyN d �|d �}t � |� i Y S w d |v ruz t|d �|d < W n tyt d �|d �}t � |� i Y S w d|v r�|d � d�r�|d | j d v r�| j d |d |d< d|d< ni S |d |d< d|d< i }| j jdi |��D ]6}|�dd�dkr�|}d|v r�|d |d< |�d�|d< |||d < q�|d ||d < d|v r�|d |d< q�| j �|d ��� D ] \}}||vr�|||< q�|�dd�dk�r |�d� |S )r! r� r� r r r� r� r� r r� r" Ztmo�timeoutz!Failed to parse timeout value: {}r# r� r� T�rawZform� Zfullr Z__jid__r Nr )r$ r r r r r r� � ValueErrorr r r� r� r r� Zcmd_iter�popr r ) rr r� r% �msgr r8 r� r\ �valr r r �minion_publish� sl � � � � � � zRemoteFuncs.minion_publishc C sZ d|vrdS t j�| j��}|j|d |�dd�d� W d � dS 1 s&w Y dS )zE Allow a minion to request revocation of its own key r� FZpreserve_minion_cache)Zpreserve_minionsNT)r r\ ZKeyr Z delete_keyr )rr r� Zkeyapir r r � revoke_auth s � ��zRemoteFuncs.revoke_authc C �< | j d ur | j �� d | _ | jd ur | j�� d | _d S d S ro �r� �destroyr� �rr r r r r2 � �zRemoteFuncs.destroyN)F)r� r� r� r� rs r� r$ r� r� r� r� r� r� r� r r r r r r r& r. r/ r2 r r r r r� � s, % % a 4 $ *4J r� c @ sP e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dS )� LocalFuncsz; Set up methods for use only from the local system c C s� || _ || _tjjjd| j d | j dd�| _tjj| j d�| _tjj � |�| _ tj � |�| _tjj| j ddd�| _tj�|�| _d S r� )r r\ r r r� r� r� r� r� r� r� r� r$ r% r( r8 r9 r; �wheelZWheel�wheel_)rr r r\ r r r rs + s �zLocalFuncs.__init__c C s | � |�\}}}| j�||�}|�d�}|rd|iS | j�|�dg �|d |d �}|�d�}|s<d|d�||�d�iS t|t�rGd|v rG|S z|� d�} t j � | j �} | �| |�di �|�W S ty� } zt�d� d| jj| jt| �d �iW Y d } ~ S d } ~ ww ) zJ Send a master control function back to the runner system r0 � auth_listr� �kwarg�username�9Authentication failure of type "{}" occurred for user {}.��name�message�)Exception occurred while introspecting %s)r= r r> N)�_prep_auth_infor( �check_authenticationr r� � runner_checkr r� r� r+ r r Z RunnerClientr Z asynchronousri r � exception� __class__r� r r� ) rr r� � auth_type�err_namer\ r� r0 rB r: r� Z runner_clientr" r r r r @ s@ � �� ����zLocalFuncs.runnerc C s� | � |�\}}}| jj|||dd�}|�d�}|r d|iS |�d�}|dkrN| j�|�dg �|d |d �}|sCd|d �||�d �iS t|t�rNd|v rN|S t j j � | j �} |�d�} t j jj| d d �} d �| �| | |d�} z6| j�| t j j�| dgd �� | jj| fi |��} | | d< d| d< | j�| t j j�| dgd �� | | d�W S ty� } z/t�d| � d�| |jj|�| d< d| d< | j�| t j j�| dgd �� | | d�W Y d}~S d}~ww )zI Send a master control function back to the wheel system T)r\ Z show_usernamer0 r: rY r8 r� r9 r; r< r6 )�prefixzwheel.{})r� r r rY �newr �successr )r r� r? z&Exception occurred in wheel {}: {}: {}FN)r@ r( rA r r� � wheel_checkr r� r� r r r r r r+ r� r� r� r7 Z call_funcri r rC rD r� )rr r� rE rF r\ r� r0 r: rJ r r� r r� r r" r r r r6 q s` � ��� � � ��zLocalFuncs.wheelc C s" | j �|�}|st�d� dS |S )z� Create and return an authentication token, the clear load needs to contain the eauth key and the needed authentication creds. z0Authentication failure of type "eauth" occurred.r) )r( �mk_tokenr r� )rr r� �tokenr r r rK � s zLocalFuncs.mk_tokenc C s d|vrdS | j �|d �S )zZ Return the name associated with a token or False if the token is invalid rL F)r( r& )rr r� r r r � get_token� s zLocalFuncs.get_tokenc C s� |� di �}tj�| jd �}|�|d �s |�|d �r/t�d|d |d � dddd �iS |� di �� d t �}| j � |d |� d d �|�}|d }| � |�\}}} |dkra| j j||| d�} n| j �||�} | � dg �} | � d�} d�|�} | r�t�| � dddd �iS |dks�|dkr�| r�| j j| |d |d |d |� d d �|dgd�}|s�t�| � dddd �iS |dkr�| � d�}||d< t�d|� n |dkr�| j �|�|d< | j� d�s�|s�d d |d �d �S |d �sd!�| jd" �}| jj| |� d#d$�d%�|d < | j�d|i|d � |d |d |d |d |d tjjj|d |� d&g �d'�|d(�}| j�|d)� | j�|tjj�|d d*gd+�� | jd, �r�zd-�| jd, �}| jj| |d |� W n# t �yt t� d.| jd, � Y n t �y� tj d/d0d1� Y nw zd-�| jd" �}| jj| |d |� W n# t �y� t� d2| jd" � Y n t �y� tj d/d0d1� Y nw |d tjjj|d |� d&g �d'�|d |d |d3 d4�}d5|v �r�|d5 |d5< d |v �r�|d |d < d6|v �r�|d6 |d6< d|v �r1d7|d v �r|d � d7�|d7< d8|d v �r!|d � d8�|d8< d9|d v �r1|d � d9�|d9< d|v �rKt� d:|d |d |d � |d |d< n t� d;|d |d � t�d<|� |d |d �|d=�S )>zt This method sends out publications to the minions, it can only be used by the LocalClient. �kwargsZpublisher_acl_blacklistrY r� zp%s does not have permissions to run %s. Please contact your local administrator if you believe this is in error.r0 ZAuthorizationErrorz Authorization error occurred.r< � delimiterr� r� r� r� �r\ r8 z-Authentication failure of type "{}" occurred.ZAuthenticationErrorz Authentication error occurred.r� zsaltutil.find_job)r� r` rL r: z Minion tokenized user = "%s"�eauthZ order_mastersr� N)r r� )�encr� r r r7 r Fr r r )r r� r� rY r� r� r� Znew_jobrH r/ r r z_The specified returner used for the external job cache "%s" does not have a save_load function!z+The specified returner threw a stack trace:T)�exc_infoz]The specified returner used for the master job cache "%s" does not have a save_load function!r )r� r� r� r r r� �toZ ret_config�metadataZ ret_kwargsz(User %s Published command %s with jid %sz Published command %s with jid %sz Published command details %s)r Zpub) r r ZaclZ PublisherACLr Zuser_is_blacklistedZcmd_is_blacklistedr r0 r r� r� r@ r( rA r r� r� r Z load_namer; r: r� r� r r r r� rH r ri rd )rr r� �extrar_ rO r� r� rE rF r\ r� r8 r0 �err_msgZ authorizedr: r< Z new_job_loadr% r r r �publish� s � ����� �� � �� ��� � � ���� �� � zLocalFuncs.publishc C s@ d }d|v r d}d}nd|v rd}d}nd}d}| j }|||fS )NrL ZTokenAuthenticationErrorrQ ZEauthAuthenticationErrorrY ZUserAuthenticationErrorrP )rr r� r\ rE rF r r r r@ � s zLocalFuncs._prep_auth_infoc C r0 ro r1 r3 r r r r2 � r4 zLocalFuncs.destroyN) r� r� r� r� rs r r6 rK rM rX r@ r2 r r r r r5 " s 1A E r5 ):r� r rj r r� rO r' Zsalt.aclr Z salt.authZ salt.cacheZ salt.clientZ salt.cryptZsalt.exceptionsZsalt.fileserverZsalt.keyZ salt.minionZ salt.payloadZ salt.pillarZ salt.runnerZ salt.stateZsalt.utils.argsZsalt.utils.atomicfileZsalt.utils.dictupdateZsalt.utils.eventZsalt.utils.filesZsalt.utils.gitfsZsalt.utils.gzip_utilZsalt.utils.jidZsalt.utils.jobZsalt.utils.mineZsalt.utils.minionsZsalt.utils.pathZsalt.utils.platformZsalt.utils.stringutilsZsalt.utils.userZsalt.utils.verifyZ salt.wheelZ salt.defaultsr r rE rD � ImportErrorZ getLoggerr� r r r# r* r5 r= r^ rg rm rn r� r5 r r r r �<module> s~ � " +!
Save