golden hour

/opt/saltstack/salt/lib/python3.10/site-packages/salt/pillar/__pycache__

File/Folder	Size	Actions
__init__.cpython-310.pyc	27.26 KB
azureblob.cpython-310.pyc	11.38 KB
cmd_json.cpython-310.pyc	772 B
cmd_yaml.cpython-310.pyc	845 B
cmd_yamlex.cpython-310.pyc	780 B
cobbler.cpython-310.pyc	1.77 KB
confidant.cpython-310.pyc	2.89 KB
consul_pillar.cpython-310.pyc	9.77 KB
csvpillar.cpython-310.pyc	2.04 KB
digicert.cpython-310.pyc	1.21 KB
django_orm.cpython-310.pyc	6.04 KB
ec2_pillar.cpython-310.pyc	6.72 KB
etcd_pillar.cpython-310.pyc	4.09 KB
extra_minion_data_in_pillar.cpython-310.pyc	1.94 KB
file_tree.cpython-310.pyc	14.62 KB
foreman.cpython-310.pyc	3.28 KB
git_pillar.cpython-310.pyc	18.37 KB
gpg.cpython-310.pyc	806 B
hg_pillar.cpython-310.pyc	4.02 KB
hiera.cpython-310.pyc	1.01 KB
http_json.cpython-310.pyc	3.09 KB
http_yaml.cpython-310.pyc	2.79 KB
libvirt.cpython-310.pyc	3.8 KB
makostack.cpython-310.pyc	20.4 KB
mongo.cpython-310.pyc	5.5 KB
mysql.cpython-310.pyc	3.91 KB
nacl.cpython-310.pyc	1 KB
netbox.cpython-310.pyc	27.71 KB
neutron.cpython-310.pyc	2.59 KB
nodegroups.cpython-310.pyc	1.71 KB
pepa.cpython-310.pyc	16.02 KB
pillar_ldap.cpython-310.pyc	8.87 KB
postgres.cpython-310.pyc	3.13 KB
puppet.cpython-310.pyc	856 B
reclass_adapter.cpython-310.pyc	2.95 KB
redismod.cpython-310.pyc	2.85 KB
rethinkdb_pillar.cpython-310.pyc	3.77 KB
s3.cpython-310.pyc	12 KB
saltclass.cpython-310.pyc	1.13 KB
sql_base.cpython-310.pyc	11.91 KB
sqlcipher.cpython-310.pyc	3.79 KB
sqlite3.cpython-310.pyc	3.06 KB
stack.cpython-310.pyc	21.51 KB
svn_pillar.cpython-310.pyc	5.19 KB
varstack_pillar.cpython-310.pyc	1.29 KB
vault.cpython-310.pyc	6.16 KB
venafi.cpython-310.pyc	1.17 KB
virtkey.cpython-310.pyc	670 B
vmware_pillar.cpython-310.pyc	11.18 KB

Edit: confidant.cpython-310.pyc

�����xe$
����������������������@���sh���d�Z�ddlZddlZzddlZddlZdZW�n�ey!���dZY�nw�e�e	�Z
dZdd��Zd
dd	�Z
dS�)a���
An external pillar module for getting credentials from confidant.

Configuring the Confidant module
================================

The module can be configured via ext_pillar in the minion config:

.. code-block:: yaml

ext_pillar:
  - confidant:
      profile:
        # The URL of the confidant web service
        url: 'https://confidant-production.example.com'
        # The context to use for KMS authentication
        auth_context:
        from: example-production-iad
        to: confidant-production-iad
        user_type: service
        # The KMS master key to use for authentication
        auth_key: "alias/authnz"
        # Cache file for KMS auth token
        token_cache_file: /run/confidant/confidant_token
        # The duration of the validity of a token, in minutes
        token_duration: 60
        # key, keyid and region can be defined in the profile, but it's
        # generally best to use IAM roles or environment variables for AWS
        # auth.
        keyid: 98nh9h9h908h09kjjk
        key: jhf908gyeghehe0he0g8h9u0j0n0n09hj09h0
        region: us-east-1

:depends: confidant-common, confidant-client

Module Documentation
====================
�����NTF�	confidantc�������������������C���s���t�rtS�dS�)z9
    Only return if requests and boto are installed.
    F)�HAS_LIBS�__virtualname__��r���r����I/opt/saltstack/salt/lib/python3.10/site-packages/salt/pillar/confidant.py�__virtual__;���s���r���c�����������������C���s>��|du�ri�}dddd�}t��|�}|�dd�rd|d<�|S�|�dd�}z|d	�}|d
�}|d�}|d�}	W�n�ttfyI���d
}
t�|
��|�Y�S�w�|�dd�}|�dd�}|�dd�}
|�d�}|�dd�}tjj	||||||||
|d�	}z	|j
|	dd�}W�n
�tjjy����|�Y�S�w�|d�s�|S�tj�
|�}d|d<�|S�)z6
    Read pillar data from Confidant via its API.
    NF)�credentials_resultZcredentialsZcredentials_metadataZdisabledT�result�
token_version�����url�auth_key�auth_context�fromz3profile has undefined url, auth_key or auth_context�regionz	us-east-1�token_duration�<����retries�����token_cache_file�backoff)Ztoken_lifetimer
���r���r���r���r���)Z
decrypt_blindr���)�copy�deepcopy�get�KeyError�	TypeError�log�debugr����clientZConfidantClientZget_serviceZTokenCreationError�	formatterZcombined_credential_pair_format)Z	minion_idZpillarZprofile�retZprofile_datar
���r���r
���r���Zrole�msgr���r���r���r���r���r����datar���r���r����
ext_pillarE���s^����

�
��r#���)N)�__doc__r���ZloggingZconfidant.clientr���Zconfidant.formatterr����ImportErrorZ	getLogger�__name__r���r���r���r#���r���r���r���r����<module>���s����'�