golden hour

/opt/saltstack/salt/lib/python3.10/site-packages/salt/states

⬆️ Go Up

Upload

File/Folder	Size	Actions
__init__.py	25 B	Del OK
__pycache__	-	Del OK
acme.py	5.08 KB	Del OK
alias.py	2.49 KB	Del OK
alternatives.py	6.75 KB	Del OK
ansiblegate.py	7.93 KB	Del OK
apache.py	3.95 KB	Del OK
apache_conf.py	2.72 KB	Del OK
apache_module.py	2.73 KB	Del OK
apache_site.py	2.66 KB	Del OK
aptpkg.py	1.42 KB	Del OK
archive.py	68.24 KB	Del OK
artifactory.py	6.84 KB	Del OK
at.py	7.48 KB	Del OK
augeas.py	10.57 KB	Del OK
aws_sqs.py	2.59 KB	Del OK
azurearm_compute.py	11.78 KB	Del OK
azurearm_dns.py	26.05 KB	Del OK
azurearm_network.py	89.12 KB	Del OK
azurearm_resource.py	28.23 KB	Del OK
beacon.py	7.58 KB	Del OK
bigip.py	96.63 KB	Del OK
blockdev.py	5.13 KB	Del OK
boto3_elasticache.py	48.01 KB	Del OK
boto3_elasticsearch.py	32.58 KB	Del OK
boto3_route53.py	37.54 KB	Del OK
boto3_sns.py	12.69 KB	Del OK
boto_apigateway.py	82.83 KB	Del OK
boto_asg.py	31.93 KB	Del OK
boto_cfn.py	11.53 KB	Del OK
boto_cloudfront.py	6.01 KB	Del OK
boto_cloudtrail.py	13.18 KB	Del OK
boto_cloudwatch_alarm.py	6.4 KB	Del OK
boto_cloudwatch_event.py	12.33 KB	Del OK
boto_cognitoidentity.py	13.69 KB	Del OK
boto_datapipeline.py	18.5 KB	Del OK
boto_dynamodb.py	29.32 KB	Del OK
boto_ec2.py	71.98 KB	Del OK
boto_elasticache.py	16.75 KB	Del OK
boto_elasticsearch_domain.py	12.27 KB	Del OK
boto_elb.py	55.1 KB	Del OK
boto_elbv2.py	12.19 KB	Del OK
boto_iam.py	69.16 KB	Del OK
boto_iam_role.py	27.12 KB	Del OK
boto_iot.py	25.33 KB	Del OK
boto_kinesis.py	16.69 KB	Del OK
boto_kms.py	12.11 KB	Del OK
boto_lambda.py	35.52 KB	Del OK
boto_lc.py	11.04 KB	Del OK
boto_rds.py	26 KB	Del OK
boto_route53.py	19.49 KB	Del OK
boto_s3.py	9.32 KB	Del OK
boto_s3_bucket.py	24.67 KB	Del OK
boto_secgroup.py	32.62 KB	Del OK
boto_sns.py	8.92 KB	Del OK
boto_sqs.py	7.97 KB	Del OK
boto_vpc.py	62.23 KB	Del OK
bower.py	8.26 KB	Del OK
btrfs.py	10.34 KB	Del OK
cabal.py	5.73 KB	Del OK
ceph.py	1.9 KB	Del OK
chef.py	3.76 KB	Del OK
chocolatey.py	16.15 KB	Del OK
chronos_job.py	4.6 KB	Del OK
cimc.py	14.32 KB	Del OK
cisconso.py	3.14 KB	Del OK
cloud.py	14.4 KB	Del OK
cmd.py	40.92 KB	Del OK
composer.py	8.38 KB	Del OK
consul.py	5.4 KB	Del OK
cron.py	23.39 KB	Del OK
cryptdev.py	6.17 KB	Del OK
csf.py	9.98 KB	Del OK
cyg.py	7.05 KB	Del OK
ddns.py	4.2 KB	Del OK
debconfmod.py	6.33 KB	Del OK
dellchassis.py	24.49 KB	Del OK
disk.py	6.49 KB	Del OK
docker_container.py	85.27 KB	Del OK
docker_image.py	16.7 KB	Del OK
docker_network.py	36.78 KB	Del OK
docker_volume.py	6.72 KB	Del OK
drac.py	4.17 KB	Del OK
dvs.py	26.29 KB	Del OK
elasticsearch.py	20.38 KB	Del OK
elasticsearch_index.py	3.25 KB	Del OK
elasticsearch_index_template.py	3.67 KB	Del OK
environ.py	5.81 KB	Del OK
eselect.py	2.27 KB	Del OK
esxcluster.py	22.4 KB	Del OK
esxdatacenter.py	4.44 KB	Del OK
esxi.py	63.07 KB	Del OK
esxvm.py	20.11 KB	Del OK
etcd_mod.py	11 KB	Del OK
ethtool.py	9.88 KB	Del OK
event.py	2.48 KB	Del OK
file.py	316.7 KB	Del OK
firewall.py	1.33 KB	Del OK
firewalld.py	26.08 KB	Del OK
gem.py	7.13 KB	Del OK
git.py	123.85 KB	Del OK
github.py	27.25 KB	Del OK
glance_image.py	2.26 KB	Del OK
glassfish.py	21.47 KB	Del OK
glusterfs.py	12.21 KB	Del OK
gnomedesktop.py	7.47 KB	Del OK
gpg.py	5.28 KB	Del OK
grafana.py	12.11 KB	Del OK
grafana4_dashboard.py	17.31 KB	Del OK
grafana4_datasource.py	6.15 KB	Del OK
grafana4_org.py	7.73 KB	Del OK
grafana4_user.py	5.52 KB	Del OK
grafana_dashboard.py	17.74 KB	Del OK
grafana_datasource.py	5.31 KB	Del OK
grains.py	15.57 KB	Del OK
group.py	9.84 KB	Del OK
heat.py	9.69 KB	Del OK
helm.py	10.39 KB	Del OK
hg.py	6.33 KB	Del OK
highstate_doc.py	1.41 KB	Del OK
host.py	8.64 KB	Del OK
http.py	7.46 KB	Del OK
icinga2.py	9.07 KB	Del OK
idem.py	3.91 KB	Del OK
ifttt.py	2.12 KB	Del OK
incron.py	5.71 KB	Del OK
influxdb08_database.py	2.85 KB	Del OK
influxdb08_user.py	3.39 KB	Del OK
influxdb_continuous_query.py	2.83 KB	Del OK
influxdb_database.py	2.11 KB	Del OK
influxdb_retention_policy.py	4.82 KB	Del OK
influxdb_user.py	4.84 KB	Del OK
infoblox_a.py	4.24 KB	Del OK
infoblox_cname.py	4.19 KB	Del OK
infoblox_host_record.py	6.59 KB	Del OK
infoblox_range.py	6.85 KB	Del OK
ini_manage.py	12.67 KB	Del OK
ipmi.py	8.42 KB	Del OK
ipset.py	9.66 KB	Del OK
iptables.py	27.65 KB	Del OK
jboss7.py	23.95 KB	Del OK
jenkins.py	3.36 KB	Del OK
junos.py	17.78 KB	Del OK
kapacitor.py	6.46 KB	Del OK
kernelpkg.py	6.42 KB	Del OK
keyboard.py	2.01 KB	Del OK
keystone.py	27.12 KB	Del OK
keystone_domain.py	2.81 KB	Del OK
keystone_endpoint.py	4.69 KB	Del OK
keystone_group.py	3.25 KB	Del OK
keystone_project.py	3.36 KB	Del OK
keystone_role.py	2.33 KB	Del OK
keystone_role_grant.py	4.08 KB	Del OK
keystone_service.py	2.89 KB	Del OK
keystone_user.py	3.47 KB	Del OK
keystore.py	5.67 KB	Del OK
kmod.py	8.59 KB	Del OK
kubernetes.py	24.87 KB	Del OK
layman.py	2.44 KB	Del OK
ldap.py	19.78 KB	Del OK
libcloud_dns.py	5.7 KB	Del OK
libcloud_loadbalancer.py	5.66 KB	Del OK
libcloud_storage.py	5.13 KB	Del OK
linux_acl.py	24.42 KB	Del OK
locale.py	2.52 KB	Del OK
logadm.py	4.67 KB	Del OK
logrotate.py	3.86 KB	Del OK
loop.py	7.74 KB	Del OK
lvm.py	13.33 KB	Del OK
lvs_server.py	6.28 KB	Del OK
lvs_service.py	4.38 KB	Del OK
lxc.py	22.17 KB	Del OK
lxd.py	7.88 KB	Del OK
lxd_container.py	22.25 KB	Del OK
lxd_image.py	10.59 KB	Del OK
lxd_profile.py	7.11 KB	Del OK
mac_assistive.py	1.55 KB	Del OK
mac_keychain.py	5.59 KB	Del OK
mac_xattr.py	3.15 KB	Del OK
macdefaults.py	2.65 KB	Del OK
macpackage.py	6.76 KB	Del OK
makeconf.py	6.87 KB	Del OK
marathon_app.py	4.45 KB	Del OK
mdadm_raid.py	6.41 KB	Del OK
memcached.py	3.95 KB	Del OK
modjk.py	2.84 KB	Del OK
modjk_worker.py	6.49 KB	Del OK
module.py	18.64 KB	Del OK
mongodb_database.py	1.65 KB	Del OK
mongodb_user.py	6.26 KB	Del OK
monit.py	2.68 KB	Del OK
mount.py	50.32 KB	Del OK
mssql_database.py	3 KB	Del OK
mssql_login.py	3.64 KB	Del OK
mssql_role.py	2.37 KB	Del OK
mssql_user.py	3.51 KB	Del OK
msteams.py	2.53 KB	Del OK
mysql_database.py	6.05 KB	Del OK
mysql_grants.py	8.49 KB	Del OK
mysql_query.py	13.07 KB	Del OK
mysql_user.py	9.51 KB	Del OK
net_napalm_yang.py	9.15 KB	Del OK
netacl.py	31.92 KB	Del OK
netconfig.py	33.42 KB	Del OK
netntp.py	12.51 KB	Del OK
netsnmp.py	11.33 KB	Del OK
netusers.py	16.1 KB	Del OK
network.py	23.97 KB	Del OK
neutron_network.py	3.96 KB	Del OK
neutron_secgroup.py	4 KB	Del OK
neutron_secgroup_rule.py	4.75 KB	Del OK
neutron_subnet.py	4.29 KB	Del OK
nexus.py	4.97 KB	Del OK
nfs_export.py	4.92 KB	Del OK
nftables.py	19.5 KB	Del OK
npm.py	11.21 KB	Del OK
ntp.py	2.12 KB	Del OK
nxos.py	10.37 KB	Del OK
nxos_upgrade.py	3.5 KB	Del OK
openstack_config.py	3.26 KB	Del OK
openvswitch_bridge.py	4.36 KB	Del OK
openvswitch_db.py	2.24 KB	Del OK
openvswitch_port.py	17.24 KB	Del OK
opsgenie.py	4.07 KB	Del OK
pagerduty.py	1.89 KB	Del OK
pagerduty_escalation_policy.py	5.42 KB	Del OK
pagerduty_schedule.py	6.09 KB	Del OK
pagerduty_service.py	3.93 KB	Del OK
pagerduty_user.py	1.18 KB	Del OK
panos.py	48.13 KB	Del OK
pbm.py	20.46 KB	Del OK
pcs.py	36.46 KB	Del OK
pdbedit.py	3.43 KB	Del OK
pecl.py	3.65 KB	Del OK
pip_state.py	38.55 KB	Del OK
pkg.py	138.08 KB	Del OK
pkgbuild.py	11.37 KB	Del OK
pkgng.py	685 B	Del OK
pkgrepo.py	27.53 KB	Del OK
portage_config.py	5.01 KB	Del OK
ports.py	5.65 KB	Del OK
postgres_cluster.py	4.19 KB	Del OK
postgres_database.py	6.08 KB	Del OK
postgres_extension.py	5.68 KB	Del OK
postgres_group.py	8.52 KB	Del OK
postgres_initdb.py	2.84 KB	Del OK
postgres_language.py	3.94 KB	Del OK
postgres_privileges.py	7.86 KB	Del OK
postgres_schema.py	4.34 KB	Del OK
postgres_tablespace.py	6.62 KB	Del OK
postgres_user.py	9.49 KB	Del OK
powerpath.py	2.34 KB	Del OK
probes.py	15.06 KB	Del OK
process.py	1.32 KB	Del OK
proxy.py	4.94 KB	Del OK
pushover.py	3.13 KB	Del OK
pyenv.py	6.07 KB	Del OK
pyrax_queues.py	2.97 KB	Del OK
quota.py	1.4 KB	Del OK
rabbitmq_cluster.py	1.84 KB	Del OK
rabbitmq_plugin.py	2.77 KB	Del OK
rabbitmq_policy.py	4.59 KB	Del OK
rabbitmq_upstream.py	7.9 KB	Del OK
rabbitmq_user.py	8.89 KB	Del OK
rabbitmq_vhost.py	3.04 KB	Del OK
rbac_solaris.py	6.67 KB	Del OK
rbenv.py	7.36 KB	Del OK
rdp.py	1.28 KB	Del OK
redismod.py	4.76 KB	Del OK
reg.py	19.22 KB	Del OK
restconf.py	6.41 KB	Del OK
rsync.py	4.45 KB	Del OK
rvm.py	6.56 KB	Del OK
salt_proxy.py	1.34 KB	Del OK
saltmod.py	33.12 KB	Del OK
saltutil.py	8.91 KB	Del OK
schedule.py	12.47 KB	Del OK
selinux.py	18.61 KB	Del OK
serverdensity_device.py	6.41 KB	Del OK
service.py	37.89 KB	Del OK
slack.py	4.98 KB	Del OK
smartos.py	44.83 KB	Del OK
smtp.py	2.3 KB	Del OK
snapper.py	7.24 KB	Del OK
solrcloud.py	4.48 KB	Del OK
splunk.py	4.32 KB	Del OK
splunk_search.py	3.17 KB	Del OK
sqlite3.py	14.7 KB	Del OK
ssh_auth.py	19.57 KB	Del OK
ssh_known_hosts.py	7.92 KB	Del OK
stateconf.py	494 B	Del OK
status.py	2.21 KB	Del OK
statuspage.py	17.29 KB	Del OK
supervisord.py	10.48 KB	Del OK
svn.py	8.14 KB	Del OK
sysctl.py	4.11 KB	Del OK
sysfs.py	2.13 KB	Del OK
syslog_ng.py	2.97 KB	Del OK
sysrc.py	2.82 KB	Del OK
telemetry_alert.py	7.04 KB	Del OK
test.py	13.09 KB	Del OK
testinframod.py	1.35 KB	Del OK
timezone.py	3.42 KB	Del OK
tls.py	1.81 KB	Del OK
tomcat.py	9.72 KB	Del OK
trafficserver.py	8.82 KB	Del OK
tuned.py	3.32 KB	Del OK
uptime.py	1.87 KB	Del OK
user.py	38.63 KB	Del OK
vagrant.py	11.4 KB	Del OK
vault.py	3.28 KB	Del OK
vbox_guest.py	4.05 KB	Del OK
victorops.py	3.32 KB	Del OK
virt.py	80.41 KB	Del OK
virtualenv_mod.py	11.21 KB	Del OK
webutil.py	3.89 KB	Del OK
win_certutil.py	4.8 KB	Del OK
win_dacl.py	7.96 KB	Del OK
win_dism.py	14.97 KB	Del OK
win_dns_client.py	8.32 KB	Del OK
win_firewall.py	6.87 KB	Del OK
win_iis.py	31.56 KB	Del OK
win_lgpo.py	24.99 KB	Del OK
win_lgpo_reg.py	10.96 KB	Del OK
win_license.py	1.6 KB	Del OK
win_network.py	14.18 KB	Del OK
win_path.py	6.39 KB	Del OK
win_pki.py	5.56 KB	Del OK
win_powercfg.py	3.79 KB	Del OK
win_servermanager.py	10.4 KB	Del OK
win_shortcut.py	7.81 KB	Del OK
win_smtp_server.py	10.01 KB	Del OK
win_snmp.py	6.64 KB	Del OK
win_system.py	13.78 KB	Del OK
win_wua.py	16.27 KB	Del OK
win_wusa.py	3.53 KB	Del OK
winrepo.py	2.74 KB	Del OK
wordpress.py	4.82 KB	Del OK
x509.py	27.86 KB	Del OK
x509_v2.py	64.78 KB	Del OK
xml.py	1.75 KB	Del OK
xmpp.py	2.61 KB	Del OK
zabbix_action.py	9.35 KB	Del OK
zabbix_host.py	27.25 KB	Del OK
zabbix_hostgroup.py	5.64 KB	Del OK
zabbix_mediatype.py	16.89 KB	Del OK
zabbix_template.py	35.14 KB	Del OK
zabbix_user.py	17.6 KB	Del OK
zabbix_usergroup.py	9.64 KB	Del OK
zabbix_usermacro.py	9.69 KB	Del OK
zabbix_valuemap.py	8.11 KB	Del OK
zcbuildout.py	5.16 KB	Del OK
zenoss.py	2.89 KB	Del OK
zfs.py	34.48 KB	Del OK
zk_concurrency.py	5.81 KB	Del OK
zone.py	46.48 KB	Del OK
zookeeper.py	11.55 KB	Del OK
zpool.py	13.4 KB	Del OK

Edit: azurearm_network.py

""" Azure (ARM) Network State Module .. versionadded:: 2019.2.0 .. warning:: This cloud provider will be removed from Salt in version 3007 in favor of the `saltext.azurerm Salt Extension <https://github.com/salt-extensions/saltext-azurerm>`_ :maintainer: <devops@eitr.tech> :maturity: new :depends: * `azure <https://pypi.python.org/pypi/azure>`_ >= 2.0.0 * `azure-common <https://pypi.python.org/pypi/azure-common>`_ >= 1.1.8 * `azure-mgmt <https://pypi.python.org/pypi/azure-mgmt>`_ >= 1.0.0 * `azure-mgmt-compute <https://pypi.python.org/pypi/azure-mgmt-compute>`_ >= 1.0.0 * `azure-mgmt-network <https://pypi.python.org/pypi/azure-mgmt-network>`_ >= 1.7.1 * `azure-mgmt-resource <https://pypi.python.org/pypi/azure-mgmt-resource>`_ >= 1.1.0 * `azure-mgmt-storage <https://pypi.python.org/pypi/azure-mgmt-storage>`_ >= 1.0.0 * `azure-mgmt-web <https://pypi.python.org/pypi/azure-mgmt-web>`_ >= 0.32.0 * `azure-storage <https://pypi.python.org/pypi/azure-storage>`_ >= 0.34.3 * `msrestazure <https://pypi.python.org/pypi/msrestazure>`_ >= 0.4.21 :platform: linux :configuration: This module requires Azure Resource Manager credentials to be passed as a dictionary of keyword arguments to the ``connection_auth`` parameter in order to work properly. Since the authentication parameters are sensitive, it's recommended to pass them to the states via pillar. Required provider parameters: if using username and password: * ``subscription_id`` * ``username`` * ``password`` if using a service principal: * ``subscription_id`` * ``tenant`` * ``client_id`` * ``secret`` Optional provider parameters: **cloud_environment**: Used to point the cloud driver to different API endpoints, such as Azure GovCloud. Possible values: * ``AZURE_PUBLIC_CLOUD`` (default) * ``AZURE_CHINA_CLOUD`` * ``AZURE_US_GOV_CLOUD`` * ``AZURE_GERMAN_CLOUD`` Example Pillar for Azure Resource Manager authentication: .. code-block:: yaml azurearm: user_pass_auth: subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617 username: fletch password: 123pass mysubscription: subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617 tenant: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF client_id: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF secret: XXXXXXXXXXXXXXXXXXXXXXXX cloud_environment: AZURE_PUBLIC_CLOUD Example states using Azure Resource Manager authentication: .. code-block:: jinja {% set profile = salt['pillar.get']('azurearm:mysubscription') %} Ensure virtual network exists: azurearm_network.virtual_network_present: - name: my_vnet - resource_group: my_rg - address_prefixes: - '10.0.0.0/8' - '192.168.0.0/16' - dns_servers: - '8.8.8.8' - tags: how_awesome: very contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} Ensure virtual network is absent: azurearm_network.virtual_network_absent: - name: other_vnet - resource_group: my_rg - connection_auth: {{ profile }} """ import logging from functools import wraps import salt.utils.azurearm __virtualname__ = "azurearm_network" log = logging.getLogger(__name__) def __virtual__(): """ Only make this state available if the azurearm_network module is available. """ if "azurearm_network.check_ip_address_availability" in __salt__: return __virtualname__ return (False, "azurearm_network module could not be loaded") def _deprecation_message(function): """ Decorator wrapper to warn about azurearm deprecation """ @wraps(function) def wrapped(*args, **kwargs): salt.utils.versions.warn_until( "Chlorine", "The 'azurearm' functionality in Salt has been deprecated and its " "functionality will be removed in version 3007 in favor of the " "saltext.azurerm Salt Extension. " "(https://github.com/salt-extensions/saltext-azurerm)", category=FutureWarning, ) ret = function(*args, **salt.utils.args.clean_kwargs(**kwargs)) return ret return wrapped @_deprecation_message def virtual_network_present( name, address_prefixes, resource_group, dns_servers=None, tags=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a virtual network exists. :param name: Name of the virtual network. :param resource_group: The resource group assigned to the virtual network. :param address_prefixes: A list of CIDR blocks which can be used by subnets within the virtual network. :param dns_servers: A list of DNS server addresses. :param tags: A dictionary of strings can be passed as tag metadata to the virtual network object. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure virtual network exists: azurearm_network.virtual_network_present: - name: vnet1 - resource_group: group1 - address_prefixes: - '10.0.0.0/8' - '192.168.0.0/16' - dns_servers: - '8.8.8.8' - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret vnet = __salt__["azurearm_network.virtual_network_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in vnet: tag_changes = __utils__["dictdiffer.deep_diff"]( vnet.get("tags", {}), tags or {} ) if tag_changes: ret["changes"]["tags"] = tag_changes dns_changes = set(dns_servers or []).symmetric_difference( set(vnet.get("dhcp_options", {}).get("dns_servers", [])) ) if dns_changes: ret["changes"]["dns_servers"] = { "old": vnet.get("dhcp_options", {}).get("dns_servers", []), "new": dns_servers, } addr_changes = set(address_prefixes or []).symmetric_difference( set(vnet.get("address_space", {}).get("address_prefixes", [])) ) if addr_changes: ret["changes"]["address_space"] = { "address_prefixes": { "old": vnet.get("address_space", {}).get("address_prefixes", []), "new": address_prefixes, } } if kwargs.get("enable_ddos_protection", False) != vnet.get( "enable_ddos_protection" ): ret["changes"]["enable_ddos_protection"] = { "old": vnet.get("enable_ddos_protection"), "new": kwargs.get("enable_ddos_protection"), } if kwargs.get("enable_vm_protection", False) != vnet.get( "enable_vm_protection" ): ret["changes"]["enable_vm_protection"] = { "old": vnet.get("enable_vm_protection"), "new": kwargs.get("enable_vm_protection"), } if not ret["changes"]: ret["result"] = True ret["comment"] = "Virtual network {} is already present.".format(name) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Virtual network {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "resource_group": resource_group, "address_space": {"address_prefixes": address_prefixes}, "dhcp_options": {"dns_servers": dns_servers}, "enable_ddos_protection": kwargs.get("enable_ddos_protection", False), "enable_vm_protection": kwargs.get("enable_vm_protection", False), "tags": tags, }, } if __opts__["test"]: ret["comment"] = "Virtual network {} would be created.".format(name) ret["result"] = None return ret vnet_kwargs = kwargs.copy() vnet_kwargs.update(connection_auth) vnet = __salt__["azurearm_network.virtual_network_create_or_update"]( name=name, resource_group=resource_group, address_prefixes=address_prefixes, dns_servers=dns_servers, tags=tags, **vnet_kwargs ) if "error" not in vnet: ret["result"] = True ret["comment"] = "Virtual network {} has been created.".format(name) return ret ret["comment"] = "Failed to create virtual network {}! ({})".format( name, vnet.get("error") ) return ret @_deprecation_message def virtual_network_absent(name, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a virtual network does not exist in the resource group. :param name: Name of the virtual network. :param resource_group: The resource group assigned to the virtual network. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret vnet = __salt__["azurearm_network.virtual_network_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in vnet: ret["result"] = True ret["comment"] = "Virtual network {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Virtual network {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": vnet, "new": {}, } return ret deleted = __salt__["azurearm_network.virtual_network_delete"]( name, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Virtual network {} has been deleted.".format(name) ret["changes"] = {"old": vnet, "new": {}} return ret ret["comment"] = "Failed to delete virtual network {}!".format(name) return ret @_deprecation_message def subnet_present( name, address_prefix, virtual_network, resource_group, security_group=None, route_table=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a subnet exists. :param name: Name of the subnet. :param address_prefix: A CIDR block used by the subnet within the virtual network. :param virtual_network: Name of the existing virtual network to contain the subnet. :param resource_group: The resource group assigned to the virtual network. :param security_group: The name of the existing network security group to assign to the subnet. :param route_table: The name of the existing route table to assign to the subnet. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure subnet exists: azurearm_network.subnet_present: - name: vnet1_sn1 - virtual_network: vnet1 - resource_group: group1 - address_prefix: '192.168.1.0/24' - security_group: nsg1 - route_table: rt1 - connection_auth: {{ profile }} - require: - azurearm_network: Ensure virtual network exists - azurearm_network: Ensure network security group exists - azurearm_network: Ensure route table exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret snet = __salt__["azurearm_network.subnet_get"]( name, virtual_network, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in snet: if address_prefix != snet.get("address_prefix"): ret["changes"]["address_prefix"] = { "old": snet.get("address_prefix"), "new": address_prefix, } nsg_name = None if snet.get("network_security_group"): nsg_name = snet["network_security_group"]["id"].split("/")[-1] if security_group and (security_group != nsg_name): ret["changes"]["network_security_group"] = { "old": nsg_name, "new": security_group, } rttbl_name = None if snet.get("route_table"): rttbl_name = snet["route_table"]["id"].split("/")[-1] if route_table and (route_table != rttbl_name): ret["changes"]["route_table"] = {"old": rttbl_name, "new": route_table} if not ret["changes"]: ret["result"] = True ret["comment"] = "Subnet {} is already present.".format(name) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Subnet {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "address_prefix": address_prefix, "network_security_group": security_group, "route_table": route_table, }, } if __opts__["test"]: ret["comment"] = "Subnet {} would be created.".format(name) ret["result"] = None return ret snet_kwargs = kwargs.copy() snet_kwargs.update(connection_auth) snet = __salt__["azurearm_network.subnet_create_or_update"]( name=name, virtual_network=virtual_network, resource_group=resource_group, address_prefix=address_prefix, network_security_group=security_group, route_table=route_table, **snet_kwargs ) if "error" not in snet: ret["result"] = True ret["comment"] = "Subnet {} has been created.".format(name) return ret ret["comment"] = "Failed to create subnet {}! ({})".format(name, snet.get("error")) return ret @_deprecation_message def subnet_absent(name, virtual_network, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a virtual network does not exist in the virtual network. :param name: Name of the subnet. :param virtual_network: Name of the existing virtual network containing the subnet. :param resource_group: The resource group assigned to the virtual network. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret snet = __salt__["azurearm_network.subnet_get"]( name, virtual_network, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in snet: ret["result"] = True ret["comment"] = "Subnet {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Subnet {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": snet, "new": {}, } return ret deleted = __salt__["azurearm_network.subnet_delete"]( name, virtual_network, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Subnet {} has been deleted.".format(name) ret["changes"] = {"old": snet, "new": {}} return ret ret["comment"] = "Failed to delete subnet {}!".format(name) return ret @_deprecation_message def network_security_group_present( name, resource_group, tags=None, security_rules=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a network security group exists. :param name: Name of the network security group. :param resource_group: The resource group assigned to the network security group. :param tags: A dictionary of strings can be passed as tag metadata to the network security group object. :param security_rules: An optional list of dictionaries representing valid SecurityRule objects. See the documentation for the security_rule_present state or security_rule_create_or_update execution module for more information on required and optional parameters for security rules. The rules are only managed if this parameter is present. When this parameter is absent, implemented rules will not be removed, and will merely become unmanaged. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure network security group exists: azurearm_network.network_security_group_present: - name: nsg1 - resource_group: group1 - security_rules: - name: nsg1_rule1 priority: 100 protocol: tcp access: allow direction: outbound source_address_prefix: virtualnetwork destination_address_prefix: internet source_port_range: '*' destination_port_range: '*' - name: nsg1_rule2 priority: 101 protocol: tcp access: allow direction: inbound source_address_prefix: internet destination_address_prefix: virtualnetwork source_port_range: '*' destination_port_ranges: - '80' - '443' - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret nsg = __salt__["azurearm_network.network_security_group_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in nsg: tag_changes = __utils__["dictdiffer.deep_diff"](nsg.get("tags", {}), tags or {}) if tag_changes: ret["changes"]["tags"] = tag_changes if security_rules: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( nsg.get("security_rules", []), security_rules ) if comp_ret.get("comment"): ret["comment"] = '"security_rules" {}'.format(comp_ret["comment"]) return ret if comp_ret.get("changes"): ret["changes"]["security_rules"] = comp_ret["changes"] if not ret["changes"]: ret["result"] = True ret["comment"] = "Network security group {} is already present.".format( name ) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Network security group {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "resource_group": resource_group, "tags": tags, "security_rules": security_rules, }, } if __opts__["test"]: ret["comment"] = "Network security group {} would be created.".format(name) ret["result"] = None return ret nsg_kwargs = kwargs.copy() nsg_kwargs.update(connection_auth) nsg = __salt__["azurearm_network.network_security_group_create_or_update"]( name=name, resource_group=resource_group, tags=tags, security_rules=security_rules, **nsg_kwargs ) if "error" not in nsg: ret["result"] = True ret["comment"] = "Network security group {} has been created.".format(name) return ret ret["comment"] = "Failed to create network security group {}! ({})".format( name, nsg.get("error") ) return ret @_deprecation_message def network_security_group_absent(name, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a network security group does not exist in the resource group. :param name: Name of the network security group. :param resource_group: The resource group assigned to the network security group. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret nsg = __salt__["azurearm_network.network_security_group_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in nsg: ret["result"] = True ret["comment"] = "Network security group {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Network security group {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": nsg, "new": {}, } return ret deleted = __salt__["azurearm_network.network_security_group_delete"]( name, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Network security group {} has been deleted.".format(name) ret["changes"] = {"old": nsg, "new": {}} return ret ret["comment"] = "Failed to delete network security group {}!".format(name) return ret @_deprecation_message def security_rule_present( name, access, direction, priority, protocol, security_group, resource_group, destination_address_prefix=None, destination_port_range=None, source_address_prefix=None, source_port_range=None, description=None, destination_address_prefixes=None, destination_port_ranges=None, source_address_prefixes=None, source_port_ranges=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a security rule exists. :param name: Name of the security rule. :param access: 'allow' or 'deny' :param direction: 'inbound' or 'outbound' :param priority: Integer between 100 and 4096 used for ordering rule application. :param protocol: 'tcp', 'udp', or '*' :param security_group: The name of the existing network security group to contain the security rule. :param resource_group: The resource group assigned to the network security group. :param description: Optional description of the security rule. :param destination_address_prefix: The CIDR or destination IP range. Asterix '*' can also be used to match all destination IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. :param destination_port_range: The destination port or range. Integer or range between 0 and 65535. Asterix '*' can also be used to match all ports. :param source_address_prefix: The CIDR or source IP range. Asterix '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from. :param source_port_range: The source port or range. Integer or range between 0 and 65535. Asterix '*' can also be used to match all ports. :param destination_address_prefixes: A list of destination_address_prefix values. This parameter overrides destination_address_prefix and will cause any value entered there to be ignored. :param destination_port_ranges: A list of destination_port_range values. This parameter overrides destination_port_range and will cause any value entered there to be ignored. :param source_address_prefixes: A list of source_address_prefix values. This parameter overrides source_address_prefix and will cause any value entered there to be ignored. :param source_port_ranges: A list of source_port_range values. This parameter overrides source_port_range and will cause any value entered there to be ignored. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure security rule exists: azurearm_network.security_rule_present: - name: nsg1_rule2 - security_group: nsg1 - resource_group: group1 - priority: 101 - protocol: tcp - access: allow - direction: inbound - source_address_prefix: internet - destination_address_prefix: virtualnetwork - source_port_range: '*' - destination_port_ranges: - '80' - '443' - connection_auth: {{ profile }} - require: - azurearm_network: Ensure network security group exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret exclusive_params = [ ("source_port_ranges", "source_port_range"), ("source_address_prefixes", "source_address_prefix"), ("destination_port_ranges", "destination_port_range"), ("destination_address_prefixes", "destination_address_prefix"), ] for params in exclusive_params: # pylint: disable=eval-used if not eval(params[0]) and not eval(params[1]): ret["comment"] = "Either the {} or {} parameter must be provided!".format( params[0], params[1] ) return ret # pylint: disable=eval-used if eval(params[0]): # pylint: disable=eval-used if not isinstance(eval(params[0]), list): ret["comment"] = "The {} parameter must be a list!".format(params[0]) return ret # pylint: disable=exec-used exec("{} = None".format(params[1])) rule = __salt__["azurearm_network.security_rule_get"]( name, security_group, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in rule: # access changes if access.capitalize() != rule.get("access"): ret["changes"]["access"] = {"old": rule.get("access"), "new": access} # description changes if description != rule.get("description"): ret["changes"]["description"] = { "old": rule.get("description"), "new": description, } # direction changes if direction.capitalize() != rule.get("direction"): ret["changes"]["direction"] = { "old": rule.get("direction"), "new": direction, } # priority changes if int(priority) != rule.get("priority"): ret["changes"]["priority"] = {"old": rule.get("priority"), "new": priority} # protocol changes if protocol.lower() != rule.get("protocol", "").lower(): ret["changes"]["protocol"] = {"old": rule.get("protocol"), "new": protocol} # destination_port_range changes if destination_port_range != rule.get("destination_port_range"): ret["changes"]["destination_port_range"] = { "old": rule.get("destination_port_range"), "new": destination_port_range, } # source_port_range changes if source_port_range != rule.get("source_port_range"): ret["changes"]["source_port_range"] = { "old": rule.get("source_port_range"), "new": source_port_range, } # destination_port_ranges changes if sorted(destination_port_ranges or []) != sorted( rule.get("destination_port_ranges", []) ): ret["changes"]["destination_port_ranges"] = { "old": rule.get("destination_port_ranges"), "new": destination_port_ranges, } # source_port_ranges changes if sorted(source_port_ranges or []) != sorted( rule.get("source_port_ranges", []) ): ret["changes"]["source_port_ranges"] = { "old": rule.get("source_port_ranges"), "new": source_port_ranges, } # destination_address_prefix changes if (destination_address_prefix or "").lower() != rule.get( "destination_address_prefix", "" ).lower(): ret["changes"]["destination_address_prefix"] = { "old": rule.get("destination_address_prefix"), "new": destination_address_prefix, } # source_address_prefix changes if (source_address_prefix or "").lower() != rule.get( "source_address_prefix", "" ).lower(): ret["changes"]["source_address_prefix"] = { "old": rule.get("source_address_prefix"), "new": source_address_prefix, } # destination_address_prefixes changes if sorted(destination_address_prefixes or []) != sorted( rule.get("destination_address_prefixes", []) ): if len(destination_address_prefixes or []) != len( rule.get("destination_address_prefixes", []) ): ret["changes"]["destination_address_prefixes"] = { "old": rule.get("destination_address_prefixes"), "new": destination_address_prefixes, } else: local_dst_addrs, remote_dst_addrs = ( sorted(destination_address_prefixes), sorted(rule.get("destination_address_prefixes")), ) for idx, val in enumerate(local_dst_addrs): if val.lower() != remote_dst_addrs[idx].lower(): ret["changes"]["destination_address_prefixes"] = { "old": rule.get("destination_address_prefixes"), "new": destination_address_prefixes, } break # source_address_prefixes changes if sorted(source_address_prefixes or []) != sorted( rule.get("source_address_prefixes", []) ): if len(source_address_prefixes or []) != len( rule.get("source_address_prefixes", []) ): ret["changes"]["source_address_prefixes"] = { "old": rule.get("source_address_prefixes"), "new": source_address_prefixes, } else: local_src_addrs, remote_src_addrs = ( sorted(source_address_prefixes), sorted(rule.get("source_address_prefixes")), ) for idx, val in enumerate(local_src_addrs): if val.lower() != remote_src_addrs[idx].lower(): ret["changes"]["source_address_prefixes"] = { "old": rule.get("source_address_prefixes"), "new": source_address_prefixes, } break if not ret["changes"]: ret["result"] = True ret["comment"] = "Security rule {} is already present.".format(name) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Security rule {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "access": access, "description": description, "direction": direction, "priority": priority, "protocol": protocol, "destination_address_prefix": destination_address_prefix, "destination_address_prefixes": destination_address_prefixes, "destination_port_range": destination_port_range, "destination_port_ranges": destination_port_ranges, "source_address_prefix": source_address_prefix, "source_address_prefixes": source_address_prefixes, "source_port_range": source_port_range, "source_port_ranges": source_port_ranges, }, } if __opts__["test"]: ret["comment"] = "Security rule {} would be created.".format(name) ret["result"] = None return ret rule_kwargs = kwargs.copy() rule_kwargs.update(connection_auth) rule = __salt__["azurearm_network.security_rule_create_or_update"]( name=name, access=access, description=description, direction=direction, priority=priority, protocol=protocol, security_group=security_group, resource_group=resource_group, destination_address_prefix=destination_address_prefix, destination_address_prefixes=destination_address_prefixes, destination_port_range=destination_port_range, destination_port_ranges=destination_port_ranges, source_address_prefix=source_address_prefix, source_address_prefixes=source_address_prefixes, source_port_range=source_port_range, source_port_ranges=source_port_ranges, **rule_kwargs ) if "error" not in rule: ret["result"] = True ret["comment"] = "Security rule {} has been created.".format(name) return ret ret["comment"] = "Failed to create security rule {}! ({})".format( name, rule.get("error") ) return ret @_deprecation_message def security_rule_absent(name, security_group, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a security rule does not exist in the network security group. :param name: Name of the security rule. :param security_group: The network security group containing the security rule. :param resource_group: The resource group assigned to the network security group. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret rule = __salt__["azurearm_network.security_rule_get"]( name, security_group, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in rule: ret["result"] = True ret["comment"] = "Security rule {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Security rule {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": rule, "new": {}, } return ret deleted = __salt__["azurearm_network.security_rule_delete"]( name, security_group, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Security rule {} has been deleted.".format(name) ret["changes"] = {"old": rule, "new": {}} return ret ret["comment"] = "Failed to delete security rule {}!".format(name) return ret @_deprecation_message def load_balancer_present( name, resource_group, sku=None, frontend_ip_configurations=None, backend_address_pools=None, load_balancing_rules=None, probes=None, inbound_nat_rules=None, inbound_nat_pools=None, outbound_nat_rules=None, tags=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a load balancer exists. :param name: Name of the load balancer. :param resource_group: The resource group assigned to the load balancer. :param sku: The load balancer SKU, which can be 'Basic' or 'Standard'. :param tags: A dictionary of strings can be passed as tag metadata to the load balancer object. :param frontend_ip_configurations: An optional list of dictionaries representing valid FrontendIPConfiguration objects. A frontend IP configuration can be either private (using private IP address and subnet parameters) or public (using a reference to a public IP address object). Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``private_ip_address``: The private IP address of the IP configuration. Required if 'private_ip_allocation_method' is 'Static'. - ``private_ip_allocation_method``: The Private IP allocation method. Possible values are: 'Static' and 'Dynamic'. - ``subnet``: Name of an existing subnet inside of which the frontend IP will reside. - ``public_ip_address``: Name of an existing public IP address which will be assigned to the frontend IP object. :param backend_address_pools: An optional list of dictionaries representing valid BackendAddressPool objects. Only the 'name' parameter is valid for a BackendAddressPool dictionary. All other parameters are read-only references from other objects linking to the backend address pool. Inbound traffic is randomly load balanced across IPs in the backend IPs. :param probes: An optional list of dictionaries representing valid Probe objects. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``protocol``: The protocol of the endpoint. Possible values are 'Http' or 'Tcp'. If 'Tcp' is specified, a received ACK is required for the probe to be successful. If 'Http' is specified, a 200 OK response from the specified URI is required for the probe to be successful. - ``port``: The port for communicating the probe. Possible values range from 1 to 65535, inclusive. - ``interval_in_seconds``: The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5. - ``number_of_probes``: The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure. - ``request_path``: The URI used for requesting health status from the VM. Path is required if a protocol is set to 'Http'. Otherwise, it is not allowed. There is no default value. :param load_balancing_rules: An optional list of dictionaries representing valid LoadBalancingRule objects. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``load_distribution``: The load distribution policy for this rule. Possible values are 'Default', 'SourceIP', and 'SourceIPProtocol'. - ``frontend_port``: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables 'Any Port'. - ``backend_port``: The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables 'Any Port'. - ``idle_timeout_in_minutes``: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP. - ``enable_floating_ip``: Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint. - ``disable_outbound_snat``: Configures SNAT for the VMs in the backend pool to use the public IP address specified in the frontend of the load balancing rule. - ``frontend_ip_configuration``: Name of the frontend IP configuration object used by the load balancing rule object. - ``backend_address_pool``: Name of the backend address pool object used by the load balancing rule object. Inbound traffic is randomly load balanced across IPs in the backend IPs. - ``probe``: Name of the probe object used by the load balancing rule object. :param inbound_nat_rules: An optional list of dictionaries representing valid InboundNatRule objects. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``frontend_ip_configuration``: Name of the frontend IP configuration object used by the inbound NAT rule object. - ``protocol``: Possible values include 'Udp', 'Tcp', or 'All'. - ``frontend_port``: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534. - ``backend_port``: The port used for the internal endpoint. Acceptable values range from 1 to 65535. - ``idle_timeout_in_minutes``: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP. - ``enable_floating_ip``: Configures a virtual machine's endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can't be changed after you create the endpoint. :param inbound_nat_pools: An optional list of dictionaries representing valid InboundNatPool objects. They define an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound NAT rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``frontend_ip_configuration``: Name of the frontend IP configuration object used by the inbound NAT pool object. - ``protocol``: Possible values include 'Udp', 'Tcp', or 'All'. - ``frontend_port_range_start``: The first port number in the range of external ports that will be used to provide Inbound NAT to NICs associated with a load balancer. Acceptable values range between 1 and 65534. - ``frontend_port_range_end``: The last port number in the range of external ports that will be used to provide Inbound NAT to NICs associated with a load balancer. Acceptable values range between 1 and 65535. - ``backend_port``: The port used for internal connections to the endpoint. Acceptable values are between 1 and 65535. :param outbound_nat_rules: An optional list of dictionaries representing valid OutboundNatRule objects. Valid parameters are: - ``name``: The name of the resource that is unique within a resource group. - ``frontend_ip_configuration``: Name of the frontend IP configuration object used by the outbound NAT rule object. - ``backend_address_pool``: Name of the backend address pool object used by the outbound NAT rule object. Outbound traffic is randomly load balanced across IPs in the backend IPs. - ``allocated_outbound_ports``: The number of outbound ports to be used for NAT. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure load balancer exists: azurearm_network.load_balancer_present: - name: lb1 - resource_group: group1 - location: eastus - frontend_ip_configurations: - name: lb1_feip1 public_ip_address: pub_ip1 - backend_address_pools: - name: lb1_bepool1 - probes: - name: lb1_webprobe1 protocol: tcp port: 80 interval_in_seconds: 5 number_of_probes: 2 - load_balancing_rules: - name: lb1_webprobe1 protocol: tcp frontend_port: 80 backend_port: 80 idle_timeout_in_minutes: 4 frontend_ip_configuration: lb1_feip1 backend_address_pool: lb1_bepool1 probe: lb1_webprobe1 - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists - azurearm_network: Ensure public IP exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret if sku: sku = {"name": sku.capitalize()} load_bal = __salt__["azurearm_network.load_balancer_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in load_bal: # tag changes tag_changes = __utils__["dictdiffer.deep_diff"]( load_bal.get("tags", {}), tags or {} ) if tag_changes: ret["changes"]["tags"] = tag_changes # sku changes if sku: sku_changes = __utils__["dictdiffer.deep_diff"]( load_bal.get("sku", {}), sku ) if sku_changes: ret["changes"]["sku"] = sku_changes # frontend_ip_configurations changes if frontend_ip_configurations: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( load_bal.get("frontend_ip_configurations", []), frontend_ip_configurations, ["public_ip_address", "subnet"], ) if comp_ret.get("comment"): ret["comment"] = '"frontend_ip_configurations" {}'.format( comp_ret["comment"] ) return ret if comp_ret.get("changes"): ret["changes"]["frontend_ip_configurations"] = comp_ret["changes"] # backend_address_pools changes if backend_address_pools: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( load_bal.get("backend_address_pools", []), backend_address_pools ) if comp_ret.get("comment"): ret["comment"] = '"backend_address_pools" {}'.format( comp_ret["comment"] ) return ret if comp_ret.get("changes"): ret["changes"]["backend_address_pools"] = comp_ret["changes"] # probes changes if probes: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( load_bal.get("probes", []), probes ) if comp_ret.get("comment"): ret["comment"] = '"probes" {}'.format(comp_ret["comment"]) return ret if comp_ret.get("changes"): ret["changes"]["probes"] = comp_ret["changes"] # load_balancing_rules changes if load_balancing_rules: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( load_bal.get("load_balancing_rules", []), load_balancing_rules, ["frontend_ip_configuration", "backend_address_pool", "probe"], ) if comp_ret.get("comment"): ret["comment"] = '"load_balancing_rules" {}'.format(comp_ret["comment"]) return ret if comp_ret.get("changes"): ret["changes"]["load_balancing_rules"] = comp_ret["changes"] # inbound_nat_rules changes if inbound_nat_rules: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( load_bal.get("inbound_nat_rules", []), inbound_nat_rules, ["frontend_ip_configuration"], ) if comp_ret.get("comment"): ret["comment"] = '"inbound_nat_rules" {}'.format(comp_ret["comment"]) return ret if comp_ret.get("changes"): ret["changes"]["inbound_nat_rules"] = comp_ret["changes"] # inbound_nat_pools changes if inbound_nat_pools: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( load_bal.get("inbound_nat_pools", []), inbound_nat_pools, ["frontend_ip_configuration"], ) if comp_ret.get("comment"): ret["comment"] = '"inbound_nat_pools" {}'.format(comp_ret["comment"]) return ret if comp_ret.get("changes"): ret["changes"]["inbound_nat_pools"] = comp_ret["changes"] # outbound_nat_rules changes if outbound_nat_rules: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( load_bal.get("outbound_nat_rules", []), outbound_nat_rules, ["frontend_ip_configuration"], ) if comp_ret.get("comment"): ret["comment"] = '"outbound_nat_rules" {}'.format(comp_ret["comment"]) return ret if comp_ret.get("changes"): ret["changes"]["outbound_nat_rules"] = comp_ret["changes"] if not ret["changes"]: ret["result"] = True ret["comment"] = "Load balancer {} is already present.".format(name) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Load balancer {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "sku": sku, "tags": tags, "frontend_ip_configurations": frontend_ip_configurations, "backend_address_pools": backend_address_pools, "load_balancing_rules": load_balancing_rules, "probes": probes, "inbound_nat_rules": inbound_nat_rules, "inbound_nat_pools": inbound_nat_pools, "outbound_nat_rules": outbound_nat_rules, }, } if __opts__["test"]: ret["comment"] = "Load balancer {} would be created.".format(name) ret["result"] = None return ret lb_kwargs = kwargs.copy() lb_kwargs.update(connection_auth) load_bal = __salt__["azurearm_network.load_balancer_create_or_update"]( name=name, resource_group=resource_group, sku=sku, tags=tags, frontend_ip_configurations=frontend_ip_configurations, backend_address_pools=backend_address_pools, load_balancing_rules=load_balancing_rules, probes=probes, inbound_nat_rules=inbound_nat_rules, inbound_nat_pools=inbound_nat_pools, outbound_nat_rules=outbound_nat_rules, **lb_kwargs ) if "error" not in load_bal: ret["result"] = True ret["comment"] = "Load balancer {} has been created.".format(name) return ret ret["comment"] = "Failed to create load balancer {}! ({})".format( name, load_bal.get("error") ) return ret @_deprecation_message def load_balancer_absent(name, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a load balancer does not exist in the resource group. :param name: Name of the load balancer. :param resource_group: The resource group assigned to the load balancer. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret load_bal = __salt__["azurearm_network.load_balancer_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in load_bal: ret["result"] = True ret["comment"] = "Load balancer {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Load balancer {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": load_bal, "new": {}, } return ret deleted = __salt__["azurearm_network.load_balancer_delete"]( name, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Load balancer {} has been deleted.".format(name) ret["changes"] = {"old": load_bal, "new": {}} return ret ret["comment"] = "Failed to delete load balancer {}!".format(name) return ret @_deprecation_message def public_ip_address_present( name, resource_group, tags=None, sku=None, public_ip_allocation_method=None, public_ip_address_version=None, dns_settings=None, idle_timeout_in_minutes=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a public IP address exists. :param name: Name of the public IP address. :param resource_group: The resource group assigned to the public IP address. :param dns_settings: An optional dictionary representing a valid PublicIPAddressDnsSettings object. Parameters include 'domain_name_label' and 'reverse_fqdn', which accept strings. The 'domain_name_label' parameter is concatenated with the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system. The 'reverse_fqdn' parameter is a user-visible, fully qualified domain name that resolves to this public IP address. If the reverse FQDN is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. :param sku: The public IP address SKU, which can be 'Basic' or 'Standard'. :param public_ip_allocation_method: The public IP allocation method. Possible values are: 'Static' and 'Dynamic'. :param public_ip_address_version: The public IP address version. Possible values are: 'IPv4' and 'IPv6'. :param idle_timeout_in_minutes: An integer representing the idle timeout of the public IP address. :param tags: A dictionary of strings can be passed as tag metadata to the public IP address object. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure public IP exists: azurearm_network.public_ip_address_present: - name: pub_ip1 - resource_group: group1 - dns_settings: domain_name_label: decisionlab-ext-test-label - sku: basic - public_ip_allocation_method: static - public_ip_address_version: ipv4 - idle_timeout_in_minutes: 4 - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret if sku: sku = {"name": sku.capitalize()} pub_ip = __salt__["azurearm_network.public_ip_address_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in pub_ip: # tag changes tag_changes = __utils__["dictdiffer.deep_diff"]( pub_ip.get("tags", {}), tags or {} ) if tag_changes: ret["changes"]["tags"] = tag_changes # dns_settings changes if dns_settings: if not isinstance(dns_settings, dict): ret["comment"] = "DNS settings must be provided as a dictionary!" return ret for key in dns_settings: if dns_settings[key] != pub_ip.get("dns_settings", {}).get(key): ret["changes"]["dns_settings"] = { "old": pub_ip.get("dns_settings"), "new": dns_settings, } break # sku changes if sku: sku_changes = __utils__["dictdiffer.deep_diff"](pub_ip.get("sku", {}), sku) if sku_changes: ret["changes"]["sku"] = sku_changes # public_ip_allocation_method changes if public_ip_allocation_method: if public_ip_allocation_method.capitalize() != pub_ip.get( "public_ip_allocation_method" ): ret["changes"]["public_ip_allocation_method"] = { "old": pub_ip.get("public_ip_allocation_method"), "new": public_ip_allocation_method, } # public_ip_address_version changes if public_ip_address_version: if ( public_ip_address_version.lower() != pub_ip.get("public_ip_address_version", "").lower() ): ret["changes"]["public_ip_address_version"] = { "old": pub_ip.get("public_ip_address_version"), "new": public_ip_address_version, } # idle_timeout_in_minutes changes if idle_timeout_in_minutes and ( int(idle_timeout_in_minutes) != pub_ip.get("idle_timeout_in_minutes") ): ret["changes"]["idle_timeout_in_minutes"] = { "old": pub_ip.get("idle_timeout_in_minutes"), "new": idle_timeout_in_minutes, } if not ret["changes"]: ret["result"] = True ret["comment"] = "Public IP address {} is already present.".format(name) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Public IP address {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "tags": tags, "dns_settings": dns_settings, "sku": sku, "public_ip_allocation_method": public_ip_allocation_method, "public_ip_address_version": public_ip_address_version, "idle_timeout_in_minutes": idle_timeout_in_minutes, }, } if __opts__["test"]: ret["comment"] = "Public IP address {} would be created.".format(name) ret["result"] = None return ret pub_ip_kwargs = kwargs.copy() pub_ip_kwargs.update(connection_auth) pub_ip = __salt__["azurearm_network.public_ip_address_create_or_update"]( name=name, resource_group=resource_group, sku=sku, tags=tags, dns_settings=dns_settings, public_ip_allocation_method=public_ip_allocation_method, public_ip_address_version=public_ip_address_version, idle_timeout_in_minutes=idle_timeout_in_minutes, **pub_ip_kwargs ) if "error" not in pub_ip: ret["result"] = True ret["comment"] = "Public IP address {} has been created.".format(name) return ret ret["comment"] = "Failed to create public IP address {}! ({})".format( name, pub_ip.get("error") ) return ret @_deprecation_message def public_ip_address_absent(name, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a public IP address does not exist in the resource group. :param name: Name of the public IP address. :param resource_group: The resource group assigned to the public IP address. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret pub_ip = __salt__["azurearm_network.public_ip_address_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in pub_ip: ret["result"] = True ret["comment"] = "Public IP address {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Public IP address {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": pub_ip, "new": {}, } return ret deleted = __salt__["azurearm_network.public_ip_address_delete"]( name, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Public IP address {} has been deleted.".format(name) ret["changes"] = {"old": pub_ip, "new": {}} return ret ret["comment"] = "Failed to delete public IP address {}!".format(name) return ret @_deprecation_message def network_interface_present( name, ip_configurations, subnet, virtual_network, resource_group, tags=None, virtual_machine=None, network_security_group=None, dns_settings=None, mac_address=None, primary=None, enable_accelerated_networking=None, enable_ip_forwarding=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a network interface exists. :param name: Name of the network interface. :param ip_configurations: A list of dictionaries representing valid NetworkInterfaceIPConfiguration objects. The 'name' key is required at minimum. At least one IP Configuration must be present. :param subnet: Name of the existing subnet assigned to the network interface. :param virtual_network: Name of the existing virtual network containing the subnet. :param resource_group: The resource group assigned to the virtual network. :param tags: A dictionary of strings can be passed as tag metadata to the network interface object. :param network_security_group: The name of the existing network security group to assign to the network interface. :param virtual_machine: The name of the existing virtual machine to assign to the network interface. :param dns_settings: An optional dictionary representing a valid NetworkInterfaceDnsSettings object. Valid parameters are: - ``dns_servers``: List of DNS server IP addresses. Use 'AzureProvidedDNS' to switch to Azure provided DNS resolution. 'AzureProvidedDNS' value cannot be combined with other IPs, it must be the only value in dns_servers collection. - ``internal_dns_name_label``: Relative DNS name for this NIC used for internal communications between VMs in the same virtual network. - ``internal_fqdn``: Fully qualified DNS name supporting internal communications between VMs in the same virtual network. - ``internal_domain_name_suffix``: Even if internal_dns_name_label is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internal_domain_name_suffix. :param mac_address: Optional string containing the MAC address of the network interface. :param primary: Optional boolean allowing the interface to be set as the primary network interface on a virtual machine with multiple interfaces attached. :param enable_accelerated_networking: Optional boolean indicating whether accelerated networking should be enabled for the interface. :param enable_ip_forwarding: Optional boolean indicating whether IP forwarding should be enabled for the interface. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure network interface exists: azurearm_network.network_interface_present: - name: iface1 - subnet: vnet1_sn1 - virtual_network: vnet1 - resource_group: group1 - ip_configurations: - name: iface1_ipc1 public_ip_address: pub_ip2 - dns_settings: internal_dns_name_label: decisionlab-int-test-label - primary: True - enable_accelerated_networking: True - enable_ip_forwarding: False - network_security_group: nsg1 - connection_auth: {{ profile }} - require: - azurearm_network: Ensure subnet exists - azurearm_network: Ensure network security group exists - azurearm_network: Ensure another public IP exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret iface = __salt__["azurearm_network.network_interface_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in iface: # tag changes tag_changes = __utils__["dictdiffer.deep_diff"]( iface.get("tags", {}), tags or {} ) if tag_changes: ret["changes"]["tags"] = tag_changes # mac_address changes if mac_address and (mac_address != iface.get("mac_address")): ret["changes"]["mac_address"] = { "old": iface.get("mac_address"), "new": mac_address, } # primary changes if primary is not None: if primary != iface.get("primary", True): ret["changes"]["primary"] = { "old": iface.get("primary"), "new": primary, } # enable_accelerated_networking changes if enable_accelerated_networking is not None: if enable_accelerated_networking != iface.get( "enable_accelerated_networking" ): ret["changes"]["enable_accelerated_networking"] = { "old": iface.get("enable_accelerated_networking"), "new": enable_accelerated_networking, } # enable_ip_forwarding changes if enable_ip_forwarding is not None: if enable_ip_forwarding != iface.get("enable_ip_forwarding"): ret["changes"]["enable_ip_forwarding"] = { "old": iface.get("enable_ip_forwarding"), "new": enable_ip_forwarding, } # network_security_group changes nsg_name = None if iface.get("network_security_group"): nsg_name = iface["network_security_group"]["id"].split("/")[-1] if network_security_group and (network_security_group != nsg_name): ret["changes"]["network_security_group"] = { "old": nsg_name, "new": network_security_group, } # virtual_machine changes vm_name = None if iface.get("virtual_machine"): vm_name = iface["virtual_machine"]["id"].split("/")[-1] if virtual_machine and (virtual_machine != vm_name): ret["changes"]["virtual_machine"] = {"old": vm_name, "new": virtual_machine} # dns_settings changes if dns_settings: if not isinstance(dns_settings, dict): ret["comment"] = "DNS settings must be provided as a dictionary!" return ret for key in dns_settings: if ( dns_settings[key].lower() != iface.get("dns_settings", {}).get(key, "").lower() ): ret["changes"]["dns_settings"] = { "old": iface.get("dns_settings"), "new": dns_settings, } break # ip_configurations changes comp_ret = __utils__["azurearm.compare_list_of_dicts"]( iface.get("ip_configurations", []), ip_configurations, ["public_ip_address", "subnet"], ) if comp_ret.get("comment"): ret["comment"] = '"ip_configurations" {}'.format(comp_ret["comment"]) return ret if comp_ret.get("changes"): ret["changes"]["ip_configurations"] = comp_ret["changes"] if not ret["changes"]: ret["result"] = True ret["comment"] = "Network interface {} is already present.".format(name) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Network interface {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "ip_configurations": ip_configurations, "dns_settings": dns_settings, "network_security_group": network_security_group, "virtual_machine": virtual_machine, "enable_accelerated_networking": enable_accelerated_networking, "enable_ip_forwarding": enable_ip_forwarding, "mac_address": mac_address, "primary": primary, "tags": tags, }, } if __opts__["test"]: ret["comment"] = "Network interface {} would be created.".format(name) ret["result"] = None return ret iface_kwargs = kwargs.copy() iface_kwargs.update(connection_auth) iface = __salt__["azurearm_network.network_interface_create_or_update"]( name=name, subnet=subnet, virtual_network=virtual_network, resource_group=resource_group, ip_configurations=ip_configurations, dns_settings=dns_settings, enable_accelerated_networking=enable_accelerated_networking, enable_ip_forwarding=enable_ip_forwarding, mac_address=mac_address, primary=primary, network_security_group=network_security_group, virtual_machine=virtual_machine, tags=tags, **iface_kwargs ) if "error" not in iface: ret["result"] = True ret["comment"] = "Network interface {} has been created.".format(name) return ret ret["comment"] = "Failed to create network interface {}! ({})".format( name, iface.get("error") ) return ret @_deprecation_message def network_interface_absent(name, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a network interface does not exist in the resource group. :param name: Name of the network interface. :param resource_group: The resource group assigned to the network interface. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret iface = __salt__["azurearm_network.network_interface_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in iface: ret["result"] = True ret["comment"] = "Network interface {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Network interface {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": iface, "new": {}, } return ret deleted = __salt__["azurearm_network.network_interface_delete"]( name, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Network interface {} has been deleted.".format(name) ret["changes"] = {"old": iface, "new": {}} return ret ret["comment"] = "Failed to delete network interface {}!)".format(name) return ret @_deprecation_message def route_table_present( name, resource_group, tags=None, routes=None, disable_bgp_route_propagation=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a route table exists. :param name: Name of the route table. :param resource_group: The resource group assigned to the route table. :param routes: An optional list of dictionaries representing valid Route objects contained within a route table. See the documentation for the route_present state or route_create_or_update execution module for more information on required and optional parameters for routes. The routes are only managed if this parameter is present. When this parameter is absent, implemented routes will not be removed, and will merely become unmanaged. :param disable_bgp_route_propagation: An optional boolean parameter setting whether to disable the routes learned by BGP on the route table. :param tags: A dictionary of strings can be passed as tag metadata to the route table object. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure route table exists: azurearm_network.route_table_present: - name: rt1 - resource_group: group1 - routes: - name: rt1_route1 address_prefix: '0.0.0.0/0' next_hop_type: internet - name: rt1_route2 address_prefix: '192.168.0.0/16' next_hop_type: vnetlocal - tags: contact_name: Elmer Fudd Gantry - connection_auth: {{ profile }} - require: - azurearm_resource: Ensure resource group exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret rt_tbl = __salt__["azurearm_network.route_table_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in rt_tbl: # tag changes tag_changes = __utils__["dictdiffer.deep_diff"]( rt_tbl.get("tags", {}), tags or {} ) if tag_changes: ret["changes"]["tags"] = tag_changes # disable_bgp_route_propagation changes # pylint: disable=line-too-long if disable_bgp_route_propagation and ( disable_bgp_route_propagation != rt_tbl.get("disable_bgp_route_propagation") ): ret["changes"]["disable_bgp_route_propagation"] = { "old": rt_tbl.get("disable_bgp_route_propagation"), "new": disable_bgp_route_propagation, } # routes changes if routes: comp_ret = __utils__["azurearm.compare_list_of_dicts"]( rt_tbl.get("routes", []), routes ) if comp_ret.get("comment"): ret["comment"] = '"routes" {}'.format(comp_ret["comment"]) return ret if comp_ret.get("changes"): ret["changes"]["routes"] = comp_ret["changes"] if not ret["changes"]: ret["result"] = True ret["comment"] = "Route table {} is already present.".format(name) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Route table {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "tags": tags, "routes": routes, "disable_bgp_route_propagation": disable_bgp_route_propagation, }, } if __opts__["test"]: ret["comment"] = "Route table {} would be created.".format(name) ret["result"] = None return ret rt_tbl_kwargs = kwargs.copy() rt_tbl_kwargs.update(connection_auth) rt_tbl = __salt__["azurearm_network.route_table_create_or_update"]( name=name, resource_group=resource_group, disable_bgp_route_propagation=disable_bgp_route_propagation, routes=routes, tags=tags, **rt_tbl_kwargs ) if "error" not in rt_tbl: ret["result"] = True ret["comment"] = "Route table {} has been created.".format(name) return ret ret["comment"] = "Failed to create route table {}! ({})".format( name, rt_tbl.get("error") ) return ret @_deprecation_message def route_table_absent(name, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a route table does not exist in the resource group. :param name: Name of the route table. :param resource_group: The resource group assigned to the route table. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret rt_tbl = __salt__["azurearm_network.route_table_get"]( name, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in rt_tbl: ret["result"] = True ret["comment"] = "Route table {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Route table {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": rt_tbl, "new": {}, } return ret deleted = __salt__["azurearm_network.route_table_delete"]( name, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Route table {} has been deleted.".format(name) ret["changes"] = {"old": rt_tbl, "new": {}} return ret ret["comment"] = "Failed to delete route table {}!".format(name) return ret @_deprecation_message def route_present( name, address_prefix, next_hop_type, route_table, resource_group, next_hop_ip_address=None, connection_auth=None, **kwargs ): """ .. versionadded:: 2019.2.0 Ensure a route exists within a route table. :param name: Name of the route. :param address_prefix: The destination CIDR to which the route applies. :param next_hop_type: The type of Azure hop the packet should be sent to. Possible values are: 'VirtualNetworkGateway', 'VnetLocal', 'Internet', 'VirtualAppliance', and 'None'. :param next_hop_ip_address: The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is 'VirtualAppliance'. :param route_table: The name of the existing route table which will contain the route. :param resource_group: The resource group assigned to the route table. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. Example usage: .. code-block:: yaml Ensure route exists: azurearm_network.route_present: - name: rt1_route2 - route_table: rt1 - resource_group: group1 - address_prefix: '192.168.0.0/16' - next_hop_type: vnetlocal - connection_auth: {{ profile }} - require: - azurearm_network: Ensure route table exists """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret route = __salt__["azurearm_network.route_get"]( name, route_table, resource_group, azurearm_log_level="info", **connection_auth ) if "error" not in route: if address_prefix != route.get("address_prefix"): ret["changes"]["address_prefix"] = { "old": route.get("address_prefix"), "new": address_prefix, } if next_hop_type.lower() != route.get("next_hop_type", "").lower(): ret["changes"]["next_hop_type"] = { "old": route.get("next_hop_type"), "new": next_hop_type, } if ( next_hop_type.lower() == "virtualappliance" and next_hop_ip_address != route.get("next_hop_ip_address") ): ret["changes"]["next_hop_ip_address"] = { "old": route.get("next_hop_ip_address"), "new": next_hop_ip_address, } if not ret["changes"]: ret["result"] = True ret["comment"] = "Route {} is already present.".format(name) return ret if __opts__["test"]: ret["result"] = None ret["comment"] = "Route {} would be updated.".format(name) return ret else: ret["changes"] = { "old": {}, "new": { "name": name, "address_prefix": address_prefix, "next_hop_type": next_hop_type, "next_hop_ip_address": next_hop_ip_address, }, } if __opts__["test"]: ret["comment"] = "Route {} would be created.".format(name) ret["result"] = None return ret route_kwargs = kwargs.copy() route_kwargs.update(connection_auth) route = __salt__["azurearm_network.route_create_or_update"]( name=name, route_table=route_table, resource_group=resource_group, address_prefix=address_prefix, next_hop_type=next_hop_type, next_hop_ip_address=next_hop_ip_address, **route_kwargs ) if "error" not in route: ret["result"] = True ret["comment"] = "Route {} has been created.".format(name) return ret ret["comment"] = "Failed to create route {}! ({})".format(name, route.get("error")) return ret @_deprecation_message def route_absent(name, route_table, resource_group, connection_auth=None): """ .. versionadded:: 2019.2.0 Ensure a route table does not exist in the resource group. :param name: Name of the route table. :param route_table: The name of the existing route table containing the route. :param resource_group: The resource group assigned to the route table. :param connection_auth: A dict with subscription and authentication parameters to be used in connecting to the Azure Resource Manager API. """ ret = {"name": name, "result": False, "comment": "", "changes": {}} if not isinstance(connection_auth, dict): ret[ "comment" ] = "Connection information must be specified via connection_auth dictionary!" return ret route = __salt__["azurearm_network.route_get"]( name, route_table, resource_group, azurearm_log_level="info", **connection_auth ) if "error" in route: ret["result"] = True ret["comment"] = "Route {} was not found.".format(name) return ret elif __opts__["test"]: ret["comment"] = "Route {} would be deleted.".format(name) ret["result"] = None ret["changes"] = { "old": route, "new": {}, } return ret deleted = __salt__["azurearm_network.route_delete"]( name, route_table, resource_group, **connection_auth ) if deleted: ret["result"] = True ret["comment"] = "Route {} has been deleted.".format(name) ret["changes"] = {"old": route, "new": {}} return ret ret["comment"] = "Failed to delete route {}!".format(name) return ret
Save