File: //lib/python3/dist-packages/awscli/customizations/__pycache__/opsworks.cpython-310.pyc
o
.&�apR � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl m Z d dl
mZmZmZ d dlmZ d dlmZ e�e�ZdZe jdd�Zd Zd
Z e� d ej �Z e� d �Z e� d
�Z!dZ"d�#� Z$dd� Z%dd� Z&G dd� de�Z'dd� Z(dd� Z)dS )� N)� ClientError)� shlex_quote�urlopen�ensure_text_type)� BasicCommand)�!create_client_from_parsed_globalszOpsWorks-Instance� )�minutesz/AWS/OpsWorks/z7arn:aws:iam::aws:policy/AWSOpsWorksInstanceRegistrationz ^(?!-)[a-z0-9-]{1,63}(?<!-)$z
^i-[0-9a-f]+$z^\d+\.\d+\.\d+\.\d+$z@http://169.254.169.254/latest/dynamic/instance-identity/documenta�
set -e
umask 007
AGENT_TMP_DIR=$(mktemp -d /tmp/opsworks-agent-installer.XXXXXXXXXXXXXXXX)
curl --retry 5 -L %(agent_installer_url)s | tar xz -C $AGENT_TMP_DIR
cat >$AGENT_TMP_DIR/opsworks-agent-installer/preconfig <<EOF
%(preconfig)s
EOF
exec sudo /bin/sh -c "OPSWORKS_ASSETS_DOWNLOAD_BUCKET=%(assets_download_bucket)s $AGENT_TMP_DIR/opsworks-agent-installer/boot-registration; rm -rf $AGENT_TMP_DIR"
c C s | � dt� d S )Nz building-command-table.opsworks)�register�inject_commands)�cli� r
�@/usr/lib/python3/dist-packages/awscli/customizations/opsworks.py�
initialize= � r c K s t |�| d< d S )Nr
)�OpsWorksRegister)�
command_table�session�kwargsr
r
r r A r r c s e Zd ZdZe�d��� Zdddd�dddd gd
d �d d
dd�dddd�dddd�dddd�dddd�d d d d�d d d!d"�d#d d$d"�d%dd&d'd(d)�g Z� fd*d+�Z d,d-� Z
d.d/� Z d0d1� Z d2d3� Z
d4d5� Zd6d7� Zd8d9� Zd:d;� Zd<d=� Zd>d?� ZedEdAdB��ZedCdD� �Z� ZS )Fr r
z�
Registers an EC2 instance or machine with AWS OpsWorks.
Registering a machine using this command will install the AWS OpsWorks
agent on the target machine and register it with an existing OpsWorks
stack.
zstack-idTzZA stack ID. The instance will be registered with the
given stack.)�name�required� help_textzinfrastructure-class�ec2� on-premiseszzSpecifies whether to register an EC2 instance (`ec2`)
or an on-premises instance (`on-premises`).)r r �choicesr zoverride-hostname�hostnamezrThe instance hostname. If not provided, the current
hostname of the machine will be used.)r �destr zoverride-private-ip�
private_ipaA An IP address. If you set this parameter, the given IP
address will be used as the private IP address within
OpsWorks. Otherwise the private IP address will be
determined automatically. Not to be used with EC2
instances.zoverride-public-ip� public_ipa? An IP address. If you set this parameter, the given IP
address will be used as the public IP address within
OpsWorks. Otherwise the public IP address will be
determined automatically. Not to be used with EC2
instances.z override-ssh�sshzmIf you set this parameter, the given command will be
used to connect to the machine.z ssh-username�usernamezXIf provided, this username will be used to connect to
the host.zssh-private-key� private_keyzhIf provided, the given private key file will be used
to connect to the machine.�local�
store_truez�If given, instead of a remote machine, the local
machine will be imported. Cannot be used together
with `target`.)r �actionr zuse-instance-profilezRUse the instance profile instead of creating an IAM
user.�target�?z
[<target>]z�Either the EC2 instance ID or the hostname of the
instance or machine to be registered with OpsWorks.
Cannot be used together with `--local`.)r �positional_arg�nargs�synopsisr c s> t t| ��|� d | _d | _d | _d | _d | _d | _d | _ d S �N)
�superr �__init__�_stack�
_ec2_instance� _prov_params� _use_address�
_use_hostname�
_name_for_iam�
access_key)�selfr �� __class__r
r r, } s
zOpsWorksRegister.__init__c C s" | j �d�| _t| j d|�| _d S )N�iam�opsworks)�_session�
create_clientr7 r r8 �r4 �args�parsed_globalsr
r
r �_create_clients� s
�z OpsWorksRegister._create_clientsc C sL | � ||� | �|� | �|� | �|� | �|� | �|� | �|� d S r* )r> �prevalidate_arguments�retrieve_stack�validate_arguments�determine_details�create_iam_entities�setup_target_machiner; r
r
r � _run_main� s
zOpsWorksRegister._run_mainc C s� |j s
|js
td��|j r|jrtd��|jr!t�� dkr!td��|jr.|js*|jr.td��|jdkrA|j r:td��|j
rAtd��|jd krM|j rMtd
��|j r]t
�|j �s_td |j ��d S d S )
zN
Validates command line arguments before doing anything else.
z%One of target or --local is required.z4Arguments target and --local are mutually exclusive.�Linuxz6Non-Linux instances are not supported by AWS OpsWorks.zYArgument --override-ssh cannot be used together with --ssh-username or --ssh-private-key.r z/--override-private-ip is not supported for EC2.z.--override-public-ip is not supported for EC2.r z1--use-instance-profile is only supported for EC2.zxInvalid hostname: '%s'. Hostnames must consist of letters, digits and dashes only and must not start or end with a dash.N)r% r" �
ValueError�platform�systemr r r! �infrastructure_classr r �use_instance_profiler � HOSTNAME_RE�match�r4 r< r
r
r r? � sL ���
��
�� ���z&OpsWorksRegister.prevalidate_argumentsc s� t �d� | jj� jgd�d d | _| jj| jd d�| _� jdkr�� j s�t �d� | j
j d| jd d
�}d g i}g �d | jv rP|d � d
| jd gd�� n�� dd� � t
�� j�rd� jg|d< n t�� j�rx�� � fdd�� � j| _n |d � d� jgd�� �fdd�|jd i |��d D �}|s�td� j ��t|�dkr�td� jd�dd � |D ��f ��|d | _d S d S d S ) z�
Retrieves the stack from the API, thereby ensures that it exists.
Provides `self._stack`, `self._prov_params`, `self._use_address`, and
`self._ec2_instance`.
z,Retrieving stack and provisioning parameters)�StackIds�Stacksr �StackId�rQ r z#Retrieving EC2 instance information�Region)� region_name�Filters�VpcIdzvpc-id)�Name�Valuesc S s d| vS )NrV r
��instancer
r
r �<lambda>� s z1OpsWorksRegister.retrieve_stack.<locals>.<lambda>� InstanceIdsc s | � d�� jkp| � d�� jkS )N�PrivateIpAddress�PublicIpAddress)�getr% rY �r< r
r r[ � s ztag:Namec s4 g | ]}|d D ]� t � fdd��D ��r� �qqS )� Instancesc 3 s � | ]}|� �V qd S r* r
)�.0�c��ir
r � <genexpr>� � � z=OpsWorksRegister.retrieve_stack.<locals>.<listcomp>.<genexpr>)�all)rb �r)�
conditionsrd r �
<listcomp>� s ���z3OpsWorksRegister.retrieve_stack.<locals>.<listcomp>� Reservationsz&Did not find any instance matching %s.� z)Found multiple instances matching %s: %s.z, c s s � | ]}|d V qdS )�
InstanceIdNr
)rb re r
r
r rf rg z2OpsWorksRegister.retrieve_stack.<locals>.<genexpr>Nr
)�LOG�debugr8 �describe_stacks�stack_idr- �&describe_stack_provisioning_parametersr/ rJ r" r9 r: �append�INSTANCE_ID_RErM r% �
IP_ADDRESS_REr0 �describe_instancesrG �len�joinr. )r4 r< r � desc_args� instancesr
)r< rj r r@ � sd
�����
�
�
�
�
�� ���z OpsWorksRegister.retrieve_stackc s� � j r!| jj| jd d�d }t� fdd�|D ��r!td� j ��� jdkrA� jrCt� t
t t ��
� ��d }|| jd krEtd
��d S d S d S ) zS
Validates command line arguments using the retrieved information.
rQ rR ra c 3 s" � | ] }� j �� |d kV qdS )�HostnameN)r �lower)rb rZ r` r
r rf s � �z6OpsWorksRegister.validate_arguments.<locals>.<genexpr>z@Invalid hostname: '%s'. Hostnames must be unique within a stack.r �regionrS z1The stack's and the instance's region must match.N)r r8 rw r- �anyrG rJ r" �json�loadsr r � IDENTITY_URL�read)r4 r< r{ r~ r
r` r rA s4 �� �������z#OpsWorksRegister.validate_argumentsc C s� | j s6|jrn/|jdkr-d| jv r| jd | _ n d| jv r)t�d� | jd | _ n
td��|jdkr6|j| _ |jrC|j| _ |j| _
dS |jrPd| _ t � � | _
dS d| _ |j| _
dS )a
Determine details (like the address to connect to and the hostname to
use) from the given arguments and the retrieved data.
Provides `self._use_address` (if not provided already),
`self._use_hostname` and `self._name_for_iam`.
r r^ r] zYInstance does not have a public IP address. Trying to use the private address to connect.z1The instance does not seem to have an IP address.r N)
r0 r" rJ r. ro �warningrG r% r r1 r2 �socket� gethostnamerN r
r
r rB s0
��
z"OpsWorksRegister.determine_detailsc C sP |j r
t�d� d| _dS t�d� dt| jd � }z| jj|td� t�d|� W n& t yQ } z|j
� di �� d �d
krFt�d |� n� W Y d}~nd}~ww t�d � d
t t| jd �d�t t| j
�d�f }td�D ]D}||rxd| nd }z
| jj|td� W n& t y� } z|j
� di �� d �d
kr�t�d|� n� W Y d}~qod}~ww t�d|� ntd��t�d� | jj||d� z
| jjt|d� W n@ t �y } z3|j
� di �� d �dk�rt�dt|� | jjt| �| jd t�|d � t�d t|� n� W Y d}~n d}~ww t�d t|� t�d � | jj|d!�d" | _dS )#zp
Creates an IAM group, user and corresponding credentials.
Provides `self.access_key`.
z Skipping IAM entity creationNz#Creating the IAM group if necessaryz OpsWorks-%srQ )� GroupName�PathzCreated IAM group %s�Error�Code�EntityAlreadyExistsz IAM group %s exists, continuingzCreating an IAM userzOpsWorks-%s-%srW � � z+%s� )�UserNamer� z/IAM user %s already exists, trying another namezCreated IAM user %sz&Couldn't find an unused IAM user name.z3Adding the user to the group and attaching a policy)r� r� )� PolicyArnr� � AccessDeniedzFUnauthorized to attach policy %s to user %s. Trying to put user policy�Arn)�
PolicyName�PolicyDocumentr� zPut policy %s to user %sz Attached policy %s to user %szCreating an access key)r� � AccessKey)rK ro rp r3 �
clean_for_iamr- r7 � create_group�IAM_PATHr �responser_ � shorten_namer2 �range� create_userrG �add_user_to_group�attach_user_policy�IAM_POLICY_ARN�put_user_policy�IAM_USER_POLICY_NAME�_iam_policy_document�IAM_USER_POLICY_TIMEOUT�create_access_key)r4 r< �
group_name�e�
base_username�try_r r
r
r rC G s�
���
� � ���
��
��� ����
�
�z$OpsWorksRegister.create_iam_entitiesc C sj t | jd | �| �|��| jd d d� }|jr(t�d� t�dd|g� d S t�d� | � ||� d S )
zz
Setups the target machine by copying over the credentials and starting
the installation process.
�AgentInstallerUrl�
Parameters�assets_download_bucket)�agent_installer_url� preconfigr� z Running the installer locally�/bin/sh�-cz6Connecting to the target machine to run the installer.N)
�
REMOTE_SCRIPTr/ �
_to_ruby_yaml�_pre_config_documentr" ro rp �
subprocess�
check_callr )r4 r< �
remote_scriptr
r
r rD � s �
z%OpsWorksRegister.setup_target_machinec C sD t �� dkr]zOtjddd�}|�|� |�� |jr |j}n!d}|jr*|d|j 7 }|jr4|d|j 7 }|d| j 7 }|d 7 }|d|j
7 }t j |d
d � W t
�|j
� dS t
�|j
� w |jrit�t|j��}n d d
g}|jrx|�d|jg� |jr�|�d|jg� |�| j � dd|g}|�d�dd� |D ��� t � |� dS )zA
Runs a (sh) script on a remote machine via SSH.
�Windows�wtF)�delete�plinkz -l "%s"z -i "%s"z "%s"z -mT)�shellr z-ttz-lz-ir� r� � c s s � | ]}t |�V qd S r* )r )rb �wordr
r
r rf � rg z'OpsWorksRegister.ssh.<locals>.<genexpr>N)rH rI �tempfile�NamedTemporaryFile�write�closer r r! r0 r r� r� �os�remove�shlex�split�str�extendrt ry )r4 r< r� � script_file�call� remote_callr
r
r r � s8
zOpsWorksRegister.sshc C s� t dd| jd i| jd ��}| jr | jd |d< | jd |d< | jr(| j|d< |jr0|j|d < |jr8|j|d
< |jd k|d < t� d
|� |S )Nrr rQ r� � AccessKeyId�
access_key_id�SecretAccessKey�secret_access_keyr r r r �importzUsing pre-config: %rr
)
�dictr- r/ r3 r1 r r rJ ro rp )r4 r< �
parametersr
r
r r� � s$ ���
z%OpsWorksRegister._pre_config_documentNc C sN dd| d�}|d ur t j �� | }dd|�d�ii|d< |gdd �}t�|�S )
Nzopsworks:RegisterInstance�Allow)�Action�Effect�Resource� DateLessThanzaws:CurrentTimez%Y-%m-%dT%H:%M:%SZ� Conditionz
2012-10-17)� Statement�Version)�datetime�utcnow�strftimer� �dumps)�arn�timeout� statement� valid_until�policy_documentr
r
r r� � s ����
z%OpsWorksRegister._iam_policy_documentc C s d� dd� t| �� �D ��S )N�
c s s& � | ]\}}d |t �|�f V qdS )z:%s: %sN)r� r� )rb �k�vr
r
r rf s � �z1OpsWorksRegister._to_ruby_yaml.<locals>.<genexpr>)ry �sorted�items)r� r
r
r r� s
�z OpsWorksRegister._to_ruby_yamlr* )�__name__�
__module__� __qualname__�NAME�textwrap�dedent�strip� DESCRIPTION� ARG_TABLEr, r> rE r? r@ rA rB rC rD r r� � staticmethodr� r� �
__classcell__r
r
r5 r r E sp � ������������ .
'L'\( r c C s t �dd| �S )z9
Cleans a name to fit IAM's naming requirements.
z[^A-Za-z0-9+=,.@_-]+�-)�re�sub)r r
r
r r� s r� c C sD t | �|kr| S t|d d�\}}| d|| � d | | d� S )z<
Shortens a name to the given number of characters.
� � Nz...)rx �divmod)r �
max_length�qri r
r
r r� s "r� )*r� r� �loggingr� rH r� r� r� r� r� r� �botocore.exceptionsr �
awscli.compatr r r � awscli.customizations.commandsr �awscli.customizations.utilsr � getLoggerr� ro r� � timedeltar� r� r� �compile�IrL ru rv r� �lstripr� r r r r� r� r
r
r
r �<module> sH
� � M