File: //lib/python3.6/site-packages/cloudinit/sources/__pycache__/DataSourceApsara.cpython-36.pyc
3
�q�h�? � @ s� d dl Z d dlZd dlmZmZ d dlmZmZ d dlmZ d dlm
Z
d dl m Z m
Z
d dlmZ d dlmZ d d lmZ d d
lmZmZ eje�Zd ZG d d
� d
ej�Z dd� Z dd� Z G dd� de �Z e ej ffe ej ej!ffgZ"dd� Z#dS )� N)�List�Union)�dmi�sources)�
url_helper)�util)�
EventScope� EventType)�NoDHCPLeaseError)�EphemeralIPNetwork)�DataSourceHostname)�apsara�ec2zApsara Cloud ECSc sJ e Zd ZU dZdgZdZg Zee dZ dZ
dZ e j
Zeeef dZedd � �Z� fd
d �Zedd �� fd
d� Zd:dd�Zdd� Zdd� Zedd� �Zedd� �Zedd� �Z edd � �Z ed d � �Z ed d � �Z d!d"� Z d#d$� Z!e� fd%d&��Z"d'd(� Z#d)d*� Z$d+d,� Z%d-d.� Z&d/d0� Z'd1d2� Z(d;d3d4�Z)d<d6d7�Z*d=d8d9�Z+� Z,S )>�DataSourceApsaraZApsarazhttp://100.100.100.200z
2016-01-01�� �2 NFc C s dS )NzX-apsara-ecs-metadata-token� )�selfr r �&/usr/lib/python3.6/DataSourceApsara.py�imdsv2_token_put_header* s z(DataSourceApsara.imdsv2_token_put_headerc s: t t| �j|||� tj| j�| _| jtj jt j
� d S )N) �superr �__init__�copy�deepcopyZdefault_update_eventsr ZNETWORK�addr ZBOOT)r Zsys_cfg�distro�paths)� __class__r r r . s zDataSourceApsara.__init__)�ci_pkl_version�returnc s t � j|� d S )N)r � _unpickle)r r )r r r r 3 s zDataSourceApsara._unpicklec C s* | j jd�}d}|d kr d}d}t||�S )N�hostnameFzlocalhost.localdomainT)�metadata�getr )r ZfqdnZ
resolve_ipZ
metadata_onlyr! Z
is_defaultr r r � get_hostname6 s z DataSourceApsara.get_hostnamec C s t | jjdi ��S )Nz public-keys)�parse_public_keysr" r# )r r r r �get_public_ssh_keys> s z$DataSourceApsara.get_public_ssh_keysc C s t � r| jj� S dS )NZNO_APSARA_METADATA)�
_is_apsara�dsname�lower)r r r r �_get_cloud_nameA s
z DataSourceApsara._get_cloud_namec C s
| j j� S )N)r( r) )r r r r �platformF s zDataSourceApsara.platformc C s dS )Nzlatest/api/tokenr )r r r r �api_token_routeK s z DataSourceApsara.api_token_routec C s dS )NZ21600r )r r r r �imdsv2_token_ttl_secondsO s z)DataSourceApsara.imdsv2_token_ttl_secondsc C s | j | jgS )N)r �imdsv2_token_req_header)r r r r �imdsv2_token_redactS s z$DataSourceApsara.imdsv2_token_redactc C s
| j d S )Nz -ttl-seconds)r )r r r r r. W s z(DataSourceApsara.imdsv2_token_req_headerc C sl | j tjkr| j S i }| j}| jjd�}t|t�rPtj ||t
j | j dd�d�}nt
jd|� |S || _ | j S )z@Return a network config dict for rendering ENI or netplan files.ZnetworkZ apply_full_imds_network_configT)� fallback_nicZfull_network_configz%Metadata 'network' key not valid: %s.)�_network_configr �UNSET�fallback_interfacer" r# �
isinstance�dictr
Z#convert_ecs_metadata_network_configr Zget_cfg_option_bool�ds_cfg�LOG�warning)r �resultZifaceZnet_mdr r r �network_config[ s
z DataSourceApsara.network_configc
C s� g }i }| j }d}x*|D ]"}dj||�}|j|� |||< qW tjd� d}d}| j� } y0tj|| j| j tj
| j | j || j
dd� \}}W n tjk
r� Y nX |r�|r�|| _|| S dS )a Get an API token for EC2 Instance Metadata Service.
On EC2. IMDS will always answer an API token, unless
the instance owner has disabled the IMDS HTTP endpoint or
the network topology conflicts with the configured hop-limit.
�PUTz{0}/{1}z Fetching Ecs IMDSv2 API TokenNF) �urlsZmax_waitZtimeoutZ status_cb�
headers_cb� exception_cb�request_method�headers_redactZconnect_synchronously)r, �format�appendr7 �debugZget_url_params�uhelpZ wait_for_urlZmax_wait_secondsZtimeout_secondsr8 � _get_headers�_imds_exception_cbr/ �UrlError�
_api_token)
r �mdurlsr< Zurl2baseZurl_pathr? �urlZcur�responseZ
url_paramsr r r �_maybe_fetch_api_tokens s:
z'DataSourceApsara._maybe_fetch_api_tokenc C sJ | j }|jd| j�}| j|�}|r8|| _tjd| j� n
tjd� t|�S )N�
metadata_urlszUsing metadata source: '%s'z)IMDS's HTTP endpoint is probably disabled) r6 r# rM rL �metadata_addressr7 rC r8 �bool)r ZmcfgrI rN r r r �wait_for_metadata_service� s
z*DataSourceApsara.wait_for_metadata_servicec s: | j d kr4t| dd �}|r(|| _ d | _n tt| �jS | j S )Nr0 )Z_fallback_interface�getattrr0 r r r3 )r Z
_legacy_fbnic)r r r r3 � s
z#DataSourceApsara.fallback_interfacec C s | j � s i S | j}i }| j}| j}d}| j}y�tj| j| j| j ||dd�|d< tj| j| j| j ||dd�|d< y&tj
| j| j| j ||d�}||d< W nD t k
r� t j
td| j� tj| j| j| j |||d�|d< Y nX W n& t k
�r t j
td | j� i S X |S )
z�Crawl metadata service when available.
@returns: Dictionary of crawled metadata content containing the keys:
meta-data, user-data, vendor-data and dynamic.
Nz user-data)r= r@ r> Z item_namez vendor-data)r= r@ r> z meta-datazWFailed reading from instance metadata address %s, try fall back to directory tree style)r= r@ r> Z retrieval_exception_ignore_cbz'Failed reading from metadata address %s)rP r/ � _refresh_stale_apsara_token_cb�&_skip_or_refresh_stale_apsara_token_cb� _skip_whole_meta_path_apsara_cbr
Zget_instance_data�min_metadata_versionrN rE Zget_instance_meta_data� Exceptionr Zlogexcr7 r Zget_instance_metadata)r ZredactZcrawled_metadataZexc_cbZ exc_cb_udZskip_cbZexe_cb_whole_metar9 r r r �crawl_metadata� sd z DataSourceApsara.crawl_metadatac C s* t |tj�r&|jdkr&tjd� d| _dS )z=Exception handler for Ec2 to refresh token if token is stale.i� z+Clearing cached Ec2 API token due to expiryNT)r4 rD rG �coder7 rC rH )r �msg� exceptionr r r rR � s
z/DataSourceApsara._refresh_stale_apsara_token_cbc C s
|j |kS )z/Returns False if cause.code is in status_codes.)rX )r Z status_codes�causer r r �_skip_retry_on_codes s z%DataSourceApsara._skip_retry_on_codesc C s" | j tj|�}|sdS | j||�S )z^Callback will not retry on SKIP_USERDATA_VENDORDATA_CODES or if no token
is available.F)r\ r Z SKIP_USERDATA_VENDORDATA_CODESrR )r rY rZ Zretryr r r rS s z7DataSourceApsara._skip_or_refresh_stale_apsara_token_cbc C s0 t |tj�r$|jdkr$tjd� dS | j||�S )z7Callback will not retry of whole meta_path is not foundi� z&whole meta_path is not found, skippingF)r4 rD rG rX r7 r8 rR )r rY rZ r r r rT s
z0DataSourceApsara._skip_whole_meta_path_apsara_cbc C s� | j | jj� krdS | jr�tj� r0tjd� dS yLt| j | j
ddd��.}| j � | _ tjd|j
rjd|j
� �nd� W d Q R X W q� tk
r� dS X n
| j � | _ | j s�t| j t� r�dS | j jdi �| _| j jd i �| _| j jd
i �| _dS ) NFz1FreeBSD doesn't support running dhclient with -sfT)Zipv4Zipv6zCrawled metadata service%s� � z meta-dataz user-dataz vendor-data)Z
cloud_namer( r) �perform_dhcp_setupr Z
is_FreeBSDr7 rC r r r3 rW Z_crawled_metadataZ state_msgr
r4 r5 r# r" Z userdata_rawZvendordata_raw)r Znetwr r r � _get_data s6
&
zDataSourceApsara._get_datac C s� |dkr| j }tjd� | j|i}dj| j| j�}ytj||| j dd�}W n0 tj
k
rz } ztj d||� dS d}~X nX |j S )z�Request new metadata API token.
@param seconds: The lifetime of the token in seconds
@return: The API token or None if unavailable.
Nz!Refreshing Ec2 metadata API tokenz{}/{}r; )Zheadersr@ r? z/Unable to get API token: %s raised exception %s)
r- r7 rC r. rA rN r, rD Zreadurlr/ rG r8 �contents)r ZsecondsZrequest_headerZ token_urlrK �er r r �_refresh_api_token8 s
z#DataSourceApsara._refresh_api_tokenr^ c C s@ | j | ji}| j|kr|S | js4| j� | _| js4i S | j| jiS )z�Return a dict of headers for accessing a url.
If _api_token is unset on AWS, attempt to refresh the token via a PUT
and then return the updated token header.
)r. r- r, rH rc r )r rJ Zrequest_token_headerr r r rE U s
z DataSourceApsara._get_headersc C sD t |tj�r@|jr@|jdkr@|jdkr2tjd� n
tjd� |�dS )a2 Fail quickly on proper AWS if IMDSv2 rejects API token request
Guidance from Amazon is that if IMDSv2 had disabled token requests
by returning a 403, or cloud-init malformed requests resulting in
other 40X errors, we want the datasource detection to fail quickly
without retries as those symptoms will likely not be resolved by
retries.
Exceptions such as requests.ConnectionError due to IMDS being
temporarily unroutable or unavailable will still retry due to the
callsite wait_for_url.
i� i� zLEcs IMDS endpoint returned a 403 error. HTTP endpoint is disabled. Aborting.z2Fatal error while requesting Ecs IMDSv2 API tokensN)r4 rD rG rX r7 r8 )r rY rZ r r r rF l s
z#DataSourceApsara._imds_exception_cb)FFF)N)r^ )N)-�__name__�
__module__� __qualname__r( rM rU Zextended_metadata_versionsr �strZ url_max_waitZ url_timeoutrH r r2 r1 r r5 r_ �propertyr r �intr r$ r& r* r+ r, r- r/ r. r: rL rP r3 rW rR r\ rS rT r` rc rE rF �
__classcell__r r )r r r sB
0 ?!
r c C s t jd�tkS )Nzsystem-product-name)r Z
read_dmi_data�APSARA_PRODUCTr r r r r' � s r' c C s� g }x�| j � D ]|\}}t|t�r0|j|j� � qt|t�rF|j|� qt|t�r|jdg �}t|t�rv|j|j� � qt|t�r|j|� qW |S )Nz openssh-key) �itemsr4 rg rB �strip�list�extendr5 r# )Z public_keys�keysZ_key_idZkey_body�keyr r r r% � s
r% c @ s e Zd ZdZdZdS )�DataSourceApsaraLocalay Datasource run at init-local which sets up network to query metadata.
In init-local, no network is available. This subclass sets up minimal
networking with dhclient on a viable nic so that it can talk to the
metadata service. If the metadata service provides network configuration
then render the network configuration for that instance based on metadata.
TN)rd re rf �__doc__r_ r r r r rr � s rr c C s t j| t�S )N)r Zlist_from_depends� datasources)Zdependsr r r �get_datasource_list� s ru )$r ZloggingZtypingr r Z cloudinitr r r rD r Zcloudinit.eventr r Zcloudinit.net.dhcpr
Zcloudinit.net.ephemeralr Zcloudinit.sourcesr Zcloudinit.sources.helpersr
r Z getLoggerrd r7 rk Z
DataSourcer r' r% rr ZDEP_FILESYSTEMZ DEP_NETWORKrt ru r r r r �<module> s*
u