Beispiel #1
0
def create_firewall_policy_object():
    session = cloudpassage.HaloSession(key_id,
                                       secret_key,
                                       api_host=api_hostname,
                                       api_port=api_port,
                                       integration_string="SDK-Smoke")
    firewall_policy_object = cloudpassage.FirewallPolicy(session)
    return firewall_policy_object
def firewall_report_for_group_id(session, group_id):
    fw_obj = cloudpassage.FirewallPolicy(session)
    group_obj = cloudpassage.ServerGroup(session)
    group_struct = group_obj.describe(group_id)
    fw_polid = group_struct["linux_firewall_policy_id"]
    if fw_polid is None:
        retval = "No firewall policy for: %s\n" % group_id
    else:
        grapher = FirewallGraph(fw_obj.describe(fw_polid))
        retval = FirewallGraph.dot_to_png(grapher.make_dotfile())
    return retval
Beispiel #3
0
 def __init__(self, *kwargs):
     # Groups and prod lists to be replace by yaml template
     self.cwd = path.realpath(path.join(getcwd(), path.dirname(__file__)))
     self.api_key = environ['CLOUDP_KEY']
     self.api_secret = environ['CLOUDP_SECRET']
     self.session = cloudpassage.HaloSession(self.api_key, self.api_secret)
     self.server = cloudpassage.Server(self.session)
     self.policies = cloudpassage.FirewallPolicy(self.session)
     self.policy_init = cloudpassage.policy.Policy(self.session)
     self.poldetails = cloudpassage.FirewallRule(self.session)
     self.firewall_services = cloudpassage.FirewallService(self.session)
     self.http_helper = cloudpassage.HttpHelper(self.session)
     self.args = args
     self.firewall_ports = {}
     self.filtered_ports = {}
     self.rules = []
     self.myrules = {}
     self.users = {}
     self.user_id = {}
     self.filtered_rules = {}
     self.rule_ids = []
     self.filtered_rule_ids = {}
     self.log_positions = {}
     self.pol_positions = {}
     self.list_of_servers = self.server.list_all()
     self.list_of_policies = self.policies.list_all()
     self.list_of_services = self.firewall_services.list_all()
     self.policy_names = []
     self.filtered_groups = []
     self.policy_ids = []
     self.filtered_policy_ids = []
     self.unfiltered_policy_ids = []
     self.filtered_policies = {}
     self.activerules = {}
     self.myactiverules = {}
     self.activecomments = {}
     self.activeurls = {}
     self.activepolicies = {}
     self.user = {}
     self.json = {}
     self.group = kwargs[0]
     self.chain = kwargs[1]
     self.active = kwargs[2]
     self.source = kwargs[3]
     self.destination = kwargs[4]
     self.states = kwargs[5]
     self.action = kwargs[6]
     self.username = kwargs[11]
     self.all = kwargs[12]
     # Split without spaces being added
     self.service = kwargs[7]
     self.filtered_service = {}
     self.unfiltered_service = {}
     self.log = kwargs[8]
     self.log_prefix = kwargs[9]
     self.comment = kwargs[10]
     self.wildcard = kwargs[13]
     self.setactive = kwargs[14]
     self.setinactive = kwargs[15]
     self.dryrun = kwargs[16]
     self.subtractfromlastrule = kwargs[17]
     self.deleteinactive = kwargs[18]
     self.fullbackup = kwargs[19]
     self.fullrestore = kwargs[20]
     self.filename = kwargs[21]
Beispiel #4
0
 def test_instantiation(self):
     session = cloudpassage.HaloSession(key_id, secret_key)
     assert cloudpassage.FirewallPolicy(session)
 def test_instantiation(self):
     assert cloudpassage.FirewallPolicy(None)