def _create_session(self):
if not winrm:
raise CommandExecutionError(
command='winrm',
error='winrm not installed'
)
winrm_url = '{0}://{1}:{2}/{3}'.format(
self.session_config['protocol'],
self.session_config['host'],
self.session_config['port'],
self.session_config['uri'])
if is_kerberos_env():
# The change is simply setting the transport to kerberos
# and setting the kerberos_hostname_override parameter
# to the destination hostname.
return winrm.Session(
target=winrm_url,
auth=(self.session_config['user'], None),
transport='kerberos',
kerberos_hostname_override=self.session_config['host'])
else:
return winrm.Session(
target=winrm_url,
auth=(self.session_config['user'],
self.session_config['password']),
transport=self.session_config['transport'])
def _create_session(self):
if not winrm:
raise CommandExecutionError(
command='winrm',
error='winrm not installed'
)
winrm_url = '{0}://{1}:{2}/{3}'.format(
self.session_config['protocol'],
self.session_config['host'],
self.session_config['port'],
self.session_config['uri'])
if is_kerberos_env():
# The change is simply setting the transport to kerberos
# and setting the kerberos_hostname_override parameter
# to the destination hostname.
return winrm.Session(
target=winrm_url,
auth=(self.session_config['user'], None),
transport='kerberos',
kerberos_hostname_override=self.session_config['host'])
else:
return winrm.Session(
target=winrm_url,
auth=(self.session_config['user'],
self.session_config['password']),
transport=self.session_config['transport'])
def _validate_ssh_config(self):
if not self.host:
raise exceptions.AgentInstallerConfigurationError('Missing host')
if not self.user:
raise exceptions.AgentInstallerConfigurationError('Missing user')
if not is_kerberos_env() and not self.password and not self.key:
raise exceptions.AgentInstallerConfigurationError(
'Must specify either key or password')
def _validate_ssh_config(self):
if not self.host:
raise exceptions.AgentInstallerConfigurationError('Missing host')
if not self.user:
raise exceptions.AgentInstallerConfigurationError('Missing user')
if not is_kerberos_env() and not self.password and not self.key:
raise exceptions.AgentInstallerConfigurationError(
'Must specify either key or password')
def validate(session_config):
def _validate(prop):
value = session_config.get(prop)
if not value:
raise ValueError('Invalid {0}: {1}'.format(prop, value))
_validate('host')
_validate('user')
if not is_kerberos_env():
# no need to supply password in Kerberos env
_validate('password')
def get_rest_client(client_profile=None,
rest_host=None,
rest_port=None,
rest_protocol=None,
rest_cert=None,
username=None,
password=None,
tenant_name=None,
trust_all=False,
cluster=None,
kerberos_env=None):
if client_profile is None:
client_profile = profile
rest_host = rest_host or client_profile.manager_ip
rest_port = rest_port or client_profile.rest_port
rest_protocol = rest_protocol or client_profile.rest_protocol
rest_cert = rest_cert or get_ssl_cert(client_profile)
username = username or get_username(client_profile)
password = password or get_password(client_profile)
tenant_name = tenant_name or get_tenant_name(client_profile)
trust_all = trust_all or get_ssl_trust_all()
headers = get_auth_header(username, password)
headers[constants.CLOUDIFY_TENANT_HEADER] = tenant_name
cluster = client_profile.cluster if cluster is None else cluster
kerberos_env = kerberos_env \
if kerberos_env is not None else client_profile.kerberos_env
if kerberos_env is False \
or (kerberos_env is None and not is_kerberos_env()):
if not username:
raise CloudifyCliError('Command failed: Missing Username')
if not password:
raise CloudifyCliError('Command failed: Missing password')
if cluster:
client = CloudifyClusterClient(host=rest_host,
port=rest_port,
protocol=rest_protocol,
headers=headers,
cert=rest_cert,
trust_all=trust_all,
profile=client_profile,
kerberos_env=kerberos_env)
else:
client = CloudifyClient(host=rest_host,
port=rest_port,
protocol=rest_protocol,
headers=headers,
cert=rest_cert,
trust_all=trust_all,
kerberos_env=kerberos_env)
return client
def get_rest_client(client_profile=None,
rest_host=None,
rest_port=None,
rest_protocol=None,
rest_cert=None,
username=None,
password=None,
tenant_name=None,
trust_all=False,
cluster=None,
kerberos_env=None):
if client_profile is None:
client_profile = profile
rest_host = rest_host or client_profile.manager_ip
rest_port = rest_port or client_profile.rest_port
rest_protocol = rest_protocol or client_profile.rest_protocol
rest_cert = rest_cert or get_ssl_cert(client_profile)
username = username or get_username(client_profile)
password = password or get_password(client_profile)
tenant_name = tenant_name or get_tenant_name(client_profile)
trust_all = trust_all or get_ssl_trust_all()
headers = get_auth_header(username, password)
headers[constants.CLOUDIFY_TENANT_HEADER] = tenant_name
cluster = cluster or is_cluster(client_profile)
kerberos_env = kerberos_env \
if kerberos_env is not None else client_profile.kerberos_env
if kerberos_env is False \
or (kerberos_env is None and not is_kerberos_env()):
if not username:
raise CloudifyCliError('Command failed: Missing Username')
if not password:
raise CloudifyCliError('Command failed: Missing password')
if cluster:
client = CloudifyClusterClient(host=rest_host,
port=rest_port,
protocol=rest_protocol,
headers=headers,
cert=rest_cert,
trust_all=trust_all,
profile=client_profile,
kerberos_env=kerberos_env)
else:
client = CloudifyClient(host=rest_host,
port=rest_port,
protocol=rest_protocol,
headers=headers,
cert=rest_cert,
trust_all=trust_all,
kerberos_env=kerberos_env)
return client
def validate(session_config):
def _validate(prop):
value = session_config.get(prop)
if not value:
raise ValueError('Invalid {0}: {1}'
.format(prop, value))
_validate('host')
_validate('user')
if not is_kerberos_env():
# no need to supply password in Kerberos env
_validate('password')
def _set_env(self):
env = {'host_string': self.host, 'port': self.port, 'user': self.user}
if self.key:
if self.key.startswith(RSA_PRIVATE_KEY_PREFIX):
env['key'] = self.key
else:
env['key_filename'] = self.key
if self.password:
env['password'] = self.password
if is_kerberos_env():
# For GSSAPI, the fabric env just needs to have
# gss_auth and gss_kex set to True
env['gss_auth'] = True
env['gss_kex'] = True
env.update(COMMON_ENV)
return env
def _set_env(self):
env = {
'host_string': self.host,
'port': self.port,
'user': self.user
}
if self.key:
if self.key.startswith(RSA_PRIVATE_KEY_PREFIX):
env['key'] = self.key
else:
env['key_filename'] = self.key
if self.password:
env['password'] = self.password
if is_kerberos_env():
# For GSSAPI, the fabric env just needs to have
# gss_auth and gss_kex set to True
env['gss_auth'] = True
env['gss_kex'] = True
env.update(COMMON_ENV)
return env
def _set_env(self):
env = {
'host': self.host,
'port': self.port,
'user': self.user,
'connect_kwargs': {}
}
if self.key:
if self.key.startswith(PRIVATE_KEY_PREFIX):
env['connect_kwargs']['pkey'] = \
self._load_private_key(self.key)
else:
env['connect_kwargs']['key_filename'] = self.key
if self.password:
env['connect_kwargs']['password'] = self.password
if is_kerberos_env():
# For GSSAPI, the fabric env just needs to have
# gss_auth and gss_kex set to True
env['gss_auth'] = True
env['gss_kex'] = True
env.update(COMMON_ENV)
return env
def get_rest_client(client_profile=None,
rest_host=None,
rest_port=None,
rest_protocol=None,
rest_cert=None,
username=None,
password=None,
tenant_name=None,
trust_all=False,
skip_version_check=False,
cluster=None):
if client_profile is None:
client_profile = profile
rest_host = rest_host or client_profile.manager_ip
rest_port = rest_port or client_profile.rest_port
rest_protocol = rest_protocol or client_profile.rest_protocol
rest_cert = rest_cert or get_ssl_cert(client_profile)
username = username or get_username(client_profile)
password = password or get_password(client_profile)
tenant_name = tenant_name or get_tenant_name(client_profile)
trust_all = trust_all or get_ssl_trust_all()
headers = get_auth_header(username, password)
headers[constants.CLOUDIFY_TENANT_HEADER] = tenant_name
cluster = cluster or client_profile.cluster
if not is_kerberos_env():
if not username:
raise CloudifyCliError('Command failed: Missing Username')
if not password:
raise CloudifyCliError('Command failed: Missing password')
if cluster:
client = CloudifyClusterClient(
host=rest_host,
port=rest_port,
protocol=rest_protocol,
headers=headers,
cert=rest_cert,
trust_all=trust_all,
profile=client_profile)
else:
client = CloudifyClient(
host=rest_host,
port=rest_port,
protocol=rest_protocol,
headers=headers,
cert=rest_cert,
trust_all=trust_all)
# TODO: Put back version check after we've solved the problem where
# a new CLI is used with an older manager on `cfy upgrade`.
if skip_version_check or True:
return client
cli_version, manager_version = get_cli_manager_versions(client)
if cli_version == manager_version:
return client
elif not manager_version:
return client
else:
raise CloudifyCliError(
'CLI and manager versions do not match\n'
'CLI Version: {0}\n'
'Manager Version: {1}'.format(cli_version, manager_version))