def resolve_roles(env_request, interactive): """ Resolves instance-profile and service-role :param env_request: environment request :param interactive: boolean """ LOG.debug('Resolving roles') if (not env_request.instance_profile or env_request.instance_profile == iam_attributes.DEFAULT_ROLE_NAME ) and not env_request.template_name: env_request.instance_profile = commonops.create_default_instance_profile( ) if (env_request.platform and env_request.platform.has_healthd_support and not env_request.service_role and not env_request.template_name): role = get_service_role() if role is None: if interactive: io.echo() io.echo(prompts['create.servicerole.info']) input = io.get_input(prompts['create.servicerole.view'], default='') if input.strip('"').lower() == 'view': for policy_arn in DEFAULT_SERVICE_ROLE_POLICIES: document = iam.get_managed_policy_document(policy_arn) io.echo(json.dumps(document, indent=4)) io.get_input(prompts['general.pressenter']) role = create_default_service_role() env_request.service_role = role
def resolve_roles(env_request, interactive): """ Resolves instance-profile and service-role :param env_request: environment request :param interactive: boolean """ LOG.debug('Resolving roles') if ( ( not env_request.instance_profile or env_request.instance_profile == iam_attributes.DEFAULT_ROLE_NAME ) and not env_request.template_name ): # Service supports no profile, however it is not good/recommended # Get the eb default profile env_request.instance_profile = commonops.create_default_instance_profile() if ( env_request.platform and env_request.platform.has_healthd_support and not env_request.service_role and not env_request.template_name ): role = get_service_role() if role is None: if interactive: io.echo() io.echo(prompts['create.servicerole.info']) input = io.get_input(prompts['create.servicerole.view'], default='') if input.strip('"').lower() == 'view': for policy_arn in DEFAULT_SERVICE_ROLE_POLICIES: document = iam.get_managed_policy_document(policy_arn) io.echo(json.dumps(document, indent=4)) io.get_input(prompts['general.pressenter']) # Create the service role if it does not exist role = create_default_service_role() env_request.service_role = role
def resolve_roles(env_request, interactive): """ Resolves instance-profile and service-role :param env_request: environment request :param interactive: boolean """ LOG.debug('Resolving roles') if (env_request.instance_profile is None or env_request.instance_profile == iam_attributes.DEFAULT_ROLE_NAME) \ and env_request.template_name is None: # Service supports no profile, however it is not good/recommended # Get the eb default profile env_request.instance_profile = commonops.create_default_instance_profile( ) if (env_request.platform is not None and env_request.platform.has_healthd_support() and # HealthD enabled (env_request.service_role is None) and (env_request.template_name is None)): role = get_service_role() if role is None: if interactive: io.echo() io.echo(prompts['create.servicerole.info']) input = io.get_input(prompts['create.servicerole.view'], default='') if input.strip('"').lower() == 'view': for policy_arn in DEFAULT_SERVICE_ROLE_POLICIES: document = iam.get_managed_policy_document(policy_arn) io.echo(json.dumps(document, indent=4)) io.get_input(prompts['general.pressenter']) # Create the service role if it does not exist role = create_default_service_role() env_request.service_role = role