3
\mek @ s U d Z ddlZddlZddlZddlmZ ddlmZ ddlm Z m
Z
ddl m Z ddl
mZ ddlmZmZ dd lmZ d
Zd Zd Zd
ZdgZdddeeedgedgdZeeeZ ejeZ eeefddZ e ee e ddddZ dS )z6 Mcollective: Install, configure and start mcollective N)dedent) ConfigObj)subputil)Cloud)Config)
MetaSchema get_meta_doc) PER_INSTANCEz&/etc/mcollective/ssl/server-public.pemz'/etc/mcollective/ssl/server-private.pemz/etc/mcollective/server.cfga This module installs, configures and starts mcollective. If the ``mcollective``
key is present in config, then mcollective will be installed and started.
Configuration for ``mcollective`` can be specified in the ``conf`` key under
``mcollective``. Each config value consists of a key value pair and will be
written to ``/etc/mcollective/server.cfg``. The ``public-cert`` and
``private-cert`` keys, if present in conf may be used to specify the public and
private certificates for mcollective. Their values will be written to
``/etc/mcollective/ssl/server-public.pem`` and
``/etc/mcollective/ssl/server-private.pem``.
.. note::
The ec2 metadata service is readable by non-root users.
If security is a concern, use include-once and ssl urls.
allZcc_mcollectiveZ Mcollectivez(Install, configure and start mcollectivea # Provide server private and public key and provide the following
# config settings in /etc/mcollective/server.cfg:
# loglevel: debug
# plugin.stomp.host: dbhost
# WARNING WARNING WARNING
# The ec2 metadata service is a network service, and thus is
# readable by non-root users on the system
# (ie: 'ec2metadata --user-data')
# If you want security for this, please use include-once + SSL urls
mcollective:
conf:
loglevel: debug
plugin.stomp.host: dbhost
public-cert: |
-------BEGIN CERTIFICATE--------
-------END CERTIFICATE--------
private-cert: |
-------BEGIN CERTIFICATE--------
-------END CERTIFICATE--------
mcollective)idnametitle descriptiondistrosZexamplesZ frequencyZactivate_by_schema_keysc ! C s y"t j|ddd}ttj|}W nD tk
rf } z(|jtjkrD ntj d| t }W Y d d }~X nX x| j
D ]\}}|dkrt j ||dd ||d< d|d < qr|d
krt j ||d d ||d < d|d < qrt |t
r|||< qrt |tr(||jkri ||< x0|j
D ]\} }
|
|| | < q W qrt
|||< qrW yt j|d
| W n6 tk
r } z|jtjkrpn W Y d d }~X nX tj } |j| t j || j dd d S )NF)quietdecodez4Did not find file %s (starting with an empty config)z public-certi )modezplugin.ssl_server_publicZsslZsecurityproviderz private-certi zplugin.ssl_server_privatez%s.old)r Z load_filer ioBytesIOIOErrorerrnoENOENTLOGdebugitemsZ
write_file
isinstancestrdictZsectionscopywritegetvalue) configZ
server_cfgZ pubcert_fileZ pricert_fileZ old_contentsZmcollective_configeZcfg_namecfgovcontents r) $/usr/lib/python3.6/cc_mcollective.py configure\ sH
r+ )r r% cloudargsreturnc C s\ d|krt jd| d S |d }|jjdg d|krDt|d d tjdddgdd d S ) Nr z?Skipping module named %s, no 'mcollective' key in configurationZconf)r# ZserviceZrestartF)Zcapture)r r ZdistroZinstall_packagesr+ r )r r% r, r- Zmcollective_cfgr) r) r* handle s r/ )!__doc__r r Zloggingtextwrapr Z configobjr Z cloudinitr r Zcloudinit.cloudr Zcloudinit.configr Zcloudinit.config.schemar r Zcloudinit.settingsr
Z PUBCERT_FILEZ PRICERT_FILEZ
SERVER_CFGZMODULE_DESCRIPTIONr metaZ getLogger__name__r r+ r listr/ r) r) r) r*
s<
9