3
ܓi" @ sb d dl Z d dlZd dlmZmZmZmZ G dd deZG dd deeeZG dd deeZ dS ) N)Plugin RedHatPlugin DebianPlugin UbuntuPluginc @ sF e Zd ZdZdZdZdZdZd Zd
Z d gZ
d d
Z dd Z dd Z
d
S )
OpenStackNovazOpenStack NovaZopenstack_nova openstackopenstack_controlleropenstack_computeopenstack_edpm
.*nova_apiz*/var/lib/config-data/puppet-generated/novazopenstack-nova-api.serviceNz
/etc/nova/c sf j d} j js |rfd}|r2d j d } jd| d dd jd| d d
d jd| d d d jd
| d dd dd dCD }dd dDD }t|ot|sĈ jjd n jd jd jd jd jd jd jd j d }|d d!krf|d" }x:|j
d#dE D ]&}|j d$ }d%| } j| q jd? jd@ gtttjdAj fdBd| D }
j
|
d S )FNz
.*nova_api z
--config-dir z
/etc/nova/z nova-manage z db versionznova-manage_db_version)Zsuggest_filenamez fixed listznova-manage_fixed_listz floating listznova-manage_floating_listz nova-status z upgrade checkznova-status_upgrade_checkc S s g | ]}|t jkqS )osenviron).0pr
r
$/usr/lib/python3.6/openstack_nova.py
@ s z'OpenStackNova.setup.. OS_USERNAME OS_PASSWORDc S s g | ]}|t jkqS r
)r r )r r r
r
r r C s OS_TENANT_NAMEOS_PROJECT_NAMEz}Not all environment variables set. Source the environment file for the user intended to connect to the OpenStack environment.z openstack compute service listz openstack flavor list --longz openstack compute agent listznova version-listzopenstack hypervisor listzopenstack quota showz openstack hypervisor stats showz$openstack server list --all-projectsZstatusr output zopenstack server show all_logsz/var/log/nova/z /var/log/z*/nova*z%/var/lib/nova/instances/*/console.logz
nova-api.log*znova-compute.log*znova-conductor.log*znova-metadata-api.log*znova-manage.log*znova-placement-api.log*znova-scheduler.log*z */nova*.logz*/placement*.log_libvirt _metadata
_placementz/etc/my.cnf.d/tripleo.cnfz/etc/httpd/conf/z/etc/httpd/conf.d/z /etc/httpd/conf.modules.d/*.confZauthorized_keysz%/../memcached/etc/sysconfig/memcachedz/var/spool/cron/novaz_libvirt/etc/libvirt/z _libvirt/etc/nova/migration/z!_libvirt/var/lib/nova/.ssh/configz^((?!libvirt.+httpd).)*$c s( g | ] }D ]} j | | q qS r
)var_puppet_gen)r r s)selfsyspathsr
r r s )r r )r r )Zcontainer_existsZis_service_running service_namer Zadd_cmd_outputallanyZsoslogZwarningZcollect_cmd_output
splitlinessplit
get_option
add_copy_spec apachepkgZ path_joinlistfilterrecompilematch)r! Z in_containerZ nova_configZvars_allZvars_anyresZnova_instancesinstancecmdZnovadirZnovalogsZnovalogZnpathsZspecsr
)r! r" r setup" s
zOpenStackNova.setupc C sT xN| j D ]D}| j| d|| x*dD ]"}| j| j | | d|| q&W qW dS )z0 Apply regex substitution to all sensitive dirs z/*r r r r N)r r r r )
postproc_dirsZdo_path_regex_subr )r! ZregexpZsubstZ_dirZnpathr
r
r apply_regex_sub s
z OpenStackNova.apply_regex_subc C sT dddddg}dddg}d j |}| jd
d j | d d | jd
| d
d d S )Nz.*_keyz.*_pass(wd|word)?ZpasswordZ metadata_proxy_shared_secretZrbd_secret_uuidZ
connectionZsql_connectionZ
transport_url|z(^\s*(z
)\s*=\s*)(.*)z \1*********z!)\s*=\s*(.*)://(\w*):)(.*)(@(.*))z
\1*********\6)joinr6 )r! Z protect_keysZconnection_keysZ
join_con_keysr
r
r postproc s
zOpenStackNova.postproc)r r r r
)r )__name__
__module__ __qualname__Z
short_descZ plugin_nameZprofilesZ
containersr r$ r+ r5 r4 r6 r9 r
r
r
r r s n r c s, e Zd ZdZdZdZdZ fddZ ZS )
DebianNovaZapache2F nova-api-ec2nova-api-metadatanova-api-os-computenova-api-os-volume nova-common nova-computenova-compute-kvmnova-compute-lxcnova-compute-qemunova-compute-umlnova-compute-xcpnova-compute-xennova-xcp-pluginsnova-consoleauth nova-networknova-scheduler nova-volumenovnc python-nova python-novnc python3-novaznova-api.servicec s t j | jddg d S )Nz/etc/sudoers.d/nova_sudoersz,/usr/share/polkit-1/rules.d/60-libvirt.rules)superr4 r* )r! ) __class__r
r r4 s
zDebianNova.setup)r> r? r@ rA rB rC rD rE rF rG rH rI rJ rK rL rM rN rO rP rQ rR ) r: r; r< r+ novapackagesr$ r4
__classcell__r
r
)rT r r= s2 r= c s0 e Zd ZdZdZdZddgZ fddZ ZS )
RedHatNovaZhttpdFopenstack-selinuxz
/etc/nova/z /var/lib/openstack/config/novac sZ t j | jdddddddg | jdr<| jd d
g n| jd d g | jd
g d S )Nz /etc/logrotate.d/openstack-novaz4/etc/polkit-1/localauthority/50-local.d/50-nova.pklaz/etc/sudoers.d/novaz#/etc/security/limits.d/91-nova.confz(/etc/sysconfig/openstack-nova-novncproxyz /var/lib/openstack/config/novaz(/var/lib/openstack/containers/nova*.jsonr z/var/log/httpd/placement*z/var/log/containers/nova/*z /var/log/httpd/placement*.logz /var/log/containers/nova/*.logz-/var/lib/openstack/config/nova/ssh-privatekey)rS r4 r* r) Zadd_forbidden_path)r! )rT r
r r4 s$
zRedHatNova.setup)rY ) r: r; r< r+ rU rV r5 r4 rW r
r
)rT r rX s
rX )
r r. Zsos.report.pluginsr r r r r r= rX r
r
r
r s %