File manager - Edit - /usr/lib/python3/dist-packages/uaclient/__pycache__/contract.cpython-310.pyc
Back
o =�xd�q � @ sP d dl Z d dlZd dlZd dlmZmZmZmZmZ d dl m Z m Z m Z m Z mZmZmZ d dlmZ d dlmZ d dlmZ dZdZdZd Zd Zd Z d Z d Z dZ dZ dZ!ddddd�Z"e �#� Z$G dd� dej%�Z& d>dedee'ef dee'ef de(de(d df d d �Z) d?ded ee'ef d!ee'ef de(de(d eee(f f d"d#�Z*d$e j+d e j,fd%d&�Z- d@d'ee' fd(d)�Z.ded ee fd*d+�Z/ded,e'd ee'ef fd-d.�Z0ded e(fd/d0�Z1d1ee'e'f d2ee'e'f d e2fd3d4�Z3 dAd5ee'ef d6e'd7e'd8ee' d ee2ee'ef f f d9d:�Z4 dBd ee'ef d;ee' d8ee' d dfd<d=�Z5dS )C� N)�Any�Dict�List�Optional�Tuple)�clouds� event_logger� exceptions�messages� serviceclient�system�util)�_enabled_services)�UAConfig)�ATTACH_FAIL_DATE_FORMATz/v1/context/machines/tokenz3/v1/contracts/{contract}/context/machines/{machine}z /v1/resourcesz3/v1/resources/{resource}/context/machines/{machine}z /v1/clouds/{cloud_type}/tokenz3/v1/contracts/{contract}/machine-activity/{machine}z /v1/contractz/v1/magic-attach� � � � )�series_overrides�series�cloud�variantc @ s� e Zd ZdZejZeje j g d�d�d.dd��Z de e ef fdd �Zd e de e ef fd d �Zeje j g d�d�d ejfdd��Z d.de de dee de e ef fdd�Z d.de de dee de fdd�Zdd� Zde de e ef fdd �Zde e ef fd d �Zde fd d �Z d.de de dee de e ef fd!d"�Z d.de de dee de fd#d$�Z d%e e ef fd&d'�Z d(d)� Z d*d+� Z d.dee fd,d-�Z dS )/�UAContractClient� contract_url)r r r )� retry_sleepsNc C s~ | � � }|�dd�|�i� | �|�}| jt||d�\}}| jj�|� t j � � |� di �� d|� d��}| j� d|� |S )a} Requests machine attach to the provided machine_id. @param contract_token: Token string providing authentication to ContractBearer service endpoint. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @return: Dict of the JSON response containing the machine-token. � Authorization� Bearer {})�data�headers�machineTokenInfo� machineId� machine-id)r �update�format�_get_platform_data� request_url�API_V1_ADD_CONTRACT_MACHINE�cfg�machine_token_file�writer �get_machine_id� cache_clear�get� write_cache)�self�contract_token� machine_idr r � machine_token�_headers� r4 �3/usr/lib/python3/dist-packages/uaclient/contract.py�add_contract_machine9 s � �z%UAContractClient.add_contract_machine�returnc C s | j t| �� d�\}}|S )z=Requests list of entitlements available to this machine type.)� query_params)r& �API_V1_AVAILABLE_RESOURCES�_get_platform_basic_info)r/ �resource_responser r4 r4 r5 �available_resourcesT s �z$UAContractClient.available_resourcesr0 c C s2 | � � }|�dd�|�i� | jt|d�\}}|S )Nr r �r )r r# r$ r& � API_V1_GET_CONTRACT_USING_TOKEN)r/ r0 r � response_data�_response_headersr4 r4 r5 �get_contract_using_token\ s �z)UAContractClient.get_contract_using_token�instancec C s| z| j tj|jd�|jd�\}}W n# tjy4 } z|j�dd�}|r.t � |� tj |d��|�d}~ww | j � d|� |S )z�Requests contract token for auto-attach images for Pro clouds. @param instance: AutoAttachCloudInstance for the cloud. @return: Dict of the JSON response containing the contract-token. )� cloud_type)r �message� )� error_msgNzcontract-token)r& �,API_V1_GET_CONTRACT_TOKEN_FOR_CLOUD_INSTANCEr$ rC � identity_docr �ContractAPIError� api_errorr- �logging�debug�InvalidProImager( r. )r/ rB �responser3 �e�msgr4 r4 r5 �%get_contract_token_for_cloud_instanced s" �� ��z6UAContractClient.get_contract_token_for_cloud_instancer2 �resourcer1 c C sz |st �| j�}| �� }|�dd�|�i� tj||d�}| j||d�\}}|�d�r1|d |d< | j� d�|�|� |S )a� Requests machine access context for a given resource @param machine_token: The authentication token needed to talk to this contract service endpoint. @param resource: Entitlement name. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @return: Dict of the JSON response containing entitlement accessInfo. r r )rR �machiner= �expireszmachine-access-{}) r r+ r( r r# r$ �"API_V1_GET_RESOURCE_MACHINE_ACCESSr& r- r. )r/ r2 rR r1 r �url�resource_accessr4 r4 r5 �get_resource_machine_access s � �z,UAContractClient.get_resource_machine_access� contract_idc C s | j |||d�S )z6Update existing machine-token for an attached machine.)r2 rY r1 )�_update_contract_machine)r/ r2 rY r1 r4 r4 r5 �update_contract_machine� s �z(UAContractClient.update_contract_machinec C s� | j jj}| j j�d�}t�| j �}| �|�}tj ||d�}| � � }|� dd� |�i� | j |||d�\}}|rI| j j}||d< | j j� |� dS dS )z�Report current activity token and enabled services. This will report to the contracts backend all the current enabled services in the system. � machineToken��contractrS r r )r r � activityInfoN)r( r) rY r2 r- r r+ �_get_activity_info� API_V1_UPDATE_ACTIVITY_TOKENr$ r r# r& r* ) r/ rY r2 r1 � request_datarV r rN �_r4 r4 r5 �update_activity_token� s ��z&UAContractClient.update_activity_token� magic_tokenc C s� | � � }|�dd�|�i� z | jt|d�\}}W |S tjy@ } zt|d�r:|jdkr1t� � �|jdkr:t� � �|�d}~w tj yW } z t � t|�� t�� �d}~ww )z�Request magic attach token info. When the magic token is registered, it will contain new fields that will allow us to know that the attach process can proceed r r r= �code� � N)r r# r$ r& �"API_V1_GET_MAGIC_ATTACH_TOKEN_INFOr rI �hasattrrf �MagicAttachTokenError�MagicAttachUnavailable�UrlErrorrK � exception�str�ConnectivityError)r/ re r rN rc rO r4 r4 r5 �get_magic_attach_token_info� s( �� ���z,UAContractClient.get_magic_attach_token_infoc C s� | � � }z | jt|dd�\}}W |S tjy) } z |jdkr#t�� �|�d}~w tjy@ } z t� t |�� t� � �d}~ww )z)Create a magic attach token for the user.�POST�r �methodrh N) r r& �API_V1_NEW_MAGIC_ATTACHr rI rf rl rm rK rn ro rp )r/ r rN rc rO r4 r4 r5 �new_magic_attach_token� s$ � � ���z'UAContractClient.new_magic_attach_tokenc C s� | � � }|�dd�|�i� z | jt|dd� W d S tjyH } z"t|d�rB|jdkr0t� � �|jdkr9t� � �|jdkrBt� � �|�d }~w tj y_ } z t �t|�� t�� �d }~ww ) z)Revoke a magic attach token for the user.r r �DELETErs rf i� rg rh N)r r# r$ r& �API_V1_REVOKE_MAGIC_ATTACHr rI rj rf � MagicAttachTokenAlreadyActivatedrk rl rm rK rn ro rp )r/ re r rO r4 r4 r5 �revoke_magic_attach_token� s. � ���z*UAContractClient.revoke_magic_attach_tokenc C st |s | � |��dd�}| �� }|�dd�|�i� tj||d�}| j|d|| �� d�\}}|�d�r8|d |d< |S ) a| Get the updated machine token from the contract server. @param machine_token: The machine token needed to talk to this contract service endpoint. @param contract_id: Unique contract id provided by contract service @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. r! Nr r r] �GET)rt r r8 rT )r% r- r r# r$ �API_V1_GET_CONTRACT_MACHINEr& r: )r/ r2 rY r1 r rV rN r4 r4 r5 �get_contract_machine s& �� � z%UAContractClient.get_contract_machinec C s� | � � }|�dd�|�i� | �|�}| �� |d< tj||d d�}| j||d|d�\}}|�d�r8|d |d< |�d i ��d|�d��}|S ) a� Request machine token refresh from contract server. @param machine_token: The machine token needed to talk to this contract service endpoint. @param contract_id: Unique contract id provided by contract service. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @return: Dict of the JSON response containing refreshed machine-token r r r_ r! r] rr )r rt r rT r )r r# r$ r% r` � API_V1_UPDATE_CONTRACT_MACHINEr& r- )r/ r2 rY r1 r r rV rN r4 r4 r5 rZ 6 s � � �z)UAContractClient._update_contract_machinerN c C sN | j j�|� tj�� | �d �}|�di ��d|�d��}| j �d|� d S )Nr r! r" ) r( r) r* r r+ r, r% r- r. )r/ rN r r1 r4 r4 r5 �'update_files_after_machine_token_updateW s �z8UAContractClient.update_files_after_machine_token_updatec C sR |st �| j�}|t �� dt �� jt �� jt �� jt �� jt � � j t � � d�d�S )z<Return a dict of platform-related data for contract requests�Linux)�type� distribution�releaser �version�kernel�virt)r! � architecture�os) r r+ r( � get_dpkg_arch�get_release_infor� r� r �pretty_version�get_kernel_info� uname_release� get_virt_type)r/ r1 r4 r4 r5 r% b s ��z#UAContractClient._get_platform_datac C s" t �� t �� jt �� jt �� d�S )z?Return a dict of platform basic info for some contract requests)r� r r� r� )r r� r� r r� r� r� )r/ r4 r4 r5 r: t s �z)UAContractClient._get_platform_basic_infoc C sJ |st �| j�}| jjjp|}t| j�jpg }|| jjjdd� |D �d�S )z9Return a dict of activity info data for contract requestsc S s g | ]}|j �qS r4 )�name)�.0�servicer4 r4 r5 � <listcomp>� s z7UAContractClient._get_activity_info.<locals>.<listcomp>)� activityID� activityToken� resources)r r+ r( r) � activity_idr �enabled_services�activity_token)r/ r1 r� r� r4 r4 r5 r` } s �z#UAContractClient._get_activity_info�N)!�__name__� __module__� __qualname__�cfg_url_base_attrr rI � api_error_clsr �retry�socket�timeoutr6 r ro r r< rA r �AutoAttachCloudInstancerQ r rX r[ rd rq rv rz r} rZ r r% r: r` r4 r4 r4 r5 r 4 sz � ���� �#���� � # ���� �&���� �! � r Tr( �past_entitlements�new_entitlements� allow_enabler r7 c C sz ddl m} d}d}g }|| �D ]�} z|| } W n ty! Y qw g }zt| |�| i �| ||d�\} } W n\ tjyd d}|�| � t� � � t � dj | | d�� W d � n1 s]w Y Y q t y� d}|�| � t� � � t �d j | | d�� W d � n1 s�w Y Y qw | r�| r�t�| � qt�|� |r�tjd d � |D �d ��|r�tjd d � |D �d ��dS )a� Iterate over all entitlements in new_entitlement and apply any delta found according to past_entitlements. :param cfg: UAConfig instance :param past_entitlements: dict containing the last valid information regarding service entitlements. :param new_entitlements: dict containing the current information regarding service entitlements. :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :param series_overrides: Boolean set True if series overrides should be applied to the new_access dict. r )�entitlements_enable_orderF)r( � orig_access� new_accessr� r Tz4Failed to process contract delta for {name}: {delta})r� �deltaNz>Unexpected error processing contract delta for {name}: {delta}c S � g | ]}|t jf�qS r4 )r �UNEXPECTED_ERROR�r� r� r4 r4 r5 r� � s �z.process_entitlements_delta.<locals>.<listcomp>)�failed_servicesc S r� r4 )r � ATTACH_FAILURE_DEFAULT_SERVICESr� r4 r4 r5 r� � s ��)�uaclient.entitlementsr� �KeyError�process_entitlement_deltar- r �UserFacingError�appendr �disable_log_to_consolerK �errorr$ � Exceptionrn �event�service_processed�services_failed�AttachFailureUnknownError� AttachFailureDefaultServices) r( r� r� r� r r� � delta_error�unexpected_errorr� r� �new_entitlement�deltas�service_enabledr4 r4 r5 �process_entitlements_delta� sv � � �� �� �� ��� � �����r� Fr� r� c C s� ddl m} |r t|� t�||�}d}|rx|�di ��d�}|s*|�di ��d�}|s=tjj||d�} t j | j | j d��|�di ��d i ��d d �} z || || d �} W n t j yi } zt�d |� | �d} ~ ww | | |d�} | j|||d�}||fS )a- Process a entitlement access dictionary deltas if they exist. :param cfg: UAConfig instance :param orig_access: Dict with original entitlement access details before contract refresh deltas :param new_access: Dict with updated entitlement access details after contract refresh :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :param series_overrides: Boolean set True if series overrides should be applied to the new_access dict. :raise UserFacingError: on failure to process deltas. :return: A tuple containing a dict of processed deltas and a boolean indicating if the service was fully processed r )�entitlement_factoryF� entitlementr� )�orig�new�rP �msg_code� entitlements� obligations� use_selectorrE )r( r� r z3Skipping entitlement deltas for "%s". No such classN)r( � assume_yes)r� )r� r� �apply_contract_overridesr �get_dict_deltasr- r �$INVALID_CONTRACT_DELTAS_SERVICE_TYPEr$ r r� rP r� �EntitlementNotFoundErrorrK rL �process_contract_deltas)r( r� r� r� r r� r� �retr� rP r �ent_cls�excr� r4 r4 r5 r� � s@ � ���� �r� rO c C s� t j}t| d�r{d| jv r{| jd }|d }|d }d }|dkr=|d �t�}|d �d�|d�}t jj||d �}||_n,|d kr^|d �t�}|d �d�|d �}t j j||d �}||_n |d krit j j|d �}|r{t j j|j d�}|j |_ |j|_|S )NrJ �info� contractId�reasonzno-longer-effective�timez%m-%d-%Y)�contract_expiry_daterY )rY �dateznot-effective-yet)�contract_effective_daterY znever-effective)rY )r� )r �ATTACH_EXPIRED_TOKENrj rJ �strftimer �ATTACH_FORBIDDEN_EXPIREDr$ �additional_info�ATTACH_FORBIDDEN_NOT_YET�ATTACH_FORBIDDEN_NEVER�ATTACH_FORBIDDENrP r� )rO rP r� rY r� � reason_msgr� r� r4 r4 r5 � _create_attach_forbidden_message sB �� ���r� r0 c C sD | j }| jj}|r|rtj}tj|j|jd��t | �}|rz|j |d� W nq tj y~ } zLt |tj �rXt|d�rV|jdkrBt�� �|jdkrVt|�}tj|j|j|jd��|�t�� � t�t|�� W d � t�� �1 sqw Y t�� �d}~ww |d }|d d d } |j|| d �} |�| � t| || jj|� dS ) af Request contract refresh from ua-contracts service. Compare original token to new token and react to entitlement deltas. :param cfg: Instance of UAConfig for this machine. :param contract_token: String contraining an optional contract token. :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :raise UserFacingError: on failure to update contract or error processing contract deltas :raise UrlError: On failure to contact the server r� )r0 rf rg i� )rP r� r� Nr\ r � contractInfo�id)r2 rY ) r2 r) r� r �-UNEXPECTED_CONTRACT_TOKEN_ON_ATTACHED_MACHINEr r� rP r� r r6 rm � isinstancerI rj rf �AttachInvalidTokenErrorr� r� r r� rK rn ro rp r[ r r� ) r( r0 r� � orig_token�orig_entitlementsrP �contract_clientrO r2 rY �respr4 r4 r5 �request_updated_contractG sT � ����� �r� c C s t | �}|�� }|�dg �S )zDQuery available resources from the contract server for this machine.r� )r r< r- )r( �clientr� r4 r4 r5 �get_available_resources� s r� �tokenc C s t | �}|�|�S )z/Query contract information for a specific token)r rA )r( r� r� r4 r4 r5 �get_contract_information� s r� c C s� | j }| jj}|�dd�}|�di ��di ��dd �}|s dS t| �}|�||�}|�di ��di ��dd �}|r;|n| jj}| jj|krGdS | j�|�} t| � � �D ]\} } t � |�| i �| �} | rf dS qSdS ) Nr\ rE r r� r� F� effectiveToT) r2 r) r� r- r r} �contract_expiry_datetime�get_entitlements_from_token�sorted�itemsr r� ) r( r� r� r2 rY r� r� � resp_expiry� new_expiry�curr_entitlementsr� r� r� r4 r4 r5 �is_contract_changed� s@ � ��� � ��r� �override_selector�selector_valuesc C s< d}| � � D ]\}}||f|� � vr dS |t| 7 }q|S )Nr )r� �OVERRIDE_SELECTOR_WEIGHTS)r� r� �override_weight�selector�valuer4 r4 r5 �_get_override_weight� s r r� � series_namerC r c C sz i }||d�}|r ||d< | � di �� |i �}|r ||td < t�| �dg ��}|D ]}t|� d�|�} | r:||| < q*|S )N)r r r r r � overridesr� )�popr� �copy�deepcopyr- r ) r� r rC r r r� r �general_overrides�override�weightr4 r4 r5 �_select_overrides� s& �� ��r r c C s� ddl m} tt| t�d| v g�std�| ���|du r!t�� j n|}|� \}}| � di �}t ||||�}t |� � �D ]%\} } | � � D ] \} } | d � | �} t| t�rY| �| � qC| | d | < qCq;dS )a� Apply series-specific overrides to an entitlement dict. This function mutates orig_access dict by applying any series-overrides to the top-level keys under 'entitlement'. The series-overrides are sparse and intended to supplement existing top-level dict values. So, sub-keys under the top-level directives, obligations and affordance sub-key values will be preserved if unspecified in series-overrides. To more clearly indicate that orig_access in memory has already had the overrides applied, the 'series' key is also removed from the orig_access dict. :param orig_access: Dict with original entitlement access details r )�get_cloud_typer� z?Expected entitlement access dict. Missing "entitlement" key: {}N)�uaclient.clouds.identityr �allr� �dict� RuntimeErrorr$ r r� r r- r r� r� r# )r� r r r r rC rc �orig_entitlementr �_weight�overrides_to_apply�keyr �currentr4 r4 r5 r� � s* �� � ��r� )T)FT)NFr� )NN)6r rK r� �typingr r r r r �uaclientr r r r r r r �-uaclient.api.u.pro.status.enabled_services.v1r �uaclient.configr �uaclient.defaultsr r' r| r~ r9 rU rG ra r> ri ru rx r� �get_event_loggerr� �UAServiceClientr ro �boolr� r� rI � NamedMessager� r� r� r� r� �intr r r� r4 r4 r4 r5 �<module> s� $ ����� a�� � ��� �U�� � ��� �=� �,� �: & � � �� ���� � � ����
| ver. 1.4 |
Github
|
.
| PHP 8.2.9 | Generation time: 0.02 |
proxy
|
phpinfo
|
Settings