python saltstack api

# -*- coding:utf-8 -*- import sys import json import pycurl from io import BytesIO class PyCurl(object): def __init__(self, url, **kwargs): # 傳入url地址 self.url = url # 取出header相關信息 self.header = kwargs.get("header", None) # 創建一個curl對象 self.curl = pycurl.Curl() # setopt 來設置一些請求選項 # 指定請求的URL self.curl.setopt(self.curl.URL, self.url) # 設置代理瀏覽器 self.curl.setopt(self.curl.HEADER, False) # 設置請求方式 self.curl.setopt(self.curl.POST, True) # 設置https方式 self.curl.setopt(pycurl.SSL_VERIFYPEER, 0) self.curl.setopt(pycurl.SSL_VERIFYHOST, 0) # 判斷header是否存在 if self.header: # 設置模擬瀏覽器 self.curl.setopt(self.curl.HTTPHEADER, self.header) def request(self, data=None, timeout=None): # 判斷對象類型 是否爲 str if isinstance(data, str): # 將數據提交 self.curl.setopt(pycurl.POSTFIELDS, data) header_buf = BytesIO() body_buf = BytesIO() # 強制獲取新的連接，即替代緩存中的連接 self.curl.setopt(self.curl.FRESH_CONNECT, True) # 完成交互後強制斷開連接，不重用 self.curl.setopt(self.curl.FORBID_REUSE, True) if str(timeout).isdigit() and timeout > 0: # 設置timeout超時時間 self.curl.setopt(self.curl.TIMEOUT, timeout) # 將返回的HTTP HEADER定向到回調函數header_buf self.curl.setopt(self.curl.HEADERFUNCTION, header_buf.write) # 將返回的內容定向到回調函數body_buf self.curl.setopt(self.curl.WRITEFUNCTION, body_buf.write) try: # 服務器返回信息 self.curl.perform() except pycurl.error: return False # 狀態碼 http_code = self.curl.getinfo(self.curl.HTTP_CODE) # 關閉連接 self.curl.close() # 返回狀態碼 header body return {"http_code": http_code, "header": header_buf.getvalue(), "body": body_buf.getvalue(), "url": self.url} class SaltApi(object): def __init__(self, **kwargs): # 設置超時時間 self.timeout = kwargs.get("timeout", 300) # 設置頭信息 self.header = kwargs.get("header", ["Content-Type:application/json"]) # 獲取url self.__url = "https://192.168.44.20:8888" # 獲取 self.__username = "saltapi" self.__password = "password" # token id 獲取 def token_id(self): obj = {'eauth': 'pam', 'username': self.__username, 'password': self.__password} result = self.post(prefix="/login/", **obj) if result: try: self.__token_id = result['return'][0]['token'] except KeyError: raise KeyError print('##',self.__token_id,'##') return self.__token_id def post(self, prefix="/", token=None, **data): # url拼接 url = self.__url + prefix print (data) # 實例化 self.header.append(str(token)) curl = PyCurl(url, header=self.header) # 發起請求 result = curl.request(data=json.dumps(data), timeout=self.timeout) # 判斷值 if not result: return result # 判斷狀態碼是否等於200 if result["http_code"] != 200: self.response = "response code %s".format(result["info"]["http_code"]) return self.response result = json.loads(result["body"].decode()) # 判斷是否有error if "error" in result and result["error"]: self.response = "%s(%s)" % (result["error"]["data"], result["error"]["code"]) return self.response # 返回正確的數據 return result def all_key(self): ''' 獲取所有的minion_key ''' token = 'X-Auth-Token:%s' % self.token_id() obj = {'client': 'wheel', 'fun': 'key.list_all'} content = self.post(token=token, **obj) # 取出認證已經通過的 minions = content['return'][0]['data']['return']['minions'] # print('已認證',minions) # 取出未通過認證的 minions_pre = content['return'][0]['data']['return']['minions_pre'] # print('未認證',minions_pre) return minions, minions_pre def accept_key(self, node_name): ''' 如果你想認證某個主機 那麼調用此方法 ''' token = 'X-Auth-Token:%s' % self.token_id() obj = {'client': 'wheel', 'fun': 'key.accept', 'match': node_name} content = self.post(token=token, **obj) print (content) ret = content['return'][0]['data']['success'] return ret # 刪除認證方法 def delete_key(self, node_name): obj = {'client': 'wheel', 'fun': 'key.delete', 'match': node_name} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) ret = content['return'][0]['data']['success'] return ret ''' tgt_type -- The type of tgt. Allowed values: glob - Bash glob completion - Default pcre - Perl style regular expression list - Python list of hosts grain - Match based on a grain comparison grain_pcre - Grain comparison with a regex pillar - Pillar data comparison pillar_pcre - Pillar data comparison with a regex nodegroup - Match on nodegroup range - Use a Range server for matching compound - Pass a compound match string ipcidr - Match based on Subnet (CIDR notation) or IPv4 address. Changed in version 2017.7.0: Renamed from expr_form to tgt_type 可以針對各種類型進行執行響應的命令 sapi = SaltApi() ret = sapi.host_remote_func(tgt="ba*",fun='test.ping',tgt_type='pcre') print('%s\n%s'%('pcre',ret)) ret = sapi.host_remote_func(tgt="bamboo,Min-Centos1",fun='test.ping',tgt_type='list') print('%s\n%s' % ('list', ret)) ret = sapi.host_remote_func(tgt="*",fun='test.ping') print('%s\n%s' % ('glob', ret)) ret = sapi.host_remote_func(tgt="os:CentOS",fun='test.ping',tgt_type='grain') print('%s\n%s' % ('grain', ret)) ret = sapi.host_remote_func(tgt="L@Min-Centos1 or G@os:Ubuntu",fun='test.ping',tgt_type='compound') print('%s\n%s' % ('compound', ret)) ret = sapi.host_remote_func(tgt="192.168.44.0/24",fun='test.ping',tgt_type='ipcidr') ''' # 針對主機遠程執行模塊 # def host_remote_func(self, tgt, fun,expr_from='glob'): def host_remote_func(self, tgt, fun, tgt_type='glob'): ''' tgt是主機 fun是模塊 寫上模塊名 返回 可以用來調用基本的資產 例如 curl -k https://ip地址:8080/ \ > -H "Accept: application/x-yaml" \ > -H "X-Auth-Token:b50e90485615309de0d83132cece2906f6193e43" \ > -d client='local' \ > -d tgt='*' \ > -d fun='test.ping' 要執行的模塊 return: - iZ28r91y66hZ: true node2.minion: true ''' obj = {'client': 'local', 'tgt': tgt, 'fun': fun, 'tgt_type': tgt_type} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) ret = content['return'][0] return ret def group_remote_func(self, tgt, fun): obj = {'client': 'local', 'tgt': tgt, 'fun': fun, 'expr_form': 'nodegroup'} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) print (content) ret = content['return'][0] return ret def host_remote_execution_module(self, tgt, fun, arg, tgt_type='glob'): '執行fun 傳入傳入參數arg ' obj = {'client': 'local', 'tgt': tgt, 'fun': fun, 'arg': arg, 'tgt_type': tgt_type} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) ret = content['return'][0] return ret # print(salt_aa.host_remote_execution_module('*', 'cmd.run', 'ifconfig')) # 基於分組來執行 def group_remote_execution_module(self, tgt, fun, arg): ''' 根據分組來執行 tgt = ''' obj = {'client': 'local', 'tgt': tgt, 'fun': fun, 'arg': arg, 'expr_form': 'nodegroup'} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) jid = content['return'][0] return jid def host_sls(self, tgt, arg, tgt_type='glob'): '''主機進行sls''' obj = {'client': 'local', 'tgt': tgt, 'fun': 'state.sls', 'arg': arg, 'tgt_type': tgt_type} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) return content def group_sls(self, tgt, arg): ''' 分組進行sls ''' obj = {'client': 'local', 'tgt': tgt, 'fun': 'state.sls', 'arg': arg, 'expr_form': 'nodegroup'} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) jid = content['return'][0]['jid'] return jid def host_sls_async(self, tgt, arg, tgt_type='glob'): '''主機異步sls ''' obj = {'client': 'local_async', 'tgt': tgt, 'fun': 'state.sls', 'arg': arg, 'tgt_type': tgt_type} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) jid = content['return'][0]['jid'] return jid def group_sls_async(self, tgt, arg): '''分組異步sls ''' obj = {'client': 'local_async', 'tgt': tgt, 'fun': 'state.sls', 'arg': arg, 'expr_form': 'nodegroup'} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) jid = content['return'][0]['jid'] return jid def server_group_pillar(self, tgt, arg, **kwargs): '''分組進行sls and pillar''' obj = {'client': 'local', 'tgt': tgt, 'fun': 'state.sls', 'arg': arg, 'expr_form': 'nodegroup', 'kwarg': kwargs} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) jid = content['return'][0] print (jid) def server_hosts_pillar(self, tgt, arg, **kwargs): '''針對主機執行sls and pillar ''' obj = {"client": "local", "tgt": tgt, "fun": "state.sls", "arg": arg, "kwarg": kwargs} token = 'X-Auth-Token:%s' % self.token_id() content = self.post(token=token, **obj) jid = content['return'][0] print content return jid def jobs_all_list(self): '''打印所有jid緩存''' token = 'X-Auth-Token:%s' % self.token_id() obj = {"client": "runner", "fun": "jobs.list_jobs"} content = self.post(token=token, **obj) print (content) def jobs_jid_status(self, jid): '''查看jid運行狀態''' token = 'X-Auth-Token:%s' % self.token_id() obj = {"client": "runner", "fun": "jobs.lookup_jid", "jid": jid} content = self.post(token=token, **obj) print (content) return content # if __name__ == '__main__': # sa = SaltApi() # print (sa.host_remote_func("bamboo", 'test.ping', 'list'))