Vh8ddlmZmZmZeZdZdZdZddl Z ddl Z ddl m Z ddl mZddlmZmZd Zd Zd Zd Zd ZdZdZdZdZdZdZedk(reyy))absolute_importdivisionprint_functiona: module: eos_eapi author: Peter Sprygada (@privateip) short_description: Manage and configure Arista EOS eAPI. requirements: - EOS v4.12 or greater description: - Use to enable or disable eAPI access, and set the port and state of http, https, local_http and unix-socket servers. - When enabling eAPI access the default is to enable HTTP on port 80, enable HTTPS on port 443, disable local HTTP, and disable Unix socket server. Use the options listed below to override the default configuration. - Requires EOS v4.12 or greater. version_added: 1.0.0 options: http: description: - The C(http) argument controls the operating state of the HTTP transport protocol when eAPI is present in the running-config. When the value is set to True, the HTTP protocol is enabled and when the value is set to False, the HTTP protocol is disabled. By default, when eAPI is first configured, the HTTP protocol is disabled. type: bool aliases: - enable_http http_port: description: - Configures the HTTP port that will listen for connections when the HTTP transport protocol is enabled. This argument accepts integer values in the valid range of 1 to 65535. type: int https: description: - The C(https) argument controls the operating state of the HTTPS transport protocol when eAPI is present in the running-config. When the value is set to True, the HTTPS protocol is enabled and when the value is set to False, the HTTPS protocol is disabled. By default, when eAPI is first configured, the HTTPS protocol is enabled. type: bool aliases: - enable_https https_port: description: - Configures the HTTP port that will listen for connections when the HTTP transport protocol is enabled. This argument accepts integer values in the valid range of 1 to 65535. type: int local_http: description: - The C(local_http) argument controls the operating state of the local HTTP transport protocol when eAPI is present in the running-config. When the value is set to True, the HTTP protocol is enabled and restricted to connections from localhost only. When the value is set to False, the HTTP local protocol is disabled. - Note is value is independent of the C(http) argument type: bool aliases: - enable_local_http local_http_port: description: - Configures the HTTP port that will listen for connections when the HTTP transport protocol is enabled. This argument accepts integer values in the valid range of 1 to 65535. type: int socket: description: - The C(socket) argument controls the operating state of the UNIX Domain Socket used to receive eAPI requests. When the value of this argument is set to True, the UDS will listen for eAPI requests. When the value is set to False, the UDS will not be available to handle requests. By default when eAPI is first configured, the UDS is disabled. type: bool aliases: - enable_socket timeout: description: - The time (in seconds) to wait for the eAPI configuration to be reflected in the running-config. type: int default: 30 vrf: description: - The C(vrf) argument will configure eAPI to listen for connections in the specified VRF. By default, eAPI transports will listen for connections in the global table. This value requires the VRF to already be created otherwise the task will fail. default: default type: str config: description: - The module, by default, will connect to the remote device and retrieve the current running-config to use as a base for comparing against the contents of source. There are times when it is not desirable to have the task get the current running-config for every task in a playbook. The I(config) argument allows the implementer to pass in the configuration to use as the base config for comparison. type: str state: description: - The C(state) argument controls the operational state of eAPI on the remote device. When this argument is set to C(started), eAPI is enabled to receive requests and when this argument is C(stopped), eAPI is disabled and will not receive requests. type: str default: started choices: - started - stopped a - name: Enable eAPI access with default configuration arista.eos.eos_eapi: state: started - name: Enable eAPI with no HTTP, HTTPS at port 9443, local HTTP at port 80, and socket enabled arista.eos.eos_eapi: state: started http: false https_port: 9443 local_http: true local_http_port: 80 socket: true - name: Shutdown eAPI access arista.eos.eos_eapi: state: stopped a, commands: description: The list of configuration mode commands to send to the device returned: always type: list sample: - management api http-commands - protocol http port 81 - no protocol https urls: description: Hash of URL endpoints eAPI is listening on per interface returned: when eAPI is started type: dict sample: {'Management1': ['http://172.26.10.1:80']} session_name: description: The EOS config session name used to load the configuration returned: when changed is True type: str sample: ansible_1479315771 N) AnsibleModule) iteritems) load_config run_commandscDd|cxkrdksn|jdyyNiz%http_port must be between 1 and 65535msg fail_jsonvaluemodules g/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/arista/eos/plugins/modules/eos_eapi.pyvalidate_http_portr&   DE cDd|cxkrdksn|jdyyr rrs rvalidate_https_portrrrcDd|cxkrdksn|jdyyr rrs rvalidate_local_http_portrrrcbt|dg}g}|djjdd}|D]L}|stjd|j}t |dkDs9|j |dN|j d||vr|jd|zyy) Nzshow vrfrz\s{2,}defaultz(vrf `%s` is not configured on the systemr )r strip splitlinesresplitlenappendr)rroutconfigured_vrfslinesline splitted_lines r validate_vrfr+s v | ,CO FLLN % % ' +E5 DJJL9 }  !  " "=#3 4 59% O#:UB  $rct|\fd}fd}t|d|dfrDddur |dn4ddurddvr|jdndxsd }|d |zt|d |d frDd dur |d n4d durd dvr|jdnd xsd}|d|zt|d|dfrDddur |dn4ddurddvr|jdndxsd}|d|zt|d|dfrddur |dn|d|dr!ddk(r |dnddk(r|d|dr0|d dzddk(r |dSddk(r|dS)!Nctj|duxr#j|j|k7S)N)get)xhavewants r needs_updatez)map_obj_to_commands..needs_updates0xx{$&GDHHQK488A;,FGrcTdvrjddj|y)Nzmanagement api http-commandsr)insertr%)cmdcommandss raddz map_obj_to_commands..adds& ) 9 OOA= >rhttp http_portFzno protocol http)FNz=protocol http is not enabled, not configuring http port valuePzprotocol http port %shttps https_portzno protocol httpsz?protocol https is not enabled, not configuring https port valueizprotocol https port %s local_httplocal_http_portzno protocol http localhostzIprotocol local_http is not enabled, not configuring local_http port valueizprotocol http localhost port %ssocketzno protocol unix-socketzprotocol unix-socketstatestoppedshutdownstartedz no shutdownvrfzvrf %s)listanyr%) updatesrwarningsr2r7portr6r0r1s @@@rmap_obj_to_commandsrJs4vHJD$H  L ,{"; <= <5 " #F|u$f)FSK(.B+d23 L !< #= >? =E ! # $G}%$w-=*HUL)0S,t34 L & 5F(G HI   & , -L!U*tL/AF0_-.6$5<= L "L$: ;< >U " ) * & 'G =I %  O ']i '  E HtE{ "# =I %  O O']i '   Orc|ddryy)NrenabledrCrA)datas r parse_staterO"s Awyrc t|dg}|ddd|ddd|ddd|ddd|ddd|ddd|ddd|dd xsd t|d S) N(show management api http-commands | jsonr httpServer configuredrI httpsServerlocalHttpServerunixSocketServerrDr r8r9r;r<r=r>r?rDr@)r rO)rr&s rmap_config_to_objrX)s v JK LCA|$\2VL)&1Q &|4!f]+F3!f./ =q6"34V<a&+,\:1ve}) S!  rc |jd|jd|jd|jd|jd|jd|jd|jd|jd d }t|D]0\}}|s tjd |z}|s(|||2|S) Nr8r9r;r<r=r>r?rDr@rWz validate_%s)paramsrglobalsr.)robjkeyr validators rmap_params_to_objr_8s f%]];/w'mmL1mmL1!==):;--)}}U#w' C n) U  mc&9:I%( ) Jrcp|\}}gd}|jd}|jd}|rt|dg}t|D]=\}} | \} } || || |d| dk(s"||=&|dk(r|d| dr7||=;||=?tjd|dz}|dk(r|j d |ryy) N))r8rR)r;rT)r=rU)r?rVtimeoutr@rQrrunningrAr z1timeout expired before eapi running state changedr )rZr enumeratetimesleepr) rGrr1r0 invalid_staterar@r&indexitemwant_keyeapi_keys r verify_staterkNsJD$MmmI&G MM' "E   7 8 %]3 )KE4!% HhH~)>SVH%5i%@@%e,)#1vh' 2%e,!%( ) 1 1  a<   G  % rcPt|dg}tt}|ddD]u}|jdd\}}t|j }||dvrt |d|<|d|j t|j w||d<y) NrQ) eos_eapi_urlsrurls:r rm ansible_facts)r dictr#strr rEr%)rresultr&factseachintfurlr]s r collect_factsrxrs v JK LC tv &EAv=JJsA& c$ioo eO, ,*.&E/ "3 ' os#**3s8>>+;< = $F?rc,ttdgdtdtdgdtdtdgdtdtdgdtdd td ttd dd g }t|d}ddi}t}|jdr|j dt |}t |}t||f||}||d<|rg|j }t|||}|jdr"|jrd|jdi|d<|jd|d<d|d<|drt||f|t|||r||d<|jdi|y) z%main entry point for module execution enable_httpbool)aliasestypeint)r} enable_httpsenable_local_http enable_socket)r}rr)rrCrA)rchoices) r8r9r;r<r=r>r?rarDconfigr@T) argument_specsupports_check_modechangedFrz;config parameter is no longer necessary and will be ignoredr6)commitdiffpreparedsession session_namerHNrM)rqrrErZr%r_rXrJ check_moderr._diffrkrx exit_json) rrrsrHr1r0r6rresponses rmainr~s =/ 7E"N+&9U#!4 5FC%(_-F;%,  #v9y).DE M# F  FvH }}X I  V $D V $D"D$<BH!F:&&&vx? << FLL((,,v*>?F6N!)i!8~ y idD\6*&&!%zFvr__main__) __future__rrrr} __metaclass__ DOCUMENTATIONEXAMPLESRETURNr"rdansible.module_utils.basicransible.module_utils.sixrCansible_collections.arista.eos.plugins.module_utils.network.eos.eosrr rrrr+rJrOrXr_rkrxr__name__rMrrrs$A@ i V ( ( 4. F F F  $GT ,!H $3l zFr