Vh)DddlmZmZmZeZdZdZdZddl m Z ddl m Z m Z dZGdd e Zeed ed  Zeed d ed d Zeed d edd Zeed d ed Zeeed edded gd gedded gd geddeeddeeddeed ed edddgd Zej-e dZedk(reyy) )absolute_importdivisionprint_functiona module: consul_token short_description: Manipulate Consul tokens version_added: 8.3.0 description: - Allows the addition, modification and deletion of tokens in a Consul cluster using the agent. For more details on using and configuring ACLs, see U(https://www.consul.io/docs/guides/acl.html). author: - Florian Apolloner (@apollo13) extends_documentation_fragment: - community.general.consul - community.general.consul.token - community.general.consul.actiongroup_consul - community.general.attributes attributes: check_mode: support: full diff_mode: support: partial details: - In check mode the diff will miss operational attributes. action_group: version_added: 8.3.0 options: state: description: - Whether the token should be present or absent. choices: ['present', 'absent'] default: present type: str accessor_id: description: - Specifies a UUID to use as the token's Accessor ID. If not specified a UUID will be generated for this field. type: str secret_id: description: - Specifies a UUID to use as the token's Secret ID. If not specified a UUID will be generated for this field. type: str description: description: - Free form human readable description of the token. type: str policies: type: list elements: dict description: - List of policies to attach to the token. Each policy is a dict. - If the parameter is left blank, any policies currently assigned will not be changed. - Any empty array (V([])) will clear any policies previously set. suboptions: name: description: - The name of the policy to attach to this token; see M(community.general.consul_policy) for more info. - Either this or O(policies[].id) must be specified. type: str id: description: - The ID of the policy to attach to this token; see M(community.general.consul_policy) for more info. - Either this or O(policies[].name) must be specified. type: str roles: type: list elements: dict description: - List of roles to attach to the token. Each role is a dict. - If the parameter is left blank, any roles currently assigned will not be changed. - Any empty array (V([])) will clear any roles previously set. suboptions: name: description: - The name of the role to attach to this token; see M(community.general.consul_role) for more info. - Either this or O(roles[].id) must be specified. type: str id: description: - The ID of the role to attach to this token; see M(community.general.consul_role) for more info. - Either this or O(roles[].name) must be specified. type: str templated_policies: description: - The list of templated policies that should be applied to the role. type: list elements: dict suboptions: template_name: description: - The templated policy name. type: str required: true template_variables: description: - The templated policy variables. - Not all templated policies require variables. type: dict service_identities: type: list elements: dict description: - List of service identities to attach to the token. - If not specified, any service identities currently assigned will not be changed. - If the parameter is an empty array (V([])), any node identities assigned will be unassigned. suboptions: service_name: description: - The name of the service. - Must not be longer than 256 characters, must start and end with a lowercase alphanumeric character. - May only contain lowercase alphanumeric characters as well as V(-) and V(_). type: str required: true datacenters: description: - The datacenters the token will be effective. - If an empty array (V([])) is specified, the token will valid in all datacenters. - Including those which do not yet exist but may in the future. type: list elements: str node_identities: type: list elements: dict description: - List of node identities to attach to the token. - If not specified, any node identities currently assigned will not be changed. - If the parameter is an empty array (V([])), any node identities assigned will be unassigned. suboptions: node_name: description: - The name of the node. - Must not be longer than 256 characters, must start and end with a lowercase alphanumeric character. - May only contain lowercase alphanumeric characters as well as V(-) and V(_). type: str required: true datacenter: description: - The nodes datacenter. - This will result in effective token only being valid in this datacenter. type: str required: true local: description: - If true, indicates that the token should not be replicated globally and instead be local to the current datacenter. type: bool expiration_ttl: description: - This is a convenience field and if set will initialize the C(expiration_time). Can be specified in the form of V(60s) or V(5m) (that is, 60 seconds or 5 minutes, respectively). Ingored when the token is updated! type: str ae - name: Create / Update a token by accessor_id community.general.consul_token: state: present accessor_id: 07a7de84-c9c7-448a-99cc-beaf682efd21 token: 8adddd91-0bd6-d41d-ae1a-3b49cfa9a0e8 roles: - name: role1 - name: role2 service_identities: - service_name: service1 datacenters: [dc1, dc2] node_identities: - node_name: node1 datacenter: dc1 expiration_ttl: 50m - name: Delete a token community.general.consul_token: state: absent accessor_id: 07a7de84-c9c7-448a-99cc-beaf682efd21 token: 8adddd91-0bd6-d41d-ae1a-3b49cfa9a0e8 a+ token: description: The token as returned by the Consul HTTP API. returned: always type: dict sample: AccessorID: 07a7de84-c9c7-448a-99cc-beaf682efd21 CreateIndex: 632 CreateTime: "2024-01-14T21:53:01.402749174+01:00" Description: Testing Hash: rj5PeDHddHslkpW7Ij4OD6N4bbSXiecXFmiw2SYXg2A= Local: false ModifyIndex: 633 SecretID: bd380fba-da17-7cee-8576-8d6427c6c930 ServiceIdentities: ["ServiceName": "test"] operation: description: The operation performed. returned: changed type: str sample: update ) AnsibleModule)AUTH_ARGUMENTS_SPEC _ConsulModulecV|j|}|j|}||y|Dcic] }|d|d }}|Dcic] }|d|d }}|D]G}|jd} |jd} | r| s | |vr|| |d<| r8| s;| |vs@|| |d<Iycc}wcc}w)NNameID)get) api_obj module_objkeyapi_objs module_objsi name_to_id id_to_nameobj identifiernames r/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/consul_token.pynormalize_link_objrs{{3H..%K;..67!F)QtW$7J7.67!D'1V9$7J7)WWT] wwv dzZ'?$Z0CKdtz'9"4(CI )87s B!B&c<eZdZdZdZdgZdhZfdZfdZxZ S)ConsulTokenModulez acl/tokentoken accessor_idexpiration_ttlc`|j|jsytt|S)N) id_from_objparamssuperr read_object)self __class__s rr#zConsulTokenModule.read_objects) ,&9;;cd|vrd|vr|d=t||dt||dd|vr|d=tt|||S)NSecretIDRolesPolicies ExpirationTTL)rr"r needs_update)r$r rr%s rr,zConsulTokenModule.needs_updatesY Z 'J',A #7J87J ; j (?+&:7JOOr&) __name__ __module__ __qualname__ api_endpoint result_keyunique_identifierscreate_only_fieldsr#r, __classcell__)r%s@rrrs/LJ'*+< P Pr&rstr)type)ridT)r6required) node_name datacenterlist)r6elements) service_name datacentersdict) template_nametemplate_variables)no_log)r6r<optionsmutually_exclusiverequired_one_of)r6r<rCboolpresentabsent)defaultchoices) descriptionr secret_idrolespoliciestemplated_policiesnode_identitiesservice_identitieslocalrstatechttdddgfgd}t|}|jy)NrSrHrT) required_ifsupports_check_mode)r_ARGUMENT_SPECrexecute)module consul_modules rmainr[=s9 x-9: F &f-Mr&__main__N) __future__rrrr6 __metaclass__ DOCUMENTATIONEXAMPLESRETURNansible.module_utils.basicrAansible_collections.community.general.plugins.module_utils.consulrrrrr? NAME_ID_SPEC NODE_ID_SPECSERVICE_ID_SPECTEMPLATE_POLICY_SPECrWupdater[r-r&rrjsA@ R h 0 ,5 )"P P4 5   -. 540&51 ED1(66T"  *+'(  *+'(  $     v & )i-B CG$J)* zFr&