VhuddlmZmZmZeZdZdZdZddl m Z ddl m Z ddl mZddlmcmcmcmcmZGd d e Zd Zed k(reyy) )absolute_importdivisionprint_functiona%& --- module: zabbix_proxy short_description: Create/delete/get/update Zabbix proxies description: - This module allows you to create, modify, get and delete Zabbix proxy entries. author: - "Alen Komic (@akomic)" requirements: - "python >= 3.9" options: proxy_name: description: - Name of the proxy in Zabbix. required: true type: str proxy_address: description: - Deprecated for Zabbix version >= 7.0. - Comma-delimited list of IP/CIDR addresses or DNS names to accept active proxy requests from. - Requires I(status=active). required: false type: str description: description: - Description of the proxy. required: false type: str status: description: - Deprecated for Zabbix version >= 7.0. - Type of proxy. (4 - active, 5 - passive) required: false choices: ["active", "passive"] default: "active" type: str tls_connect: description: - Connections to proxy. required: false choices: ["no_encryption","PSK","certificate"] default: "no_encryption" type: str tls_accept: description: - Connections from proxy. required: false choices: ["no_encryption","PSK","certificate"] default: "no_encryption" type: str ca_cert: description: - Certificate issuer. required: false aliases: [ tls_issuer ] type: str tls_subject: description: - Certificate subject. required: false type: str tls_psk_identity: description: - PSK identity. Required if either I(tls_connect) or I(tls_accept) has PSK enabled. required: false type: str tls_psk: description: - The preshared key, at least 32 hex digits. Required if either I(tls_connect) or I(tls_accept) has PSK enabled. required: false type: str state: description: - State of the proxy. - On C(present), it will create if proxy does not exist or update the proxy if the associated data is different. - On C(absent) will remove a proxy if it exists. required: false choices: ["present", "absent"] default: "present" type: str interface: description: - Deprecated for Zabbix version >= 7.0. - Dictionary with params for the interface when proxy is in passive mode. - For more information, review proxy interface documentation at - U(https://www.zabbix.com/documentation/current/en/manual/api/reference/proxy/object#proxy-interface). required: false suboptions: useip: type: int description: - Connect to proxy interface with IP address instead of DNS name. - 0 (don't use ip), 1 (use ip). default: 0 choices: [0, 1] ip: type: str description: - IP address used by proxy interface. - Required if I(useip=1). default: "" dns: type: str description: - DNS name of the proxy interface. - Required if I(useip=0). default: "" port: type: str description: - Port used by proxy interface. default: "10051" default: {} type: dict address: description: - Parameter introduced in Zabbix 7.0. - IP address or DNS name to connect to. - Required if the Zabbix proxy operating mode is passive required: false type: str port: description: - Parameter introduced in Zabbix 7.0. - Port number to connect to. - supported if the Zabbix proxy operating mode is passive. required: false type: str default: "10051" proxy_group: description: - Parameter introduced in Zabbix 7.0. - Proxy group name. required: false type: str local_address: description: - Parameter introduced in Zabbix 7.0. - Address for active agents. IP address or DNS name to connect to. - Required if proxy_groupid is not 0 required: false type: str local_port: description: - Parameter introduced in Zabbix 7.0. - Local proxy port number to connect to. - Supported if proxy_groupid is not 0 required: false type: str default: "10051" allowed_addresses: description: - Parameter introduced in Zabbix 7.0. - Comma-delimited IP addresses or DNS names of active Zabbix proxy. required: false type: str operating_mode: description: - Parameter introduced in Zabbix 7.0. - Type of proxy. required: false choices: ["active", "passive"] default: "active" type: str custom_timeouts: description: - Parameter introduced in Zabbix 7.0. - Whether to override global item timeouts on the proxy level. - 0 - use global settings; 1 - override timeouts. required: false type: int default: 0 choices: [0, 1] timeout_zabbix_agent: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on Zabbix agent checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Rired if if C(custom_timeouts) is set to 1. required: false type: str timeout_simple_check: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on simple checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str timeout_snmp_agent: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on SNMP agent checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str timeout_external_check: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on external checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str timeout_db_monitor: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on DB checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str timeout_http_agent: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on HTTPagent checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str timeout_ssh_agent: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on SSH checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str timeout_telnet_agent: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on Telnet checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str timeout_script: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on script type checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str timeout_browser: description: - Parameter introduced in Zabbix 7.0. - Spend no more than this number of seconds on browser type checks processing. - Accepts seconds or time unit with suffix (e.g., 30s, 1m). - "Possible values range: 1-600s." - Required if if C(custom_timeouts) is set to 1. required: false type: str extends_documentation_fragment: - community.zabbix.zabbix ak # If you want to use Username and Password to be authenticated by Zabbix Server - name: Set credentials to access Zabbix Server API ansible.builtin.set_fact: ansible_user: Admin ansible_httpapi_pass: zabbix # If you want to use API token to be authenticated by Zabbix Server # https://www.zabbix.com/documentation/current/en/manual/web_interface/frontend_sections/administration/general#api-tokens - name: Set API token ansible.builtin.set_fact: ansible_zabbix_auth_key: 8ec0d52432c15c91fcafe9888500cf9a607f44091ab554dbee860f6b44fac895 - name: Create or update a proxy with proxy type active (Zabbix version < 7.0) # set task level variables as we change ansible_connection plugin here vars: ansible_network_os: community.zabbix.zabbix ansible_connection: httpapi ansible_httpapi_port: 443 ansible_httpapi_use_ssl: true ansible_httpapi_validate_certs: false ansible_zabbix_url_path: "zabbixeu" # If Zabbix WebUI runs on non-default (zabbix) path ,e.g. http:///zabbixeu ansible_host: zabbix-example-fqdn.org community.zabbix.zabbix_proxy: proxy_name: ExampleProxy description: ExampleProxy status: active state: present proxy_address: ExampleProxy.local - name: Create a new passive proxy using only its IP (Zabbix version < 7.0) # set task level variables as we change ansible_connection plugin here vars: ansible_network_os: community.zabbix.zabbix ansible_connection: httpapi ansible_httpapi_port: 443 ansible_httpapi_use_ssl: true ansible_httpapi_validate_certs: false ansible_zabbix_url_path: "zabbixeu" # If Zabbix WebUI runs on non-default (zabbix) path ,e.g. http:///zabbixeu ansible_host: zabbix-example-fqdn.org community.zabbix.zabbix_proxy: proxy_name: ExampleProxy description: ExampleProxy status: passive state: present interface: useip: 1 ip: 10.1.1.2 port: 10051 - name: Create a new passive proxy using only its DNS (Zabbix version < 7.0) # set task level variables as we change ansible_connection plugin here vars: ansible_network_os: community.zabbix.zabbix ansible_connection: httpapi ansible_httpapi_port: 443 ansible_httpapi_use_ssl: true ansible_httpapi_validate_certs: false ansible_zabbix_url_path: "zabbixeu" # If Zabbix WebUI runs on non-default (zabbix) path ,e.g. http:///zabbixeu ansible_host: zabbix-example-fqdn.org community.zabbix.zabbix_proxy: proxy_name: ExampleProxy description: ExampleProxy status: passive state: present interface: dns: proxy.example.com port: 10051 - name: Create or update a proxy with proxy type active (Zabbix version >= 7.0) # set task level variables as we change ansible_connection plugin here vars: ansible_network_os: community.zabbix.zabbix ansible_connection: httpapi ansible_httpapi_port: 443 ansible_httpapi_use_ssl: true ansible_httpapi_validate_certs: false ansible_zabbix_url_path: "zabbixeu" # If Zabbix WebUI runs on non-default (zabbix) path ,e.g. http:///zabbixeu ansible_host: zabbix-example-fqdn.org community.zabbix.zabbix_proxy: proxy_name: ExampleProxy description: ExampleProxy operating_mode: active state: present allowed_addresses: ExampleProxy.local - name: Create a new passive proxy using only its IP (Zabbix version >= 7.0) # set task level variables as we change ansible_connection plugin here vars: ansible_network_os: community.zabbix.zabbix ansible_connection: httpapi ansible_httpapi_port: 443 ansible_httpapi_use_ssl: true ansible_httpapi_validate_certs: false ansible_zabbix_url_path: "zabbixeu" # If Zabbix WebUI runs on non-default (zabbix) path ,e.g. http:///zabbixeu ansible_host: zabbix-example-fqdn.org community.zabbix.zabbix_proxy: proxy_name: ExampleProxy description: ExampleProxy operating_mode: passive state: present address: 10.1.1.2 port: 10051 - name: Create a new passive proxy using only its DNS (Zabbix version >= 7.0) # set task level variables as we change ansible_connection plugin here vars: ansible_network_os: community.zabbix.zabbix ansible_connection: httpapi ansible_httpapi_port: 443 ansible_httpapi_use_ssl: true ansible_httpapi_validate_certs: false ansible_zabbix_url_path: "zabbixeu" # If Zabbix WebUI runs on non-default (zabbix) path ,e.g. http:///zabbixeu ansible_host: zabbix-example-fqdn.org community.zabbix.zabbix_proxy: proxy_name: ExampleProxy description: ExampleProxy operating_mode: passive state: present address: proxy.example.com port: 10051 z # ) AnsibleModule) ZabbixBase) LooseVersionNc8eZdZdfd ZdZdZdZdZxZS)Proxyc>tt| |||d|_y)N)superr __init__ existing_data)selfmodulezbx zapi_wrapper __class__s q/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/zabbix/plugins/modules/zabbix_proxy.pyr zProxy.__init__s eT#FC>!cBt|jtdkr,|jjj ddd|id}n*|jjj dd|id}t |dkDrd|dvr|d|_|ddS|S) N7.0extendhost)outputselectInterfacefilternamerrrproxyid)r_zbx_api_version_zapiproxygetlenr)r proxy_nameresults r proxy_existszProxy.proxy_existss -- .e1D DZZ%%))X>F6D112\%5HH$&4>S+@NN;6$&40@+AS+HNN;6 &"&}"5K!ZZ2266(W]_jVk7lmF6{a' ..3RVa3b.c%+AY%?NNN=%82@J/!ZZ--44Z@ND112\%5HH &&tTXY_T`bfgobp.q's &&tTXY_T`bfgwbx.y'{>"a'%j1!44( `D112\%5HH &&dSYl\]+^&_ &&dSYl\]+^&__` `s>H9G6H99 J=A,J88J=c x |jjr|jjd|jjj |g|jjdd|zy#t $r5}|jjd|dt|Yd}~yd}~wwxYw)NTr)zSuccessfully deleted proxy %sr;zFailed to delete proxy r>r6) r?r@rAr!r"deleterFrDstr)rproxy_idr%rLs r delete_proxyzProxy.delete_proxys _||&& &&t&4 JJ   # #XJ / LL " "48WZd8d " e _ LL " "*VYZ[V\'] " ^ ^ _sA8A;; B9+B44B9c |jjr|jjdi}|D]}||s ||||<t|jtdkrd}d}nd}d}d|vrt |d|d<|d r{|d }|j jjd d |id }t|d k(r|jjd|z|d d} |jd d| |d<d|vr2|||k(r|jddnt |dd|dd<|||k(r|jddn|jdd||d<i} tjtj||j| } | ik(r|jjdy|| d<|j j j#|t|jtdkr(|jjdd|dd|dy|jjdd|d d|dy#t$$r{} t|jtdkr&|jjd|dd| n*|jjd|d d| Yd} ~ yYd} ~ yd} ~ wwxYw)NTr)rr,r-r/r0custom_timeoutsr4rrrrr5r6r8Fr1useip tls_connect tls_acceptrzSuccessfully updated proxy rr9r:r;zFailed to update proxy r>)r?r@rArr rPr!rCr#r$rDrB zabbix_utilshelper_cleanup_datahelper_compare_dictionariesrr"updaterF) rrQrGrHkeystatus_or_operating_mode_namestatus_or_operating_mode_valuer4r&rJchange_parameters differencerLs r update_proxyzProxy.update_proxysF >||&& &&t&4J 09&*3iJsO 0D112\%5HH08-14.0@-14.$ 247 CT8U4VJ01 &"&}"5K!ZZ2266(W]_jVk7lmF6{a' ..3RVa3b.c%+AY%?NNN=%82@J/j(;<@^^NN;68;:k;RSZ;[7\J{+G478D112\%5HH &&,0L!,=&> &&,0L!,=&>>> >s,>I%FI% A2I%='I%% K).A,K$$K))NN) __name__ __module__ __qualname__r r'rMrRra __classcell__)rs@rr r s " 1`f_G>rr c tj}|jtdOidtdddtdddtdddd g d tddd d tdddd g dtddddg dtdddtddgd dtddgd dtddddgdtddd dtddd dtdddddtddittdd d!gd "tdd#$tdd#$tdd%$&'d(tddd d)tddd% d*tddd d+tddd d,tddd% d-tddd d d!g.d/tddd d0tddd d1tddd d2tddd d3tddd d4tddd d5tddd d6tddd d7tddd d8tddd t |9}t |}t |jt d:kr gd;gd<gd=g}ngd>gd?g}t ||d@}|jd}|jd}|jd}|jd}|jd}|jd} |jd} |jd} |jd} t |}t |jt d:krTd#} d|jvr|jd} d|jvr|jd}|jdd k(rdAndB}nA|jd }|jd d k(rd!nd }|d k(rdCn|jd(}|jd)}|jd*}|jd+}|jd,}|jd }|jd-}|jd/}|jd0}|jd1}|jd2}|jd3}|jd4}|jd5}|jd6}|jd7} |jd8}!|r||jdDE|dFk(rdG}n |dHk(rdI}nd!}|dFk(rdG}n |dHk(rdI}nd!}|j|}"|"r| dk(r|j|"|yt |jt d:kr:|j|"||tt|t||| | |  dJ y|j|"idK|d|d tdt|dt|d|d| d| d| d d(d)d*d+d,d-d/ !dL y| dk(r|jdMt |jt d:kr:|j||tt|t||| | |  dJ N}"y|jidK|d|d tdt|dt|d|d| d| d| d d(d)d*d+d,d-d/ !dL N}"y)PNr%rPT)typerequiredr+Fr,activepassive)rgdefaultchoicesr.)rgrhrkr/statepresentabsent descriptionrV no_encryption)rqPSK certificaterWca_cert tls_issuer)rgrhrkaliases tls_subjecttls_psk_identitytls_psk)rgrhrkno_logr1dictintrr<)rgrlrk)rgrk10051)rUipdnsport)rgrhrkoptionsaddressrr4 local_address local_portrT)rgrhrkrltimeout_zabbix_agenttimeout_simple_checktimeout_snmp_agenttimeout_external_checktimeout_db_monitortimeout_http_agenttimeout_ssh_agenttimeout_telnet_agenttimeout_scripttimeout_browser) argument_specr)rVrrrxryF)rWrrrF)r,rj)r1)r/rj)r)rTr<) rrrrrrrrrrF)r required_ifsupports_check_modez 127.0.0.1zBlocal_address parameter is required when proxy_group is specified.r6rsrr) rrpr,rVrWrurwrxryr1r+r) rrrrrrrrrr))rG)rXzabbix_common_argument_specr[r{rr rr paramsrDr'rRrarPrArM)#rrr"rhr%rprVrWrurwrxryrmr+r1r,r.r/rrr4rrrTrrrrrrrrrrrQs# rmainrGs <<>M)UT2)6)8Y:OP)EE4H ) 8YBWX ) y9h:OP )ee4)e_Fmn)UOElm)%% ~V)eeTB)55$G)%%dK)1vqAUB/eR0ug6   )2%%>3)4uug >5)6eeTB7)8tD9):UUGD;)<%%QPQFS=)>"uudK?)@"uudKA)B UUDIC)D $ME)F UUDIG)H UUDII)JEE4HK)L"uudKM)NEO)P%%FQ))X 7F &MEE**+l5.AA J I 1  8 + # F |,J-- .K-- .K|,Jy)J-- .K}}%78mmI&G MM' "E &MEE**+l5.AA fmm +"MM/:M &-- ' k2ImmH-:"MM*=>$mm,<=JPQ!/1!4+&-- :R}}V$mmM2  o6 ]]<0 "MM*=> --(9:%}}-CD%}}-CD#]]+?@!'/G!H#]]+?@#]]+?@"MM*=>%}}-CD'78 --(9: $  %i jm#    ]" u   !!*-H H    x 4E223l56II""8&#.!&k#&{#3"%j/",#.(8&!*%2 . ""8.J.!;.%c.&9."3{#3 . !#j/ . !* .";.'(8.w.():.w.D.";.$].!*. &!."+,@#.$-A*<.D*<*<):,@&4'65.: H    U  + .. /,u2E E"*f+";/!*o(*$4"&!. - H- -{-!#n"5-s;/ - c*o - j -{-#$4-7-$%6-7--{- -j- "?!-"'(<#-$)=&8*@&8&8%6(<"0#25-Hr__main__) __future__rrrrg __metaclass__ DOCUMENTATIONEXAMPLESRETURNansible.module_utils.basicr>ansible_collections.community.zabbix.plugins.module_utils.baser#ansible.module_utils.compat.versionrAansible_collections.community.zabbix.plugins.module_utils.helpers communityzabbixplugins module_utilshelpersrXr rrbrrrrsj*CB K Zy v 5U<XXXW>JW>tcL zFr