2014-10-15 23:22:54 +00:00
|
|
|
# (c) 2012-2014, Michael DeHaan <michael.dehaan@gmail.com>
|
|
|
|
#
|
|
|
|
# This file is part of Ansible
|
|
|
|
#
|
|
|
|
# Ansible is free software: you can redistribute it and/or modify
|
|
|
|
# it under the terms of the GNU General Public License as published by
|
|
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
|
|
# (at your option) any later version.
|
|
|
|
#
|
|
|
|
# Ansible is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
# GNU General Public License for more details.
|
|
|
|
#
|
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
|
# along with Ansible. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
|
|
|
|
# Make coding more python3-ish
|
|
|
|
from __future__ import (absolute_import, division, print_function)
|
|
|
|
__metaclass__ = type
|
|
|
|
|
2016-08-24 00:03:11 +00:00
|
|
|
import yaml
|
|
|
|
|
2017-03-23 20:35:05 +00:00
|
|
|
from ansible.module_utils.six import text_type
|
2017-07-23 01:15:46 +00:00
|
|
|
from ansible.module_utils._text import to_bytes, to_text
|
2015-04-14 21:07:43 +00:00
|
|
|
|
|
|
|
|
|
|
|
class AnsibleBaseYAMLObject(object):
|
2014-10-07 20:04:42 +00:00
|
|
|
'''
|
|
|
|
the base class used to sub-class python built-in objects
|
|
|
|
so that we can add attributes to them during yaml parsing
|
2014-10-15 23:22:54 +00:00
|
|
|
|
2014-10-07 20:04:42 +00:00
|
|
|
'''
|
2015-04-14 21:07:43 +00:00
|
|
|
_data_source = None
|
|
|
|
_line_number = 0
|
2014-11-05 14:00:00 +00:00
|
|
|
_column_number = 0
|
2014-10-07 20:04:42 +00:00
|
|
|
|
2015-04-01 21:54:22 +00:00
|
|
|
def _get_ansible_position(self):
|
2014-10-09 17:52:09 +00:00
|
|
|
return (self._data_source, self._line_number, self._column_number)
|
|
|
|
|
2015-04-01 21:54:22 +00:00
|
|
|
def _set_ansible_position(self, obj):
|
|
|
|
try:
|
|
|
|
(src, line, col) = obj
|
|
|
|
except (TypeError, ValueError):
|
2015-04-14 21:07:43 +00:00
|
|
|
raise AssertionError(
|
|
|
|
'ansible_pos can only be set with a tuple/list '
|
|
|
|
'of three values: source, line number, column number'
|
|
|
|
)
|
|
|
|
self._data_source = src
|
|
|
|
self._line_number = line
|
2014-10-23 20:39:27 +00:00
|
|
|
self._column_number = col
|
|
|
|
|
2015-04-01 21:54:22 +00:00
|
|
|
ansible_pos = property(_get_ansible_position, _set_ansible_position)
|
2014-10-21 15:10:03 +00:00
|
|
|
|
2015-04-14 21:07:43 +00:00
|
|
|
|
2014-10-07 20:04:42 +00:00
|
|
|
class AnsibleMapping(AnsibleBaseYAMLObject, dict):
|
|
|
|
''' sub class for dictionaries '''
|
|
|
|
pass
|
|
|
|
|
2015-04-14 21:07:43 +00:00
|
|
|
|
|
|
|
class AnsibleUnicode(AnsibleBaseYAMLObject, text_type):
|
2015-03-31 04:48:28 +00:00
|
|
|
''' sub class for unicode objects '''
|
|
|
|
pass
|
2015-04-02 19:37:02 +00:00
|
|
|
|
2015-04-14 21:07:43 +00:00
|
|
|
|
2015-04-02 19:37:02 +00:00
|
|
|
class AnsibleSequence(AnsibleBaseYAMLObject, list):
|
|
|
|
''' sub class for lists '''
|
|
|
|
pass
|
2016-08-24 00:03:11 +00:00
|
|
|
|
|
|
|
|
|
|
|
# Unicode like object that is not evaluated (decrypted) until it needs to be
|
|
|
|
# TODO: is there a reason these objects are subclasses for YAMLObject?
|
2017-06-09 17:13:15 +00:00
|
|
|
class AnsibleVaultEncryptedUnicode(yaml.YAMLObject, AnsibleBaseYAMLObject):
|
2016-08-24 00:03:11 +00:00
|
|
|
__UNSAFE__ = True
|
|
|
|
__ENCRYPTED__ = True
|
2017-02-03 20:28:50 +00:00
|
|
|
yaml_tag = u'!vault'
|
2016-08-24 00:03:11 +00:00
|
|
|
|
|
|
|
@classmethod
|
|
|
|
def from_plaintext(cls, seq, vault):
|
|
|
|
if not vault:
|
|
|
|
raise vault.AnsibleVaultError('Error creating AnsibleVaultEncryptedUnicode, invalid vault (%s) provided' % vault)
|
|
|
|
|
|
|
|
ciphertext = vault.encrypt(seq)
|
|
|
|
avu = cls(ciphertext)
|
|
|
|
avu.vault = vault
|
|
|
|
return avu
|
|
|
|
|
|
|
|
def __init__(self, ciphertext):
|
|
|
|
'''A AnsibleUnicode with a Vault attribute that can decrypt it.
|
|
|
|
|
|
|
|
ciphertext is a byte string (str on PY2, bytestring on PY3).
|
|
|
|
|
2017-06-12 06:55:19 +00:00
|
|
|
The .data attribute is a property that returns the decrypted plaintext
|
2016-08-24 00:03:11 +00:00
|
|
|
of the ciphertext as a PY2 unicode or PY3 string object.
|
|
|
|
'''
|
|
|
|
super(AnsibleVaultEncryptedUnicode, self).__init__()
|
|
|
|
|
|
|
|
# after construction, calling code has to set the .vault attribute to a vaultlib object
|
|
|
|
self.vault = None
|
|
|
|
self._ciphertext = to_bytes(ciphertext)
|
|
|
|
|
|
|
|
@property
|
|
|
|
def data(self):
|
|
|
|
if not self.vault:
|
|
|
|
# FIXME: raise exception?
|
|
|
|
return self._ciphertext
|
|
|
|
return self.vault.decrypt(self._ciphertext).decode()
|
|
|
|
|
|
|
|
@data.setter
|
|
|
|
def data(self, value):
|
|
|
|
self._ciphertext = value
|
|
|
|
|
|
|
|
def __repr__(self):
|
2017-05-05 15:07:50 +00:00
|
|
|
return repr(self.data)
|
2016-08-24 00:03:11 +00:00
|
|
|
|
|
|
|
# Compare a regular str/text_type with the decrypted hypertext
|
|
|
|
def __eq__(self, other):
|
|
|
|
if self.vault:
|
|
|
|
return other == self.data
|
|
|
|
return False
|
|
|
|
|
|
|
|
def __hash__(self):
|
|
|
|
return id(self)
|
|
|
|
|
|
|
|
def __ne__(self, other):
|
|
|
|
if self.vault:
|
|
|
|
return other != self.data
|
|
|
|
return True
|
|
|
|
|
|
|
|
def __str__(self):
|
|
|
|
return str(self.data)
|
|
|
|
|
|
|
|
def __unicode__(self):
|
2017-07-23 01:15:46 +00:00
|
|
|
return to_text(self.data, errors='surrogate_or_strict')
|
2017-01-04 17:17:19 +00:00
|
|
|
|
|
|
|
def encode(self, encoding=None, errors=None):
|
|
|
|
return self.data.encode(encoding, errors)
|