Server IP : 92.204.138.22 / Your IP : 18.119.133.43 Web Server : Apache System : Linux ns1009439.ip-92-204-138.us 4.18.0-553.8.1.el8_10.x86_64 #1 SMP Tue Jul 2 07:26:33 EDT 2024 x86_64 User : internationaljou ( 1019) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /lib/python3.6/site-packages/sos/report/plugins/ |
Upload File : |
# Copyright (C) 2013 Red Hat, Inc., Jeremy Agee <jagee@redhat.com> # Copyright (C) 2017 Red Hat, Inc., Martin Schuppert <mschuppert@redhat.com> # This file is part of the sos project: https://github.com/sosreport/sos # # This copyrighted material is made available to anyone wishing to use, # modify, copy, or redistribute it subject to the terms and conditions of # version 2 of the GNU General Public License. # # See the LICENSE file in the source distribution for further information. import os from sos.report.plugins import (Plugin, RedHatPlugin, DebianPlugin, UbuntuPlugin, PluginOpt) class OpenStackKeystone(Plugin): short_desc = 'OpenStack Keystone' plugin_name = "openstack_keystone" profiles = ('openstack', 'openstack_controller') option_list = [ PluginOpt('nopw', default=True, desc='do not collect keystone passwords') ] var_puppet_gen = "/var/lib/config-data/puppet-generated/keystone" apachepkg = None domain_config_dir = "" def setup(self): self.add_copy_spec([ "/etc/keystone/default_catalog.templates", "/etc/keystone/keystone.conf", "/etc/keystone/logging.conf", "/etc/keystone/policy.json", self.var_puppet_gen + "/etc/keystone/*.conf", self.var_puppet_gen + "/etc/keystone/*.json", self.var_puppet_gen + "/etc/httpd/conf/", self.var_puppet_gen + "/etc/httpd/conf.d/", self.var_puppet_gen + "/etc/httpd/conf.modules.d/*.conf", self.var_puppet_gen + "/var/spool/cron/", self.var_puppet_gen + "/etc/my.cnf.d/tripleo.cnf" ]) if self.get_option("all_logs"): self.add_copy_spec([ "/var/log/keystone/", f"/var/log/{self.apachepkg}*/keystone*", ]) else: self.add_copy_spec([ "/var/log/keystone/*.log", f"/var/log/{self.apachepkg}*/keystone*.log", ]) # collect domain config directory, if specified # if not, collect default /etc/keystone/domains exec_out = self.collect_cmd_output( "crudini --get /etc/keystone/keystone.conf " "identity domain_config_dir") self.domain_config_dir = exec_out['output'] if exec_out['status'] != 0 or \ not self.path_isdir(self.domain_config_dir): self.domain_config_dir = "/etc/keystone/domains" self.add_copy_spec(self.domain_config_dir) vars_all = [p in os.environ for p in [ 'OS_USERNAME', 'OS_PASSWORD']] vars_any = [p in os.environ for p in [ 'OS_TENANT_NAME', 'OS_PROJECT_NAME']] if not (all(vars_all) and any(vars_any)): self.soslog.warning("Not all environment variables set. Source " "the environment file for the user intended " "to connect to the OpenStack environment.") else: self.add_cmd_output("openstack endpoint list") self.add_cmd_output("openstack catalog list") self.add_file_tags({ ".*/etc/keystone/keystone.conf": "keystone_conf", "/var/log/keystone/keystone.log": "keystone_log" }) def apply_regex_sub(self, regexp, subst): """ Apply regex substitution """ self.do_path_regex_sub("/etc/keystone/*", regexp, subst) self.do_path_regex_sub( self.var_puppet_gen + "/etc/keystone/*", regexp, subst ) self.do_path_regex_sub( self.var_puppet_gen + "/etc/httpd/conf.d/", regexp, subst ) def postproc(self): protect_keys = [ "password", "qpid_password", "rabbit_password", "ssl_key_password", "ldap_dns_password", "neutron_admin_password", "host_password", "admin_password", "admin_token", "ca_password", "transport_url", "OIDCClientSecret", ] connection_keys = ["connection"] self.apply_regex_sub( r"(^\s*(%s)\s*(=\s*)?)(.*)" % "|".join(protect_keys), r"\1*********" ) self.apply_regex_sub( r"(^\s*(%s)\s*=\s*(.*)://(\w*):)(.*)(@(.*))" % "|".join(connection_keys), r"\1*********\6" ) # obfuscate LDAP plaintext passwords in domain config dir self.do_path_regex_sub( self.domain_config_dir, r"(^\s*(%s)\s*=\s*)(.*)" % "|".join(protect_keys), r"\1********" ) class DebianKeystone(OpenStackKeystone, DebianPlugin, UbuntuPlugin): apachepkg = 'apache2' packages = ( 'keystone', 'python-keystone', 'python3-keystone', ) class RedHatKeystone(OpenStackKeystone, RedHatPlugin): apachepkg = 'httpd' packages = ('openstack-selinux',) # vim: set et ts=4 sw=4 :