CasperSecurity
o
([QhX) � @ s� d dl Z d dlZd dlmZ d dlmZmZ d dlmZ d dl m
Z
d dl m Z
zd dlZdZW n ey; dZY nw G d d
� d
e�ZdS ) � N)� UploadTarget)�
convert_bytes�TIMEOUT_DEFAULT)�DeviceAuthorizationClass)�
RHELPolicy)�_sosTFc s� e Zd ZdZdZdZdZd'� fdd� ZdZd Z e Z
d
Z dZ d Z
d d
� Z� fdd�Zdd� Zdd� Zdd� Zdd� Zd(dd�Zdd � Zd d � Zd d � Zd)� fd!d"� Zd#d$� Z� fd%d&�Z� ZS )*�RHELUploadTargetzVhttps://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/auth/devicezPhttps://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/tokenzRed Hat Upload Target�redhatNc s t � j|||d� d S )N)�parser�args�cmdline)�super�__init__)�selfr
r r �� __class__� �;/usr/lib/python3/dist-packages/sos/upload/targets/redhat.pyr ! s zRHELUploadTarget.__init__z https://api.access.redhat.comz sftp://sftp.access.redhat.com�posti @c C s t | jd t�S )z.Return true if we are running in a RHEL system�policy)�
isinstance�commonsr �r r r r �check_distribution- s z#RHELUploadTarget.check_distributionc s t � �|� | jd j| _d S )N� cmdlineopts)r
�pre_workr �upload_directory)r � hook_commonsr r r r 1 s zRHELUploadTarget.pre_workc C sD | j d jr| j�td�� | j d js | j| _| j�d� d S d S )Nr zVThe option --upload-user has been deprecated in favour of device authorization in RHELz&No case id provided, uploading to SFTP)r � upload_user�ui_log�info�_�case_id� RH_SFTP_HOST�
upload_urlr r r r �prompt_for_upload_user7 s � �z'RHELUploadTarget.prompt_for_upload_userc C s$ | j d jr| j�td�� d S d S )Nr zVThe option --upload-pass has been deprecated in favour of device authorization in RHEL)r � upload_passr r r! r r r r �prompt_for_upload_passwordB s
��z+RHELUploadTarget.prompt_for_upload_passwordc
C s� d| j d j� d�}z7| jr| jW S | j d jr | j d jW S | j d jdkr+| jW S | j d js@| j d �| j d �s@| jW S W n ty\ } z| j�d|� �� W Y d }~nd }~ww | j � |� �S )Nz/support/v1/cases/r z /attachments�sftpr z=There was a problem while setting the remote upload target: )
r r" r$ �upload_protocolr# �prompt_for_case_id� Exceptionr r � RH_API_HOST)r � rh_case_api�er r r �get_upload_urlJ s4
�
�������z RHELUploadTarget.get_upload_urlc C s d| j � �}d|iS )NzBearer �
Authorization)�
_device_token)r �str_authr r r �_get_upload_https_auth` s z'RHELUploadTarget._get_upload_https_authTc C sh d|j �d�d || �� fi}t| j| j�}|�� | _| j� d| �
� � �� t j | �
� || �� |td�S )z�If upload_https() needs to use requests.post(), use this method.
Policies should override this method instead of the base upload_https()
:param archive: The open archive file object
�file�/����/Device authorized correctly. Uploading file to )�files�headers�verify�timeout)�name�split�_get_upload_headersr �client_identifier_url�token_endpoint�get_access_tokenr1 r r �get_upload_url_string�requestsr r/ r3 r )r �archiver: r8 �RHELAuthr r r �_upload_https_postd s ���
� �z#RHELUploadTarget._upload_https_postc C s | � � �| j�r
ddd�S i S )N�falsezno-cache)� isPrivatez
cache-control)r/ �
startswithr, r r r r r> } s
z$RHELUploadTarget._get_upload_headersc C s4 | � � �| j�r
dS | � � �| j�rdS | �| j�S )NzRed Hat Customer PortalzRed Hat Secure FTP)r/ rI r, r# �_get_obfuscated_upload_urlr$ r r r r rB � s
z&RHELUploadTarget.get_upload_url_stringc C sL | j �d�d }| jd jr| jd j� d|� �}| jr$tj�| j|�}|S )z�The RH SFTP server will only automatically connect file uploads to
cases if the filename _starts_ with the case number
r5 r6 r r! )�upload_archive_namer= r r" r �os�path�join)r �fnamer r r �_get_sftp_upload_name� s z&RHELUploadTarget._get_sftp_upload_namec
s� | j �d�d | �� vrt� �� S tstd��d}d}| jsKz t| j | j
�}W n tyE } zdt |�v r;| j �
d� W Y d}~n
d}~ww |�� | _| jrY| j �
d| �� � �� | jd }d}| jr�| �� } tj|| d d
�}|jd kr�t�|j�d }t�|j�d
}nT| j �d|j� d|�� � �� | j �d� n>ddi}
tj|t�|
�d d�} | jd kr�t�| j�} | d }| d
}| j �
td|� d��� n| j �d| j� d| �� � �� |r�|r�t� j||d�S td��)z�Override the base upload_sftp to allow for setting an on-demand
generated anonymous login for the RH SFTP server if a username and
password are not given
z//� zPpython3-requests is not installed and is required for obtaining SFTP auth token.Nzend user deniedz:Device token authorization has been cancelled by the user.r7 z/support/v2/sftp/token�
)r9 r; �� �username�tokenz$DEBUG: auth attempt failed (status: z): zUUnable to retrieve Red Hat auth token using provided credentials. Will try anonymous.� isAnonymousT)�datar; zUser z^ used for anonymous upload. Please inform your support engineer so they may retrieve the data.z)DEBUG: anonymous request failed (status: )�user�passwordz1Could not retrieve valid or anonymous credentials) r# r= r/ r
� upload_sftp�REQUESTS_LOADEDr+ r1 r r? r@ �strr r rA rB r, r3 rC r � status_code�json�loads�text�debug�error�dumpsr! )
r rX rY �_token�_userrE r. �url�retr9 �adata�anon�respr r r rZ � sv
� ���
�
���
����z RHELUploadTarget.upload_sftpc C sD t j�|�}|| jkr | j�tdt| j�� d��� | j| _ d S d S )NzLSize of archive is bigger than Red Hat Customer Portal limit for uploads of z via sos http upload.
)
rL rM �getsize�_max_size_requestr �warningr! r r# r$ )r rD �sizer r r �check_file_too_big� s
�� �z#RHELUploadTarget.check_file_too_bigc
s� z| � � �| j�r| �|� t� �|�}W |S tyL } z*d}| j�| j�s(� | j� t
d|� d| j � ��� | j | _t� �|�}W Y d}~|S d}~ww )zOverride the base upload_archive to provide for automatic failover
from RHCP failures to the public RH dropbox
Fz0Upload to Red Hat Customer Portal failed due to z . Trying N) r/ rI r, ro r
�upload_archiver+ r$ r rb r! r# )r rD �uploadedr. r r r rp � s*
������z RHELUploadTarget.upload_archive)NNN)T)NN) �__name__�
__module__� __qualname__r? r@ �upload_target_name�upload_target_idr r, r# � _upload_url�_upload_methodr1 rl r r r% r' r/ r3 rF r> rB rP rZ ro rp �
__classcell__r r r r r s2
Kr )rL r^ �sos.upload.targetsr �
sos.utilitiesr r �sos.policies.authr �sos.policies.distros.redhatr �sosr r! rC r[ � ImportErrorr r r r r �<module> s �