CasperSecurity
o
��Jh� � @ s� d dl Z d dlZd dlmZmZ d dlmZmZmZm Z m
Z
d dl m Z dZ
dZe
efZdZdZd Zd
Zd Zd Zd
ZdZed Ze�e
�e��Z G dd� de �Z dS )� N)�Any�Dict)�
exceptions�http�secret_manager�system�util)� PublicCloudAutoAttachInstancez169.254.169.254z[fd00:ec2::254]zhttp://{}/latest/api/tokenz0http://{}/latest/dynamic/instance-identity/pkcs7z3http://{}/latest/dynamic/instance-identity/documentz/sys/hypervisor/uuidz /sys/class/dmi/id/product_serialz /sys/class/dmi/id/product_uuid�21600zX-aws-ec2-metadata-tokenz -ttl-secondsc @ s� e Zd ZdZdZdefdd�Zeej e
j g d�d�de ee
f fdd ���Zej e
j g d�d�de fd
d ��Zedefd d
��Zdd� Zej e
j g d�d�dd� �Zedefdd��Zedefdd��Zdefdd�Zdedefdd�ZdS ) �AWSAutoAttachInstanceN�urlc C s2 t j||dd�}|jdkr|jS tj|j|jd��)N� )�headers�timeout�� ��code�body)r �readurlr r r �CloudMetadataError)�selfr r �response� r �5/usr/lib/python3/dist-packages/uaclient/clouds/aws.py�_get_imds_url_response s
�z,AWSAutoAttachInstance._get_imds_url_response)g �?r
r
)� retry_sleeps�returnc C s6 | � � }t�| j�}| j||d�}tj�|� d|iS )N�r �pkcs7)� _request_imds_v2_token_headers�IMDS_URL�format� _ip_addressr r �secrets�
add_secret)r r r �imds_url_responser r r � identity_doc* s
z"AWSAutoAttachInstance.identity_docc
C sf | � � }t�| j�}z
t�| j||d��}W |S tjy2 } zt� d|� i W Y d}~S d}~ww )a
Get the instance identity doc associated with the current instance.
See
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/retrieve-iid.html
for more context.
@return: Dict containing the instance identity document.
r z-Error decoding instance identity document: %sN)
r �
_IMDS_IID_URLr! r" �json�loadsr �JSONDecodeError�LOG�debug)r r r �ii_doc�er r r � _get_ii_doc3 s �� ��z!AWSAutoAttachInstance._get_ii_docc C s0 | � � }|�dd�}|�dd�}t|�pt|�S )a
Determines if the instance is likely Ubuntu Pro.
Criteria: if any billing-product or marketplace-product-code is
present, then is likely a Pro instance.
@return: Boolean indicating if the instance is likely pro or not.
�billingProductsN�marketplaceProductCodes)r/ �get�bool)r r- �billing_products�marketplace_product_codesr r r �
is_likely_proI s
z#AWSAutoAttachInstance.is_likely_proc C s| t D ]+}z| j|d�}W n ty) } zt�d|t|dd�� W Y d }~qd }~ww || _ | jd u r<tjd� t �d��|S )N)�
ip_addressz*Could not reach AWS IMDS at http://%s: %s
�reason� z, )� addresses)
�IMDS_IP_ADDRESS�_get_imds_v2_token_headers� Exceptionr+ �warning�getattrr" r �AWSNoValidIMDS�join)r �addressr r. r r r r X s$
���
�z4AWSAutoAttachInstance._request_imds_v2_token_headers)r
� � c C s� | j dkrd S | j rt| j iS tjt�|�dttidd�}|jdkr2|j | _ t
j � | j � t| j iS |jdkr<d| _ d S t
j|j|j d��)N�IMDSv1�PUTr
)�methodr r r i� r )�
_api_token�AWS_TOKEN_PUT_HEADERr r �IMDS_V2_TOKEN_URLr! �AWS_TOKEN_REQ_HEADER�AWS_TOKEN_TTL_SECONDSr r r r# r$ r r )r r7 r r r r r< k s(
�
�z0AWSAutoAttachInstance._get_imds_v2_token_headersc C � dS )N�awsr �r r r r �
cloud_type� � z AWSAutoAttachInstance.cloud_typec C s� zt �t�}d|dd� krW dS W n ty Y nw t �t��� }t �t��� }d|dd� kr=|dd� kr@dS dS dS )z$This machine is a viable AWSInstance�ec2r � TF)r � load_file�SYS_HYPERVISOR_PRODUCT_UUID�FileNotFoundError�DMI_PRODUCT_UUID�lower�DMI_PRODUCT_SERIAL)r �hypervisor_uuid�dmi_uuid�
dmi_serialr r r � is_viable� s
� �"�z AWSAutoAttachInstance.is_viablec C rM )� UnsupportedFr rO r r r �should_poll_for_pro_license� rQ z1AWSAutoAttachInstance.should_poll_for_pro_license�wait_for_changec C s t �� �)N)r � InPlaceUpgradeNotSupportedError)r r` r r r �is_pro_license_present� s z,AWSAutoAttachInstance.is_pro_license_present)�__name__�
__module__� __qualname__rH r" �strr �propertyr �retryr r r r r& r/ r3 r6 r r< rP r] r_ rb r r r r r s(
r ) r( �logging�typingr r �uaclientr r r r r �uaclient.cloudsr �IMDS_IPV4_ADDRESS�IMDS_IPV6_ADDRESSr; rJ r r' rU rY rW rL rI rK � getLogger� replace_top_level_logger_namerc r+ r r r r r �<module> s&