| Server IP : 3.96.16.70 / Your IP : 216.73.216.15 Web Server : Apache System : Linux ip-172-31-26-103.ca-central-1.compute.internal 6.1.163-186.299.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Feb 24 16:35:42 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.18 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /lib/python3.9/site-packages/cfnbootstrap/__pycache__/ |
Upload File : |
a
��0inm � @ s6 d dl Z d dlmZ d dlmZ d dlmZ d dlmZ d dl m
Z
d dl m Z d dl m
Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl mZ d dlZd dlZe� d �Z d
d � Z G d d
� d
e �Z G dd� de �Z!G dd� de"�Z#G dd� de"�Z$G dd� de"�Z%G dd� de"�Z&dS )� N)�util)�
AwsQueryError)�CloudFormationClient)� SQSClient)�
ProcessHelper)�Timer)� Credentialszcfn.hupc
C s� t j�| d�}t j�|�s&td| ��t�� }|�|� |�dd�sLtd��|�dd�}|�dd�rxt �
|�dd��}nb|�dd�r�zt � |�dd��}W q� t y� } ztd|j
��W Y d }~q�d }~0 0 n
td d �}t j�| d
�}g }t j�|��r8t �|�D ]2}t j�t j�||���r|�t j�||�� �qt�� } | �t j�| d �g| �}
|
�sztd t j�| d �|f ��g } g } | �� D �]&}
| �|
d
��s�t�d|
� �q�dd� | �|
d
��d�D �}| �|
d��s�t�d|
� �q�| �|
d��st�d|
� �q�d }| �|
d��r(| �|
d��� }t|
|| �|
d��� | �|
d�|�}|�� �r�| �|
d��rxt �| �|
d��|_| �|
d��r�t �| �|
d��|_| �|� n
| �|� �q�| �s�| �s�td��d}|�dd��r�|�dd�}t � |�}|�dd ��r
|�dd �}t |||�}|�dd ��r<|�dd �}t �|�}nd }| �rTt | ||�}nd }| �r�t � |�}|�dd ��r�|�dd �}t |||d �}t || |t |||�|�}nd }|||fS )!Nz cfn-hup.confz'Could not find main configuration at %s�main�stackz([main] section must contain stack optionZrolezcredential-filez-Could not retrieve credentials from file:
%s� zhooks.dz
hooks.confz)No hook configurations found at %s or %s.�triggersz!No triggers specified for hook %sc S s g | ] }|� � �qS � )�strip)�.0�sr
r
�=/usr/lib/python3.9/site-packages/cfnbootstrap/update_hooks.py�
<listcomp>\ s �z parse_config.<locals>.<listcomp>�,�pathz No path specified for hook %s�actionz No action specified for hook %s�runas� singleton� send_resultzNo valid hooks foundz us-east-1�region�urlzmulti-threadedT�sqs_url)r )!�osr �join�isfile�
ValueError� ConfigParser�readZ
has_option�getr ZRoleBasedCredentialsZextract_credentials�IOError�strerrorr �isdir�listdir�appendZsections�logging�error�splitr �Hook� is_cmd_hookZinterpret_booleanr r r ZendpointForRegion�
HookProcessorr � CmdProcessor)Z config_pathZmain_conf_pathZ main_configr
� credentials�eZadditional_hooks_pathZadditional_filesZ hook_fileZ hooks_configZ
files_read�hooksZ cmd_hooksZsectionr r �hookr Zcfn_url�
cfn_client�value�multi_threadedZ processorr �
sqs_clientZ
cmd_processorr
r
r � parse_config) s� �
�
��
�
�� �
�
�
�
��r7 c @ s e Zd Zdd� Zdd� ZdS )�FatalUpdateErrorc C s
|| _ d S �N��msg��selfr; r
r
r �__init__� s zFatalUpdateError.__init__c C s | j S r9 r: �r= r
r
r �__str__� s zFatalUpdateError.__str__N��__name__�
__module__� __qualname__r> r@ r
r
r
r r8 � s r8 c @ s e Zd Zdd� Zdd� ZdS )�InFlightStatusErrorc C s
|| _ d S r9 r: r< r
r
r r> � s z InFlightStatusError.__init__c C s | j S r9 r: r? r
r
r r@ � s zInFlightStatusError.__str__NrA r
r
r
r rE � s rE c @ sX e Zd Zdd� Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z d
d� Z
dS )r+ c C s6 |d d � | _ || _|| _|| _|| _d| _d| _d S )NFT)� _triggers�_path�_action�_name�_runasr r )r= �namer r r r r
r
r r> � s z
Hook.__init__c C s | j S r9 �rF r? r
r
r r � s z
Hook.triggersc C s | j S r9 )rG r? r
r
r r � s z Hook.pathc C s | j S r9 )rH r? r
r
r r � s z Hook.actionc C s | j S r9 )rI r? r
r
r rK � s z Hook.namec C s | j S r9 )rJ r? r
r
r r � s z
Hook.runasc C s | j dgkS )Nz
on.commandrL r? r
r
r r, � s zHook.is_cmd_hookN) rB rC rD r> �propertyr r r rK r r, r
r
r
r r+ � s
r+ c @ s0 e Zd Zdd� Zdd� Zdd� Zedd� �Zd S )
�!AutoRefreshingCredentialsProviderc C s2 || _ || _|| _d | _d | _d| _t�� | _d S )NF) � _cfn_client� _stack_name� _listener_id�_creds� _last_timer�listener_expired� threadingZLock�
_refresh_lock)r= r3 �
stack_name� listener_idr
r
r r> � s z*AutoRefreshingCredentialsProvider.__init__c C s` | j ��B t�d� | jr$| j�� z | j�| j| j�| _ d| _
W nz t y� } zBt |d�rxd|j
krxd| _
t�d� nd| _
t�d� W Y d }~n*d }~0 ty� d| _
t�d� Y n0 t�� }| j r�t�| j j�� �n|}|| }|d k�rtd
|d �}n d t�� }t�d
|� t|| j�}d|_|�� || _W d � n1 �sR0 Y d S )Nz Refreshing listener credentialsF�
error_codeZListenerExpiredTzListener expiredz+IOError caught while refreshing credentialsz Exception refreshing credentialsi i � �< z0Scheduling next credential refresh in %s seconds)rV �log�inforS ZcancelrO Zget_listener_credentialsrP rQ rR rT r# �hasattrrY � exception� Exception�time�calendarZtimegm�
expirationZ utctimetuple�min�randomr �refresh�daemon�start)r= r0 �nowrc Z remainingZ next_refresh�tr
r
r rf � sL
�
� �
��
� z)AutoRefreshingCredentialsProvider.refreshc C s | j o| j jtj�� k S r9 )rR rc �datetime�utcnowr? r
r
r �
creds_expired s z/AutoRefreshingCredentialsProvider.creds_expiredc C s4 t d�D ]}| jr q | �� q| js.td��| jS )N� z'Could not retrieve listener credentials)�rangerR rf r )r= �ir
r
r r/ s
z-AutoRefreshingCredentialsProvider.credentialsN)rB rC rD r> rf rm rM r/ r
r
r
r rN � s
'rN c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$S )%r. z Processes CommandService hooksc C s� || _ | �|�| _|| _|| _|| _| js4t�d� t� � rHt�
� | _ n|j sZt
�� | _ ntd��t| j| j | j �| _d| _| �� tj�| jd�| _| �� | _d| jvr�i | jd< d| jvr�i | jd< t� | _ t � � | _ t � � | _ dS )�/Takes a list of Hook objects and processes themz Enabled single threading mode.z Could not retrieve instance idNzcommands_run.json�by_id�by_day)!rW �_hooks_by_pathr1 r6 r3 r5 r\ �debugr Zis_ec2Zget_instance_idrX Zusing_instance_identity�socketZgetfqdnr rN �_creds_provider� queue_url�_create_storage_dirr r r � storage_dir�_runfile�_load_commands_run�
_commands_run�set�_currently_runningrU �RLock�_currently_running_lock�_commands_run_lock)r= rW r1 r6 r3 r5 r
r
r r> s4
�
zCmdProcessor.__init__c C s� t j�| j�r�t| jd��f}zt�|�W W d � S typ t� d� t �
| j� i Y W d � S 0 W d � q�1 s�0 Y ni S d S )N�rz&Could not load previously run commands) r r r r{ �open�json�loadr` r\ r_ �remove�r= �fr
r
r r| D s
8z CmdProcessor._load_commands_runc C s | j d uo| jj S r9 )rx rw rT r? r
r
r �
is_registeredP s zCmdProcessor.is_registeredc C s
| j �� S r9 )rw rm r? r
r
r rm S s zCmdProcessor.creds_expiredc
C sh z| j �| j| j�j| _W n@ tyZ } z(|jdkrDtdt|� ��� W Y d }~n
d }~0 0 d| j _
d S )NZValidationErrorz)Terminal failure registering listener: %sF) r3 Zregister_listenerrW rX rx r rY r8 �strrw rT )r= r0 r
r
r �registerV s �
�zCmdProcessor.registerc C s~ t jdkrt j�d�| _nd| _t j�| j�szt�d| j� zt �| jd� W n* t yx t�
d| j� t � � | _Y n0 d S )N�nt� ${SystemDrive}\cfn\cfn-hup\data�/var/lib/cfn-hup/data� Creating %s� �.Could not create %s; using temporary directory)
r rK r �
expandvarsrz r% r\ ru �makedirs�OSError�warn�tempfile�mkdtempr? r
r
r ry a s
� �z CmdProcessor._create_storage_dirc C s> t j �� }|jddddd��� }| j�� d| jd | �|�< || jd vrZg | jd |< | jd | �| �|�� z�g }| jd �� D ]L}|t j � |d� t j
dd�kr�| jd | D ]}| jd |= q�|�|� q�|D ]}| jd |= q�| � � W n" t �y t
�d | j� Y n0 W d � n1 �s00 Y d S )
Nr )ZhourZminute�secondZ microsecondTrr rs z%Y-%m-%dT%H:%M:%SrZ )Zdaysz Could not write runfile to %s)rk rl �replace� isoformatr� r} �_get_idr' �keys�strptimeZ timedelta�_write_commands_runr` r\ r_ r{ )r= r; ri Zcmd_timeZkeys_to_delete�keyZcmd_idr
r
r �_command_completedp s*
�
z CmdProcessor._command_completedc C s> t | jd�� }t�| j|� W d � n1 s00 Y d S )N�w)r� r{ r� �dumpr} r� r
r
r r� � s z CmdProcessor._write_commands_runc C s@ z | j j| j|| jjd� W n ty: t�d|� Y n0 d S )N��request_credentialsz&Could not delete message for handle %s)r6 Zdelete_messagerx rw r/ r` r\ r_ )r= �receipt_handler
r
r �_delete_message� s �
�z CmdProcessor._delete_messagec C s |d d |d d |d S )N� DispatcherId�|� CommandName� InvocationIdr
r< r
r
r r� � s zCmdProcessor._get_idc C s> | j �$ | �|�| jd v W d � S 1 s00 Y d S )Nrr )r� r� r} r< r
r
r � _already_run� s zCmdProcessor._already_runc C s< zt �t �|j�d �W S ty6 t�d� Y d S 0 d S )N�MessagezReceived invalid message)r� �loads�bodyr` r\ r_ r< r
r
r �_parse� s
zCmdProcessor._parsec
C s� | j d u rtd��g }�z| jj| j | jjdd�D ]�}| �|�}|s^t�d|� | � |j
� q2| � |�r�t�d| � |�� | � |j
� q2| j
�� | � |�| jv�r| � |��s| j�| � |�� | jr�tj| j||j
fd�}d|_|�|� |�� n| �||j
� W d � q21 �s0 Y q2W n~ t�y> � Y nj t�y� } z4t|d��rld |jk�rld | _ t�d
� W Y d }~n&d }~0 t�y� t�d � Y n0 |S ) Nz/Cannot process command hooks before registering� )r� Z wait_timez Invalid message, deleting: %szAlready ran %s, deleting)�target�argsTrY z'AWS.SimpleQueueService.NonExistentQueuez(IOError caught while processing messagesz*Exception caught while processing messages) rx r8 r6 Zreceive_messagerw r/ r� r\ r] r� r� r� r� r� r �addr5 rU ZThread� _process_msgrg r' rh r# r^ rY r_ r` )r= Zthreadsr; �cmd_msg�threadr0 r
r
r �process� sH
�
�
4 zCmdProcessor.processc C s� t �d|� d}�z0z�t �d|� tj�t|d �d �}|tj�� k rpt �d|d |d |d |�� � d
}nDt �d |d |d � | j� |d �}|r�| �
||�r�| � |� d
}W n> t t
fy� t �d � d
}Y n ty� t �d
� Y n0 W |�r| �|� | j�" | j�| �|�� W d � n1 �s80 Y nL|�rT| �|� | j�" | j�| �|�� W d � n1 �s�0 Y 0 d S )NzProcessing message: %sFzCommand message: %sZ
Expirationi� z@Invocation %s of command %s for stack %s expired at %s; skippingr� r� r� Tz'Received command %s (invocation id: %s)z%Invalid message received; deleting itz$Unexpected exception running command)r\ ru rk Zutcfromtimestamp�intrl r] r� r1 r" � _run_hookr� r �KeyErrorr_ r` r� r� r r� r� )r= r� r� �deleterc Z hook_to_runr
r
r r� � sB �� �
4�
zCmdProcessor._process_msgc C s |j rXt�d|j� | j�| j|d |d | j�}|| jkrHt�d� nt�d|� dS | �|�}|d }t�d|j� t� d |� |j
}|j r�t jd
kr�d |j d |g}n
t�
d
� t|tj|d��� }t� d|j|jr�|jnd� |js�dS |d |d |d |j�r dnd| jd�}|j�rp|j�� } t�
d|j|j� t| �dk�rN| n| dd� d | dd � |d< nZ|j�� }
t|
�dk�r�t�d |j� d|d < d |
dd � |d< nt�d |j� |
|d!< z | jj|t� |�| j j d"� W n t �y
t� d#� Y d$S 0 dS )%Nz+Hook %s is configured to run as a singletonr� r� z4This listener is the leader. Continuing with actionz2This listener is not the leader; %s is the leader.T� ResultQueue�Running action for %szAction environment: %s�posix�su�-cz/runas is not supported on this operating system)�stderr�env�Action for %s output: %s�<None>r� �FAILURE�SUCCESS)r� r� r� �StatusZ
ListenerIdz/Action for %s exited with %s, returning FAILUREi r i� z...i ���r� zCstdout for %s was greater than 1024 in length, which is not allowedr� z6Result data was longer than 1024 bytes. Started with: �d z*Action for %s succeeded, returning SUCCESS�Datar� z1Error sending result; will leave message in queueF)!r r\ r] rK r3 Zelect_command_leaderrW rX �_get_environmentru r r r r� r �
subprocess�PIPE�call�stdoutr �
returncoder� �rstrip�lenr) r6 Z send_messager� �dumpsrw r/ r` r_ ) r= r2 r� Zleader�
action_envZ result_queuer �resultZ
result_msgZ
result_stderrZ
result_stdoutr
r
r r� � s�
�
�
�
��
���
�
�
�
��
zCmdProcessor._run_hookc C s4 i }|D ]&}|j |v r$td|j ��|||j < q|S )Nz(Multiple hooks for the same command (%s))r r8 )r= r1 Z ret_hooksr2 r
r
r rt 9 s
� zCmdProcessor._hooks_by_pathc C s� t tj�}d|v r |d |d< |d |d< |d |d< |d |d< | j|d < | j|d
< |d |d < d
|v rv|d
|d< | jj}|j|d< |j|d< |j |d< |S )Nr� ZCMD_DATAr� Z
INVOCATION_IDr� Z
DISPATCHER_IDr� ZCMD_NAMEZ
STACK_NAMEZ LISTENER_IDr� Z RESULT_QUEUEZ EventHandleZ EVENT_HANDLEZRESULT_ACCESS_KEYZRESULT_SECRET_KEYZRESULT_SESSION_TOKEN)
�dictr �environrW rX rw r/ Z
access_keyZ
secret_keyZsecurity_token)r= r� r� Zcredsr
r
r r� B s
z CmdProcessor._get_environmentN)rB rC rD �__doc__r> r| r� rm r� ry r� r� r� r� r� r� r� r� r� rt r� r
r
r
r r. s$ % ,!E r. c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dS )r- zProcesses update hooksc C s� || _ tjdkr tj�d�| _nd| _tj�| j�s�t�d| j� zt� | jd� W n* t
y~ t� d| j� t �
� | _Y n0 t�| jd� || _|| _t�g �| _dS ) rq r� r� r� r� r� r� �metadata_db.jsonN)r1 r rK r r� �dirr% r\ ru r� r� r� r� r� �JsonFileManagerZcreate�clientrW Z Converter�_jsonConverter)r= r1 rW r� r
r
r r> X s"
�zHookProcessor.__init__c C sh t �| jd�}i | _| jD ]H}z| �||� W q tyB � Y q ty` t� d|j
� Y q0 qd S )Nr� z&Exception caught while running hook %s) r� r! r� �_resource_cacher1 �
_process_hookr8 r` r\ r_ rK )r= �metadatar2 r
r
r r� l s
�zHookProcessor.processc C s� z| � |j�}W n ty$ Y d S 0 | j�|�|jd |j d ��}d|jv rh|sh|rht� d|j� n�d|jv r�|r�|s�t� d|j|j� nld|jv r�|r�|r�||kr�t� d|j� nBt�
d|j|j� | j� |�||jd |j < t �
| jd |� d S t� d
|j� ttj�}| �|j�}|�r6| �|�|d | < |�rN| �|�|d | < |j}|j�rjd
|jd|g}t||d��� }|j�r�t�d|j|j� n,| j� |�||jd |j < t �
| jd |� t�
d|j|j�r�|jnd� d S )Nr� zpost.addz3Previous state not found; action for %s will be runz post.removez.Path %s was removed; action for %s will be runz post.updatez?Data has changed from previous state; action for %s will be runz No change in path %s for hook %sr� r� z
CFN_OLD_%sz
CFN_NEW_%sr� r� )r� z:Action for %s exited with %s; will retry on next iterationr� r� )�_retrieve_path_datar rE r� Z deserializer" rK r r\ r] ru Z serializer� �writer� r� r r� �_retrieve_env_key�
_as_stringr r r r� r� r� r� ) r= r2 r� Znew_dataZold_datar� Zenv_keyr r� r
r
r r� x sb ����
�
�
�
�
�
�zHookProcessor._process_hookc C s, t |t�r|S t |tj�r"|�� S t�|�S r9 )�
isinstancer� rk r� r� r� )r= �objr
r
r r� � s
zHookProcessor._as_stringc C sH |� dd�}t|�dk r dS |d �� dkr0dS |d �� dkrDdS d S )
zUGiven a hook path, return the key to append to environment variables for old/new data�.rn Z LAST_UPDATEDrZ r� ZMETADATA�physicalresourceidZPHYSICAL_RESOURCE_IDN)r* r� �lower)r= r �partsr
r
r r� � s z HookProcessor._retrieve_env_keyc C s` |� dd�}t|�dk r$td| ��|d �� dkr@td| ��t|�dkrRd }n*|d �� dvrptd | ��n |d �� }|d
}t|�d k r�d n|d }|| jvr�| j�|| j�| j|< | j| }|j}|�r|� d
��rt
� d|| j|� t d|| j|f ��|dk�r8|j
�s*t
�d|| j� d S t�|j
|�S d|k�rFd S |dk�rV|jS |jS d S )Nr� rn rZ z�Unsupported path: paths must be in the form Resources.<LogicalResourceId>(.Metadata|PhysicalResourceId)(.<optional Metadata subkey>). Input: %sr Z resourceszDUnsupported path: only changes to Resources are supported (path: %s))r� r� ziUnsupported path: only Metadata or PhysicalResourceId can be specified after LogicalResourceId (path: %s)� � r Z _IN_PROGRESSz0Skipping resource %s in %s as it is in status %sz%s in %s is in status %sr� zNo metadata for %s in %sZDELETE_COMPLETEr� )r* r� r8 r� r� r� Zdescribe_stack_resourcerW ZresourceStatus�endswithr\ ru rE r� r� r Z
extract_valueZphysicalResourceIdZ lastUpdated)r= r r� Z resourcePartZ
logical_idZsubpath�resourceZstatusr
r
r r� � sV �� �
�
��
�
z!HookProcessor._retrieve_path_dataN)
rB rC rD r� r> r� r� r� r� r� r
r
r
r r- U s 1 r- )'rU Z cfnbootstrapr Zcfnbootstrap.aws_clientr Zcfnbootstrap.cfn_clientr Zcfnbootstrap.sqs_clientr Zcfnbootstrap.utilr r Z cfnbootstrap.json_file_managerZjson_file_managerr� rb rk r( r re rv r� r� ra r r� Z configparserr Z getLoggerr\ r7 r` r8 rE �objectr+ rN r. r- r
r
r
r �<module> s:
| #B ;