o

�N�gg�@s
dZd
dl
Z
d
dlZd
dlZd
dlmZ
e
�e�
Z	dd�Z
																																					ddd�
Z													ddd	�
Z							dd
d�
Z
					
				ddd�
Z	ddd�
Z							ddd�
ZdS)a�
Manage RDSs
===========

.. versionadded:: 2015.8.0

Create and destroy RDS instances. Be aware that this interacts with Amazon's
services, and so may incur charges.

This module uses ``boto``, which can be installed via package, or pip.

This module accepts explicit rds credentials but can also utilize
IAM roles assigned to the instance through Instance Profiles. Dynamic
credentials are then automatically obtained from AWS API and no further
configuration is necessary. More information available `here
<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_.

If IAM roles are not used you need to specify them either in a pillar file or
in the minion's config file:

.. code-block:: yaml

    rds.keyid: GKTADJGHEIQSXMKKRBJ08H
    rds.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs

It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile,
either passed in as a dict, or as a string to pull from pillars or minion
config:

.. code-block:: yaml

    myprofile:
        keyid: GKTADJGHEIQSXMKKRBJ08H
        key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
            region: us-east-1

.. code-block:: yaml

    Ensure myrds RDS exists:
      boto_rds.present:
        - name: myrds
        - allocated_storage: 5
        - storage_type: standard
        - db_instance_class: db.t2.micro
        - engine: MySQL
        - master_username: myuser
        - master_user_password: mypass
        - region: us-east-1
        - keyid: GKTADJGHEIQSXMKKRBJ08H
        - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
        - tags:
            key: value

.. code-block:: yaml

    Ensure parameter group exists:
        create-parameter-group:
          boto_rds.parameter_present:
            - name: myparametergroup
            - db_parameter_group_family: mysql5.6
            - description: "parameter group family"
            - parameters:
              - binlog_cache_size: 32768
              - binlog_checksum: CRC32
            - region: eu-west-1

:depends: boto3

�N)
�SaltInvocationErrorcCsd
tvrdSdt�
d
�
fS)z)
    Only load if boto is available.
    �boto_rds.existsZboto_rdsF)�__salt__Zmissing_fun_string�rr�H/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/boto_rds.py�__virtual__Ps

rc+-	Cs�
|d
did�}+td|| |"|$|%|*�},|,�
d�
s�tdr)d|�d�|+d	<d
|+d<|+Stdg|�
|
�
|�
|�
|�
|�
|�
|�
|	�
|
�
|�
|�
|
�
|�
|�
|�
|�
|�
|�
|�
|�
|�
|�
|�
|�
|�
| �
|�
|�
|�
|�
|�
|�
|#�
|!�
|&�
|'�
|(�
|"�
|)�
|$�
|%�
|*�
R�},|,�
d
�
s�d|+d<d�|,dd�
|+d	<|+Sdd
i
|+dd<dtd|d|"|$|%|*d�i
|+dd<d|�d�|+d	<|+Sd|�d�|+d	<|+S)a�
    Ensure RDS instance exists.

    name
        Name of the RDS state definition.

    allocated_storage
        The amount of storage (in gigabytes) to be initially allocated for the
        database instance.

    db_instance_class
        The compute and memory capacity of the Amazon RDS DB instance.

    engine
        The name of the database engine to be used for this instance. Supported
        engine types are: MySQL, mariadb, oracle-se1, oracle-se, oracle-ee, sqlserver-ee,
        sqlserver-se, sqlserver-ex, sqlserver-web, postgres and aurora. For more
        information, please see the ``engine`` argument in the Boto3 RDS
        `create_db_instance`_ documentation.

    master_username
        The name of master user for the client DB instance.

    master_user_password
        The password for the master database user. Can be any printable ASCII
        character except "/", '"', or "@".

    db_name
        The meaning of this parameter differs according to the database engine you use.
        See the Boto3 RDS documentation to determine the appropriate value for your configuration.
        https://boto3.readthedocs.io/en/latest/reference/services/rds.html#RDS.Client.create_db_instance

    storage_type
        Specifies the storage type to be associated with the DB instance.
        Options are standard, gp2 and io1. If you specify io1, you must also include
        a value for the Iops parameter.

    db_security_groups
        A list of DB security groups to associate with this DB instance.

    vpc_security_group_ids
        A list of EC2 VPC security group IDs to associate with this DB instance.

    vpc_security_groups
        A list of EC2 VPC security groups (IDs or Name tags) to associate with this DB instance.

    availability_zone
        The EC2 Availability Zone that the database instance will be created
        in.

    db_subnet_group_name
        A DB subnet group to associate with this DB instance.

    preferred_maintenance_window
        The weekly time range (in UTC) during which system maintenance can
        occur.

    db_parameter_group_name
        A DB parameter group to associate with this DB instance.

    db_cluster_identifier
        If the DB instance is a member of a DB cluster, contains the name of
        the DB cluster that the DB instance is a member of.

    tde_credential_arn
        The ARN from the Key Store with which the instance is associated for
        TDE encryption.

    tde_credential_password
        The password to use for TDE encryption if an encryption key is not used.

    storage_encrypted
        Specifies whether the DB instance is encrypted.

    kms_keyid
        If storage_encrypted is true, the KMS key identifier for the encrypted
        DB instance.

    backup_retention_period
        The number of days for which automated backups are retained.

    preferred_backup_window
        The daily time range during which automated backups are created if
        automated backups are enabled.

    port
        The port number on which the database accepts connections.

    multi_az
        Specifies if the DB instance is a Multi-AZ deployment. You cannot set
        the AvailabilityZone parameter if the MultiAZ parameter is set to true.

    engine_version
        The version number of the database engine to use.

    auto_minor_version_upgrade
        Indicates that minor engine upgrades will be applied automatically to
        the DB instance during the maintenance window.

    license_model
        License model information for this DB instance.

    iops
        The amount of Provisioned IOPS (input/output operations per second) to
        be initially allocated for the DB instance.

    option_group_name
        Indicates that the DB instance should be associated with the specified
        option group.

    character_set_name
        For supported engines, indicates that the DB instance should be
        associated with the specified CharacterSet.

    publicly_accessible
        Specifies the accessibility options for the DB instance. A value of
        true specifies an Internet-facing instance with a publicly resolvable
        DNS name, which resolves to a public IP address. A value of false
        specifies an internal instance with a DNS name that resolves to a
        private IP address.

    wait_status
        Wait for the RDS instance to reach a desired status before finishing
        the state. Available states: available, modifying, backing-up

    tags
        A dict of tags.

    copy_tags_to_snapshot
        Specifies whether tags are copied from the DB instance to snapshots of
        the DB instance.

    region
        Region to connect to.

    domain
        The identifier of the Active Directory Domain.

    key
        AWS secret key to be used.

    keyid
        AWS access key to be used.

    monitoring_interval
        The interval, in seconds, between points when Enhanced Monitoring
        metrics are collected for the DB instance.

    monitoring_role_arn
        The ARN for the IAM role that permits RDS to send Enhanced Monitoring
        metrics to CloudWatch Logs.

    domain_iam_role_name
        Specify the name of the IAM role to be used when making API calls to
        the Directory Service.

    promotion_tier
        A value that specifies the order in which an Aurora Replica is
        promoted to the primary instance after a failure of the existing
        primary instance. For more information, see Fault Tolerance for an
        Aurora DB Cluster .

    profile
        A dict with region, key and keyid, or a pillar key (string) that
        contains a dict with region, key and keyid.

    .. _create_db_instance: https://boto3.readthedocs.io/en/latest/reference/services/rds.html#RDS.Client.create_db_instance
    T���name�result�comment�changesr�exists�testz
RDS instance z would be created.rNrzboto_rds.create�createdFz!Failed to create RDS instance {}.�error�message�instancer
�old�boto_rds.describe_db_instances�DBInstances[0]�r
�jmespath�region�key�keyid�profile�new�	 created.� exists.)r�get�__opts__�format)-r
Zallocated_storage�db_instance_classZengineZmaster_usernameZmaster_user_passwordZdb_nameZstorage_typeZdb_security_groupsZvpc_security_group_idsZvpc_security_groups�availability_zoneZdb_subnet_group_nameZpreferred_maintenance_window�db_parameter_group_nameZdb_cluster_identifierZtde_credential_arnZtde_credential_passwordZstorage_encryptedZ	kms_keyidZbackup_retention_periodZpreferred_backup_window�portZmulti_azZengine_version�auto_minor_version_upgradeZ
license_model�iops�option_group_nameZcharacter_set_name�publicly_accessibleZwait_status�tagsZcopy_tags_to_snapshotr�domainrrZmonitoring_intervalZmonitoring_role_arnZdomain_iam_role_nameZpromotion_tierr�ret�
rrrr�presentYs�V





��������	�
���
������������������� �!�"�#�$�%�&�'�(�)�*�+�
.



�





��
�
r/cCs|
|d
did�}td||	|
|||
�}|�
d�
sptdr)d|�d�|d	<d
|d<|Std||
||||||||	|
|||
�}|rbd
|�d�|d	<dd
i
|dd<dtd|d|
|||
d�i
|dd<|Sd|d<d|�d�|d	<|Sd}td|||
|||
d�}|r�|dn
d
}||kr�td|||
|||
d�}|s�d|d<d|�d�|d	<||dd<||dd<d
|d<d
|�d�|d	<|S) z�
    Ensure RDS replica exists.

    .. code-block:: yaml

        Ensure myrds replica RDS exists:
          boto_rds.create_replica:
            - name: myreplica
            - source: mydb
    Trr	rrrzRDS read replica z is set to be created rNrzboto_rds.create_read_replicazRDS replica rrr
rrrrrFzFailed to create RDS replica �
.z8DBInstances[0].DBParameterGroups[0].DBParameterGroupNamer
zboto_rds.modify_db_instance)r
r%rrrrz$Failed to update parameter group of z RDS instance.r)rr r!)r
�sourcer#r$r&r'r(r)r*r+rrrrr%r-Zreplica_existsrrZpmg_nameZmodifiedrrr�replica_present~
s�

�



















�







��*�
�






�







�

�



r2c	
Cs�
tj
j�||f�
s
td
�
�
|ddid�}	|sg}|r_|D]B}
tdd|
||||d�}d|vrAd	�|dd
�
|	d<d|	d
<|	
S|ddurWd|
�d�|	d<d|	d
<|	
S|�|d�

qtd||||||d�}|�d�
s�t	dr�d|�d�|	d<d|	d
<|	Std||
||||||d�}
|
s�d|	d
<d|�d�|	d<|	Sd|	dd<||	dd<d|�d�|	d<|	Sd|�d �|	d<|	S)!a�
    Ensure DB subnet group exists.

    name
        The name for the DB subnet group. This value is stored as a lowercase string.

    subnet_ids
        A list of the EC2 Subnet IDs for the DB subnet group.
        Either subnet_ids or subnet_names must be provided.

    subnet_names
        A list of The EC2 Subnet names for the DB subnet group.
        Either subnet_ids or subnet_names must be provided.

    description
        Subnet group description.

    tags
        A dict of tags.

    region
        Region to connect to.

    key
        Secret key to be used.

    keyid
        Access key to be used.

    profile
        A dict with region, key and keyid, or a pillar key (string) that
        contains a dict with region, key and keyid.
    zBOne (but not both) of subnet_ids or subnet_names must be provided.Trr	zboto_vpc.get_resource_idZsubnet�r
rrrrrzError looking up subnet ids: {}rrFr�idNzSubnet z does not exist.�boto_rds.subnet_group_exists�r
r+rrrrrrz
Subnet group � is set to be created.zboto_rds.create_subnet_group)r
�description�
subnet_idsr+rrrr�Failed to create z subnet group.r
rrr�	 present.)
�salt�utils�dataZexactly_onerrr"�appendr r!)r
r8r9Zsubnet_namesr+rrrrr-�
ir.rrrrr�subnet_group_present�
sf,

�



�


�






�













�






rAT�c

Cs�|d
did�}
td|||||	d�}|s!d
|
d<|�d�|
d<|
St
d	r3d
|�d�|
d<d|
d<|
Std
||
|||||	|||�
}|sRd|
d<d|�d�|
d<|
Sd|di
|
dd<ddi
|
dd<d
|�d�|
d<|
S)a�
    Ensure RDS instance is absent.

    name
        Name of the RDS instance.

    skip_final_snapshot
        Whether a final db snapshot is created before the instance is deleted.
        If True, no snapshot is created.
        If False, a snapshot is created before deleting the instance.

    final_db_snapshot_identifier
        If a final snapshot is requested, this is the identifier used for that
        snapshot.

    tags
        A dict of tags.

    wait_for_deletion (bool)
        Wait for the RDS instance to be deleted completely before finishing
        the state.

    timeout (in seconds)
        The amount of time that can pass before raising an Exception.

    region
        Region to connect to.

    key
        Secret key to be used.

    keyid
        Access key to be used.

    profile
        A dict with region, key and keyid, or a pillar key (string) that
        contains a dict with region, key and keyid.
    Trr	rr3rz RDS already absent.rrzRDS z would be removed.Nzboto_rds.deleteF�Failed to delete z RDS.rr
r
rr�	 deleted.�rr!)
r
Zskip_final_snapshotZfinal_db_snapshot_identifierr+Zwait_for_deletion�timeoutrrrrr-�current�deletedrrr�absentKs@2

�
















�






rIc	Cs�|d
did�}td||
||||d�}|s"d
|d<|�d�|d<|St
d	r4d
|�d�|d<d|d<|Std|||||�}|sNd
|d<d|�d�|d<|S||dd<d|dd<d
|�d�|d<|S)NTrr	r5r6rz! RDS subnet group does not exist.rrzRDS subnet group z is set to be removed.zboto_rds.delete_subnet_groupFrCz RDS subnet group.r
rrrDrE)	r
r+rrrrr-rrHrrr�subnet_group_absent�s.
�








�






rJ�pending-rebootc

Cs�|d
did�}
td||||||	d�}|�
d�
sWtdr*d|�d	�|
d
<d|
d<|
Std
||
||||||	d�}|sHd|
d<d|�d�|
d
<|
S||
dd<d|�d�|
d
<nd|�d�|
d
<|du
�
rmi}
i}|D] }|��D]\}}t|�
tur�|r~dn
d|
|<qpt|�
|
|<qpqjt�d|
�
td|||||	d�}|�
d�
s�d|
d<t	j
�|
d
d|�d�g�
|
d
<|
S|d��D]1}|d|
vr�|
�
|d�
t|d�
kr�t�d |d|
�
|d�
|d�
|
�
|d�
||d<q�t
|�
d!k�
rZtd�
rt	j
�|
d
d"�||�g�
|
d
<d|
d<|
Std#||||||||	d$�}d%|v�
r?d|
d<t	j
�|
d
d&�||�|d%d'g�
|
d
<|
S||
dd(<t	j
�|
d
d)|�d*|�d+�g�
|
d
<|
St	j
�|
d
d)|
�d*|�d,�g�
|
d
<|
S)-a�
    Ensure DB parameter group exists and update parameters.

    name
        The name for the parameter group.

    db_parameter_group_family
        The DB parameter group family name. A
        DB parameter group can be associated with one and only one DB
        parameter group family, and can be applied only to a DB instance
        running a database engine and engine version compatible with that
        DB parameter group family.

    description
        Parameter group description.

    parameters
        The DB parameters that need to be changed of type dictionary.

    apply_method
        The `apply-immediate` method can be used only for dynamic
        parameters; the `pending-reboot` method can be used with MySQL
        and Oracle DB instances for either dynamic or static
        parameters. For Microsoft SQL Server DB instances, the
        `pending-reboot` method can be used only for static
        parameters.

    tags
        A dict of tags.

    region
        Region to connect to.

    key
        Secret key to be used.

    keyid
        Access key to be used.

    profile
        A dict with region, key and keyid, or a pillar key (string) that
        contains a dict with region, key and keyid.
    Trr	zboto_rds.parameter_group_existsr6rrzParameter group r7rNrzboto_rds.create_parameter_group)r
�db_parameter_group_familyr8r+rrrrFr:z parameter group.r
zNew Parameter Grouprr;�onZoffzParameters from user are : %s.zboto_rds.describe_parametersr3z#Faled to get parameters for group  r0�
parametersZ
ParameterNameZParameterValuez0Values that are being compared for %s are %s:%s.r
z1Parameters {} for group {} are set to be changed.zboto_rds.update_parameter_group)rN�apply_methodr+rrrrrz,Failed to change parameters {} for group {}:rZ
ParameterszParameters z for group z
 are changed.z
 are present.)rr r!�items�type�bool�str�log�debug�os�linesep�join�values�lenr")r
rLr8rNrOr+rrrrr-�resr�params�changedrP�
k�value�optionsZ	parameter�updaterrr�parameter_present�s�7

�













�













�


�



�


�
�



�
��




���









�





�
��	


��
�
��rb)%NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN)
NNNNNNNNNNNNN)NNNNNNN)	NNNTrBNNNN)NNNNN)NrKNNNNN)�__doc__�loggingrVZsalt.utils.datar<Zsalt.exceptionsr�	getLogger�__name__rTrr/r2rArIrJrbrrrr�<module>
s�F







































�*












�g






�k








�W
�"





�