HEX
Server: Apache
System: Linux server2.voipitup.com.au 4.18.0-553.109.1.lve.el8.x86_64 #1 SMP Thu Mar 5 20:23:46 UTC 2026 x86_64
User: posscale (1027)
PHP: 8.2.30
Disabled: exec,passthru,shell_exec,system
$ pwd: /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/
Upload Files
File: //opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/git.cpython-310.pyc
o

�N�gr��@s�dZddlZddlZddlZddlZddlZddlZddlZddl	Zddl
ZddlmZddl
m
Z
e�e�Zdd�Zdd�Zd	d
�Zdd�Zd
d�Z	d4dd�Zd4dd�Zdd�Zd5dd�Zdd�Zd4dd�Zd6dd�Zd4dd�Zd4d d!�Zd"d#�Z	$				%								&	%	%					'	'	d7d(d)�Z 		%						d8d*d+�Z!	&					%						d9d,d-�Z"							d:d.d/�Z#					d;d0d1�Z$						d<d2d3�Z%dS)=a3
States to manage git repositories and git configuration

.. important::
    Before using git over ssh, make sure your remote host fingerprint exists in
    your ``~/.ssh/known_hosts`` file.

.. versionchanged:: 2015.8.8
    This state module now requires git 1.6.5 (released 10 October 2009) or
    newer.
�N)�CommandExecutionError)�VersioncCs*dtvrdSttddd��}|td�kS)z'
    Only load if git is available
    �git.version)Fzgit module could not be loadedF��versioninfoz1.6.5)�__salt__r)�git_ver�r	�C/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/git.py�__virtual__srcCsV|dur|dus|dur|durdS||urdurdS|dkr'|�|�S||kS)z�
    Shorthand helper function for comparing SHA1s. If rev_type == 'sha1' then
    the comparison will be done using str.startwith() to allow short SHA1s to
    compare successfully.

    NOTE: This means that rev2 must be the short rev.
    NFT�sha1)�
startswith)Zrev1Zrev2Zrev_typer	r	r
�_revs_equal's �
rcCs|dur
|dd�SdS)N�r	)rr	r	r
�
_short_sha9�rcCs"d�|�}t|�dkr|d7}|S)z
    Return a joined list
    �. ��.)�join�len)�comments�retr	r	r
�_format_comments=s
rcCs|duo||kS)z<
    Short hand for telling when a new branch is needed
    Nr	)�branch�local_branchr	r	r
�_need_branch_changeGsrcCs~|dur
||vr
dS|durttddd��}g}|td�kr(|�d|g�|S|�d�|�|dur5|n|�|�|�|S)zs
    DRY helper to build list of opts for git.branch, for the purposes of
    setting upstream tracking branch
    NrFr�1.8.0z--set-upstream-toz--set-upstream)rr�extend�append)rr�all_local_branches�desired_upstreamrrr	r	r
�_get_branch_optsNs
�
r"cCs�t�d|�z
td|||d|d�}Wnty$t�d|�d}Ynwt�d|�ztd|||d|d�}W||fStyOt�d	|�d}Y||fSw)
z@
    Return the local revision for before/after comparisons
    zChecking local revision for %s�git.revisionT��user�password�ignore_retcode�output_encodingzNo local revision for %sNzChecking local branch for %s�git.current_branchzNo local branch for %s)�log�inforr)�targetr%r&r(�	local_revrr	r	r
�_get_local_rev_and_branchis8
�����r.cCst�dd|j�S)ze
    Strip the actual command that was run from exc.strerror to leave just the
    error message
    z^Command [\'"].+[\'"] failed: �)�re�sub�strerror)�excr	r	r
�
_strip_exc�sr4FcCsTd|�d�|d<|r|dd7<|r(|dd�tdr dndt|��7<|S)	N�Repository z is up-to-date�commentzW, but with uncommitted changes. Set 'force_reset' to True to purge uncommitted changes.�

Changes {}made: {}�test�that would be r/��format�__opts__r)rr,r�
local_changesr	r	r
�	_uptodate�s��r>cCsd|d<||d<|S)N�resultr6r	)rr6r	r	r
�
_neutral_test�sr@cCs(d|d<|r|dt|�7}||d<|S)NFr?z

Changes already made: r6)r)r�msgrr	r	r
�_fail�s
rBcCsXd|d<d�||rd|�d�nd�|d<|r*|dd�td	r"d
ndt|��7<|S)NTr?z!Repository already exists at {}{}z and is checked out to branch '�'r/r6r7r8r9r:)rr,rrr	r	r
�_already_cloned�s��rDcCsd�t|��}t|||�S)Nz�Fetch failed. Set 'force_fetch' to True to force the fetch if the failure was due to not being able to fast-forward. Output of the fetch command follows:

{})r;r4rB�rr3rrAr	r	r
�
_failed_fetch�s
�rFcCsdt|�}t|||�S)NzFailed to update submodules: )r4rBrEr	r	r
�_failed_submodule_update�srGc	

Cs�d}	|dur#|dkr||krd�||�}	n|dur#||kr#d�||�}	t|�}t|�}t|d�|r=||kr=d|�d|��nd|��t||�rLd	|�d
�nd|sQdnd|rVd
nd|r[dnd|	�|�S)Nr/�HEADz� The desired rev ({0}) differs from the name of the local branch ({1}), if the desired rev is a branch name then a forced update could possibly be avoided by setting the 'branch' argument to '{0}' instead.a� The default remote branch ({0}) differs from the local branch ({1}). This could be caused by changing the default remote branch, or if the local branch was manually changed. Rather than forcing an update, it may be advisable to set the 'branch' argument to '{0}' instead. To ensure that this state follows the '{0}' branch instead of the remote HEAD, set the 'rev' argument to '{0}'.z_Repository would be updated {}{}, but {}. Set 'force_reset' to True{} to force this update{}.{}zfrom z to zto z# (after checking out local branch 'z')z this is not a fast-forward mergezthere are uncommitted changesz (or 'remote-changes')z and discard these changes)r;rrBr)
r�rev�pre�postrr�default_branchr=rZ
branch_msgr	r	r
�_not_fast_forward�sB���	�$��

��rMrHT�origin�*cS
Ks|ddid�}tjjjd�i|��}|rt|tjjj|dd��S|s&t|d�S|s-t|d�S|s8t|d|�d	��S|
d
vrAt|d�St|t�sJt|�}|durft|t�sWt|�}tj	�
|�sft|d
|�d��S|durst|t�sst|�}|dur�t|t�s�t|�}|dur�t|t�s�t|�}|dur�t|t�s�t|�}|dur�t|t�r�|g}n
t|t�s�t|d�Sdd�|D�}|D]D}d|vr�z	td|t
�}Wn#ty�}zt�d|�t|d|�d��WYd}~Sd}~wwtj	�
|�s�t|d|�d��Sq�|du�rt|t��st|�}|du�rt|t��st|�}ttd	d�iddd����}|�r3d|ini}tj	�|��rEt|d|�d��Sz
tjjj|||dd�}Wnt�yl}z
t|t|��WYd}~Sd}~wwtjj�|�}|
�ryd}|dk�r�|�r�t|d�S||d �} d!tv�r�td!| d!<|�r�d"�||�d#�|�gng}!t�d$|�ztd%|dd|||||dt
|d&�}"Wnt�y�}zt|d't|����WYd}~Sd}~wwd|"v�r|"d}#|"��D]\}$}%|$�d(��r|%|#k�r|$�d(�d)}&n�q�d}&nd}#d}&d}'|�rd}(d})n�|dk�r+|#du�r&|#}(d}'d*})n^d}(d})nYd(||"v�rB|"d(|}(d+�||f�}'d,})nBd-|d.|"v�rV|"d-|d.}(d/})n.d-||"v�rf|"d-|}(d/})nt |�d0k�r�t!d1d2�|D���r�|�"�}|}(d*})nd}(d})|)d*k�r�|dk�r�d3|(dd4�d5}*n/|(dd4�}*n(|(du�r�d6�|)d,k�r�|'n||(dd4��}*nt�#d7||(|)|'|�s�d8nd�d}*|du�r�|)d9v�r�t|d:�S|(du�r�|�s�|dk�r�t|d;|�d<��St$td=dd>��}+|�r�d?nd@},tj	�||,�}-g}.tj	�%|-��stdA||||dB��
r�zutdC||||dB�}/t&tdD||||dB��}0t'||||�\}1}2|�sL|(du�rL|1du�rLt|dE�WS|1}3|2}4t(||2��r�||/v�r^|(}3n3|}4ztdF||dG||d|dH�}3Wn t�y�}zt|dI�|t|��|.�WYd}~WSd}~wwtdJ|||d|dK�}5t)|1|(|)�}6zt|�o�tdL|d|||dB��}7Wnt�y�t�#dM|�d}7Ynw|7�r
|6�r
|
du�r�dN�|�}8t*dO�r�d|dPdQ<|.�r�|8t+|.�7}8t,||8�WSt�-|8�.dRdS��nt�-dT||
�t/||t+|.�|7�WS|)d*k�r |3du�r |3�|(��r d}9n�d}9|(du�r�ztdF||(dG||d|dH�Wn
t�yAYnuw|)d,k�rm||5v�rlztdF||'||d|dH�}:Wn
t�ydYnRw|:|(k�rld}9nI|)d/k�r�||0v�r�ztdF||dG||d|dH�};Wnt�y�d};Ynw|;|(k�r�d}9n|
�s�t|dU�|t0|(�t0|;���WSn|)d*k�r�d}9|7�r�|
dVk�r�dnd}<|9�r	|6�s�|�s�|du�s�||2k�r�dW�|dk�r�|*�1�n|*|1dd4��|dX<|WS|<du�r	|3du�r�d}<ntdY||3|(gd||d|dZ�}<|<du�r#|
du�r t2|||3|(||2|&|7|.�	WSd[}=n
|<du�r+d\}=nd]}=|4du�r5d}>nztdF||4d^d_g||d|d`�}>Wnt�ySd}>Ynw||5v�r`|5|da}?n	t�-db||�d}?|(du�r||?k�rt*dO�r�dc�|tjj�|?�|�g}@|9�s�|@�3dd�|6�s�|�r�|1|(de�|dPdf<|<du�r�d|dPdQ<|@�3dg�|=t0|(���|dP�r�t,|t+|@��WS|6�s�|�s�t+|@�|dX<|WSt/||t+|@��WStdh||||||||di�|?du�r|.�3dj|�dk|���|dl||dPdm<n|.�3dn�|tjj�|?�|��|(du�
rt*dO�rg}@|9�s'|@�3dj|�do��|6�s@|�s7|du�r@||2k�r@|1|(de�|dPdf<t(||2��rm||/v�r`|@�3dp�||*��|'�r_|@�3dq�|'��nJ|@�3dr�||=t0|(���n=|6�s�|�r�|<du�r�|@�3ds�t0|1�t0|(���n$|@�3dt�|
�r�|9�r�d[nd]t0|1�t0|(���n
|@�3du�|1dd4�|*��|>�s�|'�r�|@�3dq�|'��n|>�r�|'du�r�|@�3dv�n|'�r�|>|'k�r�|@�3dw�|'��|dP�r�t,|t+|@��WSt+|@�}A|6�s�|�s�|A�r�|A|dX<|WSt/||t+|@��WS|>�s|'�rdx�|'�}Bt4||2|/|'|+�}Cn0|>�r-|'du�r-|+t$dy�k�r*dz}Bd{g}Cnd}Cn|'�rC|>|'k�rCd|�|'�}Bt4||2|/|'|+�}Cnd}C|Cdu�rV|2du�rVt|d}|.�WSd~d�td�||d�|||t
d|d��	D�}D|0|Dk�r�d}9|D|0}E|0|D}F|E�r�|E|dPd�<|�r�|F�r�|FD]C}Gzt*dO�s�td�||Gd�|||d��Wn!t�y�}z|�5d�g��3d��|G|��WYd}~�q�d}~ww|dP�5d�g��3|G��q�|dP�6d���r�|.�3d��t*dO�r�d�nd�d��|dPd����|9�s�ztd�|||	|!|||t
|d��	}HWnt�y}z
t7|||.�WYd}~WSd}~ww|H�r'|.�3|�d���ztdF||(dG||d|dH�Wnt�yU}zt|d��|||��WYd}~WSd}~ww|6�s�|�s�|du�sf||2k�r�|dk�ro|*�1�n|*|dX<|dXd��|1dd4��7<|WS|3du�r�d}<ntdY||3|(gd|||d��}<|<|
u�r�du�s�n|<du�r�|7�r�|
du�r�t2|||3|(||2|&|7|.�	WSt(||2��	r|7�r�|�s�t|d��|2��WS||/v�r�|dk�r�|(}In|'�r�|'n|}Id�|g}Jn|}Ig}Jtd�||I||J|||d��d�|Jv�	r|.�3d��||*��n	|.�3d|I�d���|<du�	rFtd�|fd�|(g|||d��|��d|dPdQ<|7�	r=|.�3d��|.�3d�|*���n|<du�	rb|7�	rb|
du�	rbtd�||||dB�|.�3d��|Cdu�	rwtd�||C|||d��|.�3|B�|<du�	r�t)|3|(|)��	s�|'�	s�|dk�	r�td�|dd�g||d|d`��	r�|+t$d��k�	r�d�g}Kng}Ktd�|f|(|K|||d��|��|.�3d�|*���n(t|d�|.�WStd�|fd�|dk�	r�|(n|g|||d��|��|.�3d�|�d���|�
rztd�|d�d�d�g|||t
|d��Wnut�
y}z
t8|||.�WYd}~WSd}~wwnZ|�
rst*dO�
r9d�|�d��}8|dP�
r2t,||8�WSt/|||8�WSztd�|||	|!|||t
|d��	}HWnt�
yd}z
t7|||.�WYd}~WSd}~ww|.�3d��||H�
rod�nd��z
td�|||d|d��}LWnt�
y�d}LYnwWn/t9�
y�}z"tj:d�dd��t|t��
r�t|�}8nt|�}8t||8|.�WYd}~Sd}~ww|�
s�t)|L|(|)��
s�t|d�|.�S|1|Lk�
r�t�d�||1|L�t+|.�|dX<|1|Lde�|dPdf<|St/||t+|.��Stj	�%|��r�t�;|�}M|�r~t*dO�r!d|dPd�<|dl||dPdm<t,|d��||��St�-d�||�i}N|MD]2}Otj	�||O�}Pz
tjj<�=|P�W�q,t�y^}z|j>t>j?k�rS||N|P<WYd}~�q,d}~ww|N�rwd�d�|N��D�}Qt|d��d��|Q��|.�Sd|dPd�<n|M�r�t|d��|��St�-d�|�t*dO�r�|dl||dPdm<t,|d�|�d�|���S�z	|
�r�d�gn|�r�d�gng}R|d�k�r�|R�@d�|g�|du�r�|R�@d�t|�d�|g�d}2}1ztd�|||||R|||t
|dʍ
Wn!t�y}zd�t|���}8t||8|.�WYd}~WSd}~ww|dl||dPdm<|.�3d̠|||
�r"d�n|�r'd�nd��|�
sf|(�sM|dk�rKdϠ||�}8t�:|8|�t||8d�|.�WS�n|)d/k�rj|tdD||||dB�v�rjt|d�|�dҝ|.�WS|du�r�|tdC||||dB�v�r�|dk�r�|(}In|'�r�|'n|}Itd�||Id�|g|||d��|.�3dӠ||*��t'||||dԍ\}1}2|2du�r�|(du�r�d|"v�r�t|d�|.�WSt)|1|(|)��s�td�|d�|(g|||d��|.�3d�|*���ztdF||2d^d_g||d|d`�}>Wnt�y�d}>Ynw|>�
s|'�
rdx�|'�}Bt4||2tdC||||dB�|'|+�}Cn8|>�
r1|'du�
r1|+t$dy�k�
r.dz}Bd{g}Cn#d}Cn |'�
rO|>|'k�
rOd|�|'�}Bt4||2tdC||||dB�|'|+�}Cnd}C|Cdu�
rftd�||C|||d��|.�3|B�|�
r�|(�
r�ztd�|d�d�d�g||||d֍Wnt�
y�}z
t8|||.�WYd}~WSd}~wwz
td�|||d|d��}LWnt�
y�d}LYnwWn/t9�
y�}z"tj:d�dd��t|t��
r�t|�}8nt|�}8t||8|.�WYd}~Sd}~wwt+|.�}8t�|8�|8|dX<|Ldu�
r�d|Lde�|dPdf<|S)�ai1
    Make sure the repository is cloned to the given directory and is
    up-to-date.

    name
        Address of the remote repository, as passed to ``git clone``

        .. note::
             From the `Git documentation`_, there are two URL formats
             supported for SSH authentication. The below two examples are
             equivalent:

             .. code-block:: text

                 # ssh:// URL
                 ssh://user@server/project.git

                 # SCP-like syntax
                 user@server:project.git

             A common mistake is to use an ``ssh://`` URL, but with a colon
             after the domain instead of a slash. This is invalid syntax in
             Git, and will therefore not work in Salt. When in doubt, confirm
             that a ``git clone`` works for the URL before using it in Salt.

             It has been reported by some users that SCP-like syntax is
             incompatible with git repos hosted on `Atlassian Stash/BitBucket
             Server`_. In these cases, it may be necessary to use ``ssh://``
             URLs for SSH authentication.

        .. _`Git documentation`: https://git-scm.com/book/en/v2/Git-on-the-Server-The-Protocols#The-SSH-Protocol
        .. _`Atlassian Stash/BitBucket Server`: https://www.atlassian.com/software/bitbucket/server

    rev : HEAD
        The remote branch, tag, or revision ID to checkout after clone / before
        update. If specified, then Salt will also ensure that the tracking
        branch is set to ``<remote>/<rev>``, unless ``rev`` refers to a tag or
        SHA1, in which case Salt will ensure that the tracking branch is unset.

        If ``rev`` is not specified, it will be assumed to be ``HEAD``, and
        Salt will not manage the tracking branch at all.

        .. versionchanged:: 2015.8.0
            If not specified, ``rev`` now defaults to the remote repository's
            HEAD.

    target
        Name of the target directory where repository is about to be cloned

    branch
        Name of the local branch into which to checkout the specified rev. If
        not specified, then Salt will not care what branch is being used
        locally and will just use whatever branch is currently there.

        .. versionadded:: 2015.8.0

        .. note::
            If this argument is not specified, this means that Salt will not
            change the local branch if the repository is reset to another
            branch/tag/SHA1. For example, assume that the following state was
            run initially:

            .. code-block:: yaml

                foo_app:
                  git.latest:
                    - name: https://mydomain.tld/apps/foo.git
                    - target: /var/www/foo
                    - user: www

            This would have cloned the HEAD of that repo (since a ``rev``
            wasn't specified), and because ``branch`` is not specified, the
            branch in the local clone at ``/var/www/foo`` would be whatever the
            default branch is on the remote repository (usually ``master``, but
            not always). Now, assume that it becomes necessary to switch this
            checkout to the ``dev`` branch. This would require ``rev`` to be
            set, and probably would also require ``force_reset`` to be enabled:

            .. code-block:: yaml

                foo_app:
                  git.latest:
                    - name: https://mydomain.tld/apps/foo.git
                    - target: /var/www/foo
                    - user: www
                    - rev: dev
                    - force_reset: True

            The result of this state would be to perform a hard-reset to
            ``origin/dev``. Since ``branch`` was not specified though, while
            ``/var/www/foo`` would reflect the contents of the remote repo's
            ``dev`` branch, the local branch would still remain whatever it was
            when it was cloned. To make the local branch match the remote one,
            set ``branch`` as well, like so:

            .. code-block:: yaml

                foo_app:
                  git.latest:
                    - name: https://mydomain.tld/apps/foo.git
                    - target: /var/www/foo
                    - user: www
                    - rev: dev
                    - branch: dev
                    - force_reset: True

            This may seem redundant, but Salt tries to support a wide variety
            of use cases, and doing it this way allows for the use case where
            the local branch doesn't need to be strictly managed.

    user
        Local system user under which to run git commands. By default, commands
        are run by the user under which the minion is running.

        .. note::
            This is not to be confused with the username for http(s)/SSH
            authentication.

        .. versionadded:: 0.17.0

    password
        Windows only. Required when specifying ``user``. This parameter will be
        ignored on non-Windows platforms.

        .. versionadded:: 2016.3.4

    update_head : True
        If set to ``False``, then the remote repository will be fetched (if
        necessary) to ensure that the commit to which ``rev`` points exists in
        the local checkout, but no changes will be made to the local HEAD.

        .. versionadded:: 2015.8.3

    force_checkout : False
        When checking out the local branch, the state will fail if there are
        unwritten changes. Set this argument to ``True`` to discard unwritten
        changes when checking out.

    force_clone : False
        If the ``target`` directory exists and is not a git repository, then
        this state will fail. Set this argument to ``True`` to remove the
        contents of the target directory and clone the repo into it.

    force_fetch : False
        If a fetch needs to be performed, non-fast-forward fetches will cause
        this state to fail. Set this argument to ``True`` to force the fetch
        even if it is a non-fast-forward update.

        .. versionadded:: 2015.8.0

    force_reset : False
        If the update is not a fast-forward, this state will fail. Set this
        argument to ``True`` to force a hard-reset to the remote revision in
        these cases.

        .. versionchanged:: 2019.2.0
            This option can now be set to ``remote-changes``, which will
            instruct Salt not to discard local changes if the repo is
            up-to-date with the remote repository.

    submodules : False
        Update submodules on clone or branch change

    bare : False
        Set to ``True`` if the repository is to be a bare clone of the remote
        repository.

        .. note:

            Setting this option to ``True`` is incompatible with the ``rev``
            argument.

    mirror
        Set to ``True`` if the repository is to be a mirror of the remote
        repository. This implies that ``bare`` set to ``True``, and thus is
        incompatible with ``rev``.

    remote : origin
        Git remote to use. If this state needs to clone the repo, it will clone
        it using this value as the initial remote name. If the repository
        already exists, and a remote by this name is not present, one will be
        added.

    fetch_tags : True
        If ``True``, then when a fetch is performed all tags will be fetched,
        even those which are not reachable by any branch on the remote.

    sync_tags : True
        If ``True``, then Salt will delete tags which exist in the local clone
        but are not found on the remote repository.

        .. versionadded:: 2018.3.4

    depth
        Defines depth in history when git a clone is needed in order to ensure
        latest. E.g. ``depth: 1`` is useful when deploying from a repository
        with a long history. Use rev to specify branch or tag. This is not
        compatible with revision IDs.

        .. versionchanged:: 2019.2.0
            This option now supports tags as well as branches, on Git 1.8.0 and
            newer.

    identity
        Path to a private key to use for ssh URLs. This can be either a single
        string, or a list of strings. For example:

        .. code-block:: yaml

            # Single key
            git@github.com:user/repo.git:
              git.latest:
                - user: deployer
                - identity: /home/deployer/.ssh/id_rsa

            # Two keys
            git@github.com:user/repo.git:
              git.latest:
                - user: deployer
                - identity:
                  - /home/deployer/.ssh/id_rsa
                  - /home/deployer/.ssh/id_rsa_alternate

        If multiple keys are specified, they will be tried one-by-one in order
        for each git command which needs to authenticate.

        .. warning::

            Unless Salt is invoked from the minion using ``salt-call``, the
            key(s) must be passphraseless. For greater security with
            passphraseless private keys, see the `sshd(8)`_ manpage for
            information on securing the keypair from the remote side in the
            ``authorized_keys`` file.

            .. _`sshd(8)`: http://www.man7.org/linux/man-pages/man8/sshd.8.html#AUTHORIZED_KEYS_FILE%20FORMAT

        .. versionchanged:: 2015.8.7
            Salt will no longer attempt to use passphrase-protected keys unless
            invoked from the minion using ``salt-call``, to prevent blocking
            waiting for user input.

        .. versionchanged:: 2016.3.0
            Key can now be specified as a SaltStack fileserver URL (e.g.
            ``salt://path/to/identity_file``).

    https_user
        HTTP Basic Auth username for HTTPS (only) clones

        .. versionadded:: 2015.5.0

    https_pass
        HTTP Basic Auth password for HTTPS (only) clones

        .. versionadded:: 2015.5.0

    refspec_branch : *
        A glob expression defining which branches to retrieve when fetching.
        See `git-fetch(1)`_ for more information on how refspecs work.

        .. versionadded:: 2017.7.0

    refspec_tag : *
        A glob expression defining which tags to retrieve when fetching. See
        `git-fetch(1)`_ for more information on how refspecs work.

        .. versionadded:: 2017.7.0

    output_encoding
        Use this option to specify which encoding to use to decode the output
        from any git commands which are run. This should not be needed in most
        cases.

        .. note::
            This should only be needed if the files in the repository were
            created with filenames using an encoding other than UTF-8 to handle
            Unicode characters.

        .. versionadded:: 2018.3.1

    .. _`git-fetch(1)`: http://git-scm.com/docs/git-fetch

    .. note::
        Clashing ID declarations can be avoided when including different
        branches from the same git repository in the same SLS file by using the
        ``name`` argument. The example below checks out the ``gh-pages`` and
        ``gh-pages-prod`` branches from the same repository into separate
        directories. The example also sets up the ``ssh_known_hosts`` ssh key
        required to perform the git checkout.

        .. code-block:: yaml

            gitlab.example.com:
              ssh_known_hosts:
                - present
                - user: root
                - enc: ecdsa
                - fingerprint: 4e:94:b0:54:c1:5b:29:a2:70:0e:e1:a3:51:ee:ee:e3

            git-website-staging:
              git.latest:
                - name: git@gitlab.example.com:user/website.git
                - rev: gh-pages
                - target: /usr/share/nginx/staging
                - identity: /root/.ssh/website_id_rsa
                - require:
                  - pkg: git
                  - ssh_known_hosts: gitlab.example.com

            git-website-staging:
              git.latest:
                - name: git@gitlab.example.com:user/website.git
                - rev: gh-pages
                - target: /usr/share/nginx/staging
                - identity: salt://website/id_rsa
                - require:
                  - pkg: git
                  - ssh_known_hosts: gitlab.example.com

            git-website-prod:
              git.latest:
                - name: git@gitlab.example.com:user/website.git
                - rev: gh-pages-prod
                - target: /usr/share/nginx/prod
                - identity: /root/.ssh/website_id_rsa
                - require:
                  - pkg: git
                  - ssh_known_hosts: gitlab.example.com
    Tr/��namer?r6�changesF�Z	raise_excz'remote' argument is required�'target' argument is requiredrC�-' is not a valid value for the 'rev' argument)TF�remote-changesz='force_reset' must be one of True, False, or 'remote-changes'Nztarget '�' is not an absolute pathz*identity must be either a list or a stringcS�g|]}tj�|��qSr	��os�path�
expanduser��.0�xr	r	r
�
<listcomp>��zlatest.<locals>.<listcomp>�salt://�
cp.cache_filezFailed to cache %sz
identity '�' does not exist.�git.config_get_regexp�
filter\.lfs\.)�globalr'�identity�Target '�.' exists and is a regular file, cannot proceed�Z
https_onlyrHz>'rev' is not compatible with the 'mirror' and 'bare' arguments)Zrunasr&�shellz#refs/heads/{0}:refs/remotes/{1}/{0}z+refs/tags/{0}:refs/tags/{0}zChecking remote revision for %s�git.remote_refs)
Zheads�tagsr%r&rh�
https_user�
https_passr'�saltenvr(zFailed to check remote refs: zrefs/heads/���r�/r�
refs/tags/�^{}�tag�(cs��|]}|tjvVqdS�N��string�	hexdigitsr]r	r	r
�	<genexpr>��zlatest.<locals>.<genexpr>z
remote HEAD (r�)�{} ({})z}Unable to determine remote_loc. rev is %s, remote_rev is %s, remove_rev_type is %s, desired_upstream is %s, and bare is%s setz not)rrvz_When 'depth' is used, 'rev' must be set to the name of a branch or tag on the remote repositoryzNo revision matching 'z!' exists in the remote repositoryrr�refs�.git�git.is_worktree�r%r&r(zgit.list_branchesz
git.list_tagszQRemote repository is empty, cannot update from a non-empty to an empty repository�
git.rev_parsez	^{commit}r$z/Unable to get position of local branch '{}': {}�git.remotes�r%r&Zredact_authr(zgit.diffz7git.latest: Unable to determine if %s has local changesz�{} is up-to-date, but with uncommitted changes. Since 'force_reset' is set to True, these local changes would be reset. To only reset when there are changes in the remote repository, set 'force_reset' to 'remote-changes'.r8rRz
forced updateZwouldZwillzg%s up-to-date, but with uncommitted changes. Since 'force_reset' is set to %s, no changes will be made.z�'{}' is a tag, but the remote SHA1 for this tag ({}) doesn't match the local SHA1 ({}). Set 'force_reset' to True to force this update.rVzs{} is already present and local HEAD ({}) does not match, but update_head=False. HEAD has not been updated locally.r6zgit.merge_base)r��is_ancestorr%r&r'r(z
hard-resetzfast-forwarded�updatedz@{upstream}z--abbrev-ref)�optsr%r&r'r(�fetchz+Remote '%s' not found in git checkout at %sz*Remote '{}' would be changed from {} to {}zRemote would be fetched��old�new�revisionzRepository would be {} to {}�git.remote_set��url�remoter%r&rorpr(zRemote 'z	' set to � => r�z!Remote '{}' changed from {} to {}z' would be fetchedzANew branch '{}' would be checked out, with {} as a starting pointz"Tracking branch would be set to {}z-Branch '{}' would be checked out and {} to {}z0Repository would be fast-forwarded from {} to {}z$Repository would be {} from {} to {}zZLocal HEAD ({}) does not match {} but update_head=False, HEAD would not be updated locallyzTracking branch would be unsetz&Tracking branch would be updated to {}zTracking branch was set to {}rzTracking branch was unsetz--unset-upstreamz!Tracking branch was updated to {}a~Cannot set/unset upstream tracking branch, local HEAD refers to nonexistent branch. This may have been caused by cloning a remote repository for which the default branch was renamed or deleted. If you are unable to fix the remote repository, you can work around this by setting the 'branch' argument (which will ensure that the named branch is created if it does not already exist).cSs h|]}d|vr|�dd��qS)rurtr/)�replacer]r	r	r
�	<setcomp>As

�zlatest.<locals>.<setcomp>z
git.ls_remotez--tags)	�cwdr�r�r%r&rhrqr'r(�new_tagszgit.tagz-d�r�r%r&r(�warningsz&Failed to remove local tag '{}':

{}

�deleted_tagsz9The following tags {} removed from the local checkout: {}zwould beZwere�, �	git.fetch�r��force�refspecsr%r&rhrqr(�' was fetched, resulting in updated refsz8Fetch did not successfully retrieve rev '{}' from {}: {}zq is already present and local HEAD ({}) does not match, but update_head=False. HEAD has not been updated locally.)r�r�r%r&r(zdLocal branch '{}' has uncommitted changes. Set 'force_checkout' to True to discard them and proceed.�-b�git.checkout)r�r�r%r&r(z<New branch '{}' was checked out, with {} as a starting pointz' was checked out�	git.reset�--hardz"Uncommitted changes were discardedzRepository was hard-reset to zgit.discard_local_changesz
git.branchzgit.symbolic_refz--quietz1.8.1.6z	--ff-onlyz	git.merge�rIr�r%r&r(z!Repository was fast-forwarded to z(Unable to fast-forward, HEAD is detachedzRepository was reset to z (fast-forward)�
git.submodule�update�--init�--recursive)r�r%r&rhrqr(zBare repository at � would be fetchedz#Bare repository at {} was fetched{}z, resulting in updated refsr#�r�r%r&r'r(z(Unexpected exception in git.latest state��exc_infozFailed to update repositoryzRepository %s updated: %s => %s�forced clone��Target directory {0} exists. Since force_clone=True, the contents of {0} would be deleted, and {1} would be cloned into this directory.zfRemoving contents of %s to clone repository %s in its place (force_clone=True set in git.latest state)cS� g|]\}}d|�d|���qS�z  z
    r	�r^�k�vr	r	r
r`�� �Unable to remove
{}�
��Target '{}' exists, is non-empty and is not a git repository. Set the 'force_clone' option to True to remove this directory's contents and proceed with cloning the remote repository�/Target %s is not found, 'git clone' is requiredr5� would be cloned to z--mirrorz--barerN�--originz--depth�--branch�	git.clone�r%r&r�rhrorprqr(�Clone failed: �{} cloned to {}{}z
 as mirrorz as bare repositoryz:%s was cloned but is empty, so {}/{} cannot be checked outZ
Repository�
Revision 'z' does not exist in clonez4Branch '{}' checked out, with {} as a starting point�r(aERemote HEAD refers to a ref that does not exist. This can happen when the default branch on the remote repository is renamed or deleted. If you are unable to fix the remote repository, you can work around this by setting the 'branch' argument (which will ensure that the named branch is created if it does not already exist).�r�r%r&rhr(r	)rf)A�salt�utils�args�clean_kwargsrB�invalid_kwargs�
isinstance�strrZr[�isabs�listr�__env__�OSErrorr*�	exception�bool�isfiler��add_http_basic_auth�
ValueError�redact_http_basic_authZ
__grains__r;r+rr4�itemsr
�	partitionrr�all�lower�warningr�isdir�setr.rrr<rr@�debugr�r>r�
capitalizerMrr"�
setdefault�getrFrG�	Exception�error�listdir�files�rm_rf�errno�ENOENTr)SrQr,rIrr%r&Zupdate_head�force_checkout�force_cloneZforce_fetchZforce_reset�
submodules�bareZmirrorr�Z
fetch_tagsZ	sync_tags�depthrhrorpZrefspec_branchZrefspec_tagr(�kwargsr�
ident_pathr3Zuse_lfsZlfs_opts�desired_fetch_url�redacted_fetch_urlZrun_check_cmd_kwargsr��all_remote_refsZhead_revZrefnameZrefsharLr!Z
remote_rev�remote_rev_typeZ
remote_locr�check�gitdirrr Zall_local_tagsr-rZbase_revZbase_branch�remotesZ
revs_matchr=rAZhas_remote_revZ
local_copyZlocal_tag_sha1Zfast_forwardZmerge_actionZupstream�	fetch_url�actionsZformatted_actionsZupstream_actionZbranch_optsZremote_tagsr�r�Ztag_name�
fetch_changes�checkout_rev�
checkout_optsZ
merge_opts�new_rev�target_contents�removal_errors�
target_object�target_path�err_strings�
clone_optsr	r	r
�latests�e

�




"������
�
����

�
��	
�
 ��

��

"


��
�

�������

�����	���
��	
�
��

�

��
	

��
	�


��
	���
�
��

�


�


�		�

��
�
��
�

��

��
����
��
�����������
�������

���������
����
�
�����
�	��


�
	�
���
�

�
��
	���	�����
�
���


�����
���
��
���

������



�����
��
�
�
�

�
���
�


��
�	�������
�

�	��
���
��

rc	

Cs|ddid�}	tj�|�r�|rtj�tj�|d��r|	S|s5tj�tj�|d��s3td||||d�r5|	S|r�tdrV||	d	d
<d|	d	d<t|	d�||rRd
��Sd��St	�
d||r^d
nd�ztj�|�rnt�|�nt
jj�|�Wnty�}
zt|	d|�d|
���WYd}
~
Sd}
~
wwd|	d	d<n
t�|�r�t|	d�|��Stdr�||	d	d
<t|	d�|r�d
��Sd��Std||||||||d�d�|r�d
nd|�g}|r�|�d|���|r�|�d|���d�|�}t|�dkr�|d7}t	�|�||	d	d
<||	d<|	S)aU	
    Ensure that a repository exists in the given directory

    .. warning::
        If the minion has Git 2.5 or later installed, ``name`` points to a
        worktree_, and ``force`` is set to ``True``, then the worktree will be
        deleted. This has been corrected in Salt 2015.8.0.

    name
        Path to the directory

        .. versionchanged:: 2015.8.0
            This path must now be absolute

    force : False
        If ``True``, and if ``name`` points to an existing directory which does
        not contain a git repository, then the contents of that directory will
        be recursively removed and a new repository will be initialized in its
        place.

    bare : True
        If ``True``, and a repository must be initialized, then the repository
        will be a bare repository.

        .. note::
            This differs from the default behavior of :py:func:`git.init
            <salt.modules.git.init>`, make sure to set this value to ``False``
            if a bare repo is not desired.

    template
        If a new repository is initialized, this argument will specify an
        alternate template directory.

        .. versionadded:: 2015.8.0

    separate_git_dir
        If a new repository is initialized, this argument will specify an
        alternate ``$GIT_DIR``

        .. versionadded:: 2015.8.0

    shared
        Set sharing permissions on git repo. See `git-init(1)`_ for more
        details.

        .. versionadded:: 2015.5.0

    user
        User under which to run git commands. By default, commands are run by
        the user under which the minion is running.

        .. versionadded:: 0.17.0

    password
        Windows only. Required when specifying ``user``. This parameter will be
        ignored on non-Windows platforms.

      .. versionadded:: 2016.3.4

    output_encoding
        Use this option to specify which encoding to use to decode the output
        from any git commands which are run. This should not be needed in most
        cases.

        .. note::
            This should only be needed if the files in the repository were
            created with filenames using an encoding other than UTF-8 to handle
            Unicode characters.

        .. versionadded:: 2018.3.1

    .. _`git-init(1)`: http://git-scm.com/docs/git-init
    .. _`worktree`: http://git-scm.com/docs/git-worktree
    Tr/rPrHr�r�r�r8rRr�zforced initz�Target directory {0} exists. Since force=True, the contents of {0} would be deleted, and a {1}repository would be initialized in its place.zbare zeRemoving contents of %s to initialize %srepository in its place (force=True set in git.present state)zUnable to remove �: Nz�Target '{}' exists, is non-empty, and is not a git repository. Set the 'force' option to True to remove this directory's contents and proceed with initializing a repositoryz!New {}repository would be createdzgit.init)r�r��template�separate_git_dir�sharedr%r&r(zInitialized {}repository in {}zTemplate directory set to zGitdir set to rrrr6)rZr[r�r�rrr<r@r;r*r��islink�unlinkr�r�r�r�r�rBr�rrr+)
rQr�r�rrrr%r&r(rr3r��messager	r	r
�present�s�U�������
��"��
�	���

r
c(Ks�|ddid�}tjjjdgi|��}|rt|tjjj|dd��S|s*t|d|�d��S|s5t|d|�d��St|t�s>t|�}|d	urZt|t�sKt|�}tj	�
|�sZt|d
|�d��S|d	urgt|t�sgt|�}|d	urtt|t�stt|�}|d	ur�t|t�r�|g}n
t|t�s�t|d�Sd
d�|D�}|D]D}d|vr�ztd|�}Wn$t
y�}zt�d||�t|d|�d��WYd	}~Sd	}~wwtj	�
|�s�t|d|�d��Sq�|d	ur�t|t�s�t|�}|
d	ur�t|
t�s�t|
�}
tj	�|��rt|d
|�d��Sz
tjjj|||
dd�}Wnt�y*}z
t|t|��WYd	}~Sd	}~wwtjj�|�}d}t|�dk�rKtdd�|D���rK|��}d}g}d}d	}tj	�|d�}tj	�|��sjtd||||d��r�t||||d�d}|dk�r�ztd ||||d|d!�Wn
t�y�d}Y�nLwd}�nGtd"|||d|d#�}||v�r�|||d$v�r��n,d	}||v�r�||d$}td%�r�t|d&|�d'|���Std(|||||||
|d)�|�d*�|||��n�tj	�|��rot� |�}|�rdtd%�rt|d+�||��St�!d,||�i}|D]2}tj	�||�}z
tjj"�#|�W�qt
�yD}z|j$t$j%k�r9|||<WYd	}~�qd	}~ww|�r]d-d�|�&�D�} t|d.�d/�| ��|�Sd|d0d1<n|�rot|d2�|��St�!d3|�td%�r�t|d4|�d5|���Sz+d6g}!|d7k�r�|!�'d8|g�td9|||||!|||
t(|d:�
|�|�d;|���Wn/t)�y�}z"tjd<dd=�t|t��r�t*|�}"nt|�}"t||"|�WYd	}~Sd	}~wwd>|�d?�d@g}#|�s�|du�r�nOtd%�r�t|dA|�dB��SztdC||d|#|||t(|dD�	}$Wn#t�y3}zdE}"|"dFt|�7}"t||"|�WYd	}~Sd	}~ww|$�r@|�d&|�dG��d}%|dk�r_td |||||d��rV|}%nht|dH|�dI��Sz>tdJ||||||
d|dK�}&dL|dM||&v�r�|&dL|dM|}%ndN||&v�r�|&dN|}%n
t|dH|�dI��WSWn t�y�}zt|dO|�dPt*|����WYd	}~Sd	}~ww|	�r�td%�r�t|dQ|���StdR|dSdTg|||dU�|�dV�|%|k�r�d	}'nHtd%�r�||%dW�|d0dT<t|dX�|%|��StdY||%||||dZ�|�d[|%�d\|���z
td]|||d|d^�}'Wnt�y/d	}'Ynw|
�rGtd_|d`dadbg||||dc�|�dd�|'d	u�rV||'dW�|d0dT<n|�de�t+|�}"t�,|"�|"|df<|S)ha�

    .. versionadded:: 2016.3.0

    Make sure a repository is cloned to the given target directory and is
    a detached HEAD checkout of the commit ID resolved from ``rev``.

    name
        Address of the remote repository.

    rev
        The branch, tag, or commit ID to checkout after clone.
        If a branch or tag is specified it will be resolved to a commit ID
        and checked out.

    target
        Name of the target directory where repository is about to be cloned.

    remote : origin
        Git remote to use. If this state needs to clone the repo, it will clone
        it using this value as the initial remote name. If the repository
        already exists, and a remote by this name is not present, one will be
        added.

    user
        User under which to run git commands. By default, commands are run by
        the user under which the minion is running.

    password
        Windows only. Required when specifying ``user``. This parameter will be
        ignored on non-Windows platforms.

      .. versionadded:: 2016.3.4

    force_clone : False
        If the ``target`` directory exists and is not a git repository, then
        this state will fail. Set this argument to ``True`` to remove the
        contents of the target directory and clone the repo into it.

    force_checkout : False
        When checking out the revision ID, the state will fail if there are
        unwritten changes. Set this argument to ``True`` to discard unwritten
        changes when checking out.

    fetch_remote : True
        If ``False`` a fetch will not be performed and only local refs
        will be reachable.

    hard_reset : False
        If ``True`` a hard reset will be performed before the checkout and any
        uncommitted modifications to the working directory will be discarded.
        Untracked files will remain in place.

        .. note::
            Changes resulting from a hard reset will not trigger requisites.

    submodules : False
        Update submodules

    identity
        A path on the minion (or a SaltStack fileserver URL, e.g.
        ``salt://path/to/identity_file``) to a private key to use for SSH
        authentication.

    https_user
        HTTP Basic Auth username for HTTPS (only) clones

    https_pass
        HTTP Basic Auth password for HTTPS (only) clones

    output_encoding
        Use this option to specify which encoding to use to decode the output
        from any git commands which are run. This should not be needed in most
        cases.

        .. note::
            This should only be needed if the files in the repository were
            created with filenames using an encoding other than UTF-8 to handle
            Unicode characters.

        .. versionadded:: 2018.3.1
    Tr/rPFrSrCrUz0' is not a valid value for the 'target' argumentNrirWz*Identity must be either a list or a stringcSrXr	rYr]r	r	r
r`�razdetached.<locals>.<listcomp>rbrczFailed to cache %s: %sz
Identity 'rdrjrk�refrwcsrxryrzr]r	r	r
r}	r~zdetached.<locals>.<genexpr>�hashr�r�r�r�rzgit.describer$r�r�r�r8zRemote z would be set to r�r�z#Remote {} updated from '{}' to '{}'r�zhRemoving contents of %s to clone repository %s in its place (force_clone=True set in git.detached state)cSr�r�r	r�r	r	r
r`g	r�r�r�rRr�r�r�r5r�z
--no-checkoutrNr�r�r�z cloned to z*Unexpected exception in git.detached stater�zrefs/heads/*:refs/remotes/z/*z+refs/tags/*:refs/tags/*zRepository remote r�r�r�zFetch failedz:

r�r�z' does not existrm)r%r&rhrorpr'r(z
refs/remotes/rsrtzFailed to list refs for rz)Hard reset to HEAD would be performed on r�r�rHr�z9Repository was reset to HEAD before checking out revisionr�z'Commit ID {} would be checked out at {}r�)r�r%r&r(z
Commit ID z was checked out at r#r�r�r�r�r�r�zSubmodules were updatedz'Already checked out at correct revisionr6r	)-r�r�r�r�rBr�r�r�rZr[r�r�rr�r*r�r�r�r�r�r�rr�r�rr�r.rr<r@rr;r�r�r�r�r�r�r�rr�r�r4rr+)(rQrIr,r�r%r&r�r�Zfetch_remoteZ
hard_resetr�rhrorpr(r�rr�r3r�r�r�rZhash_exists_locallyZlocal_commit_idr�r�Zcurrent_fetch_urlr�r�r�r�rrrAr�r�Zcheckout_commit_idr�r�r	r	r
�detached`sXd




"���
�
���"���

�
��

�
��

������

�
��

�

���
�

����&��

��


���
���
	


r
c	sD�ddid�}	�durd|	d<|	St�t�st���tj���s&d|	d<|	S|dur;t|t�s3t|�}|s;d|	d<|	Stj���sDd	}
n)ztd
�|||d�Wntyj}zt|�|	d<|	WYd}~Sd}~wwd}
g}��fdd
�}
dd�}|
r�tdr�|
|	�d�	��|dur�d|�d�nd�}t
|	|�S|dur�d|gnd}ztd��|||||||d�	Wnty�}zdt|���}t
|	||�WYd}~Sd}~ww|�d�	��|dur�d|�d�nd��|
|	�t|�|	d<d	|	d<|	S|du�rt|	�||�Std�|||d�}||k�rt|	�||�Std�r/||	||�t
|	d|�d��Sztd�|||d	|d�Wnt�yRd�d|f�}d |g}Ynw|}d}ztd!�|||||d"�Wn!t�y�}zd#|�d$|��}t
|	||�WYd}~Sd}~ww|�d%|�d��||	||�t|�|	d<d	|	d<|	S)&a�
    .. versionadded:: 2018.3.3,2019.2.0

    Ensure that a repository has been cloned to the specified target directory.
    If not, clone that repository. No fetches will be performed once cloned.

    name
        Address of the remote repository

    target
        Name of the target directory where repository should be cloned

    branch
        Remote branch to check out. If unspecified, the default branch (i.e.
        the one to the remote HEAD points) will be checked out.

        .. note::
            The local branch name will match the remote branch name. If the
            branch name is changed, then that branch will be checked out
            locally, but keep in mind that remote repository will not be
            fetched. If your use case requires that you keep the clone up to
            date with the remote repository, then consider using
            :py:func:`git.latest <salt.states.git.latest>`.

    user
        User under which to run git commands. By default, commands are run by
        the user under which the minion is running.

    password
        Windows only. Required when specifying ``user``. This parameter will be
        ignored on non-Windows platforms.

    identity
        Path to a private key to use for ssh URLs. Works the same way as in
        :py:func:`git.latest <salt.states.git.latest>`, see that state's
        documentation for more information.

    https_user
        HTTP Basic Auth username for HTTPS (only) clones

    https_pass
        HTTP Basic Auth password for HTTPS (only) clones

    output_encoding
        Use this option to specify which encoding to use to decode the output
        from any git commands which are run. This should not be needed in most
        cases.

        .. note::
            This should only be needed if the files in the repository were
            created with filenames using an encoding other than UTF-8 to handle
            Unicode characters.
    Fr/rPNrTr6z'target' path must be absolutezInvalid 'branch' argumentTz
git.statusr�cs�d�|dd<dS)Nr�rRr�r	)r�rQr,r	r
�_clone_changes�
rzcloned.<locals>._clone_changescSs||d�|dd<dS)Nr�rRrr	)rr�r�r	r	r
�_branch_changes�
szcloned.<locals>._branch_changesr8z{} would be cloned to {}{}z with branch 'rCr�r�)r�r%r&rhrorpr(r�r�r?r)zBranch would be changed to 'r�)rIr%r&r'r(rsrNr�r�r�zFailed to change branch to 'z': zBranch changed to ')r�r�rZr[r��existsrr�r<r;r@rr4rBrrrDr)rQr,rr%r&rhrorpr(rZ
need_cloner3rrrr6rrAZcurrent_branchr�r�r	rr
�cloned"
s�@


����

�����
�


��
���rcs |iddd�}tjjjd#i|��}|�dd�}|�dd�}	|r+t|tjjj|dd��S|s4|s4t|d�St|t�s=t|�}|d	urJt|t�sJt|�}d
|�	d
��
d�d}
tdd#||
|||d|d
�d|i��}|sm|S|	s�dd�|��D�}|r�|d	ur�t|d�
d�|���St|d�
d�|���Stdr�||d<t|t|��d��S|d	ur�|}
ntdd#||
d	||d|d
�d|i��}
g}|D]J�ztdd#||||	|||d�d|i��Wq�t�y}z&d��d�}|d	ur�|d7}|dt|�7}t�|�|���WYd	}~q�d	}~ww|�rt|d�
d�|���Stdd#||
d	||d|d
�d|i���|
D]%���v�rA|
�|d�<��fdd�|
�D�}|�rV||d�<�q2|d	u�r`�}ntdd#||
|||d|d
�d|i��}|�r�dd�|��D�}t|d �
d�|���Sd!|d"<|S)$a'

    .. versionadded:: 2015.8.0

    Ensure that the named config key is not present

    name
        The name of the configuration key to unset. This value can be a regex,
        but the regex must match the entire key name. For example, ``foo\.``
        would not match all keys in the ``foo`` section, it would be necessary
        to use ``foo\..+`` to do so.

    value_regex
        Regex indicating the values to unset for the matching key(s)

        .. note::
            This option behaves differently depending on whether or not ``all``
            is set to ``True``. If it is, then all values matching the regex
            will be deleted (this is the only way to delete multiple values
            from a multivar). If ``all`` is set to ``False``, then this state
            will fail if the regex matches more than one value in a multivar.

    all : False
        If ``True``, unset all matches

    repo
        Location of the git repository for which the config value should be
        set. Required unless ``global`` is set to ``True``.

    user
        User under which to run git commands. By default, commands are run by
        the user under which the minion is running.

    password
        Windows only. Required when specifying ``user``. This parameter will be
        ignored on non-Windows platforms.

      .. versionadded:: 2016.3.4

    global : False
        If ``True``, this will set a global git config option

    output_encoding
        Use this option to specify which encoding to use to decode the output
        from any git commands which are run. This should not be needed in most
        cases.

        .. note::
            This should only be needed if the files in the repository were
            created with filenames using an encoding other than UTF-8 to handle
            Unicode characters.

        .. versionadded:: 2018.3.1


    **Examples:**

    .. code-block:: yaml

        # Value matching 'baz'
        mylocalrepo:
          git.config_unset:
            - name: foo.bar
            - value_regex: 'baz'
            - repo: /path/to/repo

        # Ensure entire multivar is unset
        mylocalrepo:
          git.config_unset:
            - name: foo.bar
            - all: True

        # Ensure all variables in 'foo' section are unset, including multivars
        mylocalrepo:
          git.config_unset:
            - name: 'foo\..+'
            - all: True

        # Ensure that global config value is unset
        mylocalrepo:
          git.config_unset:
            - name: foo.bar
            - global: True
    TzNo matching keys are set�rQrRr?r6rgFr�rS�?Non-global config options require the 'repo' argument to be setN�^�$re)r��key�value_regexr%r&r'r(cSs.g|]\}}t|�dkrd�|d�|���qS)rr�r�)rr;r�r^r_�yr	r	r
r`qs
�z config_unset.<locals>.<listcomp>zjMultiple values are matched by value_regex for the following keys (set 'all' to True to force removal): {}z; zRMultivar(s) matched by the key expression (set 'all' to True to force removal): {}r8rRz! key(s) would have value(s) unsetzgit.config_unset)r�rrr�r%r&r(zFailed to unset 'rCz using value_regex '{1}'rz^Error(s) occurred unsetting values for the following keys (see the minion log for details): {}r�csg|]
}|��vr|�qSr	r	r]�Zkey_namerKr	r
r`�scSs"g|]
\}}d�|d�|���qS)r�r�)r;rrr	r	r
r`�s"zFailed to unset value(s): {}zValue(s) successfully unsetr6r	)r�r�r�r��poprBr�r�r��lstrip�rstriprr�r;rr<r@rrr4r*r�r)rQr�repor%r&r(r�r�global_Zall_rZpre_matchesZgreedy_matchesrJZfailedr3rAZunsetZpost_matchesr	rr
�config_unset�
s]��

���������
�

�����
�
��r!cKs�|iddd�}|dur|durt|d�Stjjjdi|��}|�dd�}	|r2t|tjjj|dd��S|	s;|s;t|d	�St|t�sDt|�}|durZt|t�sQt|�}d
|d
}
|g}|dur�t|t	�s{z|�
d�}Wn+tyzt|��
d�}Ynwg}|D]}
t|
t�r�|�|
�q|�t|
��q|}|}
|}t
dd||||d|d
�d|	d���}||kr�d�|	r�dnd||
�|d<|Stdr�||d�|d<d�|	r�dnd||dur�dnd|
�}t||�Szt
dd|||||||d�d|	i��}Wn%t�y}zt|d�|	�r	dnd||
t|���WYd}~Sd}~ww||k�r+||d�|d|<||k�r?t|d�|	�r9dnd||
��Sd�|	�rFdnd||du�rOdnd|
�|d<|S)a		
    .. versionadded:: 2014.7.0
    .. versionchanged:: 2015.8.0
        Renamed from ``git.config`` to ``git.config_set``. For earlier
        versions, use ``git.config``.

    Ensure that a config value is set to the desired value(s)

    name
        Name of the git config value to set

    value
        Set a single value for the config item

    multivar
        Set multiple values for the config item

        .. note::
            The order matters here, if the same parameters are set but in a
            different order, they will be removed and replaced in the order
            specified.

        .. versionadded:: 2015.8.0

    repo
        Location of the git repository for which the config value should be
        set. Required unless ``global`` is set to ``True``.

    user
        User under which to run git commands. By default, the commands are run
        by the user under which the minion is running.

    password
        Windows only. Required when specifying ``user``. This parameter will be
        ignored on non-Windows platforms.

      .. versionadded:: 2016.3.4

    global : False
        If ``True``, this will set a global git config option

    output_encoding
        Use this option to specify which encoding to use to decode the output
        from any git commands which are run. This should not be needed in most
        cases.

        .. note::
            This should only be needed if the files in the repository were
            created with filenames using an encoding other than UTF-8 to handle
            Unicode characters.

        .. versionadded:: 2018.3.1

    **Local Config Example:**

    .. code-block:: yaml

        # Single value
        mylocalrepo:
          git.config_set:
            - name: user.email
            - value: foo@bar.net
            - repo: /path/to/repo

        # Multiple values
        mylocalrepo:
          git.config_set:
            - name: mysection.myattribute
            - multivar:
              - foo
              - bar
              - baz
            - repo: /path/to/repo

    **Global Config Example (User ``foo``):**

    .. code-block:: yaml

        mylocalrepo:
          git.config_set:
            - name: user.name
            - value: Foo Bar
            - user: foo
            - global: True
    Tr/rNz/Only one of 'value' and 'multivar' is permittedrgFrSrrC�,zgit.config_get)r�rr%r&r'r()r�rgz{}'{}' is already set to {}zGlobal key r6r8r�rRz{}'{}' would be {} {}zadded aszset tozgit.config_set)r�r�value�multivarr%r&r(zFailed to set {}'{}' to {}: {}zglobal key zFailed to set {}'{}' to {}z{}'{}' was {} {}r	)rBr�r�r�r�rr�r�r�r��split�AttributeErrorrrr;r<r@rr4)rQr#r$rr%r&r(r�rr Z
value_commentZdesiredZnew_multivar�itemrJrArKr3r	r	r
�
config_set�s�_
�


�
��
�
�
�
�
����

���r(ry)NF)NN)rHNNNTFFFFFFFrNTTNNNNrOrON)FTNNNNNN)rNNNFFTFFNNNN)NNNNNNN)NNNNN)NNNNNN)&�__doc__r��loggingrZr0r{Zsalt.utils.argsr�Zsalt.utils.filesZsalt.utils.urlZsalt.utils.versionsZsalt.exceptionsrr�	getLogger�__name__r*rrrrrr"r.r4r>r@rBrDrFrGrMrr
r
rr!r(r	r	r	r
�<module>s�



�
!




	8
�E
�/
�H
�D
��
@ Telegram