1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
|
# Copyright (C) 2015 Custodia Project Contributors - see LICENSE file
import socket
import requests
from requests.adapters import HTTPAdapter
from requests.compat import unquote, urlparse
from requests.packages.urllib3.connection import HTTPConnection
from requests.packages.urllib3.connectionpool import HTTPConnectionPool
class HTTPUnixConnection(HTTPConnection):
def __init__(self, host, timeout=60, **kwargs):
# pylint: disable=bad-super-call
super(HTTPConnection, self).__init__('localhost')
self.unix_socket = host
self.timeout = timeout
def connect(self):
s = socket.socket(family=socket.AF_UNIX)
s.settimeout(self.timeout)
s.connect(self.unix_socket)
self.sock = s
class HTTPUnixConnectionPool(HTTPConnectionPool):
scheme = 'http+unix'
ConnectionCls = HTTPUnixConnection
class HTTPUnixAdapter(HTTPAdapter):
def get_connection(self, url, proxies=None):
# proxies, silently ignored
path = unquote(urlparse(url).netloc)
return HTTPUnixConnectionPool(path)
DEFAULT_HEADERS = {'Content-Type': 'application/json'}
class CustodiaHTTPClient(object):
def __init__(self, url):
self.session = requests.Session()
self.session.mount('http+unix://', HTTPUnixAdapter())
self.headers = dict(DEFAULT_HEADERS)
self.url = url
self._last_response = None
def set_simple_auth_keys(self, name, key,
name_header='CUSTODIA_AUTH_ID',
key_header='CUSTODIA_AUTH_KEY'):
self.headers[name_header] = name
self.headers[key_header] = key
def _join_url(self, path):
return self.url.rstrip('/') + '/' + path.lstrip('/')
def _add_headers(self, **kwargs):
headers = kwargs.get('headers', None)
if headers is None:
headers = dict()
headers.update(self.headers)
return headers
def _request(self, cmd, path, **kwargs):
self._last_response = None
url = self._join_url(path)
kwargs['headers'] = self._add_headers(**kwargs)
self._last_response = cmd(url, **kwargs)
return self._last_response
@property
def last_response(self):
return self._last_response
def delete(self, path, **kwargs):
return self._request(self.session.delete, path, **kwargs)
def get(self, path, **kwargs):
return self._request(self.session.get, path, **kwargs)
def head(self, path, **kwargs):
return self._request(self.session.head, path, **kwargs)
def patch(self, path, **kwargs):
return self._request(self.session.patch, path, **kwargs)
def post(self, path, **kwargs):
return self._request(self.session.post, path, **kwargs)
def put(self, path, **kwargs):
return self._request(self.session.put, path, **kwargs)
def container_name(self, name):
return name if name.endswith('/') else name + '/'
def create_container(self, name):
raise NotImplementedError
def list_container(self, name):
raise NotImplementedError
def delete_container(self, name):
raise NotImplementedError
def get_secret(self, name):
raise NotImplementedError
def set_secret(self, name, value):
raise NotImplementedError
def del_secret(self, name):
raise NotImplementedError
class CustodiaSimpleClient(CustodiaHTTPClient):
def create_container(self, name):
r = self.post(self.container_name(name))
r.raise_for_status()
def delete_container(self, name):
r = self.delete(self.container_name(name))
r.raise_for_status()
def list_container(self, name):
r = self.get(self.container_name(name))
r.raise_for_status()
return r.json()
def get_secret(self, name):
r = self.get(name)
r.raise_for_status()
simple = r.json()
ktype = simple.get("type", None)
if ktype != "simple":
raise TypeError("Invalid key type: %s" % ktype)
return simple["value"]
def set_secret(self, name, value):
r = self.put(name, json={"type": "simple", "value": value})
r.raise_for_status()
def del_secret(self, name):
r = self.delete(name)
r.raise_for_status()
|
