Server IP : 104.21.38.3 / Your IP : 162.158.88.52 Web Server : Apache System : Linux krdc-ubuntu-s-2vcpu-4gb-amd-blr1-01.localdomain 5.15.0-142-generic #152-Ubuntu SMP Mon May 19 10:54:31 UTC 2025 x86_64 User : www ( 1000) PHP Version : 7.4.33 Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/sos/report/plugins/ |
Upload File : |
# Copyright (C) 2013 Red Hat, Inc., Jeremy Agee <[email protected]> # Copyright (C) 2017 Red Hat, Inc., Martin Schuppert <[email protected]> # This file is part of the sos project: https://github.com/sosreport/sos # # This copyrighted material is made available to anyone wishing to use, # modify, copy, or redistribute it subject to the terms and conditions of # version 2 of the GNU General Public License. # # See the LICENSE file in the source distribution for further information. from sos.report.plugins import (Plugin, RedHatPlugin, DebianPlugin, UbuntuPlugin, PluginOpt) import os class OpenStackKeystone(Plugin): short_desc = 'OpenStack Keystone' plugin_name = "openstack_keystone" profiles = ('openstack', 'openstack_controller') option_list = [ PluginOpt('nopw', default=True, desc='do not collect keystone passwords') ] var_puppet_gen = "/var/lib/config-data/puppet-generated/keystone" def setup(self): self.add_copy_spec([ "/etc/keystone/default_catalog.templates", "/etc/keystone/keystone.conf", "/etc/keystone/logging.conf", "/etc/keystone/policy.json", self.var_puppet_gen + "/etc/keystone/*.conf", self.var_puppet_gen + "/etc/keystone/*.json", self.var_puppet_gen + "/etc/httpd/conf/", self.var_puppet_gen + "/etc/httpd/conf.d/", self.var_puppet_gen + "/etc/httpd/conf.modules.d/*.conf", self.var_puppet_gen + "/var/spool/cron/", self.var_puppet_gen + "/etc/my.cnf.d/tripleo.cnf" ]) if self.get_option("all_logs"): self.add_copy_spec([ "/var/log/keystone/", ]) else: self.add_copy_spec([ "/var/log/keystone/*.log", ]) # collect domain config directory, if specified # if not, collect default /etc/keystone/domains exec_out = self.collect_cmd_output( "crudini --get /etc/keystone/keystone.conf " "identity domain_config_dir") self.domain_config_dir = exec_out['output'] if exec_out['status'] != 0 or \ not (self.path_isdir(self.domain_config_dir)): self.domain_config_dir = "/etc/keystone/domains" self.add_copy_spec(self.domain_config_dir) vars_all = [p in os.environ for p in [ 'OS_USERNAME', 'OS_PASSWORD']] vars_any = [p in os.environ for p in [ 'OS_TENANT_NAME', 'OS_PROJECT_NAME']] if not (all(vars_all) and any(vars_any)): self.soslog.warning("Not all environment variables set. Source " "the environment file for the user intended " "to connect to the OpenStack environment.") else: self.add_cmd_output("openstack endpoint list") self.add_cmd_output("openstack catalog list") def apply_regex_sub(self, regexp, subst): self.do_path_regex_sub("/etc/keystone/*", regexp, subst) self.do_path_regex_sub( self.var_puppet_gen + "/etc/keystone/*", regexp, subst ) def postproc(self): protect_keys = [ "password", "qpid_password", "rabbit_password", "ssl_key_password", "ldap_dns_password", "neutron_admin_password", "host_password", "admin_password", "admin_token", "ca_password", "transport_url" ] connection_keys = ["connection"] self.apply_regex_sub( r"((?m)^\s*(%s)\s*=\s*)(.*)" % "|".join(protect_keys), r"\1*********" ) self.apply_regex_sub( r"((?m)^\s*(%s)\s*=\s*(.*)://(\w*):)(.*)(@(.*))" % "|".join(connection_keys), r"\1*********\6" ) # obfuscate LDAP plaintext passwords in domain config dir self.do_path_regex_sub(self.domain_config_dir, r"((?m)^\s*(%s)\s*=\s*)(.*)", r"\1********") class DebianKeystone(OpenStackKeystone, DebianPlugin, UbuntuPlugin): packages = ( 'keystone', 'python-keystone', 'python-keystoneclient' ) class RedHatKeystone(OpenStackKeystone, RedHatPlugin): packages = ('openstack-selinux',) def setup(self): super(RedHatKeystone, self).setup() if self.get_option("all_logs"): self.add_copy_spec("/var/log/httpd/keystone*") else: self.add_copy_spec("/var/log/httpd/keystone*.log") # vim: set et ts=4 sw=4 :