mirror of https://github.com/jumpserver/jumpserver
150 lines
4.7 KiB
Python
150 lines
4.7 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
|
|
from django.conf import settings
|
|
from .ansible.inventory import BaseInventory
|
|
|
|
from common.utils import get_logger
|
|
|
|
__all__ = [
|
|
'JMSInventory', 'JMSCustomInventory',
|
|
]
|
|
|
|
|
|
logger = get_logger(__file__)
|
|
|
|
|
|
class JMSBaseInventory(BaseInventory):
|
|
def convert_to_ansible(self, asset, run_as_admin=False):
|
|
info = {
|
|
'id': asset.id,
|
|
'hostname': asset.hostname,
|
|
'ip': asset.ip,
|
|
'port': asset.ssh_port,
|
|
'vars': dict(),
|
|
'groups': [],
|
|
}
|
|
if asset.domain and asset.domain.has_gateway():
|
|
info["vars"].update(self.make_proxy_command(asset))
|
|
if run_as_admin:
|
|
info.update(asset.get_auth_info(with_become=True))
|
|
if asset.is_windows():
|
|
info["vars"].update({
|
|
"ansible_connection": "ssh",
|
|
"ansible_shell_type": settings.WINDOWS_SSH_DEFAULT_SHELL,
|
|
})
|
|
for label in asset.labels.all():
|
|
info["vars"].update({
|
|
label.name: label.value
|
|
})
|
|
if asset.domain:
|
|
info["vars"].update({
|
|
"domain": asset.domain.name,
|
|
})
|
|
return info
|
|
|
|
@staticmethod
|
|
def make_proxy_command(asset):
|
|
gateway = asset.domain.random_gateway()
|
|
proxy_command_list = [
|
|
"ssh", "-o", "Port={}".format(gateway.port),
|
|
"-o", "StrictHostKeyChecking=no",
|
|
"{}@{}".format(gateway.username, gateway.ip),
|
|
"-W", "%h:%p", "-q",
|
|
]
|
|
|
|
if gateway.password:
|
|
proxy_command_list.insert(
|
|
0, "sshpass -p '{}'".format(gateway.password)
|
|
)
|
|
if gateway.private_key:
|
|
proxy_command_list.append("-i {}".format(gateway.private_key_file))
|
|
|
|
proxy_command = "'-o ProxyCommand={}'".format(
|
|
" ".join(proxy_command_list)
|
|
)
|
|
return {"ansible_ssh_common_args": proxy_command}
|
|
|
|
|
|
class JMSInventory(JMSBaseInventory):
|
|
"""
|
|
JMS Inventory is the inventory with jumpserver assets, so you can
|
|
write you own inventory, construct you inventory,
|
|
user_info is obtained from admin_user or asset_user
|
|
"""
|
|
def __init__(self, assets, run_as_admin=False, run_as=None, become_info=None, system_user=None):
|
|
"""
|
|
:param assets: assets
|
|
:param run_as_admin: True 是否使用管理用户去执行, 每台服务器的管理用户可能不同
|
|
:param run_as: 用户名(添加了统一的资产用户管理器之后AssetUserManager加上之后修改为username)
|
|
:param become_info: 是否become成某个用户去执行
|
|
"""
|
|
self.assets = assets
|
|
self.using_admin = run_as_admin
|
|
self.run_as = run_as
|
|
self.system_user = system_user
|
|
self.become_info = become_info
|
|
|
|
host_list = []
|
|
|
|
for asset in assets:
|
|
host = self.convert_to_ansible(asset, run_as_admin=run_as_admin)
|
|
if run_as is not None:
|
|
run_user_info = self.get_run_user_info(host)
|
|
host.update(run_user_info)
|
|
if become_info and asset.is_unixlike():
|
|
host.update(become_info)
|
|
host_list.append(host)
|
|
|
|
super().__init__(host_list=host_list)
|
|
|
|
def get_run_user_info(self, host):
|
|
if not self.run_as and not self.system_user:
|
|
return {}
|
|
|
|
asset_id = host.get('id', '')
|
|
asset = self.assets.filter(id=asset_id).first()
|
|
if not asset:
|
|
logger.error('Host not found: ', asset_id)
|
|
return {}
|
|
|
|
if self.system_user:
|
|
self.system_user.load_asset_special_auth(asset=asset, username=self.run_as)
|
|
return self.system_user._to_secret_json()
|
|
else:
|
|
return {}
|
|
|
|
|
|
class JMSCustomInventory(JMSBaseInventory):
|
|
"""
|
|
JMS Custom Inventory is the inventory with jumpserver assets,
|
|
user_info is obtained from custom parameter
|
|
"""
|
|
|
|
def __init__(self, assets, username, password=None, public_key=None, private_key=None):
|
|
"""
|
|
"""
|
|
self.assets = assets
|
|
self.username = username
|
|
self.password = password
|
|
self.public_key = public_key
|
|
self.private_key = private_key
|
|
|
|
host_list = []
|
|
|
|
for asset in assets:
|
|
host = self.convert_to_ansible(asset)
|
|
run_user_info = self.get_run_user_info()
|
|
host.update(run_user_info)
|
|
host_list.append(host)
|
|
|
|
super().__init__(host_list=host_list)
|
|
|
|
def get_run_user_info(self):
|
|
return {
|
|
'username': self.username,
|
|
'password': self.password,
|
|
'public_key': self.public_key,
|
|
'private_key': self.private_key
|
|
}
|