0cd1d59425
This change add support for https with SSL protocol and certificate.
The USM client can work with either insecure (disable SSL/TLS
certificate verification) or with SSL certificate. The client is
also modified to support sessions and versions. These changes are
adapted from cgtsclient.
This adds three authorization modes, [token, keystone & local-root].
In token mode, a keystone token and software-url is used for auth.
Eg: $ software \
--software-url "http://192.168.204.1:5497" \
--os-auth-token "${TOKEN}" list
In keystone mode, sourced keystone configs in env is used for auth.
Eg: $ source /etc/platform/openrc; software list
In local-root mode, authorization is by privileged user (root/sudo)
of the controller where software application is running.
Eg: $ sudo software list
Optional arguments specific to https:
-k, --insecure
--cert-file CERT_FILE
--key-file KEY_FILE
--ca-file CA_FILE
Example usage for insecure connection:
software -k list
Story: 2010676
Task: 49666
Test Plan:
PASS: Verify software cli output for http endpoints
PASS: Verify software cli output for https endpoints
Change-Id: I2e2ff115b8d03cddb02e026da84f389918238dab
Signed-off-by: Joseph Vazhappilly <joseph.vazhappillypaily@windriver.com>
72 lines
2.2 KiB
Python
72 lines
2.2 KiB
Python
#
|
|
# Copyright (c) 2023-2024 Wind River Systems, Inc.
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
|
|
ADDRESS_VERSION_IPV4 = 4
|
|
ADDRESS_VERSION_IPV6 = 6
|
|
CONTROLLER_FLOATING_HOSTNAME = "controller"
|
|
|
|
SOFTWARE_STORAGE_DIR = "/opt/software"
|
|
|
|
AVAILABLE_DIR = "%s/metadata/available" % SOFTWARE_STORAGE_DIR
|
|
UNAVAILABLE_DIR = "%s/metadata/unavailable" % SOFTWARE_STORAGE_DIR
|
|
DEPLOYING_START_DIR = "%s/metadata/deploying_start" % SOFTWARE_STORAGE_DIR
|
|
DEPLOYING_HOST_DIR = "%s/metadata/deploying_host" % SOFTWARE_STORAGE_DIR
|
|
DEPLOYING_ACTIVATE_DIR = "%s/metadata/deploying_activate" % SOFTWARE_STORAGE_DIR
|
|
DEPLOYING_COMPLETE_DIR = "%s/metadata/deploying_complete" % SOFTWARE_STORAGE_DIR
|
|
DEPLOYED_DIR = "%s/metadata/deployed" % SOFTWARE_STORAGE_DIR
|
|
REMOVING_DIR = "%s/metadata/removing" % SOFTWARE_STORAGE_DIR
|
|
ABORTING_DIR = "%s/metadata/aborting" % SOFTWARE_STORAGE_DIR
|
|
COMMITTED_DIR = "%s/metadata/committed" % SOFTWARE_STORAGE_DIR
|
|
SEMANTICS_DIR = "%s/semantics" % SOFTWARE_STORAGE_DIR
|
|
|
|
PATCH_AGENT_STATE_IDLE = "idle"
|
|
PATCH_AGENT_STATE_INSTALLING = "installing"
|
|
PATCH_AGENT_STATE_INSTALL_FAILED = "install-failed"
|
|
PATCH_AGENT_STATE_INSTALL_REJECTED = "install-rejected"
|
|
|
|
ABORTING = 'aborting'
|
|
AVAILABLE = 'available'
|
|
COMMITTED = 'committed'
|
|
DEPLOYED = 'deployed'
|
|
DEPLOYING_ACTIVATE = 'deploying-activate'
|
|
DEPLOYING_COMPLETE = 'deploying-complete'
|
|
DEPLOYING_HOST = 'deploying-host'
|
|
DEPLOYING_START = 'deploying-start'
|
|
REMOVING = 'removing'
|
|
UNAVAILABLE = 'unavailable'
|
|
UNKNOWN = 'n/a'
|
|
|
|
|
|
STATUS_DEVELOPEMENT = 'DEV'
|
|
STATUS_OBSOLETE = 'OBS'
|
|
STATUS_RELEASED = 'REL'
|
|
|
|
LOOPBACK_INTERFACE_NAME = "lo"
|
|
|
|
SEMANTIC_PREAPPLY = 'pre-apply'
|
|
SEMANTIC_PREREMOVE = 'pre-remove'
|
|
SEMANTIC_ACTIONS = [SEMANTIC_PREAPPLY, SEMANTIC_PREREMOVE]
|
|
|
|
DEPLOYMENT_STATE_ACTIVE = "Active"
|
|
DEPLOYMENT_STATE_INACTIVE = "Inactive"
|
|
DEPLOYMENT_STATE_PRESTAGING = "Prestaging"
|
|
DEPLOYMENT_STATE_PRESTAGED = "Prestaged"
|
|
|
|
ISO_EXTENSION = ".iso"
|
|
SIG_EXTENSION = ".sig"
|
|
PATCH_EXTENSION = ".patch"
|
|
SUPPORTED_UPLOAD_FILE_EXT = [ISO_EXTENSION, SIG_EXTENSION, PATCH_EXTENSION]
|
|
SCRATCH_DIR = "/scratch"
|
|
|
|
DEPLOYING = 'deploying'
|
|
FAILED = 'failed'
|
|
PENDING = 'pending'
|
|
|
|
# Authorization modes of software cli
|
|
KEYSTONE = 'keystone'
|
|
TOKEN = 'token'
|
|
LOCAL_ROOT = 'local_root'
|