140 lines
4.5 KiB
Python
140 lines
4.5 KiB
Python
#!/usr/bin/env python
|
|
# Copyright 2016 Mirantis, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import logging
|
|
import urwid
|
|
|
|
from fuelmenu.common import dialog
|
|
from fuelmenu.common import modulehelper as helper
|
|
from fuelmenu.common import network
|
|
from fuelmenu.common import puppet
|
|
from fuelmenu.common import urwidwrapper as widget
|
|
from fuelmenu.common import utils
|
|
from fuelmenu import consts
|
|
|
|
log = logging.getLogger('fuelmenu.security')
|
|
|
|
SSH_NETWORK = 'ADMIN_NETWORK/ssh_network'
|
|
|
|
|
|
class Security(urwid.WidgetWrap):
|
|
def __init__(self, parent):
|
|
self.name = "Security Setup"
|
|
self.visible = True
|
|
self.parent = parent
|
|
self.screen = None
|
|
|
|
# UI text
|
|
self.header_content = ["Security settings", ""]
|
|
self.fields = [SSH_NETWORK]
|
|
|
|
self.defaults = {
|
|
SSH_NETWORK: {
|
|
"label": "Restrict SSH access on network ",
|
|
"tooltip": "Enter network address in CIDR format",
|
|
"value": ""
|
|
}
|
|
}
|
|
self.load()
|
|
self.screen = None
|
|
|
|
def check(self, args):
|
|
self.parent.footer.set_text("Checking data...")
|
|
self.parent.refreshScreen()
|
|
|
|
responses = dict()
|
|
for index, fieldname in enumerate(self.fields):
|
|
if fieldname != helper.BLANK_KEY:
|
|
responses[fieldname] = self.edits[index].get_edit_text()
|
|
|
|
ssh_network = responses[SSH_NETWORK]
|
|
errors = []
|
|
|
|
if len(ssh_network) == 0:
|
|
self.parent.footer.set_text("Address is empty, "
|
|
"will be changed to 0.0.0.0/0")
|
|
log.warning("Empty address, changed to 0.0.0.0/0")
|
|
responses[SSH_NETWORK] = "0.0.0.0/0"
|
|
|
|
msg = "If you continue without the address, you may able to"\
|
|
+ " access the Fuel through SSH from any network. The"\
|
|
+ " address will be changed to 0.0.0.0/0. This can lead"\
|
|
+ " to the security issues."
|
|
|
|
dialog.display_dialog(
|
|
self, widget.TextLabel(msg), "Empty Address Warning")
|
|
|
|
else:
|
|
if not network.getCidrSize(ssh_network):
|
|
errors.append("Incorrect network address format: {0}."
|
|
.format(ssh_network))
|
|
|
|
if len(errors) > 0:
|
|
log.error("Errors: %s %s", len(errors), errors)
|
|
helper.ModuleHelper.display_failed_check_dialog(self, errors)
|
|
return False
|
|
|
|
self.parent.footer.set_text("No errors found.")
|
|
return responses
|
|
|
|
def apply(self, args):
|
|
responses = self.check(args)
|
|
if responses is False:
|
|
log.error("Check failed. Not applying")
|
|
return False
|
|
|
|
if utils.is_post_deployment():
|
|
self.parent.apply_tasks.add(self.apply_to_master)
|
|
|
|
self.save(responses)
|
|
return True
|
|
|
|
def apply_to_master(self):
|
|
"""Apply changes to the Fuel master"""
|
|
|
|
msg = "Apply settings to Fuel master."
|
|
log.info(msg)
|
|
self.parent.footer.set_text(msg)
|
|
self.parent.refreshScreen()
|
|
|
|
result, msg = puppet.puppetApplyManifest(consts.PUPPET_FUEL_MASTER)
|
|
|
|
self.parent.footer.set_text(msg)
|
|
return result
|
|
|
|
def save(self, responses):
|
|
newsettings = helper.ModuleHelper.make_settings_from_responses(
|
|
responses)
|
|
self.parent.settings.merge(newsettings)
|
|
|
|
def load(self):
|
|
helper.ModuleHelper.load_to_defaults(
|
|
self.parent.settings,
|
|
self.defaults,
|
|
ignoredparams=[SSH_NETWORK])
|
|
admin_network = self.parent.settings["ADMIN_NETWORK"]
|
|
self.defaults[SSH_NETWORK]['value'] = network.getCidr(
|
|
admin_network["ipaddress"],
|
|
admin_network["netmask"])
|
|
if 'ssh_network' in admin_network:
|
|
self.defaults[SSH_NETWORK]['value'] = admin_network["ssh_network"]
|
|
|
|
def refresh(self):
|
|
pass
|
|
|
|
def screenUI(self):
|
|
return helper.ModuleHelper.screenUI(self, self.header_content,
|
|
self.fields, self.defaults)
|