Skip to content
This repository has been archived by the owner on Sep 12, 2024. It is now read-only.

require_runbook_signature.py: when disabling required signatures, app… #523

Open
wants to merge 6 commits into
base: master
Choose a base branch
from
Open

require_runbook_signature.py: when disabling required signatures, app… #523

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
6673dff
require_runbook_signature.py: when disabling required signatures, app…
edneville Jan 3, 2019
4c29872
Merge branch 'master' into master
edneville Feb 13, 2019
b84abf1
Merge branch 'master' into master
edneville Feb 14, 2019
8401805
Merge branch 'master' into master
edneville Feb 16, 2019
50a1197
Merge branch 'master' into master
edneville Mar 13, 2019
a821b2b
Merge branch 'master' into master
edneville Mar 14, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 9 additions & 2 deletions Providers/nxOMSAutomationWorker/automationworker/scripts/require_runbook_signature.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,15 @@

WORKSPACE_ID_PLACEHOLDER = "<workspace_id>"
DIY_WORKER_CONFIG_FILE_LOCATION_PATTERN = "/var/opt/microsoft/omsagent/" + WORKSPACE_ID_PLACEHOLDER + "/state/automationworker/diy/worker.conf"
WORKER_CONFIG_FILE_LOCATION_PATTERN = "/var/opt/microsoft/omsagent/" + WORKSPACE_ID_PLACEHOLDER + "/state/automationworker/worker.conf"


def get_config_file_path(workspace_id):
def get_diy_config_file_path(workspace_id):
return DIY_WORKER_CONFIG_FILE_LOCATION_PATTERN.replace(WORKSPACE_ID_PLACEHOLDER, workspace_id)

def get_config_file_path(workspace_id):
return WORKER_CONFIG_FILE_LOCATION_PATTERN.replace(WORKSPACE_ID_PLACEHOLDER, workspace_id)

def set_signature_enforcement_policy(config_file_path, node_locked):
if os.path.isfile(config_file_path) is False:
sys.stderr.write("Could not find DIY automation worker configuration file\nPlease check if the DIY automation worker is registered for the specified workspace\n")
Expand Down Expand Up @@ -56,11 +60,14 @@ def main():
sys.stderr.write("Please specify only one and only one workspace id.\n")
sys.exit(1)
workspace_id = args[0]
config_file_path = get_config_file_path(workspace_id)
diy_config_file_path = get_diy_config_file_path(workspace_id)
config_file_path = get_config_file_path(workspace_id)
if options.f is True:
set_signature_enforcement_policy(diy_config_file_path, False)
set_signature_enforcement_policy(config_file_path, False)
print "Successfully configured this host to execute both signed and unsigned runbooks."
elif options.t is True:
set_signature_enforcement_policy(diy_config_file_path, True)
set_signature_enforcement_policy(config_file_path, True)
print "Successfully configured this host to execute signed runbook exclusively."

Expand Down