ops-cli 2.2.1__tar.gz → 2.3.0__tar.gz

{ops-cli-2.2.1/src/ops_cli.egg-info → ops_cli-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.2
 Name: ops-cli
-Version: 2.2.1
+Version: 2.3.0
 Summary: Ops - wrapper for Terraform, Ansible, and SSH for cloud automation
 Home-page: https://github.com/adobe/ops-cli
 Author: Adobe
@@ -24,14 +24,14 @@ Requires-Python: >=3.5
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: adal==1.2.7
-Requires-Dist: ansible==8.2.0; python_version >= "3.9"
-Requires-Dist: ansible-core==2.15.5; python_version >= "3.9"
-Requires-Dist: awscli==1.29.12; python_version >= "3.7"
+Requires-Dist: ansible==8.7.0; python_version >= "3.9"
+Requires-Dist: ansible-core==2.15.13; python_version >= "3.9"
+Requires-Dist: awscli==1.32.6; python_version >= "3.8"
 Requires-Dist: azure==4.0.0
 Requires-Dist: azure-applicationinsights==0.1.1
 Requires-Dist: azure-batch==4.1.3
 Requires-Dist: azure-common==1.1.28
-Requires-Dist: azure-core==1.29.4; python_version >= "3.7"
+Requires-Dist: azure-core==1.32.0; python_version >= "3.8"
 Requires-Dist: azure-cosmosdb-nspkg==2.0.2
 Requires-Dist: azure-cosmosdb-table==1.0.6
 Requires-Dist: azure-datalake-store==0.0.53
@@ -105,64 +105,73 @@ Requires-Dist: azure-mgmt-web==0.35.0
 Requires-Dist: azure-nspkg==3.0.2
 Requires-Dist: azure-servicebus==0.21.1
 Requires-Dist: azure-servicefabric==6.3.0.0
-Requires-Dist: azure-servicemanagement-legacy==0.20.7
+Requires-Dist: azure-servicemanagement-legacy==0.20.8
 Requires-Dist: azure-storage-blob==1.5.0
 Requires-Dist: azure-storage-common==1.4.2
 Requires-Dist: azure-storage-file==1.4.0
 Requires-Dist: azure-storage-queue==1.4.0
 Requires-Dist: backports.functools-lru-cache==1.6.6; python_version >= "2.6"
-Requires-Dist: boto==2.49.0
-Requires-Dist: boto3==1.28.12; python_version >= "3.7"
-Requires-Dist: botocore==1.31.12; python_version >= "3.7"
-Requires-Dist: cachetools==5.3.1; python_version >= "3.7"
-Requires-Dist: certifi==2023.7.22; python_version >= "3.6"
-Requires-Dist: cffi==1.16.0; python_version >= "3.8"
-Requires-Dist: charset-normalizer==3.3.0; python_full_version >= "3.7.0"
+Requires-Dist: boto3==1.34.6; python_version >= "3.8"
+Requires-Dist: botocore==1.34.6; python_version >= "3.8"
+Requires-Dist: cachetools==5.5.0; python_version >= "3.7"
+Requires-Dist: certifi==2024.12.14; python_version >= "3.6"
+Requires-Dist: cffi==1.17.1; python_version >= "3.8"
+Requires-Dist: charset-normalizer==3.4.1; python_version >= "3.7"
 Requires-Dist: colorama==0.4.4; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2, 3.3, 3.4"
-Requires-Dist: cryptography==41.0.4; python_version >= "3.7"
-Requires-Dist: deepmerge==1.1.0
+Requires-Dist: cryptography==44.0.0; python_version >= "3.7" and python_full_version not in "3.9.0, 3.9.1"
+Requires-Dist: deepmerge==1.1.1
 Requires-Dist: docutils==0.16; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2, 3.3, 3.4"
-Requires-Dist: gitdb==4.0.10; python_version >= "3.7"
-Requires-Dist: gitpython==3.1.37; python_version >= "3.7"
-Requires-Dist: google-auth==2.23.3; python_version >= "3.7"
+Requires-Dist: gitdb==4.0.12; python_version >= "3.7"
+Requires-Dist: gitpython==3.1.44; python_version >= "3.7"
+Requires-Dist: google-auth==2.37.0; python_version >= "3.7"
 Requires-Dist: hashmerge==0.2
-Requires-Dist: himl==0.15.0; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2, 3.3"
-Requires-Dist: hvac==1.1.1; python_full_version >= "3.6.2" and python_full_version < "4.0.0"
-Requires-Dist: idna==3.4; python_version >= "3.5"
+Requires-Dist: himl==0.15.2; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2, 3.3"
+Requires-Dist: hvac==1.2.1; python_full_version >= "3.6.2" and python_full_version < "4.0.0"
+Requires-Dist: idna==3.10; python_version >= "3.6"
 Requires-Dist: inflection==0.5.1; python_version >= "3.5"
-Requires-Dist: isodate==0.6.1
-Requires-Dist: jinja2==3.1.2; python_version >= "3.7"
+Requires-Dist: isodate==0.7.2; python_version >= "3.7"
+Requires-Dist: jinja2==3.1.4; python_version >= "3.7"
 Requires-Dist: jmespath==1.0.1; python_version >= "3.7"
 Requires-Dist: kubernetes==26.1.0; python_version >= "3.6"
 Requires-Dist: lru-cache==0.2.3
-Requires-Dist: markupsafe==2.1.3; python_version >= "3.7"
-Requires-Dist: msal==1.24.1; python_version >= "2.7"
+Requires-Dist: markupsafe==3.0.2; python_version >= "3.9"
+Requires-Dist: msal==1.31.1; python_version >= "3.7"
 Requires-Dist: msrest==0.7.1; python_version >= "3.6"
 Requires-Dist: msrestazure==0.6.4
 Requires-Dist: oauthlib==3.2.2; python_version >= "3.6"
-Requires-Dist: packaging==23.2; python_version >= "3.7"
+Requires-Dist: packaging==24.2; python_version >= "3.8"
 Requires-Dist: passgen==1.1.1
 Requires-Dist: pathlib2==2.3.7.post1
-Requires-Dist: pyasn1==0.5.0; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2, 3.3, 3.4, 3.5"
-Requires-Dist: pyasn1-modules==0.3.0; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2, 3.3, 3.4, 3.5"
-Requires-Dist: pycparser==2.21
+Requires-Dist: pyasn1==0.6.1; python_version >= "3.8"
+Requires-Dist: pyasn1-modules==0.4.1; python_version >= "3.8"
+Requires-Dist: pycparser==2.22; python_version >= "3.8"
 Requires-Dist: pyhcl==0.4.5
-Requires-Dist: pyjwt==2.8.0; python_version >= "3.7"
+Requires-Dist: pyjwt[crypto]==2.10.1; python_version >= "3.9"
 Requires-Dist: python-consul==1.1.0
-Requires-Dist: python-dateutil==2.8.2; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2"
+Requires-Dist: python-dateutil==2.9.0.post0; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2"
 Requires-Dist: pyyaml==6.0.1; python_version >= "3.6"
-Requires-Dist: requests==2.31.0; python_version >= "3.7"
-Requires-Dist: requests-oauthlib==1.3.1; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2, 3.3"
+Requires-Dist: requests==2.32.3; python_version >= "3.8"
+Requires-Dist: requests-oauthlib==2.0.0; python_version >= "3.4"
 Requires-Dist: resolvelib==1.0.1
 Requires-Dist: rsa==4.7.2; python_version >= "3.5" and python_version < "4"
-Requires-Dist: s3transfer==0.6.2; python_version >= "3.7"
-Requires-Dist: setuptools==68.2.2; python_version >= "3.8"
+Requires-Dist: s3transfer==0.10.4; python_version >= "3.8"
+Requires-Dist: setuptools==75.8.0; python_version >= "3.9"
 Requires-Dist: simpledi==0.4.1
-Requires-Dist: six==1.16.0; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2"
-Requires-Dist: smmap==5.0.1; python_version >= "3.7"
-Requires-Dist: typing-extensions==4.8.0; python_version >= "3.8"
-Requires-Dist: urllib3==1.26.17; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2, 3.3, 3.4, 3.5"
-Requires-Dist: websocket-client==1.6.4; python_version >= "3.8"
+Requires-Dist: six==1.17.0; python_version >= "2.7" and python_version not in "3.0, 3.1, 3.2"
+Requires-Dist: smmap==5.0.2; python_version >= "3.7"
+Requires-Dist: typing-extensions==4.12.2; python_version >= "3.8"
+Requires-Dist: urllib3==2.0.7; python_version >= "3.7"
+Requires-Dist: websocket-client==1.8.0; python_version >= "3.8"
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: license
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
 
 # Ops CLI
 [![Build status](https://github.com/adobe/ops-cli/actions/workflows/release.yml/badge.svg)](https://github.com/adobe/ops-cli/actions/workflows/release.yml) [![Docker image](https://img.shields.io/badge/Docker-ghcr.io/adobe/opscli-brightgreen.svg?style=flat-square)](https://github.com/adobe/ops-cli/pkgs/container/ops-cli) [![License](https://img.shields.io/github/license/adobe/ops-cli)](https://github.com/adobe/ops-cli/blob/master/LICENSE)
@@ -317,7 +326,7 @@ workon ops
 # uninstall previous `ops` version (if you have it)
 pip uninstall ops --yes
 
-# install ops-cli v2.2.1 stable release
+# install ops-cli v2.3.0 stable release
 pip install --upgrade ops-cli
 ```
 
@@ -333,7 +342,7 @@ You can try out `ops-cli`, by using docker. The docker image has all required pr
 
 To start out a container, running the latest `ops-cli` docker image run:
 ```sh
-docker run -it ghcr.io/adobe/ops-cli:2.2.1 bash
+docker run -it ghcr.io/adobe/ops-cli:2.3.0 bash
 ```
 
 After the container has started, you can start using `ops-cli`:
@@ -859,6 +868,12 @@ Which will translate behind the scenes in :
 This allows us to just refer in cluster files a secret that actually exists in vault and make sure we only generate it once - if it was already created by os or any other system, we will just use what is already there.
 The reference is by means of fixed form jinja call  added to the cluster file, which ends up interpreted later during the templating phase.
 
+#### Vault auth
+Ops checks if a valid vault token is present in `~/.vault-token` or in the environment variable `VAULT_TOKEN`. If not, it will try to authenticate using the method defined in `OPS_VAULT_AUTH_METHOD` environment variable.
+The following methods are supported:
+- `okta` - use the Vault Okta auth method (default)
+- `ldap` - use the Vault ldap auth method
+
 ### Amazon Secrets Manager (SSM)
 
 Amazon offers the possibility to use their [Secrets Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html) in order to manage configuration data such as credentials, passwords and license keys.

{ops-cli-2.2.1 → ops_cli-2.3.0}/README.md

@@ -151,7 +151,7 @@ workon ops
 # uninstall previous `ops` version (if you have it)
 pip uninstall ops --yes
 
-# install ops-cli v2.2.1 stable release
+# install ops-cli v2.3.0 stable release
 pip install --upgrade ops-cli
 ```
 
@@ -167,7 +167,7 @@ You can try out `ops-cli`, by using docker. The docker image has all required pr
 
 To start out a container, running the latest `ops-cli` docker image run:
 ```sh
-docker run -it ghcr.io/adobe/ops-cli:2.2.1 bash
+docker run -it ghcr.io/adobe/ops-cli:2.3.0 bash
 ```
 
 After the container has started, you can start using `ops-cli`:
@@ -693,6 +693,12 @@ Which will translate behind the scenes in :
 This allows us to just refer in cluster files a secret that actually exists in vault and make sure we only generate it once - if it was already created by os or any other system, we will just use what is already there.
 The reference is by means of fixed form jinja call  added to the cluster file, which ends up interpreted later during the templating phase.
 
+#### Vault auth
+Ops checks if a valid vault token is present in `~/.vault-token` or in the environment variable `VAULT_TOKEN`. If not, it will try to authenticate using the method defined in `OPS_VAULT_AUTH_METHOD` environment variable.
+The following methods are supported:
+- `okta` - use the Vault Okta auth method (default)
+- `ldap` - use the Vault ldap auth method
+
 ### Amazon Secrets Manager (SSM)
 
 Amazon offers the possibility to use their [Secrets Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html) in order to manage configuration data such as credentials, passwords and license keys.

{ops-cli-2.2.1 → ops_cli-2.3.0}/requirements.txt

@@ -1,12 +1,12 @@
 adal==1.2.7
-ansible==8.2.0; python_version >= '3.9'
-ansible-core==2.15.5; python_version >= '3.9'
-awscli==1.29.12; python_version >= '3.7'
+ansible==8.7.0; python_version >= '3.9'
+ansible-core==2.15.13; python_version >= '3.9'
+awscli==1.32.6; python_version >= '3.8'
 azure==4.0.0
 azure-applicationinsights==0.1.1
 azure-batch==4.1.3
 azure-common==1.1.28
-azure-core==1.29.4; python_version >= '3.7'
+azure-core==1.32.0; python_version >= '3.8'
 azure-cosmosdb-nspkg==2.0.2
 azure-cosmosdb-table==1.0.6
 azure-datalake-store==0.0.53
@@ -80,61 +80,60 @@ azure-mgmt-web==0.35.0
 azure-nspkg==3.0.2
 azure-servicebus==0.21.1
 azure-servicefabric==6.3.0.0
-azure-servicemanagement-legacy==0.20.7
+azure-servicemanagement-legacy==0.20.8
 azure-storage-blob==1.5.0
 azure-storage-common==1.4.2
 azure-storage-file==1.4.0
 azure-storage-queue==1.4.0
 backports.functools-lru-cache==1.6.6; python_version >= '2.6'
-boto==2.49.0
-boto3==1.28.12; python_version >= '3.7'
-botocore==1.31.12; python_version >= '3.7'
-cachetools==5.3.1; python_version >= '3.7'
-certifi==2023.7.22; python_version >= '3.6'
-cffi==1.16.0; python_version >= '3.8'
-charset-normalizer==3.3.0; python_full_version >= '3.7.0'
+boto3==1.34.6; python_version >= '3.8'
+botocore==1.34.6; python_version >= '3.8'
+cachetools==5.5.0; python_version >= '3.7'
+certifi==2024.12.14; python_version >= '3.6'
+cffi==1.17.1; python_version >= '3.8'
+charset-normalizer==3.4.1; python_version >= '3.7'
 colorama==0.4.4; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4'
-cryptography==41.0.4; python_version >= '3.7'
-deepmerge==1.1.0
+cryptography==44.0.0; python_version >= '3.7' and python_full_version not in '3.9.0, 3.9.1'
+deepmerge==1.1.1
 docutils==0.16; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4'
-gitdb==4.0.10; python_version >= '3.7'
-gitpython==3.1.37; python_version >= '3.7'
-google-auth==2.23.3; python_version >= '3.7'
+gitdb==4.0.12; python_version >= '3.7'
+gitpython==3.1.44; python_version >= '3.7'
+google-auth==2.37.0; python_version >= '3.7'
 hashmerge==0.2
-himl==0.15.0; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'
-hvac==1.1.1; python_full_version >= '3.6.2' and python_full_version < '4.0.0'
-idna==3.4; python_version >= '3.5'
+himl==0.15.2; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'
+hvac==1.2.1; python_full_version >= '3.6.2' and python_full_version < '4.0.0'
+idna==3.10; python_version >= '3.6'
 inflection==0.5.1; python_version >= '3.5'
-isodate==0.6.1
-jinja2==3.1.2; python_version >= '3.7'
+isodate==0.7.2; python_version >= '3.7'
+jinja2==3.1.4; python_version >= '3.7'
 jmespath==1.0.1; python_version >= '3.7'
 kubernetes==26.1.0; python_version >= '3.6'
 lru-cache==0.2.3
-markupsafe==2.1.3; python_version >= '3.7'
-msal==1.24.1; python_version >= '2.7'
+markupsafe==3.0.2; python_version >= '3.9'
+msal==1.31.1; python_version >= '3.7'
 msrest==0.7.1; python_version >= '3.6'
 msrestazure==0.6.4
 oauthlib==3.2.2; python_version >= '3.6'
-packaging==23.2; python_version >= '3.7'
+packaging==24.2; python_version >= '3.8'
 passgen==1.1.1
 pathlib2==2.3.7.post1
-pyasn1==0.5.0; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4, 3.5'
-pyasn1-modules==0.3.0; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4, 3.5'
-pycparser==2.21
+pyasn1==0.6.1; python_version >= '3.8'
+pyasn1-modules==0.4.1; python_version >= '3.8'
+pycparser==2.22; python_version >= '3.8'
 pyhcl==0.4.5
-pyjwt==2.8.0; python_version >= '3.7'
+pyjwt[crypto]==2.10.1; python_version >= '3.9'
 python-consul==1.1.0
-python-dateutil==2.8.2; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'
+python-dateutil==2.9.0.post0; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'
 pyyaml==6.0.1; python_version >= '3.6'
-requests==2.31.0; python_version >= '3.7'
-requests-oauthlib==1.3.1; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'
+requests==2.32.3; python_version >= '3.8'
+requests-oauthlib==2.0.0; python_version >= '3.4'
 resolvelib==1.0.1
 rsa==4.7.2; python_version >= '3.5' and python_version < '4'
-s3transfer==0.6.2; python_version >= '3.7'
-setuptools==68.2.2; python_version >= '3.8'
+s3transfer==0.10.4; python_version >= '3.8'
+setuptools==75.8.0; python_version >= '3.9'
 simpledi==0.4.1
-six==1.16.0; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'
-smmap==5.0.1; python_version >= '3.7'
-typing-extensions==4.8.0; python_version >= '3.8'
-urllib3==1.26.17; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4, 3.5'
-websocket-client==1.6.4; python_version >= '3.8'
+six==1.17.0; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'
+smmap==5.0.2; python_version >= '3.7'
+typing-extensions==4.12.2; python_version >= '3.8'
+urllib3==2.0.7; python_version >= '3.7'
+websocket-client==1.8.0; python_version >= '3.8'

{ops-cli-2.2.1 → ops_cli-2.3.0}/setup.py

@@ -23,7 +23,7 @@ _mydir = os.path.abspath(os.path.dirname(sys.argv[0]))
 _requires = [r for r in open(os.path.sep.join((_mydir, 'requirements.txt')), "r").read().split('\n') if len(r) > 1]
 setup(
     name='ops-cli',
-    version='2.2.1',
+    version='2.3.0',
     description='Ops - wrapper for Terraform, Ansible, and SSH for cloud automation',
     long_description=_readme + '\n\n',
     long_description_content_type='text/markdown',

{ops-cli-2.2.1 → ops_cli-2.3.0}/src/ops/cli/inventory.py

@@ -53,7 +53,7 @@ class InventoryRunner(object):
             group_names = [group.name for group in host.get_groups()]
             group_names = sorted(group_names)
             group_string = ", ".join(group_names)
-            host_id = host.vars.get('ec2_id', '')
+            host_id = host.vars.get('ec2_InstanceId', '')
             if host_id != '':
                 name_and_id = "%s -- %s" % (stringc(host.name,
                                                     'blue'), stringc(host_id, 'blue'))

{ops-cli-2.2.1 → ops_cli-2.3.0}/src/ops/cli/ssh.py

@@ -92,6 +92,12 @@ class SshParserConfig(SubParserConfig):
             help='When using Shell Control Box (SCB) and creating a proxy,'
                  'a random port is generated, which will be used in the ssh config '
                  'for all playbook, run and sync operations')
+        parser.add_argument(
+            '--ssh-dest-user',
+            type=str,
+            dest='ssh_dest_user',
+            help='SSH User for the destination host, different from the bastion or SCB user. '
+                 'Useful when LDAP is not working on the destination host.')
 
     def get_help(self):
         return 'SSH or create an SSH tunnel to a server in the cluster'
@@ -260,6 +266,12 @@ class SshRunner(object):
         ssh_config = args.ssh_config or self.ops_config.get(
             'ssh.config') or self.ansible_inventory.get_ssh_config()
 
+        ssh_host_bastion, ssh_host_dest = None, None
+        if args.ssh_dest_user:
+            ssh_host_parts = ssh_host.split('--')
+            ssh_host_bastion = ssh_host_parts[0]
+            ssh_host_dest = ssh_host_parts[1] if len(ssh_host_parts) > 1 else None
+
         scb_ssh_host = None
         if scb_enabled:
             # scb->bastion->host vs scb->bastion
@@ -280,8 +292,14 @@ class SshRunner(object):
         else:
             if scb_enabled:
                 command = f"ssh -F {ssh_config} {ssh_user}@{scb_ssh_host}"
+                if args.ssh_dest_user and ssh_host_dest:
+                    command = (f"ssh -F {ssh_config} -t {ssh_user}@{ssh_host_bastion}@{scb_host} "
+                               f"ssh {args.ssh_dest_user}@{ssh_host_dest}")
             else:
                 command = f"ssh -F {ssh_config} {ssh_host}"
+                if args.ssh_dest_user and ssh_host_dest:
+                    command = (f"ssh -F {ssh_config} -t {ssh_user}@{ssh_host_bastion} "
+                               f"ssh {args.ssh_dest_user}@{ssh_host_dest}")
 
         if args.proxy:
             if scb_enabled: