python-rac 0.2.0__py3-none-any.whl

pyrac/web/__main__.py

@@ -0,0 +1,355 @@
+import argparse
+import secrets
+from wsgiref.simple_server import make_server
+from ..client import RacClient
+from .app import create_app
+from .workspace import create_workspace_app, startup_endpoints
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(description='Read-only RAC dashboard (loopback by default)')
+    parser.add_argument('--host', default='127.0.0.1')
+    parser.add_argument('--port', type=int, default=8080)
+    parser.add_argument('--ras-host', default='localhost')
+    parser.add_argument('--ras-port', type=int, default=1545)
+    parser.add_argument('--workspace', action='store_true',
+                        help='Use local multi-RAS workspace (read-only, in-memory endpoints)')
+    parser.add_argument('--ras-server', action='append', default=[], metavar='HOST:PORT/PROTOCOL',
+                        help='Additional workspace RAS endpoint (repeatable; 16.0, 10.0 or auto)')
+    parser.add_argument('--protocol', choices=['10.0', '16.0', 'auto'], default='16.0')
+    parser.add_argument('--agent-user', help='OS-authenticated agent administrator name')
+    parser.add_argument('--cluster-user', help='OS-authenticated cluster administrator name')
+    parser.add_argument('--allow-process-turn-off', action='store_true',
+                        help='Enable destructive POST on loopback only (disabled by default)')
+    parser.add_argument('--allow-cluster-remove', action='store_true',
+                        help='Enable guarded cluster removal on loopback only (disabled by default)')
+    parser.add_argument('--allow-cluster-insert', action='store_true',
+                        help='Enable guarded cluster insertion on loopback only (disabled by default)')
+    parser.add_argument('--allow-agent-admin-register', action='store_true',
+                        help='Enable guarded password-free agent admin registration on loopback only')
+    parser.add_argument('--allow-agent-admin-remove', action='store_true',
+                        help='Enable guarded agent admin removal on loopback only')
+    parser.add_argument('--allow-cluster-admin-register', action='store_true',
+                        help='Enable guarded password-free cluster admin registration on loopback only')
+    parser.add_argument('--allow-cluster-admin-remove', action='store_true',
+                        help='Enable guarded cluster admin removal on loopback only')
+    parser.add_argument('--allow-rule-apply', action='store_true',
+                        help='Enable guarded assignment rule apply on loopback only')
+    parser.add_argument('--allow-service-settings-apply', action='store_true',
+                        help='Enable guarded service settings apply on loopback only')
+    parser.add_argument('--allow-service-setting-remove', action='store_true',
+                        help='Enable guarded service setting removal on loopback only')
+    parser.add_argument('--allow-service-setting-update', action='store_true',
+                        help='Enable guarded service setting path update on loopback only')
+    parser.add_argument('--allow-service-setting-insert', action='store_true',
+                        help='Enable guarded service setting insertion on loopback only')
+    parser.add_argument('--allow-cluster-name-update', action='store_true',
+                        help='Enable guarded cluster rename on loopback only (disabled by default)')
+    parser.add_argument('--allow-cluster-expiration-timeout-update', action='store_true',
+                        help='Enable guarded cluster expiration timeout update on loopback only')
+    parser.add_argument('--allow-cluster-security-level-update', action='store_true',
+                        help='Enable guarded cluster security level update on loopback only')
+    parser.add_argument('--allow-cluster-session-fault-tolerance-level-update', action='store_true',
+                        help='Enable guarded cluster session fault tolerance update on loopback only')
+    parser.add_argument('--allow-cluster-load-balancing-mode-update', action='store_true',
+                        help='Enable guarded cluster load balancing mode update on loopback only')
+    parser.add_argument('--allow-cluster-kill-problem-processes-update', action='store_true',
+                        help='Enable guarded cluster problem-process policy update on loopback only')
+    parser.add_argument('--allow-cluster-kill-by-memory-with-dump-update', action='store_true',
+                        help='Enable guarded cluster kill-by-memory dump update on loopback only')
+    parser.add_argument('--allow-cluster-audit-update', action='store_true',
+                        help='Enable guarded cluster audit update on loopback only')
+    parser.add_argument('--allow-cluster-ping-update', action='store_true',
+                        help='Enable guarded cluster ping pair update on loopback only')
+    parser.add_argument('--allow-cluster-restart-schedule-update', action='store_true',
+                        help='Enable guarded cluster restart schedule update on loopback only')
+    parser.add_argument('--allow-server-restart-schedule-update', action='store_true',
+                        help='Enable guarded working-server restart schedule update on loopback only')
+    parser.add_argument('--allow-server-infobases-limit-update', action='store_true',
+                        help='Enable guarded working-server infobases limit update on loopback only')
+    parser.add_argument('--allow-server-connections-limit-update', action='store_true',
+                        help='Enable guarded working-server connections limit update on loopback only')
+    parser.add_argument('--allow-server-safe-call-memory-limit-update', action='store_true',
+                        help='Enable guarded working-server safe-call memory limit update on loopback only')
+    parser.add_argument('--allow-server-critical-total-memory-update', action='store_true',
+                        help='Enable guarded working-server critical total memory update on loopback only')
+    parser.add_argument('--allow-server-temporary-total-memory-update', action='store_true',
+                        help='Enable guarded working-server temporary allowed total memory update on loopback only')
+    parser.add_argument('--allow-server-temporary-memory-time-limit-update', action='store_true',
+                        help='Enable guarded working-server temporary memory time limit update on loopback only')
+    parser.add_argument('--allow-server-spn-update', action='store_true',
+                        help='Enable guarded working-server service principal name update on loopback only')
+    parser.add_argument('--allow-server-dedicate-managers-update', action='store_true',
+                        help='Enable guarded working-server dedicated managers update on loopback only')
+    parser.add_argument('--allow-server-port-ranges-update', action='store_true',
+                        help='Enable guarded working-server port ranges update on loopback only')
+    args = parser.parse_args(argv)
+    if args.ras_server and not args.workspace:
+        raise ValueError('--ras-server requires --workspace')
+    workspace_endpoints = (startup_endpoints(args.ras_host, args.ras_port,
+                                             args.protocol, args.ras_server)
+                           if args.workspace else None)
+    if args.allow_agent_admin_register and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web agent administrator registration requires loopback bind')
+    if args.allow_agent_admin_register and args.protocol != '16.0':
+        raise ValueError('Web agent administrator registration requires protocol 16.0')
+    if args.allow_agent_admin_register and args.agent_user is not None:
+        raise ValueError('OS-authenticated agent administrator registration is not enabled')
+    if args.allow_agent_admin_remove and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web agent administrator removal requires loopback bind')
+    if args.allow_agent_admin_remove and args.protocol != '16.0':
+        raise ValueError('Web agent administrator removal requires protocol 16.0')
+    if args.allow_agent_admin_remove and args.agent_user is None:
+        raise ValueError('Agent administrator removal requires an authenticated administrator')
+    if args.allow_cluster_admin_register and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster administrator registration requires loopback bind')
+    if args.allow_cluster_admin_register and args.protocol != '16.0':
+        raise ValueError('Web cluster administrator registration requires protocol 16.0')
+    if args.allow_cluster_admin_register and args.cluster_user is not None:
+        raise ValueError('OS-authenticated cluster administrator registration is not enabled')
+    if args.allow_cluster_admin_remove and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster administrator removal requires loopback bind')
+    if args.allow_cluster_admin_remove and args.protocol != '16.0':
+        raise ValueError('Web cluster administrator removal requires protocol 16.0')
+    if args.allow_cluster_admin_remove and args.cluster_user is None:
+        raise ValueError('Cluster administrator removal requires an authenticated administrator')
+    if args.allow_rule_apply and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web rule apply requires loopback bind')
+    if args.allow_rule_apply and args.protocol != '16.0':
+        raise ValueError('Web rule apply requires protocol 16.0')
+    if args.allow_rule_apply and args.cluster_user is not None:
+        raise ValueError('OS-authenticated rule apply is not enabled in web')
+    if args.allow_service_settings_apply and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web service settings apply requires loopback bind')
+    if args.allow_service_settings_apply and args.protocol != '16.0':
+        raise ValueError('Web service settings apply requires protocol 16.0')
+    if args.allow_service_settings_apply and args.cluster_user is not None:
+        raise ValueError('OS-authenticated service settings apply is not enabled in web')
+    if args.allow_service_setting_remove and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web service setting removal requires loopback bind')
+    if args.allow_service_setting_remove and args.protocol != '16.0':
+        raise ValueError('Web service setting removal requires protocol 16.0')
+    if args.allow_service_setting_remove and args.cluster_user is not None:
+        raise ValueError('OS-authenticated service setting removal is not enabled in web')
+    if args.allow_service_setting_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web service setting update requires loopback bind')
+    if args.allow_service_setting_update and args.protocol != '16.0':
+        raise ValueError('Web service setting update requires protocol 16.0')
+    if args.allow_service_setting_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated service setting update is not enabled in web')
+    if args.allow_service_setting_insert and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web service setting insert requires loopback bind')
+    if args.allow_service_setting_insert and args.protocol != '16.0':
+        raise ValueError('Web service setting insert requires protocol 16.0')
+    if args.allow_service_setting_insert and args.cluster_user is not None:
+        raise ValueError('OS-authenticated service setting insert is not enabled in web')
+    if args.allow_cluster_insert and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster insertion requires loopback bind')
+    if args.allow_cluster_insert and args.protocol != '16.0':
+        raise ValueError('Web cluster insertion requires protocol 16.0')
+    if args.allow_cluster_insert and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster insertion is not enabled')
+    if args.allow_cluster_remove and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster removal requires loopback bind')
+    if args.allow_cluster_remove and args.protocol != '16.0':
+        raise ValueError('Web cluster removal requires protocol 16.0')
+    if args.allow_cluster_remove and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster removal is not enabled')
+    if args.allow_process_turn_off and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web process turn-off requires loopback bind')
+    if args.allow_process_turn_off and args.protocol != '16.0':
+        raise ValueError('Web process turn-off requires protocol 16.0')
+    if args.allow_process_turn_off and args.cluster_user is not None:
+        raise ValueError('OS-authenticated process turn-off is not verified')
+    if args.allow_cluster_name_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster name update requires loopback bind')
+    if args.allow_cluster_name_update and args.protocol != '16.0':
+        raise ValueError('Web cluster name update requires protocol 16.0')
+    if args.allow_cluster_name_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster name update is not enabled')
+    if args.allow_cluster_expiration_timeout_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster timeout update requires loopback bind')
+    if args.allow_cluster_expiration_timeout_update and args.protocol != '16.0':
+        raise ValueError('Web cluster timeout update requires protocol 16.0')
+    if args.allow_cluster_expiration_timeout_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster timeout update is not enabled')
+    if args.allow_cluster_security_level_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster security level update requires loopback bind')
+    if args.allow_cluster_security_level_update and args.protocol != '16.0':
+        raise ValueError('Web cluster security level update requires protocol 16.0')
+    if args.allow_cluster_security_level_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster security level update is not enabled')
+    if args.allow_cluster_session_fault_tolerance_level_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster session fault tolerance update requires loopback bind')
+    if args.allow_cluster_session_fault_tolerance_level_update and args.protocol != '16.0':
+        raise ValueError('Web cluster session fault tolerance update requires protocol 16.0')
+    if args.allow_cluster_session_fault_tolerance_level_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster session fault tolerance update is not enabled')
+    if args.allow_cluster_load_balancing_mode_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster load balancing mode update requires loopback bind')
+    if args.allow_cluster_load_balancing_mode_update and args.protocol != '16.0':
+        raise ValueError('Web cluster load balancing mode update requires protocol 16.0')
+    if args.allow_cluster_load_balancing_mode_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster load balancing mode update is not enabled')
+    if args.allow_cluster_kill_problem_processes_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster problem-process policy update requires loopback bind')
+    if args.allow_cluster_kill_problem_processes_update and args.protocol != '16.0':
+        raise ValueError('Web cluster problem-process policy update requires protocol 16.0')
+    if args.allow_cluster_kill_problem_processes_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster problem-process policy update is not enabled')
+    if args.allow_cluster_kill_by_memory_with_dump_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster kill-by-memory dump update requires loopback bind')
+    if args.allow_cluster_kill_by_memory_with_dump_update and args.protocol != '16.0':
+        raise ValueError('Web cluster kill-by-memory dump update requires protocol 16.0')
+    if args.allow_cluster_kill_by_memory_with_dump_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster kill-by-memory dump update is not enabled')
+    if args.allow_cluster_audit_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster audit update requires loopback bind')
+    if args.allow_cluster_audit_update and args.protocol != '16.0':
+        raise ValueError('Web cluster audit update requires protocol 16.0')
+    if args.allow_cluster_audit_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster audit update is not enabled')
+    if args.allow_cluster_ping_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster ping update requires loopback bind')
+    if args.allow_cluster_ping_update and args.protocol != '16.0':
+        raise ValueError('Web cluster ping update requires protocol 16.0')
+    if args.allow_cluster_ping_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster ping update is not enabled')
+    if args.allow_cluster_restart_schedule_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web cluster restart schedule update requires loopback bind')
+    if args.allow_cluster_restart_schedule_update and args.protocol != '16.0':
+        raise ValueError('Web cluster restart schedule update requires protocol 16.0')
+    if args.allow_cluster_restart_schedule_update and args.agent_user is not None:
+        raise ValueError('OS-authenticated cluster restart schedule update is not enabled')
+    if args.allow_server_restart_schedule_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server restart schedule update requires loopback bind')
+    if args.allow_server_restart_schedule_update and args.protocol != '16.0':
+        raise ValueError('Web server restart schedule update requires protocol 16.0')
+    if args.allow_server_restart_schedule_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server restart schedule update is not enabled')
+    if args.allow_server_infobases_limit_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server infobases limit update requires loopback bind')
+    if args.allow_server_infobases_limit_update and args.protocol != '16.0':
+        raise ValueError('Web server infobases limit update requires protocol 16.0')
+    if args.allow_server_infobases_limit_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server infobases limit update is not enabled')
+    if args.allow_server_connections_limit_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server connections limit update requires loopback bind')
+    if args.allow_server_connections_limit_update and args.protocol != '16.0':
+        raise ValueError('Web server connections limit update requires protocol 16.0')
+    if args.allow_server_connections_limit_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server connections limit update is not enabled')
+    if args.allow_server_safe_call_memory_limit_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server safe-call memory limit update requires loopback bind')
+    if args.allow_server_safe_call_memory_limit_update and args.protocol != '16.0':
+        raise ValueError('Web server safe-call memory limit update requires protocol 16.0')
+    if args.allow_server_safe_call_memory_limit_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server safe-call memory limit update is not enabled')
+    if args.allow_server_critical_total_memory_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server critical total memory update requires loopback bind')
+    if args.allow_server_critical_total_memory_update and args.protocol != '16.0':
+        raise ValueError('Web server critical total memory update requires protocol 16.0')
+    if args.allow_server_critical_total_memory_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server critical total memory update is not enabled')
+    if args.allow_server_temporary_total_memory_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server temporary allowed total memory update requires loopback bind')
+    if args.allow_server_temporary_total_memory_update and args.protocol != '16.0':
+        raise ValueError('Web server temporary allowed total memory update requires protocol 16.0')
+    if args.allow_server_temporary_total_memory_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server temporary allowed total memory update is not enabled')
+    if args.allow_server_temporary_memory_time_limit_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server temporary memory time limit update requires loopback bind')
+    if args.allow_server_temporary_memory_time_limit_update and args.protocol != '16.0':
+        raise ValueError('Web server temporary memory time limit update requires protocol 16.0')
+    if args.allow_server_temporary_memory_time_limit_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server temporary memory time limit update is not enabled')
+    if args.allow_server_spn_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server SPN update requires loopback bind')
+    if args.allow_server_spn_update and args.protocol != '16.0':
+        raise ValueError('Web server SPN update requires protocol 16.0')
+    if args.allow_server_spn_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server SPN update is not enabled')
+    if args.allow_server_dedicate_managers_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server dedicated managers update requires loopback bind')
+    if args.allow_server_dedicate_managers_update and args.protocol != '16.0':
+        raise ValueError('Web server dedicated managers update requires protocol 16.0')
+    if args.allow_server_dedicate_managers_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server dedicated managers update is not enabled')
+    if args.allow_server_port_ranges_update and args.host not in ('127.0.0.1', '::1', 'localhost'):
+        raise ValueError('Web server port ranges update requires loopback bind')
+    if args.allow_server_port_ranges_update and args.protocol != '16.0':
+        raise ValueError('Web server port ranges update requires protocol 16.0')
+    if args.allow_server_port_ranges_update and args.cluster_user is not None:
+        raise ValueError('OS-authenticated server port ranges update is not enabled')
+    for name in (args.agent_user, args.cluster_user):
+        if name is not None and (not name or '\x00' in name or len(name.encode('utf-8')) > 1024):
+            raise ValueError('Invalid administrator name')
+    if args.workspace and (args.host not in ('127.0.0.1', '::1', 'localhost') or
+                           any(value for name, value in vars(args).items()
+                               if name.startswith('allow_')) or
+                           args.agent_user is not None or args.cluster_user is not None):
+        raise ValueError('RAS workspace requires loopback and read-only unauthenticated mode')
+    factory = lambda: RacClient(args.ras_host, args.ras_port, args.protocol,
+                                agent_user=args.agent_user, cluster_user=args.cluster_user)
+    app = (create_app(factory, allow_process_turn_off=args.allow_process_turn_off,
+                      allow_cluster_remove=args.allow_cluster_remove,
+                      allow_cluster_insert=args.allow_cluster_insert,
+                      allow_agent_admin_register=args.allow_agent_admin_register,
+                      allow_agent_admin_remove=args.allow_agent_admin_remove,
+                      allow_cluster_admin_register=args.allow_cluster_admin_register,
+                      allow_cluster_admin_remove=args.allow_cluster_admin_remove,
+                      allow_rule_apply=args.allow_rule_apply,
+                      allow_service_settings_apply=args.allow_service_settings_apply,
+                      allow_service_setting_remove=args.allow_service_setting_remove,
+                      allow_service_setting_update=args.allow_service_setting_update,
+                      allow_service_setting_insert=args.allow_service_setting_insert,
+                      allow_cluster_name_update=args.allow_cluster_name_update,
+                      allow_cluster_expiration_timeout_update=args.allow_cluster_expiration_timeout_update,
+                      allow_cluster_security_level_update=args.allow_cluster_security_level_update,
+                      allow_cluster_session_fault_tolerance_level_update=args.allow_cluster_session_fault_tolerance_level_update,
+                      allow_cluster_load_balancing_mode_update=args.allow_cluster_load_balancing_mode_update,
+                      allow_cluster_kill_problem_processes_update=args.allow_cluster_kill_problem_processes_update,
+                      allow_cluster_kill_by_memory_with_dump_update=args.allow_cluster_kill_by_memory_with_dump_update,
+                      allow_cluster_audit_update=args.allow_cluster_audit_update,
+                      allow_cluster_ping_update=args.allow_cluster_ping_update,
+                      allow_cluster_restart_schedule_update=args.allow_cluster_restart_schedule_update,
+                      allow_server_restart_schedule_update=args.allow_server_restart_schedule_update,
+                      allow_server_infobases_limit_update=args.allow_server_infobases_limit_update,
+                      allow_server_connections_limit_update=args.allow_server_connections_limit_update,
+                      allow_server_safe_call_memory_limit_update=args.allow_server_safe_call_memory_limit_update,
+                      allow_server_critical_total_memory_update=args.allow_server_critical_total_memory_update,
+                      allow_server_temporary_total_memory_update=args.allow_server_temporary_total_memory_update,
+                      allow_server_temporary_memory_time_limit_update=args.allow_server_temporary_memory_time_limit_update,
+                      allow_server_spn_update=args.allow_server_spn_update,
+                      allow_server_dedicate_managers_update=args.allow_server_dedicate_managers_update,
+                      allow_server_port_ranges_update=args.allow_server_port_ranges_update,
+                      csrf_token=secrets.token_urlsafe(32))
+           if (args.allow_process_turn_off or args.allow_cluster_remove or args.allow_cluster_insert or
+               args.allow_agent_admin_register or args.allow_agent_admin_remove or
+               args.allow_cluster_admin_register or args.allow_cluster_admin_remove or
+               args.allow_rule_apply or args.allow_service_settings_apply or
+               args.allow_service_setting_remove or args.allow_service_setting_update or
+               args.allow_service_setting_insert or
+               args.allow_cluster_name_update or
+               args.allow_cluster_expiration_timeout_update or args.allow_cluster_security_level_update or
+               args.allow_cluster_session_fault_tolerance_level_update or
+               args.allow_cluster_load_balancing_mode_update or
+               args.allow_cluster_kill_problem_processes_update or
+               args.allow_cluster_kill_by_memory_with_dump_update or
+               args.allow_cluster_audit_update or
+               args.allow_cluster_ping_update or args.allow_cluster_restart_schedule_update or
+               args.allow_server_restart_schedule_update or args.allow_server_infobases_limit_update or
+               args.allow_server_connections_limit_update or args.allow_server_safe_call_memory_limit_update or
+               args.allow_server_critical_total_memory_update or args.allow_server_temporary_total_memory_update or
+               args.allow_server_temporary_memory_time_limit_update or args.allow_server_spn_update or
+               args.allow_server_dedicate_managers_update or args.allow_server_port_ranges_update)
+           else create_app(factory))
+    if args.workspace:
+        app = create_workspace_app(workspace_endpoints,
+                                   csrf_token=secrets.token_urlsafe(32))
+    with make_server(args.host, args.port, app) as server:
+        server.serve_forever()
+
+
+if __name__ == '__main__':
+    main()