tyler.durden
/
centreon-plugins
mirror of https://github.com/centreon/centreon-plugins.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

(plugin) cloud::aws::custom::awscli - avoid commenting third party code (#4040) 

* Provide --no-verify-ssl flag for some third-party hosted AWS resources

* Without muffle

* Without muffle and with a brain

* With extra info

* Use env variable to mute python warning about https

* (plugin) cloud::aws::custom::awscli - avoid commenting third party code

* + "better" way
This commit is contained in:
Simon Bomm 2022-11-07 16:14:31 +01:00 committed by GitHub
parent 9397c01609
commit d2d51f99d2
1 changed files with 24 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

62
centreon-plugins/cloud/aws/custom/awscli.pm
View File

@ -216,7 +216,7 @@ sub cloudwatch_get_metrics_set_cmd {
$cmd_options .= " 'Name=$entry->{Name},Value=$entry->{Value}'";
}
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -270,7 +270,7 @@ sub discovery_set_cmd {
my $cmd_options = $options{service} . " " . $options{command} . " --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -291,7 +291,7 @@ sub cloudwatch_get_alarms_set_cmd {
my $cmd_options = "cloudwatch describe-alarms --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -325,8 +325,8 @@ sub cloudwatch_list_metrics_set_cmd {
$cmd_options .= " --namespace $options{namespace}" if (defined($options{namespace}));
$cmd_options .= " --metric-name $options{metric}" if (defined($options{metric}));
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -346,7 +346,7 @@ sub cloudwatchlogs_describe_log_groups_set_cmd {
my $cmd_options = "logs describe-log-groups --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -374,7 +374,7 @@ sub cloudwatchlogs_filter_log_events_set_cmd {
}
}
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -395,7 +395,7 @@ sub ebs_list_volumes_set_cmd {
my $cmd_options = "ec2 describe-volumes --no-dry-run --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -432,7 +432,7 @@ sub ec2_get_instances_status_set_cmd {
my $cmd_options = "ec2 describe-instance-status --include-all-instances --no-dry-run --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -462,7 +462,7 @@ sub ec2spot_get_active_instances_set_cmd {
my $cmd_options = "ec2 describe-spot-fleet-instances --no-dry-run --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --spot-fleet-request-id " . $options{spot_fleet_request_id};
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -492,7 +492,7 @@ sub ec2spot_list_fleet_requests_set_cmd {
my $cmd_options = "ec2 describe-spot-fleet-requests --no-dry-run --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -522,7 +522,7 @@ sub ec2_list_resources_set_cmd {
my $cmd_options = "ec2 describe-instances --no-dry-run --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -591,7 +591,7 @@ sub asg_get_resources_set_cmd {
my $cmd_options = "autoscaling describe-auto-scaling-groups --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -612,7 +612,7 @@ sub rds_get_instances_status_set_cmd {
my $cmd_options = "rds describe-db-instances --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -638,7 +638,7 @@ sub rds_list_instances_set_cmd {
my $cmd_options = "rds describe-db-instances --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -671,7 +671,7 @@ sub rds_list_clusters_set_cmd {
my $cmd_options = "rds describe-db-clusters --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -703,7 +703,7 @@ sub vpn_list_connections_set_cmd {
my $cmd_options = "ec2 describe-vpn-connections --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -748,7 +748,7 @@ sub health_describe_events_set_cmd {
$cmd_options .= " --filter '$filter'" if ($filter ne '');
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -776,7 +776,7 @@ sub health_describe_affected_entities_set_cmd {
$cmd_options .= " --filter '$filter'" if ($filter ne '');
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -801,7 +801,7 @@ sub sqs_list_queues_set_cmd {
my $cmd_options = "sqs list-queues --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -822,7 +822,7 @@ sub sns_list_topics_set_cmd {
my $cmd_options = "sns list-topics --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -847,7 +847,7 @@ sub tgw_list_gateways_set_cmd {
my $cmd_options = "ec2 describe-transit-gateways --region $self->{option_results}->{region} --output json";
$cmd_options .= " --endpoint-url $self->{endpoint_url}" if (defined($self->{endpoint_url}) && $self->{endpoint_url} ne '');
$cmd_options .= " --no-verify-ssl" if (defined($self->{option_results}->{skip_ssl_check}));
$cmd_options .= " --no-verify-ssl 2>/dev/null" if (defined($self->{option_results}->{skip_ssl_check}));
return $cmd_options;
}
@ -952,23 +952,9 @@ Proxy URL if any
=item B<--skip-ssl-check>
Avoid certificate issuer verification. Useful when AWS resources are hosted by a third-party like Dell.
Avoid certificate issuer verification. Useful when AWS resources are hosted by a third-party.
Need dirty hack that require commenting some code in the method _validate_conn from /usr/lib/python3/dist-packages/urllib3/connectionpool.py
Comment the warning displayed:
# if not conn.is_verified:
# warnings.warn(
# (
# "Unverified HTTPS request is being made to host '%s'. "
# "Adding certificate verification is strongly advised. See: "
# "https://urllib3.readthedocs.io/en/latest/advanced-usage.html"
# "#ssl-warnings" % conn.host
# ),
# InsecureRequestWarning,
# )
Ref https://github.com/aws/aws-cli/issues/7375
Note that it strips all stderr from the command result. Will be enhanced someday. Debug will only display CLI instead of evreything.
=back