1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
import json
from hvac import utils
from hvac.api.system_backend.system_backend_mixin import SystemBackendMixin
class Policy(SystemBackendMixin):
def list_policies(self):
"""List all configured policies.
Supported methods:
GET: /sys/policy. Produces: 200 application/json
:return: The JSON response of the request.
:rtype: dict
"""
api_path = "/v1/sys/policy"
return self._adapter.get(
url=api_path,
)
def read_policy(self, name):
"""Retrieve the policy body for the named policy.
Supported methods:
GET: /sys/policy/{name}. Produces: 200 application/json
:param name: The name of the policy to retrieve.
:type name: str | unicode
:return: The response of the request
:rtype: dict
"""
api_path = utils.format_url("/v1/sys/policy/{name}", name=name)
return self._adapter.get(
url=api_path,
)
def create_or_update_policy(self, name, policy, pretty_print=True):
"""Add a new or update an existing policy.
Once a policy is updated, it takes effect immediately to all associated users.
Supported methods:
PUT: /sys/policy/{name}. Produces: 204 (empty body)
:param name: Specifies the name of the policy to create.
:type name: str | unicode
:param policy: Specifies the policy document.
:type policy: str | unicode | dict
:param pretty_print: If True, and provided a dict for the policy argument, send the policy JSON to Vault with
"pretty" formatting.
:type pretty_print: bool
:return: The response of the request.
:rtype: requests.Response
"""
if isinstance(policy, dict):
if pretty_print:
policy = json.dumps(policy, indent=4, sort_keys=True)
else:
policy = json.dumps(policy)
params = {
"policy": policy,
}
api_path = utils.format_url("/v1/sys/policy/{name}", name=name)
return self._adapter.put(
url=api_path,
json=params,
)
def delete_policy(self, name):
"""Delete the policy with the given name.
This will immediately affect all users associated with this policy.
Supported methods:
DELETE: /sys/policy/{name}. Produces: 204 (empty body)
:param name: Specifies the name of the policy to delete.
:type name: str | unicode
:return: The response of the request.
:rtype: requests.Response
"""
api_path = utils.format_url("/v1/sys/policy/{name}", name=name)
return self._adapter.delete(
url=api_path,
)
|
