_states/jenkins_approval.py

import logging
logger = logging.getLogger(__name__)

approve_signature_groovy = """\
import org.jenkinsci.plugins.scriptsecurity.scripts.ScriptApproval
import org.jenkinsci.plugins.scriptsecurity.scripts.languages.GroovyLanguage
import org.jenkinsci.plugins.scriptsecurity.scripts.ApprovalContext
def signature = '{signature}'
def scriptApproval = ScriptApproval.get()
def approvedSignatures = Arrays.asList(scriptApproval.approvedSignatures)
if(approvedSignatures.contains(signature)){{
    print("EXISTS")
}}else{{
    try{{
        scriptApproval.pendingSignatures.add(new ScriptApproval.PendingSignature(signature, false, ApprovalContext.create()))
        scriptApproval.approveSignature(signature)
        if(Arrays.asList(scriptApproval.approvedSignatures).contains(signature)){{
            print("SUCCESS")
        }}else{{
            print("FAILED")
        }}
    }}catch(e){{
        print(e)
    }}
}}
""" # noqa

deny_signature_groovy = """\
import org.jenkinsci.plugins.scriptsecurity.scripts.ScriptApproval
import org.jenkinsci.plugins.scriptsecurity.scripts.languages.GroovyLanguage
import org.jenkinsci.plugins.scriptsecurity.scripts.ApprovalContext
def signature = '{signature}'
def scriptApproval = ScriptApproval.get()
def approvedSignatures = Arrays.asList(scriptApproval.approvedSignatures)
if(approvedSignatures.contains(signature)){{
    try{{
        scriptApproval.denySignature(signature)
        if(!scriptApproval.approvedSignatures.contains(signature)){{
            print("SUCCESS")
        }}else{{
            print("FAILED")
        }}
    }}catch(e){{
        print(e)
    }}
}}else{{
    print("NOT PRESENT")
}}


"""


def __virtual__():
    '''
    Only load if jenkins_common module exist.
    '''
    if 'jenkins_common.call_groovy_script' not in __salt__:
        return (
            False,
            'The jenkins_approval state module cannot be loaded: '
            'jenkins_common not found')
    return True


def approved(name):
    """
    Jenkins Script approval approve state method

    :param name: signature to approve
    :returns: salt-specified state dict
    """
    test = __opts__['test']  # noqa
    ret = {
        'name': name,
        'changes': {},
        'result': False,
        'comment': '',
    }
    result = False
    if test:
        status = "SUCCESS"
        ret['changes'][name] = status
        ret['comment'] = 'Jenkins script approval config %s %s' % (name, status.lower())
    else:
        call_result = __salt__['jenkins_common.call_groovy_script'](
            approve_signature_groovy, {"signature":name})
        if call_result["code"] == 200 and call_result["msg"] in ["SUCCESS", "EXISTS"]:
            status = call_result["msg"]
            if status == "SUCCESS":
                ret['changes'][name] = status
            ret['comment'] = 'Jenkins script approval config %s %s' % (name, status.lower())
            result = True
        else:
            status = 'FAILED'
            logger.error(
                "Jenkins script approval API call failure: %s", call_result["msg"])
            ret['comment'] = 'Jenkins script approval API call failure: %s' % (call_result[
                                                                           "msg"])
    ret['result'] = None if test else result
    return ret


def denied(name):
    """
    Jenkins Script approval deny state method

    :param name: signature to deny
    :returns: salt-specified state dict
    """
    test = __opts__['test']  # noqa
    ret = {
        'name': name,
        'changes': {},
        'result': False,
        'comment': '',
    }
    result = False
    if test:
        status = "SUCCESS"
        ret['changes'][name] = status
        ret['comment'] = 'Jenkins script approval config %s %s' % (name, status.lower())
    else:
        call_result = __salt__['jenkins_common.call_groovy_script'](
            deny_signature_groovy, {"signature":name})
        if call_result["code"] == 200 and call_result["msg"] in ["SUCCESS", "NOT PRESENT"]:
            status = call_result["msg"]
            if status == "SUCCESS":
                ret['changes'][name] = status
            ret['comment'] = 'Jenkins script approval config %s %s' % (name, status.lower())
            result = True
        else:
            status = 'FAILED'
            logger.error(
                "Jenkins script approval API call failure: %s", call_result["msg"])
            ret['comment'] = 'Jenkins script approval lib API call failure: %s' % (call_result[
                                                                           "msg"])
    ret['result'] = None if test else result
    return ret