Merge bootstack-ops:rm-juju-bundle-export-mask into bootstack-ops:master

[Joe Guo]

juju-bundle-export-mask.py: rm redundant script

This script seems to be an older version of `juju_export_bundle.py`.
remove it to avoid confusing.

[🤖 Canonical IS Merge Bot (canonical-is-mergebot)]

This merge proposal is being monitored by mergebot. Change the status to Approved to merge.

[Xav Paice (xavpaice)]

+1 let's keep things simple

review: Approve

[🤖 Canonical IS Merge Bot (canonical-is-mergebot)]

Change successfully merged at revision 2c6ef760296a91c213a3ff60c1a445a1cd952868

diff --git a/bootstack-ops/juju-bundle-export-mask.py b/bootstack-ops/juju-bundle-export-mask.py
deleted file mode 100755
index 0df53e1..0000000
--- a/bootstack-ops/juju-bundle-export-mask.py
+++ /dev/null
@@ -1,126 +0,0 @@
-#!/usr/bin/env python
-
-from __future__ import print_function
-import re
-import sys
-import yaml
-import argparse
-import math
-
-
-MASK_KEYS = '(.*(ssl-public-key|ssl[_-](ca|cert|key)|secret|password|pagerduty_key|license-file|registration-key|token|accesskey|private-ppa|(http|https)://.*:.+\@|os-credentials).*)|key'
-
-
-def readbundle(filename):
-    try:
-        mybundle = yaml.load(filename.read())
-    except yaml.YAMLError as exc:
-        print(exc)
-
-    return mybundle
-
-
-def mask_keys_in_dict(mydict, mask, level='ROOT'):
-    for k, v in mydict.iteritems():
-        if isinstance(v, dict):
-            mask_keys_in_dict(v, mask, level=('{}:{}'.format(level, k)))
-        else:
-            result = mask.match(k)
-            if result is not None:
-                mydict[k] = 'THIS_VALUE_IS_MASKED_FOR_SECURITY'
-            elif type(v) in (str,):
-                result = mask.match(v)
-                if result is not None:
-                    print('WARNING! Masked keyword "{}" found in value for {}'.format(result.groups()[1], level))
-                    print('Check output file, may not be secure.')
-                    print()
-        if v == 'truetrue':
-            mydict[k] = 'true'
-        elif v == 'falsetrue':
-            mydict[k] = 'false'
-
-
-def parse_args():
-    parser = argparse.ArgumentParser(
-        description='Mask juju bundle export file secrets')
-    parser.add_argument('-i', dest='infile', nargs='?',
-                        type=argparse.FileType('r'), default=sys.stdin)
-    parser.add_argument('-o', dest='outfile', nargs='?',
-                        type=argparse.FileType('w'), default=sys.stdout)
-
-    result = parser.parse_args(sys.argv[1:])
-    return result
-
-
-def shannon_entropy(data, iterator):
-    """
-    Borrowed from http://blog.dkbza.org/2007/05/scanning-data-for-entropy-anomalies.html
-    """
-    if not data:
-        return 0
-    entropy = 0
-    for x in iterator:
-        p_x = float(data.count(x)) / len(data)
-        if p_x > 0:
-            entropy += - p_x * math.log(p_x, 2)
-    return entropy
-
-
-def get_strings_of_set(word, char_set, threshold=8):
-    count = 0
-    letters = ""
-    strings = []
-    for char in word:
-        if char in char_set:
-            letters += char
-            count += 1
-        else:
-            if count > threshold:
-                strings.append(letters)
-            letters = ""
-            count = 0
-    if count > threshold:
-        strings.append(letters)
-    return strings
-
-
-def check_for_entropy_in_dict(bundle):
-    lines = yaml.dump(bundle).split('\n')
-    stringsFound = []
-    entropy_found = False
-    BASE64_CHARS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="
-    HEX_CHARS = "1234567890abcdefABCDEF"
-    for line in lines:
-        for word in line.split():
-            base64_strings = get_strings_of_set(word, BASE64_CHARS)
-            hex_strings = get_strings_of_set(word, HEX_CHARS)
-            for string in base64_strings:
-                b64Entropy = shannon_entropy(string, BASE64_CHARS)
-                if b64Entropy > 3.8:
-                    stringsFound.append(string)
-                    entropy_found = True
-                    print('WARNING! Entropy found in string "{}"'.format(string))
-            for string in hex_strings:
-                hexEntropy = shannon_entropy(string, HEX_CHARS)
-                if hexEntropy > 3:
-                    stringsFound.append(string)
-                    entropy_found = True
-                    print('WARNING! Entropy found in string "{}"'.format(string))
-
-    if len(stringsFound) != 0:
-        print('ERROR!!! Check output file for entropy warnings, may not be secure.')
-
-    return entropy_found
-
-
-def main():
-    args = parse_args()
-    bundle = readbundle(args.infile)
-    mask_regex = re.compile(MASK_KEYS)
-    mask_keys_in_dict(bundle, mask_regex)
-    check_for_entropy_in_dict(bundle)
-    print(yaml.dump(bundle, default_flow_style=False), file=args.outfile)
-
-
-if __name__ == "__main__":
-    main()