使用fabric 2执行st2命令时出现“401客户端错误：未经授权”

Question

在 Fabric 1.14.0 中，以下代码运行良好

from fabric.api import run, settings, hide
theCmd = 'st2 run core.http url="http://httpbin.org/get"'
user='<my account>'
ss_host='<stackstorm host>'
ss_bast='<stackstorm bastion>'
with settings(user=user, host_string=ss_host, gateway=ss_bast):
    ss_result = run(theCmd)

但是，当我将其切换到fabric2（2.5.0）时，下面的代码不起作用：

from fabric import Connection
theCmd = 'st2 run core.http url="http://httpbin.org/get"'
user='<my account>'
ss_host='<stackstorm host>'
ss_bast='<stackstorm bastion>'
with Connection(host=ss_host, user=user, gateway=Connection(host=ss_bast)) as ss_conn:
    response = ss_conn.run('ls -la', warn=True, hide=True)
    response = ss_conn.run(theCmd)

第一个命令（ls -la）成功，这意味着连接已成功创建，但第二个命令失败并出现以下错误

ERROR: 401 Client Error: Unauthorized
MESSAGE: Unauthorized - One of Token or API key required. for url: http://127.0.0.1:9101/v1/actions/core.http

Traceback (most recent call last):
  File "test/test_ss.py", line 12, in <module>
    response = ss_conn.run(theCmd)
  File "<decorator-gen-3>", line 2, in run
  File "venv/lib/python3.7/site-packages/fabric/connection.py", line 30, in opens
    return method(self, *args, **kwargs)
  File "venv/lib/python3.7/site-packages/fabric/connection.py", line 721, in run
    return self._run(self._remote_runner(), command, **kwargs)
  File "venv/lib/python3.7/site-packages/invoke/context.py", line 101, in _run
    return runner.run(command, **kwargs)
  File "venv/lib/python3.7/site-packages/invoke/runners.py", line 363, in run
    return self._run_body(command, **kwargs)
  File "venv/lib/python3.7/site-packages/invoke/runners.py", line 422, in _run_body
    return self.make_promise() if self._asynchronous else self._finish()
  File "venv/lib/python3.7/site-packages/invoke/runners.py", line 489, in _finish
    raise UnexpectedExit(result)
invoke.exceptions.UnexpectedExit: Encountered a bad command exit code!

Command: 'st2 run core.http url="http://httpbin.org/get"'

Exit code: 1

我错过了什么设置吗？

Answer 1

在fabric 2中，您必须生成令牌并在env中设置ST2_AUTH_TOKEN。然后执行剩下的命令

with Connection(host=ss_host, user=user, gateway=Connection(host=ss_bast), inline_ssh_env=True) as ss_conn:
    token = ss_conn.run('st2 auth <username> -p <password> -t', hide=True).stdout.strip()
    ss_conn.config.run.env = {"ST2_AUTH_TOKEN": token}