From 4cc4641309a6b4a8405ea08122bb31544b5c52a0 Mon Sep 17 00:00:00 2001 From: Nam Nguyen Hoai Date: Thu, 31 Aug 2017 08:53:38 +0700 Subject: [PATCH] Implement OVO for Barbican [1] This patch set is to create a Base class OVO and implement some model classes like below: - Secret - EncryptedDatum - Kekdatum - SecretStoreMetadatum - SecretUserMetadatum - SecretACL - SecretACLUser - SecretStores - Project - TransportKey Change-Id: I4bbc957a59ca7942a73f29fbf4f10ef6e17957bc Co-Authored-By: Kien Nguyen Partial Implements: blueprint rolling-upgrade --- barbican/objects/encrypted_datum.py | 39 +++++ barbican/objects/kekdatum.py | 46 ++++++ barbican/objects/project.py | 38 +++++ barbican/objects/secret.py | 80 ++++++++++ barbican/objects/secret_acl.py | 169 +++++++++++++++++++++ barbican/objects/secret_acl_user.py | 46 ++++++ barbican/objects/secret_store_metadatum.py | 59 +++++++ barbican/objects/secret_stores.py | 41 +++++ barbican/objects/secret_user_metadatum.py | 49 ++++++ barbican/objects/transport_key.py | 61 ++++++++ 10 files changed, 628 insertions(+) create mode 100644 barbican/objects/encrypted_datum.py create mode 100644 barbican/objects/kekdatum.py create mode 100644 barbican/objects/project.py create mode 100644 barbican/objects/secret.py create mode 100644 barbican/objects/secret_acl.py create mode 100644 barbican/objects/secret_acl_user.py create mode 100644 barbican/objects/secret_store_metadatum.py create mode 100644 barbican/objects/secret_stores.py create mode 100644 barbican/objects/secret_user_metadatum.py create mode 100644 barbican/objects/transport_key.py diff --git a/barbican/objects/encrypted_datum.py b/barbican/objects/encrypted_datum.py new file mode 100644 index 000000000..d0499df2c --- /dev/null +++ b/barbican/objects/encrypted_datum.py @@ -0,0 +1,39 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_versionedobjects import base as object_base + +from barbican.model import models +from barbican.model import repositories as repo +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class EncryptedDatum(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + + fields = { + 'content_type': fields.StringField(nullable=True, default=None), + 'secret_id': fields.StringField(), + 'kek_id': fields.StringField(), + 'cypher_text': fields.StringField(nullable=True, default=None), + 'kek_meta_extended': fields.StringField(nullable=True, default=None), + 'kek_meta_project': fields.ObjectField('KEKDatum', + nullable=True, default=None), + 'status': fields.StringField(nullable=True, default=base.States.ACTIVE) + } + + db_model = models.EncryptedDatum + db_repo = repo.get_encrypted_datum_repository() + synthetic_fields = ['kek_meta_project'] diff --git a/barbican/objects/kekdatum.py b/barbican/objects/kekdatum.py new file mode 100644 index 000000000..72a235505 --- /dev/null +++ b/barbican/objects/kekdatum.py @@ -0,0 +1,46 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_versionedobjects import base as object_base + +from barbican.model import models +from barbican.model import repositories as repo +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class KEKDatum(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + + fields = { + 'plugin_name': fields.StringField(nullable=True, default=None), + 'kek_label': fields.StringField(nullable=True, default=None), + 'project_id': fields.StringField(nullable=True, default=None), + 'active': fields.BooleanField(default=True), + 'bind_completed': fields.BooleanField(default=False), + 'algorithm': fields.StringField(nullable=True, default=None), + 'bit_length': fields.IntegerField(nullable=True, default=None), + 'mode': fields.StringField(nullable=True, default=None), + 'plugin_meta': fields.StringField(nullable=True, default=None) + } + + db_model = models.KEKDatum + db_repo = repo.get_kek_datum_repository() + + @classmethod + def find_or_create_kek_datum(cls, project, plugin_name, + suppress_exception=False, session=None): + kek_datum_db = cls.db_repo.find_or_create_kek_datum( + project, plugin_name, suppress_exception, session) + return cls()._from_db_object(kek_datum_db) diff --git a/barbican/objects/project.py b/barbican/objects/project.py new file mode 100644 index 000000000..9ff36eba6 --- /dev/null +++ b/barbican/objects/project.py @@ -0,0 +1,38 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_versionedobjects import base as object_base + +from barbican.model import models +from barbican.model import repositories as repo +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class Project(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + + fields = { + 'external_id': fields.StringField(nullable=True, default=None), + } + + db_model = models.Project + db_repo = repo.get_project_repository() + + @classmethod + def find_by_external_project_id(cls, external_project_id, + suppress_exception=False, session=None): + project_db = cls.db_repo.find_by_external_project_id( + external_project_id, suppress_exception, session) + return cls()._from_db_object(project_db) diff --git a/barbican/objects/secret.py b/barbican/objects/secret.py new file mode 100644 index 000000000..d5069d1b7 --- /dev/null +++ b/barbican/objects/secret.py @@ -0,0 +1,80 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_versionedobjects import base as object_base + +from barbican.common import utils +from barbican.model import models +from barbican.model import repositories as repo +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class Secret(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + """This class represents Secret object""" + + fields = { + 'name': fields.StringField(nullable=True), + 'secret_type': fields.StringField(nullable=True, + default=utils.SECRET_TYPE_OPAQUE), + 'expiration': fields.DateTimeField(nullable=True, default=None), + 'algorithm': fields.StringField(nullable=True, default=None), + 'bit_length': fields.IntegerField(nullable=True, default=None), + 'mode': fields.StringField(nullable=True, default=None), + 'creator_id': fields.StringField(nullable=True, default=None), + 'project_id': fields.StringField(nullable=True, default=None), + 'encrypted_data': fields.ListOfObjectsField('EncryptedDatum', + default=list(), + nullable=True), + 'secret_acls': fields.ListOfObjectsField('SecretACL', + default=list(), + nullable=True), + 'secret_store_metadata': + fields.DictOfObjectsField('SecretStoreMetadatum', default=dict(), + nullable=True), + 'secret_user_metadata': fields.DictOfObjectsField( + 'SecretUserMetadatum', + default=dict(), + nullable=True), + 'status': fields.StringField(nullable=True, default=base.States.ACTIVE) + } + + db_model = models.Secret + db_repo = repo.get_secret_repository() + synthetic_fields = ['encrypted_data', 'secret_acls', + 'secret_store_metadata', 'secret_user_metadata'] + + @classmethod + def get_secret_list(cls, external_project_id, + offset_arg=None, limit_arg=None, + name=None, alg=None, mode=None, + bits=0, secret_type=None, suppress_exception=False, + session=None, acl_only=None, user_id=None, + created=None, updated=None, expiration=None, + sort=None): + secrets_db, offset, limit, total = cls.db_repo.get_secret_list( + external_project_id, offset_arg, limit_arg, name, alg, mode, bits, + secret_type, suppress_exception, session, acl_only, user_id, + created, updated, expiration, sort) + secrets_object = [cls()._from_db_object(secret_db) + for secret_db in secrets_db] + return secrets_object, offset, limit, total + + @classmethod + def get_secret_by_id(cls, entity_id, suppress_exception=False, + session=None): + secret_db = cls.db_repo.get_secret_by_id( + entity_id, suppress_exception, session) + return cls()._from_db_object(secret_db) diff --git a/barbican/objects/secret_acl.py b/barbican/objects/secret_acl.py new file mode 100644 index 000000000..b9ca48387 --- /dev/null +++ b/barbican/objects/secret_acl.py @@ -0,0 +1,169 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_utils import timeutils +from oslo_versionedobjects import base as object_base + +from barbican.common import exception +from barbican import i18n as u +from barbican.model import models +from barbican.model import repositories as repos +from barbican.objects import base +from barbican.objects import fields +from barbican.objects import secret_acl_user + + +@object_base.VersionedObjectRegistry.register +class SecretACL(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + fields = { + 'secret_id': fields.StringField(), + 'operation': fields.StringField(), + 'project_access': fields.BooleanField(default=True), + 'acl_users': fields.ListOfObjectsField('SecretACLUser', + default=list()), + 'status': fields.StringField(nullable=True, default=base.States.ACTIVE) + } + + db_model = models.SecretACL + db_repo = repos.get_secret_acl_repository() + synthetic_fields = ['acl_users'] + + def _validate_fields(self, change_fields): + msg = u._("Must supply non-None {0} argument for SecretACL entry.") + + if change_fields.get('secret_id') is None: + raise exception.MissingArgumentError(msg.format("secret_id")) + + if change_fields.get('operation') is None: + raise exception.MissingArgumentError(msg.format("operation")) + + def _get_db_entity(self, user_ids=None): + return self.db_model(user_ids=user_ids) + + def create(self, session=None, user_ids=None): + change_fields = self._get_changed_persistent_fields() + self._validate_fields(change_fields) + db_entity = self._get_db_entity(user_ids=user_ids) + db_entity.update(change_fields) + db_entity = self.db_repo.create_from(db_entity, session=session) + self._from_db_object(db_entity) + + def delete(self, session): + entity_id = self.id + self.db_repo.delete_entity_by_id( + entity_id=entity_id, external_project_id=None, session=session) + + @classmethod + def get_by_secret_id(cls, secret_id, session=None): + secret_acls_db = cls.db_repo.get_by_secret_id( + secret_id, session=session) + secret_acls_obj = [cls()._from_db_object(secret_acl_db) + for secret_acl_db in secret_acls_db] + return secret_acls_obj + + @classmethod + def create_or_replace_from_model(cls, secret, secret_acl, + user_ids=None, session=None): + """Create or replace Secret and SecretACL + + :param secret: an instance of Secret model + :param secret_acl: an instance of SecretACL object + :param user_ids: + :param session: a session to connect with database + + It is used during converting from model to OVO. It will be removed + after Secret resource is implemented OVO. + """ + secret.updated_at = timeutils.utcnow() + secret_acl.updated_at = timeutils.utcnow() + secret.save(session=session) + if secret_acl.id: + secret_acl.save(session=session) + else: + secret_acl.create(session=session) + + cls._create_or_replace_acl_users(secret_acl=secret_acl, + user_ids=user_ids, + session=session) + + @classmethod + def _create_or_replace_acl_users(cls, secret_acl, user_ids, session=None): + """Create or replace acl_user + + :param secret_acl: an instance of OVO + :param user_ids: id of users + :param session: a session to connect with database + """ + + if user_ids is None: + return + + user_ids = set(user_ids) + + now = timeutils.utcnow() + secret_acl.updated_at = now + + for acl_user in secret_acl.acl_users: + if acl_user.user_id in user_ids: # input user_id already exists + acl_user.updated_at = now + acl_user.save(session=session) + user_ids.remove(acl_user.user_id) + else: + acl_user.delete(session=session) + + for user_id in user_ids: + acl_user = secret_acl_user.SecretACLUser(acl_id=secret_acl.id, + user_id=user_id) + acl_user.create(session=session) + + if secret_acl.id: + secret_acl.save(session=session) + else: + secret_acl.create(session=session) + + @classmethod + def create_or_replace_from(cls, secret, secret_acl, user_ids=None): + # TODO(namnh): + # I will update this function after Secret resource is implemented. + pass + + @classmethod + def delete_acls_for_secret_model(cls, secret, session=None): + """Delete acl in Secret + + :param secret: an instance of Secret model + :param session: a session to connect with database + + Used during converting Model to OVO. It will be removed in the near + future. + """ + cls.db_repo.delete_acls_for_secret(secret, session) + + @classmethod + def delete_acls_for_secret(cls, secret, session=None): + """Delete acl in a secret. + + :param secret: an instance of Secret OVO + :param session: a session to connect with database + + This function will be using after Secret resource is implemented OVO. + """ + session = cls.get_session(session=session) + + for entity in secret.secret_acls: + entity.delete(session=session) + + @classmethod + def get_count(cls, secret_id, session=None): + return cls.db_repo.get_count(secret_id, session=session) diff --git a/barbican/objects/secret_acl_user.py b/barbican/objects/secret_acl_user.py new file mode 100644 index 000000000..e07f8e3ec --- /dev/null +++ b/barbican/objects/secret_acl_user.py @@ -0,0 +1,46 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_versionedobjects import base as object_base + +from barbican.common import exception +from barbican import i18n as u +from barbican.model import models +from barbican.model import repositories as repos +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class SecretACLUser(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + + fields = { + 'acl_id': fields.StringField(), + 'user_id': fields.StringField(), + 'status': fields.StringField(nullable=True, default=base.States.ACTIVE) + } + + db_model = models.SecretACLUser + db_repo = repos.get_secret_acl_user_repository() + + def _validate_fields(self, change_fields): + if change_fields.get('user_id') is None: + msg = u._( + "Must supply non-None {0} argument for SecretACLUser entry.") + raise exception.MissingArgumentError(msg.format("user_id")) + + def delete(self, session): + entity_id = self.id + self.db_repo.delete_entity_by_id( + entity_id=entity_id, external_project_id=None, session=session) diff --git a/barbican/objects/secret_store_metadatum.py b/barbican/objects/secret_store_metadatum.py new file mode 100644 index 000000000..48241a84c --- /dev/null +++ b/barbican/objects/secret_store_metadatum.py @@ -0,0 +1,59 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_utils import timeutils +from oslo_versionedobjects import base as object_base + +from barbican.common import exception +from barbican import i18n as u +from barbican.model import models +from barbican.model import repositories as repo +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class SecretStoreMetadatum(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + fields = { + 'key': fields.StringField(), + 'value': fields.StringField(), + 'secret_id': fields.StringField() + } + + db_model = models.SecretStoreMetadatum + db_repo = repo.get_secret_meta_repository() + + def _validate_fields(self, change_fields): + + msg = u._("Must supply non-None {0} argument " + "for SecretStoreMetadatum entry.") + + if change_fields.get('key') is None: + raise exception.MissingArgumentError(msg.format('key')) + if change_fields.get('value') is None: + raise exception.MissingArgumentError(msg.format('value')) + + @classmethod + def save(cls, metadata, secret_obj): + """Saves the specified metadata for the secret.""" + now = timeutils.utcnow() + for k, v in metadata.items(): + meta_obj = cls(key=k, value=v) + meta_obj.updated_at = now + meta_obj.secret_id = secret_obj.id + meta_obj.create() + + @classmethod + def get_metadata_for_secret(cls, secret_id): + return cls.db_repo.get_metadata_for_secret(secret_id) diff --git a/barbican/objects/secret_stores.py b/barbican/objects/secret_stores.py new file mode 100644 index 000000000..f71371d09 --- /dev/null +++ b/barbican/objects/secret_stores.py @@ -0,0 +1,41 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_versionedobjects import base as object_base + +from barbican.model import models +from barbican.model import repositories as repos +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class SecretStores(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + fields = { + 'store_plugin': fields.StringField(), + 'crypto_plugin': fields.StringField(nullable=True), + 'global_default': fields.BooleanField(default=False), + 'name': fields.StringField(), + 'status': fields.StringField(nullable=True, default=base.States.ACTIVE) + } + + db_model = models.SecretStores + db_repo = repos.get_secret_stores_repository() + + @classmethod + def get_all(cls, session=None): + secret_stores_db = cls.db_repo.get_all(session) + secret_stores_obj = [cls()._from_db_object(secret_store_db) for + secret_store_db in secret_stores_db] + return secret_stores_obj diff --git a/barbican/objects/secret_user_metadatum.py b/barbican/objects/secret_user_metadatum.py new file mode 100644 index 000000000..82ea9d5bb --- /dev/null +++ b/barbican/objects/secret_user_metadatum.py @@ -0,0 +1,49 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_versionedobjects import base as object_base + +from barbican.model import models +from barbican.model import repositories as repo +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class SecretUserMetadatum(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + + fields = { + 'key': fields.StringField(), + 'value': fields.StringField(), + 'secret_id': fields.StringField(), + } + + db_model = models.SecretStoreMetadatum + db_repo = repo.get_secret_user_meta_repository() + + @classmethod + def create_replace_user_metadata(cls, secret_id, metadata): + cls.db_repo.create_replace_user_metadata(secret_id, metadata) + + @classmethod + def get_metadata_for_secret(cls, secret_id): + return cls.db_repo.get_metadata_for_secret(secret_id) + + @classmethod + def create_replace_user_metadatum(cls, secret_id, key, value): + cls.db_repo.create_replace_user_metadatum(secret_id, key, value) + + @classmethod + def delete_metadatum(cls, secret_id, key): + cls.db_repo.delete_metadatum(secret_id, key) diff --git a/barbican/objects/transport_key.py b/barbican/objects/transport_key.py new file mode 100644 index 000000000..40e017967 --- /dev/null +++ b/barbican/objects/transport_key.py @@ -0,0 +1,61 @@ +# Copyright 2018 Fujitsu. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +from oslo_versionedobjects import base as object_base + +from barbican.common import exception +from barbican import i18n as u +from barbican.model import models +from barbican.model import repositories as repo +from barbican.objects import base +from barbican.objects import fields + + +@object_base.VersionedObjectRegistry.register +class TransportKey(base.BarbicanObject, base.BarbicanPersistentObject, + object_base.VersionedObjectDictCompat): + fields = { + 'plugin_name': fields.StringField(), + 'transport_key': fields.StringField(), + 'status': fields.StringField(nullable=True, default=base.States.ACTIVE) + } + + db_model = models.TransportKey + db_repo = repo.get_transport_key_repository() + + def _validate_fields(self, change_fields): + msg = u._("Must supply non-None {0} argument for TransportKey entry.") + + if change_fields.get('plugin_name') is None: + raise exception.MissingArgumentError(msg.format("plugin_name")) + + if change_fields.get('transport_key') is None: + raise exception.MissingArgumentError(msg.format("transport_key")) + + @classmethod + def get_by_create_date(cls, plugin_name=None, + offset_arg=None, limit_arg=None, + suppress_exception=False, session=None): + transport_keys_db, offset, limit, total = \ + cls.db_repo.get_by_create_date(plugin_name, offset_arg, limit_arg, + suppress_exception, session) + transport_keys_obj = [cls()._from_db_object(transport_key) + for transport_key in transport_keys_db] + return transport_keys_obj, offset, limit, total + + @classmethod + def get_latest_transport_key(cls, plugin_name, suppress_exception=False, + session=None): + transport_key_db = cls.db_repo.get_latest_transport_key( + plugin_name, suppress_exception, session) + return cls()._from_db_object(transport_key_db)