Extract module for keystone domain management
This commit is contained in:
Monty Taylor
Matt Martz
parent
b65bd39615
commit
02e91f8897
2 changed files with 123 additions and 577 deletions
|
|
@ -1,577 +0,0 @@
|
|||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
from __builtin__ import False
|
||||
|
||||
DOCUMENTATION = '''
|
||||
---
|
||||
module: keystone_v3
|
||||
version_added: "1.0"
|
||||
short_description: Manage OpenStack Identity (keystone v3) users, tenants and roles
|
||||
description:
|
||||
- Manage users,tenants, roles from OpenStack.
|
||||
requirements: [ python-keystoneclient ]
|
||||
author: Haneef Ali
|
||||
'''
|
||||
|
||||
EXAMPLES = '''
|
||||
# Create a project
|
||||
- keystone_v3: action="create_project" project_name=demo
|
||||
description="Default Tenant" project_domain_name="Default"
|
||||
|
||||
# Create a user
|
||||
- keystone_v3: action="create_user" user_name=demo
|
||||
description="Default User" user_domain_name="Default"
|
||||
|
||||
# Create a domain
|
||||
- keystone_v3: action="create_domain" domain_name=demo
|
||||
description="Default User"
|
||||
|
||||
# Grant admin role to the john user in the demo tenant
|
||||
- keystone_v3: action="grant_project_role" project__name=demo
|
||||
role_name=admin user_name=john user_domain_name=Default
|
||||
project_domain_name=Default
|
||||
'''
|
||||
|
||||
|
||||
from keystoneclient.v3 import client as v3client
|
||||
from keystoneclient.auth.identity import v3
|
||||
from keystoneclient.auth import token_endpoint
|
||||
from keystoneclient import session
|
||||
|
||||
|
||||
def _get_client(auth_url=None, token=None, login_username=None, login_password=None, login_project_name=None,
|
||||
login_project_domain_name=None, login_user_domain_name=None, login_domain_name=None,
|
||||
insecure=True, ca_cert=None):
|
||||
"""Return a ks_client client object"""
|
||||
|
||||
auth_plugin = None
|
||||
if token:
|
||||
auth_plugin = token_endpoint.Token(endpoint=auth_url, token=token)
|
||||
else:
|
||||
auth_plugin = v3.Password(auth_url=auth_url, username=login_username, password=login_password,
|
||||
project_name=login_project_name, project_domain_name=login_project_domain_name,
|
||||
user_domain_name=login_user_domain_name, domain_name=login_domain_name)
|
||||
|
||||
# Force validation if ca_cert is provided
|
||||
if ca_cert:
|
||||
insecure = False
|
||||
auth_session = session.Session(
|
||||
auth=auth_plugin, verify=insecure, cert=ca_cert)
|
||||
return v3client.Client(auth_url=auth_url, session=auth_session)
|
||||
|
||||
|
||||
def _find_domain(ks_client, domain_name=None):
|
||||
domains = ks_client.domains.list(name=domain_name)
|
||||
return domains[0] if len(domains) else None
|
||||
|
||||
|
||||
def _delete_domain(ks_client, domain=None):
|
||||
|
||||
ks_client.domains.update(domain, enabled=False)
|
||||
return ks_client.domains.delete(domain)
|
||||
|
||||
|
||||
def _create_domain(ks_client, domain_name=None, description=None):
|
||||
return ks_client.domains.create(name=domain_name, description=description)
|
||||
|
||||
|
||||
def _find_user(ks_client, domain_name=None, user_name=None):
|
||||
domain = _find_domain(ks_client, domain_name=domain_name)
|
||||
|
||||
if domain:
|
||||
users = ks_client.users.list(domain=domain, name=user_name)
|
||||
if len(users):
|
||||
return users[0]
|
||||
|
||||
|
||||
def _create_user(ks_client, user_name=None, user_password=None, domain_name=None,
|
||||
email=None, description=None):
|
||||
|
||||
domain = _find_domain(ks_client, domain_name)
|
||||
return ks_client.users.create(name=user_name, password=user_password,
|
||||
description=description,
|
||||
email=email, domain=domain)
|
||||
|
||||
|
||||
def _delete_user(ks_client, user=None):
|
||||
ks_client.users.update(user=user, enabled=False)
|
||||
ks_client.users.delete(user=user)
|
||||
|
||||
|
||||
def _find_project(ks_client, domain_name=None, project_name=None):
|
||||
domain = _find_domain(ks_client, domain_name=domain_name)
|
||||
|
||||
if domain:
|
||||
projects = ks_client.projects.list(domain=domain, name=project_name)
|
||||
if len(projects):
|
||||
return projects[0]
|
||||
|
||||
|
||||
def _create_project(ks_client, project_name=None, domain_name=None,
|
||||
description=None):
|
||||
|
||||
domain = _find_domain(ks_client, domain_name)
|
||||
return ks_client.projects.create(name=project_name,
|
||||
description=description,
|
||||
domain=domain)
|
||||
|
||||
|
||||
def _delete_project(ks_client, project=None):
|
||||
ks_client.projects.update(project=project, enabled=False)
|
||||
ks_client.projects.delete(project=project)
|
||||
|
||||
|
||||
def _find_role(ks_client, role_name=None):
|
||||
roles = ks_client.roles.list(name=role_name)
|
||||
return roles[0] if len(roles) else None
|
||||
|
||||
|
||||
def _delete_role(ks_client, role=None):
|
||||
return ks_client.roles.delete(role)
|
||||
|
||||
|
||||
def _create_role(ks_client, role_name=None, description=None):
|
||||
return ks_client.roles.create(name=role_name, description=description)
|
||||
|
||||
|
||||
def _grant_roles(ks_client, role=None, project=None, user=None, domain=None):
|
||||
return ks_client.roles.grant(role=role, project=project, user=user, domain=domain)
|
||||
|
||||
|
||||
def _revoke_roles(ks_client, role=None, project=None, user=None, domain=None):
|
||||
return ks_client.roles.revoke(role=role, project=project, user=user, domain=domain)
|
||||
|
||||
def _find_service(ks_client, service_name=None, service_type=None):
|
||||
services = ks_client.services.list(name=service_name,
|
||||
type=service_type)
|
||||
return services[0] if len(services) else None
|
||||
|
||||
def _create_service(ks_client, service_name=None, service_type=None,
|
||||
description=None):
|
||||
return ks_client.services.create(name=service_name, type=service_type,
|
||||
description=description)
|
||||
|
||||
def _delete_service(ks_client, service_name=None):
|
||||
return ks_client.services.delete(name=service_name)
|
||||
|
||||
def _find_endpoint(ks_client, service=None, interface=None):
|
||||
|
||||
endpoints = ks_client.endpoints.list(service=service, interface=interface)
|
||||
return endpoints[0] if len(endpoints) else None
|
||||
|
||||
def _create_endpoint(ks_client, service=None, url=None,
|
||||
interface=None, region=None):
|
||||
return ks_client.endpoints.create(service=service, url=url,
|
||||
interface=interface, region=region)
|
||||
|
||||
def find_domain(ks_client, domain_name=None):
|
||||
domain = _find_domain(ks_client, domain_name=domain_name)
|
||||
result, domain = (True, domain) if (domain) else (False, None)
|
||||
return result, domain
|
||||
|
||||
|
||||
def create_domain(ks_client, domain_name=None, description=None):
|
||||
|
||||
domain = _find_domain(ks_client, domain_name=domain_name)
|
||||
|
||||
if domain:
|
||||
return (False, domain)
|
||||
|
||||
# Domain with that name doesn't exist
|
||||
domain = _create_domain(
|
||||
ks_client, domain_name=domain_name, description=description)
|
||||
return (True, domain)
|
||||
|
||||
|
||||
def delete_domain(ks_client, domain_name=None):
|
||||
|
||||
domain = _find_domain(ks_client, domain_name=domain_name)
|
||||
|
||||
if domain:
|
||||
_delete_domain(ks_client, domain=domain)
|
||||
return (True, domain)
|
||||
|
||||
# Domain with that name doesn't exist
|
||||
return (False, None)
|
||||
|
||||
|
||||
def find_user(ks_client, user_name=None, domain_name=None):
|
||||
user = _find_user(ks_client, domain_name=domain_name, user_name=user_name)
|
||||
result, user = (True, user) if user else (False, None)
|
||||
return result, user
|
||||
|
||||
|
||||
def create_user(ks_client, user_name=None, user_password=None, domain_name=None,
|
||||
email=None, description=None):
|
||||
|
||||
user = _find_user(ks_client, user_name=user_name, domain_name=domain_name)
|
||||
|
||||
if user:
|
||||
return (False, user)
|
||||
|
||||
# User with that name doesn't exist
|
||||
user = _create_user(ks_client, user_name=user_name,
|
||||
user_password=user_password, domain_name=domain_name,
|
||||
email=email, description=description)
|
||||
return (True, user)
|
||||
|
||||
|
||||
def delete_user(ks_client, user_name=None, domain_name=None):
|
||||
|
||||
user = _find_user(ks_client, domain_name=domain_name, user_name=user_name)
|
||||
|
||||
if user:
|
||||
_delete_user(ks_client, user=user)
|
||||
return (True, user)
|
||||
|
||||
# User with that name doesn't exist
|
||||
return (False, None)
|
||||
|
||||
|
||||
def find_project(ks_client, project_name=None, domain_name=None):
|
||||
project = _find_project(
|
||||
ks_client, domain_name=domain_name, project_name=project_name)
|
||||
result, project = (True, project) if project else (False, None)
|
||||
return result, project
|
||||
|
||||
|
||||
def create_project(ks_client, project_name=None, domain_name=None,
|
||||
description=None):
|
||||
|
||||
project = _find_project(
|
||||
ks_client, project_name=project_name, domain_name=domain_name)
|
||||
|
||||
if project:
|
||||
return (False, project)
|
||||
|
||||
# Project with that name doesn't exist
|
||||
project = _create_project(ks_client, project_name=project_name,
|
||||
domain_name=domain_name, description=description)
|
||||
return (True, project)
|
||||
|
||||
|
||||
def delete_project(ks_client, project_name=None, domain_name=None):
|
||||
|
||||
project = _find_project(
|
||||
ks_client, domain_name=domain_name, project_name=project_name)
|
||||
|
||||
if project:
|
||||
_delete_project(ks_client, project=project)
|
||||
return (True, project)
|
||||
|
||||
# Project with that name doesn't exist
|
||||
return (False, None)
|
||||
|
||||
|
||||
def find_role(ks_client, role_name=None):
|
||||
role = _find_role(ks_client, role_name=role_name)
|
||||
result, role = (True, role) if (role) else (False, None)
|
||||
return result, role
|
||||
|
||||
|
||||
def create_role(ks_client, role_name=None, description=None):
|
||||
|
||||
role = _find_role(ks_client, role_name=role_name)
|
||||
|
||||
if role:
|
||||
return (False, role)
|
||||
|
||||
# role with that name doesn't exist
|
||||
role = _create_role(
|
||||
ks_client, role_name=role_name, description=description)
|
||||
return (True, role)
|
||||
|
||||
|
||||
def delete_role(ks_client, role_name=None):
|
||||
|
||||
role = _find_role(ks_client, role_name=role_name)
|
||||
|
||||
if role:
|
||||
_delete_role(ks_client, role=role)
|
||||
return (True, role)
|
||||
|
||||
# role with that name doesn't exist
|
||||
return (False, None)
|
||||
|
||||
|
||||
def _grant_or_revoke_project_role(ks_client, role_name=None, user_name=None, project_name=None,
|
||||
user_domain_name=None, project_domain_name=None, grant=True):
|
||||
|
||||
role = _find_role(ks_client, role_name=role_name)
|
||||
user = _find_user(
|
||||
ks_client, user_name=user_name, domain_name=user_domain_name)
|
||||
project = _find_project(
|
||||
ks_client, project_name=project_name, domain_name=project_domain_name)
|
||||
|
||||
if (user and role and project):
|
||||
if (grant):
|
||||
_grant_roles(ks_client, role=role, project=project, user=user)
|
||||
else:
|
||||
_revoke_roles(ks_client, role=role, project=project, user=user)
|
||||
return (True, "OK")
|
||||
|
||||
return (False, "Not able to find user/role/project with the given inputs")
|
||||
|
||||
|
||||
def _grant_or_revoke_domain_role(ks_client, role_name=None, user_name=None,
|
||||
user_domain_name=None, domain_name=None, grant=True):
|
||||
|
||||
role = _find_role(ks_client, role_name=role_name)
|
||||
user = _find_user(
|
||||
ks_client, user_name=user_name, domain_name=user_domain_name)
|
||||
domain = _find_domain(ks_client, domain_name=domain_name)
|
||||
|
||||
if (user and role and domain):
|
||||
if (grant):
|
||||
_grant_roles(ks_client, role=role, domain=domain, user=user)
|
||||
else:
|
||||
_revoke_roles(ks_client, role=role, domain=domain, user=user)
|
||||
return (True, "OK")
|
||||
|
||||
return (False, "Not able to find user/role/domain with the given inputs")
|
||||
|
||||
|
||||
def grant_project_role(ks_client, role_name=None, user_name=None, project_name=None,
|
||||
user_domain_name=None, project_domain_name=None):
|
||||
|
||||
return _grant_or_revoke_project_role(ks_client, role_name=role_name, user_name=user_name,
|
||||
project_name=project_name, user_domain_name=user_domain_name,
|
||||
project_domain_name=project_domain_name, grant=True)
|
||||
|
||||
|
||||
def revoke_project_role(ks_client, role_name=None, user_name=None, project_name=None,
|
||||
user_domain_name=None, project_domain_name=None):
|
||||
|
||||
return _grant_or_revoke_project_role(ks_client, role_name=role_name, user_name=user_name,
|
||||
project_name=project_name, user_domain_name=user_domain_name,
|
||||
project_domain_name=project_domain_name, grant=False)
|
||||
|
||||
|
||||
def grant_domain_role(ks_client, role_name=None, user_name=None, domain_name=None,
|
||||
user_domain_name=None):
|
||||
|
||||
return _grant_or_revoke_domain_role(ks_client, role_name=role_name, user_name=user_name,
|
||||
user_domain_name=user_domain_name,
|
||||
domain_name=domain_name, grant=True)
|
||||
|
||||
|
||||
def revoke_domain_role(ks_client, role_name=None, user_name=None, domain_name=None,
|
||||
user_domain_name=None):
|
||||
return _grant_or_revoke_domain_role(ks_client, role_name=role_name, user_name=user_name,
|
||||
user_domain_name=user_domain_name,
|
||||
domain_name=domain_name, grant=False)
|
||||
|
||||
def create_service(ks_client, service_name=None, service_type=None,
|
||||
description=None):
|
||||
|
||||
service = _find_service(ks_client, service_name=service_name,
|
||||
service_type=service_type)
|
||||
|
||||
if service:
|
||||
return (False, service)
|
||||
|
||||
# Service with that name doesn't exist
|
||||
service = _create_service(
|
||||
ks_client, service_name=service_name, service_type=service_type,
|
||||
description=description)
|
||||
return (True, service)
|
||||
|
||||
def create_endpoint(ks_client, service_name=None, region=None,
|
||||
admin_url=None, internal_url=None,
|
||||
public_url=None):
|
||||
|
||||
service = _find_service(ks_client, service_name=service_name)
|
||||
|
||||
if not service:
|
||||
raise Exception("Service with the name=%s doesn't exist" %(service_name))
|
||||
|
||||
# Here we are checking only public endpoint, that should be fine
|
||||
endpoint = _find_endpoint(ks_client, service=service, interface="public")
|
||||
if endpoint:
|
||||
return (False, endpoint)
|
||||
|
||||
public_endpoint = _create_endpoint(
|
||||
ks_client, service=service, interface="public", region=region,
|
||||
url=public_url)
|
||||
internal_endpoint = _create_endpoint(
|
||||
ks_client, service=service, interface="internal", region=region,
|
||||
url=internal_url)
|
||||
public_endpint = _create_endpoint(
|
||||
ks_client, service=service, interface="admin", region=region,
|
||||
url=admin_url)
|
||||
|
||||
return (True, public_endpint)
|
||||
|
||||
def process_params(module):
|
||||
|
||||
user_name = module.params.get("user_name", None)
|
||||
user_password = module.params.get("user_password", None)
|
||||
email = module.params.get("email", None)
|
||||
description = module.params.get("description", None)
|
||||
user_domain_name = module.params.get("user_domain_name", None)
|
||||
|
||||
domain_name = module.params.get("domain_name", None)
|
||||
|
||||
project_name = module.params.get("project_name", None)
|
||||
project_domain_name = module.params.get("project_domain_name", None)
|
||||
|
||||
role_name = module.params.get("role_name", None)
|
||||
|
||||
service_name = module.params.get("service_name", None)
|
||||
service_type = module.params.get("service_type", None)
|
||||
region = module.params.get("region", None)
|
||||
admin_url = module.params.get("admin_url", None)
|
||||
internal_url = module.params.get("internal_url", None)
|
||||
public_url = module.params.get("public_url", None)
|
||||
|
||||
action = module.params["action"]
|
||||
|
||||
if (action == "find_domain" or action == "delete_domain"):
|
||||
kwargs = dict(domain_name=domain_name)
|
||||
elif (action == "create_domain"):
|
||||
kwargs = dict(domain_name=domain_name, description=description)
|
||||
elif (action == "find_user" or action == "delete_user"):
|
||||
kwargs = dict(domain_name=user_domain_name, user_name=user_name)
|
||||
elif (action == "create_user"):
|
||||
kwargs = dict(domain_name=user_domain_name, description=description, user_name=user_name,
|
||||
email=email, user_password=user_password)
|
||||
elif (action == "find_project" or action == "delete_project"):
|
||||
kwargs = dict(
|
||||
domain_name=project_domain_name, project_name=project_name)
|
||||
elif (action == "create_project"):
|
||||
kwargs = dict(domain_name=project_domain_name, description=description,
|
||||
project_name=project_name)
|
||||
elif (action == "find_role" or action == "delete_role"):
|
||||
kwargs = dict(role_name=role_name)
|
||||
elif (action == "create_role"):
|
||||
kwargs = dict(role_name=role_name, description=description)
|
||||
elif (action == "grant_project_role" or action == "revoke_project_role"):
|
||||
kwargs = dict(role_name=role_name, user_name=user_name,
|
||||
user_domain_name=user_domain_name, project_name=project_name,
|
||||
project_domain_name=project_domain_name)
|
||||
elif (action == "grant_domain_role" or action == "revoke_domain_role"):
|
||||
kwargs = dict(role_name=role_name, user_name=user_name,
|
||||
user_domain_name=user_domain_name,
|
||||
domain_name=domain_name)
|
||||
elif (action == "create_service"):
|
||||
kwargs = dict(service_name=service_name, service_type=service_type,
|
||||
description=description)
|
||||
elif (action == "create_endpoint"):
|
||||
kwargs = dict(service_name=service_name, region=region,
|
||||
admin_url=admin_url, internal_url=internal_url,
|
||||
public_url=public_url)
|
||||
|
||||
return kwargs
|
||||
|
||||
dispatch_map = {
|
||||
"find_domain": find_domain,
|
||||
"delete_domain": delete_domain,
|
||||
"create_domain": create_domain,
|
||||
|
||||
"find_user": find_user,
|
||||
"delete_user": delete_user,
|
||||
"create_user": create_user,
|
||||
|
||||
"find_project": find_project,
|
||||
"delete_project": delete_project,
|
||||
"create_project": create_project,
|
||||
|
||||
"find_role": find_role,
|
||||
"delete_role": delete_role,
|
||||
"create_role": create_role,
|
||||
|
||||
"grant_project_role": grant_project_role,
|
||||
"revoke_project_role": revoke_project_role,
|
||||
"grant_domain_role": grant_domain_role,
|
||||
"revoke_domain_role": revoke_domain_role,
|
||||
|
||||
"create_service": create_service,
|
||||
"create_endpoint": create_endpoint,
|
||||
|
||||
}
|
||||
|
||||
|
||||
def get_client(module):
|
||||
|
||||
login_username = module.params.get("login_username")
|
||||
login_project_name = module.params.get("login_project_name")
|
||||
login_user_domain_name = module.params.get("login_user_domain_name")
|
||||
login_project_domain_name = module.params.get("login_project_domain_name")
|
||||
login_password = module.params.get("login_password")
|
||||
auth_url = module.params.get("endpoint")
|
||||
token = module.params.get("login_token")
|
||||
|
||||
ks_client = _get_client(login_username=login_username,
|
||||
login_project_name=login_project_name,
|
||||
login_user_domain_name=login_user_domain_name,
|
||||
login_project_domain_name=login_project_domain_name,
|
||||
login_password=login_password,
|
||||
auth_url=auth_url,
|
||||
token=token)
|
||||
|
||||
return ks_client
|
||||
|
||||
|
||||
def process_module_action(module):
|
||||
|
||||
ks_client = get_client(module)
|
||||
|
||||
action = module.params["action"]
|
||||
kwargs = process_params(module)
|
||||
|
||||
try:
|
||||
result = dispatch_map[action](ks_client, **kwargs)
|
||||
except Exception as e:
|
||||
module.fail_json(msg="%s, failed" % e)
|
||||
else:
|
||||
status, resource_data = result
|
||||
data = dict(changed=status, result=str(resource_data))
|
||||
module.exit_json(**data)
|
||||
|
||||
|
||||
def main():
|
||||
|
||||
supported_actions = dispatch_map.keys()
|
||||
|
||||
argument_spec = dict(
|
||||
login_username=dict(default=None),
|
||||
login_password=dict(default=None),
|
||||
login_project_name=dict(default=None),
|
||||
login_project_domain_name=dict(default=None),
|
||||
login_user_domain_name=dict(default=None),
|
||||
login_domain_name=dict(default=None),
|
||||
login_token=dict(default=None),
|
||||
|
||||
endpoint=dict(default=None),
|
||||
description=dict(default="Created by Ansible keystone_v3"),
|
||||
email=dict(default=None),
|
||||
user_name=dict(default=None),
|
||||
user_password=dict(default=None),
|
||||
user_domain_name=dict(default=None),
|
||||
project_name=dict(default=None),
|
||||
project_domain_name=dict(default=None),
|
||||
domain_name=dict(default=None),
|
||||
role_name=dict(default=None),
|
||||
|
||||
service_name=dict(default=None),
|
||||
service_type=dict(default=None),
|
||||
|
||||
region=dict(default=None),
|
||||
admin_url=dict(default=None),
|
||||
public_url=dict(default=None),
|
||||
internal_url=dict(default=None),
|
||||
|
||||
action=dict(default=None, required=True, choices=supported_actions)
|
||||
|
||||
)
|
||||
|
||||
module = AnsibleModule(
|
||||
argument_spec=argument_spec, supports_check_mode=False)
|
||||
process_module_action(module)
|
||||
|
||||
from ansible.module_utils.basic import *
|
||||
from ansible.module_utils.database import *
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
main()
|
||||
123
cloud/openstack/os_keystone_domain.py
Normal file
123
cloud/openstack/os_keystone_domain.py
Normal file
|
|
@ -0,0 +1,123 @@
|
|||
#!/usr/bin/python
|
||||
# Copyright (c) 2015 Hewlett-Packard Development Company, L.P.
|
||||
#
|
||||
# This module is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This software is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this software. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
|
||||
try:
|
||||
import shade
|
||||
from shade import meta
|
||||
HAS_SHADE = True
|
||||
except ImportError:
|
||||
HAS_SHADE = False
|
||||
|
||||
DOCUMENTATION = '''
|
||||
---
|
||||
module: os_keystone_domain
|
||||
short_description: Manage OpenStack Identity Domains
|
||||
extends_documentation_fragment: openstack
|
||||
version_added: "2.1"
|
||||
description:
|
||||
- Manage OpenStack Identity Domains
|
||||
options:
|
||||
name:
|
||||
description:
|
||||
- Name that has to be given to the instance
|
||||
required: true
|
||||
description:
|
||||
description:
|
||||
- Description of the domain
|
||||
required: false
|
||||
default: None
|
||||
enabled:
|
||||
description:
|
||||
- Is the domain enabled
|
||||
required: false
|
||||
default: True
|
||||
state:
|
||||
description:
|
||||
- Should the resource be present or absent.
|
||||
choices: [present, absent]
|
||||
default: present
|
||||
requirements:
|
||||
- "python >= 2.6"
|
||||
- "shade"
|
||||
'''
|
||||
|
||||
EXAMPLES = '''
|
||||
# Create a domain
|
||||
- os_keystone_domain: name=demo description="Demo Domain"
|
||||
'''
|
||||
|
||||
|
||||
def main():
|
||||
|
||||
argument_spec = openstack_full_argument_spec(
|
||||
name=dict(required=True),
|
||||
description=dict(default=None),
|
||||
enabled=dict(default=True, type='bool'),
|
||||
state=dict(default='present', choices=['absent', 'present']),
|
||||
# Override endpoint_type default since this is an admin function
|
||||
endpoint_type=dict(
|
||||
default='admin', choices=['public', 'internal', 'admin']),
|
||||
))
|
||||
|
||||
module_kwargs = openstack_module_kwargs()
|
||||
module = AnsibleModule(argument_spec, **module_kwargs)
|
||||
|
||||
if not HAS_SHADE:
|
||||
module.fail_json(msg='shade is required for this module')
|
||||
|
||||
name = module.params.pop('name')
|
||||
description = module.params.pop('description')
|
||||
enabled = module.params.pop('enabled')
|
||||
state = module.params.pop('state')
|
||||
|
||||
try:
|
||||
cloud = shade.operator_cloud(**module.params)
|
||||
|
||||
domain = cloud.get_identity_domain(name=name)
|
||||
|
||||
if state == 'present':
|
||||
if domain is None:
|
||||
domain = cloud.create_domain(
|
||||
name=name, description=description, enabled=enabled)
|
||||
changed = True
|
||||
else:
|
||||
if (domain.name != name or domain.description != description
|
||||
or domain.enabled != enabled):
|
||||
cloud.update_domain(
|
||||
domain.id, name=name, description=description,
|
||||
enabled=enabled)
|
||||
changed = True
|
||||
else:
|
||||
changed = False
|
||||
module.exit_json(changed=changed, domain=domain)
|
||||
elif state == 'absent':
|
||||
if domain is None:
|
||||
changed=False
|
||||
else:
|
||||
cloud.delete_domain(domain.id)
|
||||
changed=True
|
||||
module.exit_json(changed=changed)
|
||||
|
||||
except shade.OpenStackCloudException as e:
|
||||
module.fail_json(msg=e.message, extra_data=e.extra_data)
|
||||
|
||||
from ansible.module_utils.basic import *
|
||||
from ansible.module_utils.openstack import *
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
main()
|
||||
Loading…
Reference in a new issue