c298741aa6
Shade version 0.7.0 introduces new API methods for creating, deleting, and updating security groups. Let's use those and clean up the module.
136 lines
4.1 KiB
Python
136 lines
4.1 KiB
Python
#!/usr/bin/python
|
|
|
|
# Copyright (c) 2015 Hewlett-Packard Development Company, L.P.
|
|
# Copyright (c) 2013, Benno Joy <benno@ansible.com>
|
|
#
|
|
# This module is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This software is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this software. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
try:
|
|
import shade
|
|
HAS_SHADE = True
|
|
except ImportError:
|
|
HAS_SHADE = False
|
|
|
|
|
|
DOCUMENTATION = '''
|
|
---
|
|
module: os_security_group
|
|
short_description: Add/Delete security groups from an OpenStack cloud.
|
|
extends_documentation_fragment: openstack
|
|
version_added: "2.0"
|
|
description:
|
|
- Add or Remove security groups from an OpenStack cloud.
|
|
options:
|
|
name:
|
|
description:
|
|
- Name that has to be given to the security group
|
|
required: true
|
|
description:
|
|
description:
|
|
- Long description of the purpose of the security group
|
|
required: false
|
|
default: None
|
|
state:
|
|
description:
|
|
- Should the resource be present or absent.
|
|
choices: [present, absent]
|
|
default: present
|
|
|
|
requirements: ["shade"]
|
|
'''
|
|
|
|
EXAMPLES = '''
|
|
# Create a security group
|
|
- os_security_group:
|
|
cloud=mordred
|
|
name=foo
|
|
description=security group for foo servers
|
|
'''
|
|
|
|
|
|
def _needs_update(module, secgroup):
|
|
"""Check for differences in the updatable values.
|
|
|
|
NOTE: We don't currently allow name updates.
|
|
"""
|
|
if secgroup['description'] != module.params['description']:
|
|
return True
|
|
return False
|
|
|
|
|
|
def _system_state_change(module, secgroup):
|
|
state = module.params['state']
|
|
if state == 'present':
|
|
if not secgroup:
|
|
return True
|
|
return _needs_update(module, secgroup)
|
|
if state == 'absent' and secgroup:
|
|
return True
|
|
return False
|
|
|
|
|
|
def main():
|
|
argument_spec = openstack_full_argument_spec(
|
|
name=dict(required=True),
|
|
description=dict(default=None),
|
|
state=dict(default='present', choices=['absent', 'present']),
|
|
)
|
|
|
|
module_kwargs = openstack_module_kwargs()
|
|
module = AnsibleModule(argument_spec,
|
|
supports_check_mode=True,
|
|
**module_kwargs)
|
|
|
|
if not HAS_SHADE:
|
|
module.fail_json(msg='shade is required for this module')
|
|
|
|
name = module.params['name']
|
|
state = module.params['state']
|
|
description = module.params['description']
|
|
|
|
try:
|
|
cloud = shade.openstack_cloud(**module.params)
|
|
secgroup = cloud.get_security_group(name)
|
|
|
|
if module.check_mode:
|
|
module.exit_json(changed=_system_state_change(module, secgroup))
|
|
|
|
if state == 'present':
|
|
if not secgroup:
|
|
secgroup = cloud.create_security_group(name, description)
|
|
module.exit_json(changed=True, result='created',
|
|
id=secgroup['id'])
|
|
else:
|
|
if _needs_update(module, secgroup):
|
|
secgroup = cloud.update_security_group(
|
|
secgroup['id'], description=description)
|
|
module.exit_json(changed=True, result='updated',
|
|
id=secgroup['id'])
|
|
else:
|
|
module.exit_json(changed=False, result='success')
|
|
|
|
if state == 'absent':
|
|
if not secgroup:
|
|
module.exit_json(changed=False, result='success')
|
|
else:
|
|
cloud.delete_security_group(secgroup['id'])
|
|
module.exit_json(changed=True, result='deleted')
|
|
|
|
except shade.OpenStackCloudException as e:
|
|
module.fail_json(msg=e.message)
|
|
|
|
# this is magic, see lib/ansible/module_common.py
|
|
from ansible.module_utils.basic import *
|
|
from ansible.module_utils.openstack import *
|
|
main()
|