Current File : //lib/python2.7/site-packages/salt/states/keystone.pyo
�
���^c @@ s
d Z d d l m Z m Z m Z d � Z d a d a d d � Z d e
d d e
d d � Z d d � Z d e
d d � Z
d d
� Z d e
d d � Z d d � Z d d
� Z d d � Z d d d � Z d d � Z d d d d d d d d � Z d d d d � Z d S( u�
Management of Keystone users
============================
:depends: - keystoneclient Python module
:configuration: See :py:mod:`salt.modules.keystone` for setup instructions.
.. code-block:: yaml
Keystone tenants:
keystone.tenant_present:
- names:
- admin
- demo
- service
Keystone roles:
keystone.role_present:
- names:
- admin
- Member
admin:
keystone.user_present:
- password: R00T_4CC3SS
- email: admin@domain.com
- roles:
admin: # tenants
- admin # roles
service:
- admin
- Member
- require:
- keystone: Keystone tenants
- keystone: Keystone roles
nova:
keystone.user_present:
- password: '$up3rn0v4'
- email: nova@domain.com
- tenant: service
- roles:
service:
- admin
- require:
- keystone: Keystone tenants
- keystone: Keystone roles
demo:
keystone.user_present:
- password: 'd3m0n$trati0n'
- email: demo@domain.com
- tenant: demo
- roles:
demo:
- Member
- require:
- keystone: Keystone tenants
- keystone: Keystone roles
nova service:
keystone.service_present:
- name: nova
- service_type: compute
- description: OpenStack Compute Service
i ( t absolute_importt unicode_literalst print_functionc C@ s d t k r d St S( u9
Only load if the keystone module is in __salt__
u
keystone.authu keystone( t __salt__t False( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt __virtual__H s i u tenant_idc K@ sV y> t t d d | | � j d � � d k r= d a d a n Wn t k
rQ n Xd S( ue
Sets global variables _OS_IDENTITY_API_VERSION and _TENANT_ID
depending on API version.
u keystone.api_versiont profileu vi u
project_idN( t floatR t stript
_TENANT_IDt _OS_IDENTITY_API_VERSIONt KeyError( R t connection_args( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt _api_versionS s +
c K@ s� i | d 6i d 6t d 6d j | � d 6}
t d | | � | rQ | rQ | } n | d7 k r� t d d | d | | � } d | k r� t |
d <d
j | � |
d <|
S| | d } n d7 } t d d | d | | � }
d |
k r�t } t } t } t } |
| j d
d7 � | k r"t } n |
| j d d7 � | k rGt } n | r�t |
| k sy|
| j t d7 � | k r�t } n | t k r�t d d | d | d | | � r�t } n t j d � r| s�| s�| s�| rd7 |
d <d j | � |
d <| t k rd |
d d <n | t k r8d |
d d <n | t k r^d j | � |
d d <n | t k r{d |
d d <n |
Sd j | � |
d <| r�t d d | d | d | | � d j | � |
d <d |
d d <n | r/t d d | d | d | | � d j | � |
d <d j | � |
d d <n | r�t d d | d | d | | � d j | � |
d <d! j | � |
d d <n | r�t d" d | d | d | | � d j | � |
d <d |
d d <n | r�x�| D]�} t i | d# 6| d$ 6| d% 6| � } t d& | � } x� | | D]� } | | k r t j d � r`d7 |
d <d' j | � |
d <|
St i | d( 6| d) 6| d* 6| d% 6| � } t d+ | � } d, |
d k r�|
d d, j
| � q�| g |
d d, <q q Wt t | � t | | � � } x� | D]� } t j d � r8d7 |
d <d' j | � |
d <|
St i | d( 6| d) 6| d* 6| d% 6| � } t d- | � } d, |
d k r�|
d d, j
| � q| g |
d d, <qWq�Wq�n� t j d � r�d7 |
d <d. j | � |
d <d/ |
d d0 <|
St d1 d | d | d | d2 | d | d | | � | rxL | D]A } x8 | | D], } t d+ d3 | d4 | d | d | | � qHWq7Wn d5 j | � |
d <d6 |
d d0 <|
S(8 u�
Ensure that the keystone user is present with the specified properties.
name
The name of the user to manage
password
The password to use for this user.
.. note::
If the user already exists and a different password was set for
the user than the one specified here, the password for the user
will be updated. Please set the ``password_reset`` option to
``False`` if this is not the desired behavior.
password_reset
Whether or not to reset password after initial set. Defaults to
``True``.
email
The email address for this user
tenant
The tenant (name) for this user
project
The project (name) for this user (overrides tenant in api v3)
enabled
Availability state for this user
roles
The roles the user should have under given tenants.
Passed as a dictionary mapping tenant names to a list
of roles in this tenant, i.e.::
roles:
admin: # tenant
- admin # role
service:
- admin
- Member
u nameu changesu resultu User "{0}" will be updatedu commentR u keystone.tenant_gett nameu Erroru% Tenant / project "{0}" does not existu idu keystone.user_getu emailu enabledu keystone.user_verify_passwordt passwordu testu Will be updatedu Emailu Will be Trueu Enabledu Will be added to "{0}" tenantu Tenantu Passwordu User "{0}" is already presentu keystone.user_updatet emailu User "{0}" has been updatedu Updatedt enabledu Now {0}t tenantu Added to "{0}" tenantu keystone.user_password_updateu user_nameu tenant_nameu profileu keystone.user_role_listu" User roles "{0}" will been updatedu useru roleu tenantu keystone.user_role_addu rolesu keystone.user_role_removeu! Keystone user "{0}" will be addedu Will be createdu Useru keystone.user_createt tenant_idt usert roleu Keystone user {0} has been addedu CreatedN(
t Truet formatR
t NoneR R t getR t __opts__t dictt appendt listt set( R R R R R t rolesR t password_resett projectR t rett
tenantdataR R t change_emailt change_enabledt
change_tenantt change_passwordt argst tenant_rolesR t addargst newrolet roles_to_removet oldrole( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt user_presentb s� 6
'
c K@ s� i | d 6i d 6t d 6d j | � d 6} t d d | d | | � } d | k r� t j d
� r� d | d <d j | � | d <| St d d | d | | � d
j | � | d <d | d d <n | S( uo
Ensure that the keystone user is absent.
name
The name of the user that should not exist
u nameu changesu resultu User "{0}" is already absentu commentu keystone.user_getR R u Erroru testu User "{0}" will be deletedu keystone.user_deleteu User "{0}" has been deletedu Deletedu UserN( R R R R R R ( R R R R" R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt user_absent- s
c K@ s� i | d 6i d 6t d 6d j | � d 6} t d | | � t d d | d | | � } d | k r�| | j d
d# � | k rt j d � r� d# | d <d j | � | d <d
| d d <| St d d | d | d | d | | � d j | � | d <d | d d <n | | j d d# � | k r�t j d � rjd# | d <d j | � | d <d j | � | d d <| St d d | d | d | d | | � d j | � | d <d j | � | d d <q�n� t j d � r�d# | d <d j | � | d <d | d d <| St d k r;t d d | d d d | d | d | | � } n( t d d | d | d | d | | � } | t k rud n d! | d d <| | d <d" j | � | d <| S($ u�
Ensures that the keystone tenant exists
name
The name of the tenant to manage
description
The description to use for this tenant
enabled
Availability state for this tenant
u nameu changesu resultu% Tenant / project "{0}" already existsu commentR u keystone.tenant_getR u Erroru descriptionu testu& Tenant / project "{0}" will be updatedu Will be updatedu Descriptionu keystone.tenant_updatet descriptionR u' Tenant / project "{0}" has been updatedu Updatedu enabledu Will be {0}u Enabledu Now {0}u$ Tenant / project "{0}" will be addedu Will be createdu Tenanti u keystone.project_createt domainu defaultu keystone.tenant_createu Createdu Failedu% Tenant / project "{0}" has been addedN( R R R
R R R R R
( R R0 R R R R" R t created( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt tenant_presentJ sb
c K@ s� i | d 6i d 6t d 6d j | � d 6} t d d | d | | � } d | k r� t j d
� r� d | d <d j | � | d <| St d d | d | | � d
j | � | d <d | d d <n | S( us
Ensure that the keystone tenant is absent.
name
The name of the tenant that should not exist
u nameu changesu resultu( Tenant / project "{0}" is already absentu commentu keystone.tenant_getR R u Erroru testu& Tenant / project "{0}" will be deletedu keystone.tenant_deleteu' Tenant / project "{0}" has been deletedu Deletedu Tenant/ProjectN( R R R R R R ( R R R R" R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt
tenant_absent� s"
c K@ s t | d | d | d | | �S( u�
Ensures that the keystone project exists
Alias for tenant_present from V2 API to fulfill
V3 API naming convention.
.. versionadded:: 2016.11.0
name
The name of the project to manage
description
The description to use for this project
enabled
Availability state for this project
.. code-block:: yaml
nova:
keystone.project_present:
- enabled: True
- description: 'Nova Compute Service'
R0 R R ( R3 ( R R0 R R R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt project_present� s c K@ s t | d | | �S( uY
Ensure that the keystone project is absent.
Alias for tenant_absent from V2 API to fulfill
V3 API naming convention.
.. versionadded:: 2016.11.0
name
The name of the project that should not exist
.. code-block:: yaml
delete_nova:
keystone.project_absent:
- name: nova
R ( R4 ( R R R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt project_absent� s c K@ s� i | d 6i d 6t d 6d j | � d 6} t d d | d | | � } d | k rW | St j d
� r� d | d <d j | � | d <| St d | d | | �d
j | � | d <d | d d <| S( un '
Ensures that the keystone role exists
name
The name of the role that should be present
u nameu changesu resultu Role "{0}" already existsu commentu keystone.role_getR R u Erroru testu Role "{0}" will be addedu keystone.role_createu Role "{0}" has been addedu Createdu RoleN( R R R R R R ( R R R R" R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt role_present� s"
c K@ s� i | d 6i d 6t d 6d j | � d 6} t d d | d | | � } d | k r� t j d
� r� d | d <d j | � | d <| St d d | d | | � d
j | � | d <d | d d <n | S( uo
Ensure that the keystone role is absent.
name
The name of the role that should not exist
u nameu changesu resultu Role "{0}" is already absentu commentu keystone.role_getR R u Erroru testu Role "{0}" will be deletedu keystone.role_deleteu Role "{0}" has been deletedu Deletedu RoleN( R R R R R R ( R R R R" R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt role_absent s
c K@ s� i | d 6i d 6t d 6d j | � d 6} t d d | d | | � } d | k rW | St j d
� r� d | d <d j | � | d <| St d | | | d | | �d
j | � | d <d | d d <| S( u�
Ensure service present in Keystone catalog
name
The name of the service
service_type
The type of Openstack Service
description (optional)
Description of the service
u nameu changesu resultu Service "{0}" already existsu commentu keystone.service_getR R u Erroru testu Service "{0}" will be addedu keystone.service_createu Service "{0}" has been addedu Createdu ServiceN( R R R R R R ( R t service_typeR0 R R R" R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt service_present s(
c K@ s� i | d 6i d 6t d 6d j | � d 6} t d d | d | | � } d | k r� t j d
� r� d | d <d j | � | d <| St d d | d | | � d
j | � | d <d | d d <n | S( u�
Ensure that the service doesn't exist in Keystone catalog
name
The name of the service that should not exist
u nameu changesu resultu Service "{0}" is already absentu commentu keystone.service_getR R u Erroru testu Service "{0}" will be deletedu keystone.service_deleteu Service "{0}" has been deletedu Deletedu ServiceN( R R R R R R ( R R R R" R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt service_absentJ s$
c
@ s9 i � d 6i d 6t d 6d d 6� t d � � � t d � � d � d � � �} � f d � }
� � � � � � � � � � f
d
� } | r�d | k r�| j d � � k r�t d
k r�t } t }
| j d d" � � k r|
d j | j d d" � � � � � d <t } n | j d d" � � k r^|
d j | j d d" � � � � � d <t }
n t j d � r�| sy|
r�d" � d <d � d d <� d c d j � � 7<� S| r�� � d d <n |
rg� � d d <qgn�t } t } t } | j d d" � � k r:t } |
d j | j d d" � � � � � d <n | j d d" � � k r�t } |
d j | j d d" � � � � � d <n | j d d" � � k r�t } |
d j | j d d" � � � � � d <n t j d � r"| s�| s�| r"d" � d <� d c d j � � 7<d � d d <� S| r9� � d d <n | rP� � d d <n | rg� � d d <n � d rt d � � d � d � � �| � � d c d j � � 7<qnX t j d � r�d" � d <d � d d <d j � � � d <� S| � d j � � � d <� d d k r5d! j � � � d <n � S(# u
Ensure the specified endpoints exists for service
name
The Service name
publicurl
The public url of service endpoint (for V2 API)
internalurl
The internal url of service endpoint (for V2 API)
adminurl
The admin url of the service endpoint (for V2 API)
region
The region of the endpoint
url
The endpoint URL (for V3 API)
interface
The interface type, which describes the visibility
of the endpoint. (for V3 API)
u nameu changesu resultu u commentR u keystone.endpoint_gett interfacec @ s � j d d � | d S( Nu commentu u
( R ( t desc( R" ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt _changes� s c
@ sw t d k r> t d � d � d � d � d � � �� d <n5 t d � d � d � d � d
� d � � �� d <d S( Ni u keystone.endpoint_createt regiont urlR< R u changest publicurlt adminurlt internalurl( R
R ( (
RB R R< RC R R RA R? R" R@ ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt _create_endpoint� s u Erroru regioni u urlu URL changes from "{0}" to "{1}"u interfaceu% Interface changes from "{0}" to "{1}"u testu Will be updatedu Endpointu* Endpoint for service "{0}" will be updatedu publicurlu& Public URL changes from "{0}" to "{1}"u adminurlu% Admin URL changes from "{0}" to "{1}"u internalurlu( Internal URL changes from "{0}" to "{1}"u keystone.endpoint_deleteu+ Endpoint for service "{0}" has been updatedu Will be createdu( Endpoint for service "{0}" will be addedu) Endpoint for service "{0}" has been addedu) Endpoint for service "{0}" already existsN( R R
R R R
R R R R ( R RA RC RB R? R R@ R< R t endpointR> RD t
change_urlt change_interfacet change_publicurlt change_adminurlt change_internalurl( (
RB R R< RC R R RA R? R" R@ s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt endpoint_presenti s� "
*' ( (
" "!
c K@ s i | d 6i d 6t d 6d j | | d k r< d j | � n d � d 6} t d | | d | d
| | �} | su | St j d � r� d | d <d j | � | d <| St d
| | d | d
| | �d j | | d k r� d j | � n d � | d <d | d d <| S( ud
Ensure that the endpoint for a service doesn't exist in Keystone catalog
name
The name of the service whose endpoints should not exist
region (optional)
The region of the endpoint. Defaults to ``RegionOne``.
interface
The interface type, which describes the visibility
of the endpoint. (for V3 API)
u nameu changesu resultu/ Endpoint for service "{0}"{1} is already absentu , interface "{0}",u u commentu keystone.endpoint_getR R< u testu* Endpoint for service "{0}" will be deletedu keystone.endpoint_deleteu. Endpoint for service "{0}"{1} has been deletedu Deletedu endpointN( R R R R R R ( R R? R R< R R" RE ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt endpoint_absent s.
(
(N( t __doc__t
__future__R R R R R
R R R
R R. R/ R3 R4 R5 R6 R7 R8 R: R; RK RL ( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/keystone.pyt <module>D s: � H ) �
Mini Shell