Current File : //usr/lib/python2.7/site-packages/salt/modules/keystone.pyc
�
���^c
@@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l m Z e
Z yf d d l m
Z
d d l Z e Z d d l m
Z d d l m Z d d l m Z d d l m Z Wn e k
r� n Xd a d
a e j e � Z d � Z i Z d d � Z! d d
� Z" d d � Z# d d d d d d � Z$ d d d d d � Z% d d d d d � Z& d d d d � Z' d d d d � Z( d d � Z) d d d d d d d d � Z* d d d d � Z+ d d � Z, d d d d � Z- d d d d � Z. d d � Z/ d d d � Z0 d d d d � Z1 d d d d � Z2 d d � Z3 d e d d � Z4 d e d d � Z5 d d d d! � Z6 d d d d" � Z7 d d d d# � Z8 d d d d$ � Z9 d d% � Z: d d& � Z; d d d d d d' � Z< d d d d d d( � Z= d d) � Z> d d* � Z? d d d d+ � Z@ d e d d d d, � ZA d d d d- � ZB d d d d d d d d d. � ZC d d d d d/ � ZD d d d d d0 � ZE d d d d d d d d d d1 � ZF d d d d d d d d d d2 � ZG d d d d d d d d3 � ZH d d4 � ZI d S(5 u�
Module for handling openstack keystone calls.
:optdepends: - keystoneclient Python adapter
:configuration: This module is not usable until the following are specified
either in a pillar or in the minion's config file:
.. code-block:: yaml
keystone.user: admin
keystone.password: verybadpass
keystone.tenant: admin
keystone.tenant_id: f80919baedab48ec8931f200c65a50df
keystone.auth_url: 'http://127.0.0.1:5000/v2.0/'
OR (for token based authentication)
.. code-block:: yaml
keystone.token: 'ADMIN'
keystone.endpoint: 'http://127.0.0.1:35357/v2.0'
If configuration for multiple openstack accounts is required, they can be
set up as different configuration profiles. For example:
.. code-block:: yaml
openstack1:
keystone.user: admin
keystone.password: verybadpass
keystone.tenant: admin
keystone.tenant_id: f80919baedab48ec8931f200c65a50df
keystone.auth_url: 'http://127.0.0.1:5000/v2.0/'
openstack2:
keystone.user: admin
keystone.password: verybadpass
keystone.tenant: admin
keystone.tenant_id: f80919baedab48ec8931f200c65a50df
keystone.auth_url: 'http://127.0.0.2:5000/v2.0/'
With this configuration in place, any of the keystone functions can make use
of a configuration profile by declaring it explicitly.
For example:
.. code-block:: bash
salt '*' keystone.tenant_list profile=openstack1
i ( t absolute_importt unicode_literalst print_functionN( t six( t client( t discover( t session( t generici u tenantsc C@ s t r
d St d f S( uL
Only load this module if keystone
is installed on this minion.
u keystoneuX keystone execution module cannot be loaded: keystoneclient python library not available.( t HAS_KEYSTONEt False( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt __virtual__Q s c @ s) | r | d � n d � d � � f d � } | d d � } | d d � } | d d � } | d � } | d
d � } | d t � } | d
� } | d d � }
| d d � } | d d � } | r� i | d
6|
d 6}
nJ i | d 6| d 6| d 6| d 6| d
6| d 6| d 6}
| r%t |
d <n |
S( u
get connection args
u
:keystone.u keystone.c @ s% � j d | t d � | | � � S( uL
look in connection_args first, then default to config file
u connection_u
config.get( t gett __salt__( t keyt default( t connection_argst prefix( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyR g s
u useru adminu passwordu ADMINu tenantu tenant_idu auth_urlu http://127.0.0.1:35357/v2.0/u insecureu tokenu endpointu http://127.0.0.1:35357/v2.0u user_domain_nameu Defaultu project_domain_nameu usernameu tenant_nameN( t NoneR t True( t profileR R t usert passwordt tenantt tenant_idt auth_urlt insecuret tokent endpointt user_domain_namet project_domain_namet kwargs( ( R R s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt _get_kwargs^ s6
c K@ s~ t d | | � } | j d | j d d � � } y5 t j j j | d t d d d t �d d d
SWn t k
ry d SXd S( u�
Returns the API version derived from endpoint's response.
CLI Example:
.. code-block:: bash
salt '*' keystone.api_version
R u auth_urlu endpointt decodet decode_typeu jsont
verify_sslu dictu versionu idN(
R R R t saltt utilst httpt queryR R t KeyError( R R R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt api_version� s
c K@ s� t d d d � t d | | � } t j d | d � } | j d � } | j d � } | rv d a d
a | | d <n$ | | d <| j d � | j d � t j | � } t
j d
| � } | j d | � } | S( u�
Set up keystone credentials. Only intended to be used within Keystone-enabled modules.
CLI Example:
.. code-block:: bash
salt '*' keystone.auth
u versions.warn_untilu Neonuw The keystone module has been deprecated and will be removed in {version}. Please update to using the keystoneng moduleR R u auth_urlu v2.0u v3.0i u projectsu user_domain_nameu project_domain_namet authR (
t __utils__R R t Discovert url_fort _OS_IDENTITY_API_VERSIONt _TENANTSt popR t PasswordR t Sessiont
create_client( R R R t disct v2_auth_urlt v3_auth_urlR) t sesst ks_cl( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyR) � s$
c K@ s� t | | � } | r8 t d | d | | � | d } n | sI i d d 6S| rr t d | d | | � | d } n | s� i d d 6S| j j | | � } i | j d 6| j d 6| j d 6| j d
6S( uL
Create EC2-compatible credentials for user per tenant
CLI Examples:
.. code-block:: bash
salt '*' keystone.ec2_credentials_create name=admin tenant=admin
salt '*' keystone.ec2_credentials_create user_id=c965f79c4f864eaaa9c3b41904e67082 tenant_id=722787eb540849158668370dc627ec5f
t nameR u idu Could not resolve User IDu Erroru Could not resolve Tenant IDu accessu secretu tenant_idu user_id( R) t user_gett
tenant_gett ec2t createt accesst secretR t user_id( R? R8 R R R R t kstonet newec2( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt ec2_credentials_create� s
c K@ sl t | | � } | r8 t d | d d | � | d } n | sI i d d 6S| j j | | � d j | | � S( uP
Delete EC2-compatible credentials
CLI Examples:
.. code-block:: bash
salt '*' keystone.ec2_credentials_delete 860f8c2c38ca4fab989f9bc56a061a64 access_key=5f66d2f24f604b8bb9cd28886106f442
salt '*' keystone.ec2_credentials_delete name=admin access_key=5f66d2f24f604b8bb9cd28886106f442
R8 R u idu Could not resolve User IDu Erroru) ec2 key "{0}" deleted under user id "{1}"N( R) R9 R R; t deletet format( R? R8 t
access_keyR R R@ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt ec2_credentials_delete� s # c K@ s� t | | � } i } | rT x6 | j j � D]" } | j | k r+ | j } Pq+ q+ Wn | se i d d 6S| sv i d d 6S| j j d | d | d | | � } i | j d 6| j d 6| j d 6| j
d
6| | j <| S( u�
Return ec2_credentials for a user (keystone ec2-credentials-get)
CLI Examples:
.. code-block:: bash
salt '*' keystone.ec2_credentials_get c965f79c4f864eaaa9c3b41904e67082 access=722787eb540849158668370
salt '*' keystone.ec2_credentials_get user_id=c965f79c4f864eaaa9c3b41904e67082 access=722787eb540849158668370
salt '*' keystone.ec2_credentials_get name=nova access=722787eb540849158668370dc627ec5f
u Unable to resolve user idu Erroru Access key is requiredR? R= R u user_idu tenantu accessu secret( R) t userst listR8 t idR; R R? R R= R> ( R? R8 R= R R R@ t retR t ec2_credentials( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt ec2_credentials_get s$
c K@ s� t | | � } i } | rT x6 | j j � D]" } | j | k r+ | j } Pq+ q+ Wn | se i d d 6SxO | j j | � D]; } i | j d 6| j d 6| j d 6| j d 6| | j <qx W| S( um
Return a list of ec2_credentials for a specific user (keystone ec2-credentials-list)
CLI Examples:
.. code-block:: bash
salt '*' keystone.ec2_credentials_list 298ce377245c4ec9b70e1c639c89e654
salt '*' keystone.ec2_credentials_list user_id=298ce377245c4ec9b70e1c639c89e654
salt '*' keystone.ec2_credentials_list name=jack
u Unable to resolve user idu Erroru user_idu tenant_idu accessu secret(
R) RG RH R8 RI R; R? R R= R> ( R? R8 R R R@ RJ R t ec2_credential( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt ec2_credentials_list# s
c
K@ s$ t | | � t | | � } | | k r3 i d d 6S| | d } t | | � } g g | j � D]Z } | d | k r� | r� | d | k n t r� | r� | d | k n t r� | n d ^ q` D] } | r� | ^ q� } t | � d k r� i d j | | � d 6St | � d k r| d Si d
d 6S( u�
Return a specific endpoint (keystone endpoint-get)
CLI Example:
.. code-block:: bash
salt 'v2' keystone.endpoint_get nova [region=RegionOne]
salt 'v3' keystone.endpoint_get nova interface=admin [region=RegionOne]
u$ Could not find the specified serviceu Erroru idu
service_idu regionu interfacei uJ Multiple endpoints found ({0}) for the {1} service. Please specify region.i u1 Could not find endpoint for the specified serviceN( R) t service_listt
endpoint_listt valuesR R t lenRD (
t servicet regionR t interfaceR t servicest
service_idt endpointst et _f( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt endpoint_getA s
�c @ s\ t | | � } i } x@ | j j � D]/ � t � f d � t � � D� � | � j <q% W| S( u�
Return a list of available endpoints (keystone endpoints-list)
CLI Example:
.. code-block:: bash
salt '*' keystone.endpoint_list
c 3@ sX | ]N } | j d � r t t � | � t j t t f � r | t � | � f Vq d S( u _N( t
startswitht
isinstancet getattrR t string_typest dictt bool( t .0t value( R ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr>n s ( R) RX RH R` t dirRI ( R R R@ RJ ( ( R s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyRP ` s
-c K@ s� t | | � } t d | d | | � }
|
s: d |
k rE i d d 6St d k r� | j j d |
| d d | d | d
| � n3 | j j d | d |
| d d
| d | d | � t | | | | | � S( uI
Create an endpoint for an Openstack service
CLI Examples:
.. code-block:: bash
salt 'v2' keystone.endpoint_create nova 'http://public/url' 'http://internal/url' 'http://adminurl/url' region
salt 'v3' keystone.endpoint_create nova url='http://public/url' interface='public' region='RegionOne'
R8 R u Erroru$ Could not find the specified servicei RS u idt region_idt urlRU RT RW t publicurlt adminurlt internalurl( R) t service_getR- RX R< R[ ( RS Rg Ri Rh RT R Rf RU R R@ t keystone_service( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt endpoint_createt s
c K@ s� t | | � } t | | | | | � } | s: d | k rE i d d 6S| j j | d � t | | | | | � } | s� d | k r� t Sd S( u�
Delete endpoints of an Openstack service
CLI Examples:
.. code-block:: bash
salt 'v2' keystone.endpoint_delete nova [region=RegionOne]
salt 'v3' keystone.endpoint_delete nova interface=admin [region=RegionOne]
u Erroru, Could not find any endpoints for the serviceu idN( R) R[ RX RC R ( RS RT R RU R R@ R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt endpoint_delete� s c K@ sg t | | � } d t d | d | | � k rA i d j | � d 6S| j j | � t d | d | | � S( uw
Create a named role.
CLI Example:
.. code-block:: bash
salt '*' keystone.role_create admin
u ErrorR8 R u Role "{0}" already exists( R) t role_getRD t rolesR< ( R8 R R R@ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt role_create� s
c K@ s� t | | � } | rN x6 | j j � D]" } | j | k r% | j } Pq% q% Wn | s_ i d d 6S| j j | � } | j j | � d j | � } | r� | d j | � 7} n | S( u$
Delete a role (keystone role-delete)
CLI Examples:
.. code-block:: bash
salt '*' keystone.role_delete c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.role_delete role_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.role_delete name=admin
u Unable to resolve role idu Erroru Role ID {0} deletedu ({0})( R) Ro RH R8 RI R RC RD ( t role_idR8 R R R@ t roleRJ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt role_delete� s c K@ s� t | | � } i } | rT x6 | j j � D]" } | j | k r+ | j } Pq+ q+ Wn | se i d d 6S| j j | � } i | j d 6| j d 6| | j <| S( u
Return a specific roles (keystone role-get)
CLI Examples:
.. code-block:: bash
salt '*' keystone.role_get c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.role_get role_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.role_get name=nova
u Unable to resolve role idu Erroru idu name( R) Ro RH R8 RI R ( Rq R8 R R R@ RJ Rr ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyRn � s
c @ s\ t | | � } i } x@ | j j � D]/ � t � f d � t � � D� � | � j <q% W| S( u�
Return a list of available roles (keystone role-list)
CLI Example:
.. code-block:: bash
salt '*' keystone.role_list
c 3@ sX | ]N } | j d � r t t � | � t j t t f � r | t � | � f Vq d S( u _N( R\ R] R^ R R_ R` Ra ( Rb Rc ( Rr ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr> s ( R) Ro RH R` Rd R8 ( R R R@ RJ ( ( Rr s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt role_list� s
-c K@ s@ t | | � } | j j | | d | �} t | j d | | �S( u�
Add service to Keystone service catalog
CLI Examples:
.. code-block:: bash
salt '*' keystone.service_create nova compute 'OpenStack Compute Service'
t descriptionR ( R) RV R< Rj RI ( R8 t service_typeRu R R R@ RS ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt service_create
s c K@ sU t | | � } | r8 t d | d | | � | d } n | j j | � d j | � S( u�
Delete a service from Keystone service catalog
CLI Examples:
.. code-block:: bash
salt '*' keystone.service_delete c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.service_delete name=nova
R8 R u idu! Keystone service ID "{0}" deleted( R) Rj RV RC RD ( RW R8 R R R@ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt service_delete s c @ s� t | | � } i } | rT x6 | j j � D]" � � j | k r+ � j } Pq+ q+ Wn | se i d d 6S| j j | � � t � f d � t � � D� � | � j <| S( u2
Return a specific services (keystone service-get)
CLI Examples:
.. code-block:: bash
salt '*' keystone.service_get c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.service_get service_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.service_get name=nova
u Unable to resolve service idu Errorc 3@ sX | ]N } | j d � r t t � | � t j t t f � r | t � | � f Vq d S( u _N( R\ R] R^ R R_ R` Ra ( Rb Rc ( RS ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr>G s ( R) RV RH R8 RI R R` Rd ( RW R8 R R R@ RJ ( ( RS s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyRj 1 s )c @ s\ t | | � } i } x@ | j j � D]/ � t � f d � t � � D� � | � j <q% W| S( u�
Return a list of available services (keystone services-list)
CLI Example:
.. code-block:: bash
salt '*' keystone.service_list
c 3@ sX | ]N } | j d � r t t � | � t j t t f � r | t � | � f Vq d S( u _N( R\ R] R^ R R_ R` Ra ( Rb Rc ( RS ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr>Z s ( R) RV RH R` Rd R8 ( R R R@ RJ ( ( RS s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyRO M s
-c K@ sF t | | � } t | t d � j | | | � } t | j d | | �S( u�
Create a keystone tenant
CLI Examples:
.. code-block:: bash
salt '*' keystone.tenant_create nova description='nova tenant'
salt '*' keystone.tenant_create test enabled=False
R N( R) R^ R. R R< R: RI ( R8 Ru t enabledR R R@ t new( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt
tenant_create` s !c K@ sU t | | � } t | t d � j d | d | d | d | � } t | j d | | �S( u�
Create a keystone project.
Overrides keystone tenant_create form api V2. For keystone api V3.
.. versionadded:: 2016.11.0
name
The project name, which must be unique within the owning domain.
domain
The domain name.
description
The project description.
enabled
Enables or disables the project.
profile
Configuration profile - if configuration for multiple openstack accounts required.
CLI Examples:
.. code-block:: bash
salt '*' keystone.project_create nova default description='Nova Compute Project'
salt '*' keystone.project_create test default enabled=False
R8 t domainRu Ry R N( R) R^ R. R R< R: RI ( R8 R| Ru Ry R R R@ Rz ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt project_createq s !c K@ s� t | | � } | rW x? t | t d � j � D]" } | j | k r. | j } Pq. q. Wn | sh i d d 6St | t d � j | � d j | � } | r� | d j | � 7} n | S( u.
Delete a tenant (keystone tenant-delete)
CLI Examples:
.. code-block:: bash
salt '*' keystone.tenant_delete c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.tenant_delete tenant_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.tenant_delete name=demo
u Unable to resolve tenant idu Erroru Tenant ID {0} deletedu ({0})N( R) R^ R. R RH R8 RI RC RD ( R R8 R R R@ R RJ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt
tenant_delete� s c K@ s= t | | � t d k r5 t d | d | d d | � St Sd S( uV
Delete a project (keystone project-delete).
Overrides keystone tenant-delete form api V2. For keystone api V3 only.
.. versionadded:: 2016.11.0
project_id
The project id.
name
The project name.
profile
Configuration profile - if configuration for multiple openstack accounts required.
CLI Examples:
.. code-block:: bash
salt '*' keystone.project_delete c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.project_delete project_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.project_delete name=demo
i R R8 R N( R) R- R~ R R ( t
project_idR8 R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt project_delete� s
c @ s� t | | � } i } | r] x? t | t d � j � D]" � � j | k r4 � j } Pq4 q4 Wn | sn i d d 6St | t d � j | � � t � f d � t � � D� � | � j <| S( u,
Return a specific tenants (keystone tenant-get)
CLI Examples:
.. code-block:: bash
salt '*' keystone.tenant_get c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.tenant_get tenant_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.tenant_get name=nova
u Unable to resolve tenant idu Errorc 3@ sX | ]N } | j d � r t t � | � t j t t f � r | t � | � f Vq d S( u _N( R\ R] R^ R R_ R` Ra ( Rb Rc ( R ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr>� s N(
R) R^ R. R RH R8 RI R R` Rd ( R R8 R R R@ RJ ( ( R s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyR: � s
)c K@ s= t | | � t d k r5 t d | d | d d | � St Sd S( uT
Return a specific projects (keystone project-get)
Overrides keystone tenant-get form api V2.
For keystone api V3 only.
.. versionadded:: 2016.11.0
project_id
The project id.
name
The project name.
profile
Configuration profile - if configuration for multiple openstack accounts required.
CLI Examples:
.. code-block:: bash
salt '*' keystone.project_get c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.project_get project_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.project_get name=nova
i R R8 R N( R) R- R: R R ( R R8 R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt project_get� s
c @ se t | | � } i } xI t | t d � j � D]/ � t � f d � t � � D� � | � j <q. W| S( u�
Return a list of available tenants (keystone tenants-list)
CLI Example:
.. code-block:: bash
salt '*' keystone.tenant_list
c 3@ sX | ]N } | j d � r t t � | � t j t t f � r | t � | � f Vq d S( u _N( R\ R] R^ R R_ R` Ra ( Rb Rc ( R ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr> s N( R) R^ R. R RH R` Rd R8 ( R R R@ RJ ( ( R s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt tenant_list s
-c K@ s. t | | � t d k r& t | | � St Sd S( us
Return a list of available projects (keystone projects-list).
Overrides keystone tenants-list form api V2.
For keystone api V3 only.
.. versionadded:: 2016.11.0
profile
Configuration profile - if configuration for multiple openstack accounts required.
CLI Example:
.. code-block:: bash
salt '*' keystone.project_list
i N( R) R- R� R ( R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt project_list$ s
c @ s t | | � } | sW x? t | t d � j � D]" } | j | k r. | j } Pq. q. Wn | sh i d d 6St | t d � j | � } | s� | j } n | s� | j } n | d k r� | j } n t | t d � j
| d | d | d | �� t � f d � t � � D� � S( u�
Update a tenant's information (keystone tenant-update)
The following fields may be updated: name, description, enabled.
Can only update name if targeting by ID
CLI Examples:
.. code-block:: bash
salt '*' keystone.tenant_update name=admin enabled=True
salt '*' keystone.tenant_update c965f79c4f864eaaa9c3b41904e67082 name=admin email=admin@domain.com
u Unable to resolve tenant idu ErrorR8 Ru Ry c 3@ sX | ]N } | j d � r t t � | � t j t t f � r | t � | � f Vq d S( u _N( R\ R] R^ R R_ R` Ra ( Rb Rc ( t updated( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr>^ s N(
R) R^ R. R RH R8 RI R Ru Ry t updateR` Rd ( R R8 Ru Ry R R R@ R ( ( R� s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt
tenant_update= s" -c K@ sI t | | � t d k rA t d | d | d | d | d | | � St Sd S( uJ
Update a tenant's information (keystone project-update)
The following fields may be updated: name, description, enabled.
Can only update name if targeting by ID
Overrides keystone tenant_update form api V2.
For keystone api V3 only.
.. versionadded:: 2016.11.0
project_id
The project id.
name
The project name, which must be unique within the owning domain.
description
The project description.
enabled
Enables or disables the project.
profile
Configuration profile - if configuration for multiple openstack accounts required.
CLI Examples:
.. code-block:: bash
salt '*' keystone.project_update name=admin enabled=True
salt '*' keystone.project_update c965f79c4f864eaaa9c3b41904e67082 name=admin email=admin@domain.com
i R R8 Ru Ry R N( R) R- R� R ( R R8 Ru Ry R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt project_updatec s
"
c K@ sN t | | � } | j j � } i | d d 6| d d 6| d d 6| d d 6S( u�
Return the configured tokens (keystone token-get)
CLI Example:
.. code-block:: bash
salt '*' keystone.token_get c965f79c4f864eaaa9c3b41904e67082
u idu expiresu user_idu tenant_id( R) t service_catalogt get_token( R R R@ R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt token_get� s
c @ s� t | | � } i } xl | j j � D][ � t � f d � t � � D� � | � j <t � d d � } | r% | | � j d <q% q% W| S( u�
Return a list of available users (keystone user-list)
CLI Example:
.. code-block:: bash
salt '*' keystone.user_list
c 3@ s^ | ]T } | j d � r t t � | d � t j t t f � r | t � | d � f Vq d S( u _N( R\ R] R^ R R R_ R` Ra ( Rb Rc ( R ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr>� s u tenantIdu tenant_idN( R) RG RH R` Rd R8 R^ R ( R R R@ RJ R ( ( R s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt user_list� s
)c @ s t | | � } i } | rT x6 | j j � D]" � � j | k r+ � j } Pq+ q+ Wn | se i d d 6Sy | j j | � � Wn; t j j k
r� d j | � } t
j | � i | d 6SXt � f d � t
� � D� � | � j <t � d d � } | r| | � j d <n | S( u
Return a specific users (keystone user-get)
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_get c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.user_get user_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.user_get name=nova
u Unable to resolve user idu Erroru Could not find user '{0}'c 3@ s^ | ]T } | j d � r t t � | d � t j t t f � r | t � | d � f Vq d S( u _N( R\ R] R^ R R R_ R` Ra ( Rb Rc ( R ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr>� s u tenantIdu tenant_idN( R) RG RH R8 RI R t keystoneclientt
exceptionst NotFoundRD t logt errorR` Rd R^ R ( R? R8 R R R@ RJ t msgR ( ( R s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyR9 � s(
)c K@ s� t | | � } t d k rg | r1 | r1 | } n | j j d | d | d | d | d | d | � }
n- | j j d | d | d | d | d | � }
t |
j d | | �S(
u�
Create a user (keystone user-create)
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_create name=jack password=zero email=jack@halloweentown.org tenant_id=a28a7b5a999a455f84b1f5210264375e enabled=True
i R8 R t emailR Ry Ru R R ( R) R- RG R< R9 RI ( R8 R R� R Ry R R Ru R R@ t item( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt user_create� s
c K@ s� t | | � } | rN x6 | j j � D]" } | j | k r% | j } Pq% q% Wn | s_ i d d 6S| j j | � d j | � } | r� | d j | � 7} n | S( u"
Delete a user (keystone user-delete)
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_delete c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.user_delete user_id=c965f79c4f864eaaa9c3b41904e67082
salt '*' keystone.user_delete name=nova
u Unable to resolve user idu Erroru User ID {0} deletedu ({0})( R) RG RH R8 RI RC RD ( R? R8 R R R@ R RJ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt user_delete� s c
K@ s t | | � } | s_ x3 | j j � D]" }
|
j | k r% |
j } Pq% q% W| s_ i d d 6Sn | j j | � }
| s� |
j } n | s� |
j } n | d
k r� |
j } n t d k r}| d
k r� t
|
d d
� } n t j | � } d
} | r.x6 | j
j � D]" } | j | k r| j } PqqWn | sIt
|
d d
� } n | j j d | d | d | d | d
| d | � n� | j j d | d | d | d | � d
}
| rx3 | j j � D]" } | j | k r�| j }
Pq�q�W|
r| j j | |
� qn d j | � } | S( u�
Update a user's information (keystone user-update)
The following fields may be updated: name, email, enabled, tenant.
Because the name is one of the fields, a valid user id is required.
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_update user_id=c965f79c4f864eaaa9c3b41904e67082 name=newname
salt '*' keystone.user_update c965f79c4f864eaaa9c3b41904e67082 name=newname email=newemail@domain.com
u Unable to resolve user idu Errori u descriptionu
project_idR R8 R� Ry Ru R u Info updated for user ID {0}N( R) RG RH R8 RI R R� R Ry R- R^ R t text_typet projectsR� t tenantst
update_tenantRD ( R? R8 R� Ry R R t projectRu R R@ R R t projR t tntRJ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt user_update sP *
% c K@ s% t | | � } d | k r- | j d � } n5 t d k rO t d d d � } n t d d d � } | r� x6 | j j � D]" } | j | k rx | j } Pqx qx Wn | s� i d d 6Si | d 6| d
6| d 6} y- t d k r� t j | � n
t
j | � Wn$ t j j
t j j f k
r t SXt S( u
Verify a user's password
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_verify_password name=test password=foobar
salt '*' keystone.user_verify_password user_id=c965f79c4f864eaaa9c3b41904e67082 password=foobar
u connection_endpointi u
config.optionu keystone.endpointu http://127.0.0.1:35357/v3u http://127.0.0.1:35357/v2.0u Unable to resolve user nameu Erroru usernameu passwordu auth_url( R) R R- R RG RH RI R8 t client3t ClientR R� R� t Unauthorizedt AuthorizationFailureR R ( R? R8 R R R R@ R R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt user_verify_passwordX s4
c K@ s� t | | � } | rN x6 | j j � D]" } | j | k r% | j } Pq% q% Wn | s_ i d d 6St d k r� | j j d | d | � n | j j d | d | � d j | � } | r� | d j | � 7} n | S( u~
Update a user's password (keystone user-password-update)
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_password_update c965f79c4f864eaaa9c3b41904e67082 password=12345
salt '*' keystone.user_password_update user_id=c965f79c4f864eaaa9c3b41904e67082 password=12345
salt '*' keystone.user_password_update name=nova password=12345
u Unable to resolve user idu Errori R R u Password updated for user ID {0}u ({0})( R) RG RH R8 RI R- R� t update_passwordRD ( R? R8 R R R R@ R RJ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt user_password_update� s
c K@ s� t | | � }
| r% | r% | } n | r; | r; | } n | ri t d | d | | � | j d � } n( t t j t | d | | �� � d } | s� i d d 6S| r� t d | d | | � | j d � } n( t t j t | d | | �� � d } | s i d d 6S| r2t d | d | | � | d } n( t t j t | d | | �� � d } | ski d d 6St d k r�|
j j
| d
| d | �n |
j j | | | � d } | j | | | � S(
u\
Add role for user in tenant (keystone user-role-add)
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_role_add user_id=298ce377245c4ec9b70e1c639c89e654 tenant_id=7167a092ece84bae8cead4bf9d15bb3b role_id=ce377245c4ec9b70e1c639c89e8cead4
salt '*' keystone.user_role_add user=admin tenant=admin role=admin
R8 R u idu nameu Unable to resolve user idu Erroru# Unable to resolve tenant/project idu Unable to resolve role idi R R� u8 "{0}" role added for user "{1}" for "{2}" tenant/project(
R) R9 R t nextR t iterkeysR: Rn R- Ro t grantt
add_user_roleRD ( R? R R R Rq Rr R R t project_nameR R@ t ret_msg( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt
user_role_add� s>
c K@ s� t | | � }
| r% | r% | } n | r; | r; | } n | ri t d | d | | � | j d � } n( t t j t | d | | �� � d } | s� i d d 6S| r� t d | d | | � | j d � } n( t t j t | d | | �� � d } | s i d d 6S| r2t d | d | | � | d } n t t j t | � � � d } | sbi d d 6St d k r�|
j j
| d
| d | �n |
j j | | | � d } | j | | | � S(
uh
Remove role for user in tenant (keystone user-role-remove)
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_role_remove user_id=298ce377245c4ec9b70e1c639c89e654 tenant_id=7167a092ece84bae8cead4bf9d15bb3b role_id=ce377245c4ec9b70e1c639c89e8cead4
salt '*' keystone.user_role_remove user=admin tenant=admin role=admin
R8 R u idu nameu Unable to resolve user idu Erroru# Unable to resolve tenant/project idu Unable to resolve role idi R R� u4 "{0}" role removed for user "{1}" under "{2}" tenant(
R) R9 R R� R R� R: Rn R- Ro t revoket remove_user_roleRD ( R? R R R Rq Rr R R R� R R@ R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt user_role_remove� s<
c @ s� t | | � } i } | r+ | r+ | } n | rA | rA | } n | r� x6 | j j � D]" }
|
j | k rW |
j } PqW qW Wn | r� x? t | t d � j � D]" } | j | k r� | j } Pq� q� Wn | s� | r� i d d 6St d k r?x� | j j d | d | � D]/ � t
� f d � t � � D� � | � j <q WnU xR | j j d | d | � D]5 � i � j d 6� j d 6| d
6| d 6| � j <q[W| S(
u@
Return a list of available user_roles (keystone user-roles-list)
CLI Examples:
.. code-block:: bash
salt '*' keystone.user_role_list user_id=298ce377245c4ec9b70e1c639c89e654 tenant_id=7167a092ece84bae8cead4bf9d15bb3b
salt '*' keystone.user_role_list user_name=admin tenant_name=admin
u+ Unable to resolve user or tenant/project idu Errori R R� c 3@ sX | ]N } | j d � r t t � | � t j t t f � r | t � | � f Vq d S( u _N( R\ R] R^ R R_ R` Ra ( Rb Rc ( Rr ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pys <genexpr>< s R u idu nameu user_idu tenant_idN(
R) RG RH R8 RI R^ R. R R- Ro R` Rd t roles_for_user( R? R t user_namet tenant_nameR R R� R R@ RJ R R ( ( Rr s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt user_role_list s6
"0"
c K@ sC t | | � } g } x' | j j � D] } | j | j � q% W| S( u�
Template for writing list functions
Return a list of available items (keystone items-list)
CLI Example:
.. code-block:: bash
salt '*' keystone.item_list
( R) t itemsRH t appendt __dict__( R R R@ RJ R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt
_item_listH s
(J t __doc__t
__future__R R R t loggingt salt.utils.httpR# t salt.extR R R t keystoneclient.v2_0R t keystoneclient.exceptionsR� R t keystoneclient.v3R� R t
keystoneauth1R t keystoneauth1.identityR t ImportErrorR- R. t getLoggert __name__R� R
t __opts__R R R( R) RB RF RL RN R[ RP Rl Rm Rp Rs Rn Rt Rw Rx Rj RO R{ R} R~ R� R: R� R� R� R� R� R� R� R9 R� R� R� R� R� R� R� R� R� ( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/keystone.pyt <module>2 s�
, & # ! $ ! % * & ? + 8 7 0
Mini Shell