fog-openstack 0.3.1 → 0.3.2

data/lib/fog/identity/openstack/v2/models/ec2_credential.rb

@@ -0,0 +1,39 @@
+require 'fog/openstack/models/model'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Ec2Credential < Fog::OpenStack::Model
+          identity :access, :aliases => 'access_key'
+
+          attribute :secret, :aliases => 'secret_key'
+          attribute :tenant_id
+          attribute :user_id
+
+          def destroy
+            requires :access
+            requires :user_id
+            service.delete_ec2_credential user_id, access
+            true
+          end
+
+          def save
+            raise Fog::Errors::Error, 'Existing credentials cannot be altered' if access
+
+            self.user_id ||= user.id
+            self.tenant_id ||= user.tenant_id
+
+            requires :user_id, :tenant_id
+
+            data = service.create_ec2_credential user_id, tenant_id
+
+            merge_attributes(data.body['credential'])
+
+            true
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/ec2_credentials.rb

@@ -0,0 +1,56 @@
+require 'fog/openstack/models/collection'
+require 'fog/identity/openstack/v2/models/ec2_credential'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Ec2Credentials < Fog::OpenStack::Collection
+          model Fog::Identity::OpenStack::V2::Ec2Credential
+
+          attribute :user
+
+          def all(options = {})
+            user_id = user ? user.id : nil
+
+            options[:user_id] = user_id
+            ec2_credentials = service.list_ec2_credentials(options)
+
+            load_response(ec2_credentials, 'credentials')
+          end
+
+          def create(attributes = {})
+            if user
+              attributes[:user_id] ||= user.id
+              attributes[:tenant_id] ||= user.tenant_id
+            end
+
+            super attributes
+          end
+
+          def destroy(access_key)
+            ec2_credential = find_by_access_key(access_key)
+            ec2_credential.destroy
+          end
+
+          def find_by_access_key(access_key)
+            user_id = user ? user.id : nil
+
+            ec2_credential =
+              find { |ec2_cred| ec2_cred.access == access_key }
+
+            unless ec2_credential
+              response = service.get_ec2_credential(user_id, access_key)
+              body = response.body['credential']
+              body = body.merge 'service' => service
+
+              ec2_credential = Fog::Identity::OpenStack::V2::EC2Credential.new(body)
+            end
+
+            ec2_credential
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/role.rb

@@ -0,0 +1,53 @@
+require 'fog/openstack/models/model'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Role < Fog::OpenStack::Model
+          identity :id
+          attribute :name
+
+          def save
+            requires :name
+            data = service.create_role(name)
+            merge_attributes(data.body['role'])
+            true
+          end
+
+          def destroy
+            requires :id
+            service.delete_role(id)
+            true
+          end
+
+          def add_to_user(user, tenant)
+            add_remove_to_user(user, tenant, :add)
+          end
+
+          def remove_to_user(user, tenant)
+            add_remove_to_user(user, tenant, :remove)
+          end
+
+          private
+
+          def add_remove_to_user(user, tenant, ops)
+            requires :id
+            user_id = get_id(user)
+            tenant_id = get_id(tenant)
+            case ops
+            when :add
+              service.create_user_role(tenant_id, user_id, id).status == 200
+            when :remove
+              service.delete_user_role(tenant_id, user_id, id).status == 204
+            end
+          end
+
+          def get_id(model_or_string)
+            model_or_string.kind_of?(String) ? id : model_or_string.id
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/roles.rb

@@ -0,0 +1,22 @@
+require 'fog/openstack/models/collection'
+require 'fog/identity/openstack/v2/models/role'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Roles < Fog::OpenStack::Collection
+          model Fog::Identity::OpenStack::V2::Role
+
+          def all(options = {})
+            load_response(service.list_roles(options), 'roles')
+          end
+
+          def get(id)
+            service.get_role(id)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/tenant.rb

@@ -0,0 +1,63 @@
+require 'fog/openstack/models/model'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Tenant < Fog::OpenStack::Model
+          identity :id
+
+          attribute :description
+          attribute :enabled
+          attribute :name
+
+          def to_s
+            name
+          end
+
+          def roles_for(user)
+            service.roles(
+              :tenant => self,
+              :user   => user
+            )
+          end
+
+          def users
+            requires :id
+            service.users(:tenant_id => id)
+          end
+
+          def destroy
+            requires :id
+            service.delete_tenant(id)
+            true
+          end
+
+          def update(attr = nil)
+            requires :id, :name
+            merge_attributes(
+              service.update_tenant(id, attr || attributes).body['tenant']
+            )
+            self
+          end
+
+          def create
+            requires :name
+            merge_attributes(
+              service.create_tenant(attributes).body['tenant']
+            )
+            self
+          end
+
+          def grant_user_role(user_id, role_id)
+            service.add_user_to_tenant(id, user_id, role_id)
+          end
+
+          def revoke_user_role(user_id, role_id)
+            service.remove_user_from_tenant(id, user_id, role_id)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/tenants.rb

@@ -0,0 +1,32 @@
+require 'fog/openstack/models/collection'
+require 'fog/identity/openstack/v2/models/tenant'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Tenants < Fog::OpenStack::Collection
+          model Fog::Identity::OpenStack::V2::Tenant
+
+          def all(options = {})
+            load_response(service.list_tenants(options), 'tenants')
+          end
+
+          def find_by_id(id)
+            cached_tenant = find { |tenant| tenant.id == id }
+            return cached_tenant if cached_tenant
+            tenant_hash = service.get_tenant(id).body['tenant']
+            Fog::Identity::OpenStack::V2::Tenant.new(
+              tenant_hash.merge(:service => service)
+            )
+          end
+
+          def destroy(id)
+            tenant = find_by_id(id)
+            tenant.destroy
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/user.rb

@@ -0,0 +1,69 @@
+require 'fog/openstack/models/model'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class User < Fog::OpenStack::Model
+          identity :id
+
+          attribute :email
+          attribute :enabled
+          attribute :name
+          attribute :tenant_id, :aliases => 'tenantId'
+          attribute :password
+
+          attr_accessor :email, :name, :tenant_id, :enabled, :password
+
+          def ec2_credentials
+            requires :id
+            service.ec2_credentials(:user => self)
+          end
+
+          def save
+            raise Fog::Errors::Error, 'Resaving an existing object may create a duplicate' if persisted?
+            requires :name
+            enabled = true if enabled.nil?
+            data = service.create_user(name, password, email, tenant_id, enabled)
+            merge_attributes(data.body['user'])
+            true
+          end
+
+          def update(options = {})
+            requires :id
+            options.merge('id' => id)
+            service.update_user(id, options)
+            true
+          end
+
+          def update_password(password)
+            update('password' => password, 'url' => "/users/#{id}/OS-KSADM/password")
+          end
+
+          def update_tenant(tenant)
+            tenant = tenant.id if tenant.class != String
+            update(:tenantId => tenant, 'url' => "/users/#{id}/OS-KSADM/tenant")
+          end
+
+          def update_enabled(enabled)
+            update(:enabled => enabled, 'url' => "/users/#{id}/OS-KSADM/enabled")
+          end
+
+          def destroy
+            requires :id
+            service.delete_user(id)
+            true
+          end
+
+          def roles(tenant_id = self.tenant_id)
+            if tenant_id
+              service.list_roles_for_user_on_tenant(tenant_id, id).body['roles']
+            else
+              []
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/users.rb

@@ -0,0 +1,45 @@
+require 'fog/openstack/models/collection'
+require 'fog/identity/openstack/v2/models/user'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Users < Fog::OpenStack::Collection
+          model Fog::Identity::OpenStack::V2::User
+
+          attribute :tenant_id
+
+          def all(options = {})
+            options[:tenant_id] = tenant_id
+
+            load_response(service.list_users(options), 'users')
+          end
+
+          def find_by_id(id)
+            find { |user| user.id == id } ||
+              Fog::Identity::OpenStack::V2::User.new(
+                service.get_user_by_id(id).body['user'].merge(
+                  'service' => service
+                )
+              )
+          end
+
+          def find_by_name(name)
+            find { |user| user.name == name } ||
+              Fog::Identity::OpenStack::V2::User.new(
+                service.get_user_by_name(name).body['user'].merge(
+                  'service' => service
+                )
+              )
+          end
+
+          def destroy(id)
+            user = find_by_id(id)
+            user.destroy
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/requests/add_user_to_tenant.rb

@@ -0,0 +1,36 @@
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Real
+          def add_user_to_tenant(tenant_id, user_id, role_id)
+            request(
+              :expects => 200,
+              :method  => 'PUT',
+              :path    => "/tenants/#{tenant_id}/users/#{user_id}/roles/OS-KSADM/#{role_id}"
+            )
+          end
+        end
+
+        class Mock
+          def add_user_to_tenant(tenant_id, user_id, role_id)
+            role = data[:roles][role_id]
+            data[:user_tenant_membership][tenant_id] ||= {}
+            data[:user_tenant_membership][tenant_id][user_id] ||= []
+            data[:user_tenant_membership][tenant_id][user_id].push(role['id']).uniq!
+
+            response = Excon::Response.new
+            response.status = 200
+            response.body = {
+              'role' => {
+                'id'   => role['id'],
+                'name' => role['name']
+              }
+            }
+            response
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/requests/check_token.rb

@@ -0,0 +1,22 @@
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Real
+          def check_token(token_id, tenant_id = nil)
+            request(
+              :expects => [200, 203],
+              :method  => 'HEAD',
+              :path    => "tokens/#{token_id}" + (tenant_id ? "?belongsTo=#{tenant_id}" : '')
+            )
+          end
+        end
+
+        class Mock
+          def check_token(token_id, tenant_id = nil)
+          end
+        end
+      end
+    end
+  end
+end