fog-proxmox 0.13.0

data/lib/fog/identity/proxmox.rb

@@ -0,0 +1,130 @@
+# frozen_string_literal: true
+# Copyright 2018 Tristan Robert
+
+# This file is part of Fog::Proxmox.
+
+# Fog::Proxmox is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# Fog::Proxmox is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with Fog::Proxmox. If not, see <http://www.gnu.org/licenses/>.
+
+# frozen_string_literal: true
+
+require 'fog/core'
+require 'fog/proxmox/string'
+
+module Fog
+  module Proxmox
+    # Identity and authentication proxmox class
+    class Identity < Fog::Service
+      requires :pve_url
+      recognizes :pve_ticket, :pve_path, :pve_ticket_expires, :pve_csrftoken, :persistent, :current_user, :pve_username, :pve_password, :pve_deadline
+
+      model_path 'fog/identity/proxmox/models'
+      model :principal
+      model :user
+      collection :users
+      model :group
+      collection :groups
+      model :pool
+      collection :pools
+      model :role
+      collection :roles
+      model :domain
+      model :domain_type
+      collection :domains
+      model :permission
+      collection :permissions
+
+      request_path 'fog/identity/proxmox/requests'
+
+      # Manage permissions
+      request :check_permissions
+      request :list_permissions
+      request :update_permissions
+      request :read_version
+
+      # Manage users
+      request :list_users
+      request :get_user
+      request :create_user
+      request :update_user
+      request :delete_user
+      request :change_password
+
+      # CRUD groups
+      request :list_groups
+      request :get_group
+      request :create_group
+      request :update_group
+      request :delete_group
+
+      # CRUD roles
+      request :list_roles
+      request :get_role
+      request :create_role
+      request :update_role
+      request :delete_role
+
+      # CRUD domains
+      request :list_domains
+      request :get_domain
+      request :create_domain
+      request :update_domain
+      request :delete_domain
+
+      # CRUD pools
+      request :list_pools
+      request :get_pool
+      request :create_pool
+      request :update_pool
+      request :delete_pool
+
+      # Mock class
+      class Mock
+        attr_reader :config
+
+        def initialize(options = {})
+          @pve_uri = URI.parse(options[:pve_url])
+          @pve_path = @pve_uri.path
+          @config = options
+        end
+      end
+
+      # Real class
+      class Real
+        include Fog::Proxmox::Core
+        def initialize(options = {})
+          initialize_identity(options)
+          @connection_options = options[:connection_options] || {}
+          @path_prefix = URI.parse(options[:pve_url]).path
+          authenticate
+          @persistent = options[:persistent] || false
+          url = "#{@scheme}://#{@host}:#{@port}"
+          if ENV.has_key?('SSL_VERIFY_PEER')
+            Excon.defaults[:ssl_verify_peer] = Fog::Proxmox::String.to_boolean(ENV['SSL_VERIFY_PEER'])
+          end
+          @connection = Fog::Core::Connection.new(url, @persistent, @connection_options.merge(path_prefix: @path_prefix))
+        end
+
+        def config
+          self
+        end
+
+        def configure(source)
+          source.instance_variables.each do |v|
+            instance_variable_set(v, source.instance_variable_get(v))
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/proxmox/models/domain.rb

@@ -0,0 +1,65 @@
+# Copyright 2018 Tristan Robert
+
+# This file is part of Fog::Proxmox.
+
+# Fog::Proxmox is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# Fog::Proxmox is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with Fog::Proxmox. If not, see <http://www.gnu.org/licenses/>.
+
+module Fog
+  module Proxmox
+    class Identity
+      # class Domain model authentication
+      class Domain < Fog::Model
+        identity :realm
+        attribute :comment
+        attribute :tfa
+        attribute :type
+
+        def initialize(new_attributes = {})
+          initialize_type(new_attributes)
+          super(new_attributes)
+        end
+
+        def save(new_attributes = {})
+          service.create_domain(type.attributes.merge(new_attributes).merge(attributes.reject { |attribute| [:type].include? attribute }))
+          reload
+        end
+
+        def destroy
+          requires :realm
+          service.delete_domain(realm)
+          true
+        end
+
+        def update
+          requires :realm
+          service.update_domain(realm, type.attributes.merge(attributes).reject { |attribute| [:type, :realm].include? attribute })
+          reload
+        end
+
+        private
+
+        def initialize_type(new_attributes = {})
+          if new_attributes.has_key? :realm
+            realm = new_attributes.delete(:realm)
+          elsif new_attributes.has_key? 'realm'              
+            realm = new_attributes.delete('realm')
+          end
+          attributes[:type] = Fog::Proxmox::Identity::DomainType.new(new_attributes)
+          new_attributes.delete_if { |new_attribute| attributes[:type].attributes.has_key? new_attribute.to_sym }
+          new_attributes.store(:realm, realm)
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/proxmox/models/domain_type.rb

@@ -0,0 +1,48 @@
+# Copyright 2018 Tristan Robert
+
+# This file is part of Fog::Proxmox.
+
+# Fog::Proxmox is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# Fog::Proxmox is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with Fog::Proxmox. If not, see <http://www.gnu.org/licenses/>.
+
+module Fog
+  module Proxmox
+    class Identity
+      # class Domain type model authentication
+      class DomainType < Fog::Model
+        identity :type
+        attribute :id
+        attribute :key
+        attribute :url
+        attribute :base_dn
+        attribute :bind_dn
+        attribute :capath
+        attribute :cert
+        attribute :certkey
+        attribute :comment
+        attribute :default
+        attribute :domain
+        attribute :port
+        attribute :secure
+        attribute :server1
+        attribute :server2
+        attribute :tfa
+        attribute :user_attr
+        attribute :verify
+        attribute :step
+        attribute :digits
+
+      end
+    end
+  end
+end

data/lib/fog/identity/proxmox/models/domains.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+# Copyright 2018 Tristan Robert
+
+# This file is part of Fog::Proxmox.
+
+# Fog::Proxmox is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# Fog::Proxmox is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with Fog::Proxmox. If not, see <http://www.gnu.org/licenses/>.
+
+require 'fog/identity/proxmox/models/domain'
+
+module Fog
+  module Proxmox
+    class Identity
+      # class Domains collection authentication
+      class Domains < Fog::Collection
+        model Fog::Proxmox::Identity::Domain
+
+        def all
+          load service.list_domains
+        end
+
+        def get(id)
+          all.find { |domain| domain.identity === id }
+        end
+
+        def destroy(id)
+          domain = get(id)
+          domain.destroy
+        end
+
+      end
+    end
+  end
+end

data/lib/fog/identity/proxmox/models/group.rb

@@ -0,0 +1,47 @@
+# Copyright 2018 Tristan Robert
+
+# This file is part of Fog::Proxmox.
+
+# Fog::Proxmox is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# Fog::Proxmox is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with Fog::Proxmox. If not, see <http://www.gnu.org/licenses/>.
+
+# frozen_string_literal: true
+
+module Fog
+  module Proxmox
+    class Identity
+      # class Group model authentication
+      class Group < Fog::Model
+        identity  :groupid
+        attribute :comment
+
+        def save(options = {})
+          service.create_group(attributes.merge(options))
+          reload
+        end
+
+        def destroy
+          requires :groupid
+          service.delete_group(groupid)
+          true
+        end
+
+        def update
+          requires :groupid
+          service.update_group(identity, attributes.reject { |attribute| [:groupid].include? attribute })
+          reload
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/proxmox/models/groups.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+# Copyright 2018 Tristan Robert
+
+# This file is part of Fog::Proxmox.
+
+# Fog::Proxmox is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# Fog::Proxmox is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with Fog::Proxmox. If not, see <http://www.gnu.org/licenses/>.
+
+require 'fog/identity/proxmox/models/group'
+
+module Fog
+  module Proxmox
+    class Identity
+      # class Groups authentication
+      class Groups < Fog::Collection
+        model Fog::Proxmox::Identity::Group
+
+        def all
+          load service.list_groups
+        end
+
+        def get(id)
+          all.find { |group| group.identity === id }
+        end
+
+        def destroy(id)
+          group = get(id)
+          group.destroy
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/proxmox/models/permission.rb

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+# Copyright 2018 Tristan Robert
+
+# This file is part of Fog::Proxmox.
+
+# Fog::Proxmox is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+
+# Fog::Proxmox is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+
+# You should have received a copy of the GNU General Public License
+# along with Fog::Proxmox. If not, see <http://www.gnu.org/licenses/>.
+
+module Fog
+  module Proxmox
+    class Identity
+      # class Permission
+      class Permission < Fog::Model
+        identity :type
+        identity :roleid
+        identity :path
+        identity :ugid
+        attribute :propagate
+
+        def save
+          service.update_permissions(to_update)
+        end
+
+        def destroy
+          service.update_permissions(to_update.merge(delete: 1))
+        end
+
+        private
+
+        def initialize_roles(new_attributes = {})
+          roles = new_attributes.delete(:roleid)
+          new_attributes.store(:roles, roles)       
+        end
+
+        def initialize_ugid(new_attributes = {})
+          ugs = new_attributes.delete(:ugid)
+          if type === 'user'
+            new_attributes.store(:users, ugs)
+          elsif type === 'group'
+            new_attributes.store(:groups, ugs)
+          end
+          new_attributes.delete(:type)          
+        end
+
+        def to_update
+          new_attributes = attributes.clone
+          initialize_roles(new_attributes)
+          initialize_ugid(new_attributes)
+          new_attributes
+        end
+      end
+    end
+  end
+end