fog-zj 0.1.28

data/lib/fog/identity/openstack/v2.rb

@@ -0,0 +1,181 @@
+require 'fog/identity/openstack'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2 < Fog::Service
+        requires :openstack_auth_url
+        recognizes :openstack_auth_token, :openstack_management_url,
+                   :persistent, :openstack_service_type, :openstack_service_name,
+                   :openstack_tenant, :openstack_tenant_id,
+                   :openstack_api_key, :openstack_username, :openstack_identity_endpoint,
+                   :current_user, :current_tenant, :openstack_region,
+                   :openstack_endpoint_type, :openstack_cache_ttl,
+                   :openstack_project_name, :openstack_project_id,
+                   :openstack_project_domain, :openstack_user_domain, :openstack_domain_name,
+                   :openstack_project_domain_id, :openstack_user_domain_id, :openstack_domain_id,
+                   :openstack_identity_prefix, :openstack_endpoint_path_matches
+
+        model_path 'fog/identity/openstack/v2/models'
+        model :tenant
+        collection :tenants
+        model :user
+        collection :users
+        model :role
+        collection :roles
+        model :ec2_credential
+        collection :ec2_credentials
+
+        request_path 'fog/identity/openstack/v2/requests'
+
+        request :check_token
+        request :validate_token
+
+        request :list_tenants
+        request :create_tenant
+        request :get_tenant
+        request :get_tenants_by_id
+        request :get_tenants_by_name
+        request :update_tenant
+        request :delete_tenant
+
+        request :list_users
+        request :create_user
+        request :update_user
+        request :delete_user
+        request :get_user_by_id
+        request :get_user_by_name
+        request :add_user_to_tenant
+        request :remove_user_from_tenant
+
+        request :list_endpoints_for_token
+        request :list_roles_for_user_on_tenant
+        request :list_user_global_roles
+
+        request :create_role
+        request :delete_role
+        request :delete_user_role
+        request :create_user_role
+        request :get_role
+        request :list_roles
+
+        request :set_tenant
+
+        request :create_ec2_credential
+        request :delete_ec2_credential
+        request :get_ec2_credential
+        request :list_ec2_credentials
+
+        class Mock
+          attr_reader :auth_token
+          attr_reader :auth_token_expiration
+          attr_reader :current_user
+          attr_reader :current_tenant
+          attr_reader :unscoped_token
+
+          def self.data
+            @users ||= {}
+            @roles ||= {}
+            @tenants ||= {}
+            @ec2_credentials ||= Hash.new { |hash, key| hash[key] = {} }
+            @user_tenant_membership ||= {}
+
+            @data ||= Hash.new do |hash, key|
+              hash[key] = {
+                :users                  => @users,
+                :roles                  => @roles,
+                :tenants                => @tenants,
+                :ec2_credentials        => @ec2_credentials,
+                :user_tenant_membership => @user_tenant_membership
+              }
+            end
+          end
+
+          def self.reset!
+            @data = nil
+            @users = nil
+            @roles = nil
+            @tenants = nil
+            @ec2_credentials = nil
+          end
+
+          def initialize(options = {})
+            @openstack_username = options[:openstack_username] || 'admin'
+            @openstack_tenant = options[:openstack_tenant] || 'admin'
+            @openstack_auth_uri = URI.parse(options[:openstack_auth_url])
+            @openstack_management_url = @openstack_auth_uri.to_s
+
+            @auth_token = Fog::Mock.random_base64(64)
+            @auth_token_expiration = (Time.now.utc + 86400).iso8601
+
+            @admin_tenant = data[:tenants].values.find do |u|
+              u['name'] == 'admin'
+            end
+
+            if @openstack_tenant
+              @current_tenant = data[:tenants].values.find do |u|
+                u['name'] == @openstack_tenant
+              end
+
+              if @current_tenant
+                @current_tenant_id = @current_tenant['id']
+              else
+                @current_tenant_id = Fog::Mock.random_hex(32)
+                @current_tenant = data[:tenants][@current_tenant_id] = {
+                  'id'   => @current_tenant_id,
+                  'name' => @openstack_tenant
+                }
+              end
+            else
+              @current_tenant = @admin_tenant
+            end
+
+            @current_user = data[:users].values.find do |u|
+              u['name'] == @openstack_username
+            end
+            @current_tenant_id = Fog::Mock.random_hex(32)
+
+            if @current_user
+              @current_user_id = @current_user['id']
+            else
+              @current_user_id = Fog::Mock.random_hex(32)
+              @current_user = data[:users][@current_user_id] = {
+                'id'       => @current_user_id,
+                'name'     => @openstack_username,
+                'email'    => "#{@openstack_username}@mock.com",
+                'tenantId' => Fog::Mock.random_numbers(6).to_s,
+                'enabled'  => true
+              }
+            end
+          end
+
+          def data
+            self.class.data[@openstack_username]
+          end
+
+          def reset_data
+            self.class.data.delete(@openstack_username)
+          end
+
+          def credentials
+            {:provider                  => 'openstack',
+             :openstack_auth_url        => @openstack_auth_uri.to_s,
+             :openstack_auth_token      => @auth_token,
+             :openstack_management_url  => @openstack_management_url,
+             :openstack_current_user_id => @openstack_current_user_id,
+             :current_user              => @current_user,
+             :current_tenant            => @current_tenant}
+          end
+        end
+
+        class Real < Fog::Identity::OpenStack::Real
+          private
+
+          def default_service_type(_)
+            DEFAULT_SERVICE_TYPE
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/ec2_credential.rb

@@ -0,0 +1,39 @@
+require 'fog/openstack/models/model'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Ec2Credential < Fog::OpenStack::Model
+          identity :access, :aliases => 'access_key'
+
+          attribute :secret, :aliases => 'secret_key'
+          attribute :tenant_id
+          attribute :user_id
+
+          def destroy
+            requires :access
+            requires :user_id
+            service.delete_ec2_credential user_id, access
+            true
+          end
+
+          def save
+            raise Fog::Errors::Error, 'Existing credentials cannot be altered' if access
+
+            self.user_id ||= user.id
+            self.tenant_id ||= user.tenant_id
+
+            requires :user_id, :tenant_id
+
+            data = service.create_ec2_credential user_id, tenant_id
+
+            merge_attributes(data.body['credential'])
+
+            true
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/ec2_credentials.rb

@@ -0,0 +1,56 @@
+require 'fog/openstack/models/collection'
+require 'fog/identity/openstack/v2/models/ec2_credential'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Ec2Credentials < Fog::OpenStack::Collection
+          model Fog::Identity::OpenStack::V2::Ec2Credential
+
+          attribute :user
+
+          def all(options = {})
+            user_id = user ? user.id : nil
+
+            options[:user_id] = user_id
+            ec2_credentials = service.list_ec2_credentials(options)
+
+            load_response(ec2_credentials, 'credentials')
+          end
+
+          def create(attributes = {})
+            if user
+              attributes[:user_id] ||= user.id
+              attributes[:tenant_id] ||= user.tenant_id
+            end
+
+            super attributes
+          end
+
+          def destroy(access_key)
+            ec2_credential = find_by_access_key(access_key)
+            ec2_credential.destroy
+          end
+
+          def find_by_access_key(access_key)
+            user_id = user ? user.id : nil
+
+            ec2_credential =
+              find { |ec2_cred| ec2_cred.access == access_key }
+
+            unless ec2_credential
+              response = service.get_ec2_credential(user_id, access_key)
+              body = response.body['credential']
+              body = body.merge 'service' => service
+
+              ec2_credential = Fog::Identity::OpenStack::V2::EC2Credential.new(body)
+            end
+
+            ec2_credential
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/role.rb

@@ -0,0 +1,53 @@
+require 'fog/openstack/models/model'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Role < Fog::OpenStack::Model
+          identity :id
+          attribute :name
+
+          def save
+            requires :name
+            data = service.create_role(name)
+            merge_attributes(data.body['role'])
+            true
+          end
+
+          def destroy
+            requires :id
+            service.delete_role(id)
+            true
+          end
+
+          def add_to_user(user, tenant)
+            add_remove_to_user(user, tenant, :add)
+          end
+
+          def remove_to_user(user, tenant)
+            add_remove_to_user(user, tenant, :remove)
+          end
+
+          private
+
+          def add_remove_to_user(user, tenant, ops)
+            requires :id
+            user_id = get_id(user)
+            tenant_id = get_id(tenant)
+            case ops
+            when :add
+              service.create_user_role(tenant_id, user_id, id).status == 200
+            when :remove
+              service.delete_user_role(tenant_id, user_id, id).status == 204
+            end
+          end
+
+          def get_id(model_or_string)
+            model_or_string.kind_of?(String) ? id : model_or_string.id
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/roles.rb

@@ -0,0 +1,22 @@
+require 'fog/openstack/models/collection'
+require 'fog/identity/openstack/v2/models/role'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Roles < Fog::OpenStack::Collection
+          model Fog::Identity::OpenStack::V2::Role
+
+          def all(options = {})
+            load_response(service.list_roles(options), 'roles')
+          end
+
+          def get(id)
+            service.get_role(id)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/tenant.rb

@@ -0,0 +1,63 @@
+require 'fog/openstack/models/model'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Tenant < Fog::OpenStack::Model
+          identity :id
+
+          attribute :description
+          attribute :enabled
+          attribute :name
+
+          def to_s
+            name
+          end
+
+          def roles_for(user)
+            service.roles(
+              :tenant => self,
+              :user   => user
+            )
+          end
+
+          def users
+            requires :id
+            service.users(:tenant_id => id)
+          end
+
+          def destroy
+            requires :id
+            service.delete_tenant(id)
+            true
+          end
+
+          def update(attr = nil)
+            requires :id, :name
+            merge_attributes(
+              service.update_tenant(id, attr || attributes).body['tenant']
+            )
+            self
+          end
+
+          def create
+            requires :name
+            merge_attributes(
+              service.create_tenant(attributes).body['tenant']
+            )
+            self
+          end
+
+          def grant_user_role(user_id, role_id)
+            service.add_user_to_tenant(id, user_id, role_id)
+          end
+
+          def revoke_user_role(user_id, role_id)
+            service.remove_user_from_tenant(id, user_id, role_id)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/fog/identity/openstack/v2/models/tenants.rb

@@ -0,0 +1,32 @@
+require 'fog/openstack/models/collection'
+require 'fog/identity/openstack/v2/models/tenant'
+
+module Fog
+  module Identity
+    class OpenStack
+      class V2
+        class Tenants < Fog::OpenStack::Collection
+          model Fog::Identity::OpenStack::V2::Tenant
+
+          def all(options = {})
+            load_response(service.list_tenants(options), 'tenants')
+          end
+
+          def find_by_id(id)
+            cached_tenant = find { |tenant| tenant.id == id }
+            return cached_tenant if cached_tenant
+            tenant_hash = service.get_tenant(id).body['tenant']
+            Fog::Identity::OpenStack::V2::Tenant.new(
+              tenant_hash.merge(:service => service)
+            )
+          end
+
+          def destroy(id)
+            tenant = find_by_id(id)
+            tenant.destroy
+          end
+        end
+      end
+    end
+  end
+end