lmcadm 0.5.0

data/lib/lmcadm/account_commands.rb

@@ -0,0 +1,396 @@
+require 'gli'
+module LMCAdm
+  include GLI::App
+  extend self
+
+  subcommand_option_handling :normal
+
+  desc 'Work on accounts (invite users)'
+  command :account do |c|
+    c.desc 'Account type (DISTRIBUTION, ...)'
+    c.flag :t, :account_type
+
+    c.desc 'List accounts'
+    c.command :list do |account_list|
+      account_list.desc 'Show detailed info (long)'
+      account_list.switch :l, :long
+      account_list.action do |global_options, options, args|
+        t = ProgressVisualizer.new "Cloud login"
+        lmcen = LMC::Cloud.new(global_options[:cloud_host], global_options[:user], global_options[:password])
+        t.done
+        t = ProgressVisualizer.new "Getting accounts"
+        accounts = lmcen.get_accounts_objects
+        t.done
+        if options[:account_type]
+          accounts = accounts.select do |a|
+            a["type"] == options[:account_type]
+          end
+        end
+        accounts.sort {|a, b| a["name"] <=> b["name"]}.each do |account|
+          puts account.inspect if global_options[:v]
+          if options[:l]
+            puts account["name"] + " (" + account["type"] + ") ID: " + account["id"]
+          else
+            puts account["name"] + " (" + account["type"] + ")"
+          end
+        end
+        puts accounts.length.to_s + " Accounts found"
+      end
+    end
+
+    c.desc 'Show account'
+    c.arg_name 'UUID|Name'
+    c.command :show do |account_show|
+
+      account_show.action do |global_options, options, args|
+        a = LMC::Account.get_by_uuid_or_name(args[0])
+        puts a.inspect
+        a.sites.each do |site|
+          puts "#{site} - #{site.account}"
+        end
+      end
+    end
+
+    c.desc 'Show device config state summary for account'
+    c.arg_name 'UUID|Name'
+    c.command :configstates do |account_configstates|
+      account_configstates.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name args[0]
+        states = account.config_updatestates
+        puts "Current: #{states.actual}, outdated: #{states.outdated}"
+      end
+    end
+
+    c.desc 'Show account sites'
+    c.arg_name 'UUID|Name', [:required]
+    c.command :sites do |c|
+      c.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name args[0]
+        sites = account.sites
+        sites.each do |site|
+          puts "#{site} - Config current: #{site.configstates.actual}, outdated: #{site.configstates.outdated}"
+        end
+      end
+    end
+
+    c.arg_name "name"
+    c.desc 'Create new accounts'
+    c.command :create do |account_create|
+
+      account_create.desc 'parent uuid|name'
+      account_create.flag :p
+      account_create.action do |global_options, options, args|
+        parent = LMC::Account.get_by_uuid_or_name options[:p]
+        t = ProgressVisualizer.new "Creating object"
+        a = LMC::Account.new({"name" => args.first,
+                              "type" => options[GLI::Command::PARENT][:account_type],
+                              "parent" => parent.id})
+        t.done
+        t = ProgressVisualizer.new "Saving #{a.name}"
+        result = a.save
+        t.done
+        puts a.id
+        puts result.inspect if global_options[:debug]
+
+
+      end
+    end
+
+
+    c.arg_name 'UUID|Name'
+    c.desc 'Delete account'
+    c.command :delete do |account_del|
+      account_del.desc 'Treat argument as pattern against account name'
+      account_del.switch :e
+      account_del.action do |global_options, options, args|
+        t = ProgressVisualizer.new "Getting accounts"
+        if options[:e]
+          accounts = LMC::Cloud.instance.get_accounts_objects
+          matched_accounts = accounts.select {|account| /#{args.first}/.match(account.name)}
+        else
+          matched_accounts = [LMC::Account.get_by_uuid_or_name(args.first)]
+        end
+        t.done
+        puts 'Accounts to delete:'
+        puts matched_accounts.map {|a| "#{a.id} - #{a.name}"}.join("\n")
+        print('Type yes to confirm: ')
+        exit unless STDIN.gets.chomp == 'yes'
+        t = ProgressVisualizer.new "Deleting accounts"
+        matched_accounts.each do |a|
+          a.delete
+          t.dot
+        end
+        t.done
+      end
+    end
+
+    c.arg_name 'UUID|Name'
+    c.desc 'Show account logs'
+    c.command :logs do |account_show|
+      account_show.action do |global_options, options, args|
+        t = ProgressVisualizer.new "Getting account"
+        a = LMC::Account.get_by_uuid_or_name(args.first)
+        t.done
+        t = ProgressVisualizer.new "Getting account logs"
+        logs = a.logs
+        t.done
+        logs.each do |line|
+          puts "#{line['created']} #{line['message']}"
+        end
+      end
+    end
+
+    c.arg_name "new name"
+    c.desc 'Rename account'
+    c.command :rename do |account_rename|
+      account_rename.desc 'Account uuid|name'
+      account_rename.flag :A, :account
+      account_rename.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name options[:account]
+        account.name = args.first
+        account.save
+      end
+    end
+
+
+    c.arg_name 'UUID|Name'
+    c.desc 'List account members'
+    c.command :memberlist do |memberlist|
+      memberlist.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name args.first
+        members = account.members
+        tp members, [{:id => {:width => 36}}, :name, :type, :state, :invitationState, :principalState, :authorities]
+      end
+    end
+
+    # Commented out due to bad quality at the moment.
+    # This code is untested after the gem split.
+=begin
+    c.desc 'Modify account members'
+    c.command :memberupdate do |memberupdate|
+      memberupdate.desc 'Account UUID'
+      memberupdate.flag :a, "account-uuid", :required => true
+
+      memberupdate.desc 'Principal UUID'
+      memberupdate.flag :u, :uuid, :required => true
+
+      memberupdate.desc 'Authority'
+      memberupdate.flag :authority
+
+      memberupdate.action do |global_options, options, args|
+        account = LMCAccount.get options[:a]
+
+        account_authorities = account.authorities
+        puts account_authorities.inspect if global_options[:debug]
+        authority = account_authorities.find {|auth| auth["name"] == options[:authority]}
+        puts authority if global_options[:debug]
+        puts "authority id: #{authority["id"]}" if global_options[:debug]
+
+        resp = account.update_member options[:u], {:authorities => [authority["id"]]}
+        puts "response: #{resp.inspect}"
+        if resp.code == 200
+          puts "Updated success"
+
+        else
+          loggerr.error "ERROR: #{resp.code} #{resp.body.message}"
+        end
+
+      end
+    end
+
+    c.arg_name "email address", [:optional, :multiple]
+    c.desc 'Invite members, requires an account type'
+    c.command :invite do |account_invite|
+
+      account_invite.desc "File with email addresses; one address per line"
+      account_invite.flag :file
+      #account_invite.desc "Email address to invite"
+      #account_invite.flag :
+      account_invite.desc 'Account name'
+      account_invite.flag :account_name, :A, :required => true
+
+      account_invite.desc 'Member type'
+      account_invite.default_value "MEMBER"
+      account_invite.flag :member_type
+
+      account_invite.desc 'Authority'
+      account_invite.default_value "PROJECT_VIEWER"
+      account_invite.flag :authority
+
+      account_invite.desc 'Do not make changes'
+      account_invite.switch :n, :dry
+
+      account_invite.desc "Send emails (deprecated)"
+      account_invite.default_value false
+      account_invite.switch :e, "send-mail", "send-email"
+
+      account_invite.default_value false
+      account_invite.switch "show-csv"
+
+      account_invite.action do |global_options, options, args|
+
+        puts "ARGS:" + args.inspect if global_options[:debug]
+        lmcen = Cloud.new(global_options[:cloud_host], global_options[:user], global_options[:password])
+        t = ProgressVisualizer.new "Getting account"
+        account = lmcen.get_account options[:account_name], options[GLI::Command::PARENT][:account_type]
+        t.done
+
+        am = AccountManager.new(options, global_options)
+        if options[:file]
+          t = ProgressVisualizer.new "Inviting from file"
+          File.foreach(options[:file]) do |line|
+            if nil != am.invite(lmcen, account, line, options[:member_type], options[:authority])
+              t.dot
+            else
+              t.X
+            end
+          end
+          t.done
+        end
+        if not args.empty?
+          t = ProgressVisualizer.new "Inviting from arguments"
+          args.each do |line|
+            if nil != am.invite(lmcen, account, line, options[:member_type], options[:authority])
+              t.dot
+            else
+              t.X
+            end
+          end
+          t.done
+        end
+        loggerr.info am.errors unless am.errors.empty?
+
+      end
+    end
+=end
+    c.arg_name "Account name|UUID", [:required]
+    c.desc 'List authorities'
+    c.command :authorities do |auth|
+
+      auth.action do |g, o, args|
+        account = LMC::Account.get_by_uuid_or_name args.first
+        authorities = account.authorities
+        puts authorities.first.inspect
+        max = Helpers::longest_in_collection(authorities.map {|a| a.name})
+        puts max
+        tp authorities, [{:id => {:width => 36}}, {:name => {:width => max}}, :visibility, :type]
+      end
+    end
+
+    c.arg_name "email address", [:multiple]
+    c.desc 'Invite members, requires an account type'
+    c.command :invite do |account_invite|
+      account_invite.flag :A, :account, :required => true
+      account_invite.flag :r, :role, :required => true
+      account_invite.flag :t, :type, :required => true
+      account_invite.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name options[:account]
+        cloud = LMC::Cloud.instance
+        chosen_authorities = account.authorities.select {|auth| auth.name == options[:role]}
+        args.each do |email|
+            cloud.invite_user_to_account email, account.id, options[:type], chosen_authorities
+        end
+      end
+
+    end
+
+    c.desc 'Leave account'
+    c.arg_name "Account id"
+    c.command :leave do |leave|
+      leave.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid(args[0])
+        puts "Leave account \"#{account.name}\""
+        puts account.remove_membership_self
+      end
+    end
+
+    c.arg_name 'member name', [:required]
+    c.desc 'Add Member'
+    c.command :memberadd do |ma|
+      ma.flag :A, :account, :required => true
+      ma.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name(options[:account])
+        membership = LMC::Membership.new
+        membership.name = args.first
+        membership.type = "MEMBER"
+        membership.state = "ACTIVE"
+        membership.authorities = [LMC::Authority::CLOUD_SERVICE_DEVICE_PRIVATE_CLOUD]
+        puts membership.to_json
+        c = LMC::Cloud.instance
+        target_account = LMC::Account.get_by_uuid_or_name options[:account]
+        c.auth_for_account LMC::Account.get LMC::Account::ROOT_ACCOUNT_UUID
+        c.post ['cloud-service-auth', 'accounts', target_account.id, 'members'], membership
+      end
+    end
+
+
+    c.arg_name 'member name', [:required]
+    c.desc 'Remove member from account'
+    c.command :memberremove do |memberremove|
+      memberremove.flag :A, :account, :required => true
+      memberremove.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name(options[:account])
+        membership = account.find_member_by_name args.first
+        puts "Leave account \"#{account.name}\""
+        puts account.remove_membership membership.id
+      end
+    end
+
+
+    # IF the special flag is set, do weird license magic for ninden
+    # * Für alle unterliegenden Organisationen
+    # -> POST /accounts/{accountId}/conditions/device-operation
+    # -> "templateAllowTestAllocation": true,
+    # -> "templateTestDuration": 30
+    # * Für alle unterliegenden Projekte
+    # -> POST /accounts/{accountId}/conditions/device-operation
+    # -> "allowTestAllocation": true,
+    # -> "testDuration": 30
+    c.desc 'List account children'
+    c.arg_name 'UUID|Name'
+    c.command :children do |children|
+      children.flag :special
+      children.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name args.first
+        cloud = LMC::Cloud.instance
+
+        # def recurse_print_children(root_acc, account, options, cloud)
+        #   children = root_acc.children_for_account_id account.id
+        #   children.each do |child|
+        #     puts "\n#{child["name"]} #{child["id"]} #{child["type"]}"
+        #     if options[:special] == "read"
+        #       puts cloud.get ["cloud-service-licenses", "accounts", child["id"], "conditions"]
+        #     end
+        #     if options[:special] == "write"
+        #       if child["type"] == "ORGANIZATION"
+        #         #puts cloud.get ["cloud-service-licenses", "accounts", child["id"], "conditions", "device-operation"]
+        #         puts cloud.post ["cloud-service-licenses", "accounts", child["id"], "conditions", "device-operation"], {"templateAllowTestAllocation" => true, "templateTestDuration": 30}
+        #       end
+        #       if child["type"] == "PROJECT"
+        #         #puts cloud.get ["cloud-service-licenses", "accounts", child["id"], "conditions", "device-operation"]
+        #         puts cloud.post ["cloud-service-licenses", "accounts", child["id"], "conditions", "device-operation"], {"allowTestAllocation" => true, "testDuration": 30}
+        #       end
+        #
+        #     end
+        #   end
+        #   children.each do |child|
+        #     childacc = LMCAccount.new(child)
+        #     recurse_print_children(childacc, childacc, options, cloud)
+        #   end
+        # end
+        #recurse_print_children(account, account, options, cloud)
+        def recurse_childen account, indent_level
+          children = account.children
+          children.each do |child|
+            puts '  ' * indent_level + child.to_s
+            begin
+              recurse_childen child, indent_level + 1
+            rescue RestClient::Forbidden => e
+            end
+          end
+        end
+        recurse_childen account, 0
+      end
+    end
+  end
+end

data/lib/lmcadm/cloud_commands.rb

@@ -0,0 +1,77 @@
+require 'gli'
+module LMCAdm
+  include GLI::App
+  extend self
+  subcommand_option_handling :normal
+
+  desc 'Generic lmc operations'
+  command :cloud do |c|
+    c.desc 'Check cloud connectivity'
+    c.action do |global_options|
+      lmcen = LMC::Cloud.new(global_options[:cloud_host], global_options[:user], global_options[:password])
+      puts "Base URL: #{lmcen.build_url}"
+      puts "Cloud connection OK" if lmcen.auth_ok
+      if global_options[:v]
+        puts "authentication token: " + lmcen.session_token
+      end
+    end
+    c.command :about do |cloud_about|
+      cloud_about.action do |global_options|
+        cloud = LMC::Cloud.instance
+        #account = cloud.get_account(nil, 'ROOT')
+        #puts account.inspect
+        #cloud.auth_for_accounts([account.id])
+        backstage_infos = cloud.get_backstage_serviceinfos.body.map {|info| {'serviceId' => info.serviceId,
+                                                                             'instanceCount' => info.instanceCount,
+                                                                             'versions' => info.versionInfoList.map {|vil| vil['version']}.uniq.join(",")
+        }}
+        tp backstage_infos
+
+      end
+    end
+
+    c.desc 'View and accept terms of use information'
+    c.command :tos do |tos|
+      tos.default_desc 'View terms of service'
+      tos.action do ||
+        begin
+          c = LMC::Cloud.instance
+          puts "No outstanding terms of service"
+        rescue LMC::OutdatedTermsOfUseException => e
+          puts e.response
+        end
+      end
+      tos.arg_name 'TOS name', :multiple => true
+      tos.desc 'Accept terms of use by name'
+      tos.command :accept do |accept|
+        accept.action do |global_options, options, args|
+        begin
+          cloud = LMC::Cloud.instance
+        rescue LMC::OutdatedTermsOfUseException => e
+            matched_tos = e.missing.select do |missingtos|
+              args.include? missingtos['name']
+            end
+            cloud = LMC::Cloud.instance authorize: false
+            puts "Accepting TOS #{matched_tos.to_s}"
+            cloud.accept_tos matched_tos
+          end
+        end
+      end
+    end
+    c.desc 'Change user information'
+    c.command :changeuser do |cloud_register|
+      cloud_register.switch :password
+      cloud_register.action do |global_options, options|
+        newdata = {}
+        if options[:password]
+          newpass = Helpers::read_pw "Enter new password for " + global_options[:user] + ":"
+          newpass_confirm = Helpers::read_pw "Confirm password " + global_options[:user] + ":"
+          raise 'Mismatch' unless newpass == newpass_confirm
+          newdata['password'] = newpass
+        end
+        user = LMC::User.new(newdata)
+        user.update(global_options[:password])
+      end
+    end
+  end
+end

data/lib/lmcadm/commands/maintenance.rb

@@ -0,0 +1,27 @@
+module LMCAdm
+  command :maintenance do |maintenance|
+    maintenance.arg_name 'Account UUID'
+    maintenance.desc 'Resync license status in devices service for an account'
+    maintenance.command :licenseresync do |resync|
+      resync.action do |global_options, options, args|
+        root_account = LMC::Account.get LMC::Account::ROOT_ACCOUNT_UUID
+        cloud = LMC::Cloud.instance
+        cloud.auth_for_account root_account
+        result = cloud.post ['cloud-service-devices', 'maintenance', 'licenses', 'resync'], {'accountId' => args[0]}
+      end
+    end
+
+    maintenance.arg_name 'Account UUID'
+    maintenance.desc 'Enable scripting for an account'
+    maintenance.command :scripting do |scr|
+      scr.switch :enable
+      scr.action do |global_options, options, args|
+        root_account = LMC::Account.get LMC::Account::ROOT_ACCOUNT_UUID
+        cloud = LMC::Cloud.instance
+        cloud.auth_for_account root_account
+        result = cloud.put ['cloud-service-config', 'configroot', 'accounts', args.first, 'scriptauthority'], options[:enable]
+        raise "error - unexpected result" unless result.body == options[:enable]
+      end
+    end
+  end
+end

data/lib/lmcadm/commands/principal.rb

@@ -0,0 +1,47 @@
+module LMCAdm
+  command :principal do |principal|
+    principal.desc "Create principal"
+    principal.arg_name 'Principal name'
+    principal.command :create do |pc|
+      pc.flag :t, :type, :required => true
+      pc.action do |global_options, options, args|
+        root_account = LMC::Account.get LMC::Account::ROOT_ACCOUNT_UUID
+        cloud = LMC::Cloud.instance
+        cloud.auth_for_account root_account
+        pw = Helpers::read_pw "Enter password for #{args.first}"
+        principal = LMC::Principal.new({ 'name' => args.first, 'password' => pw, 'type' => options[:type] })
+        puts principal.save.inspect
+        begin
+        rescue Exception => e
+          puts e.inspect
+          puts e.message.inspect
+          puts e.response
+          puts e.response.message
+        end
+
+
+      end
+    end
+
+    principal.desc "List principals"
+    principal.command :list do |l|
+      l.action do |global_options|
+        c = LMC::Cloud.instance
+        c.auth_for_account LMC::Account.get LMC::Account::ROOT_ACCOUNT_UUID
+        principals = c.get ['cloud-service-auth', 'principals']
+        tp principals.body, [{:id => {width: 36}}, :name, :type]
+      end
+    end
+
+    principal.arg_name "Principal ID"
+    principal.desc "Delete principal"
+    principal.command :delete do |d|
+      d.action do |global_options, options, args|
+        c = LMC::Cloud.instance
+        c.auth_for_account LMC::Account.get LMC::Account::ROOT_ACCOUNT_UUID
+        c.delete ['cloud-service-auth', 'principals', args.first]
+
+      end
+    end
+  end
+end

data/lib/lmcadm/commands/privatecloud.rb

@@ -0,0 +1,27 @@
+module LMCAdm
+  command :privatecloud do |pc|
+    pc.arg_name 'Redirect URL'
+    pc.desc 'Set redirect URL for account'
+    pc.command :url do |url|
+      url.flag :A, :account
+      url.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name options[:account]
+        puts account
+        LMC::Cloud.instance.auth_for_account account
+        LMC::Cloud.instance.put ["cloud-service-devices", "accounts", account.id, "redirect" ], { "url" => args.first }
+      end
+    end
+
+    pc.arg_name 'Account name|UUID'
+    pc.desc 'Show privatecloud account infos'
+    pc.command :show do |show|
+      show.action do |global_options, options, args|
+        account = LMC::Account.get_by_uuid_or_name args.first
+        LMC::Cloud.instance.auth_for_account account
+        redirect = LMC::Cloud.instance.get ["cloud-service-devices", "accounts", account.id, "redirect" ]
+        puts "Account: #{account}"
+        puts "URL: " + redirect.body.url
+      end
+    end
+  end
+end

data/lib/lmcadm/config_commands.rb

@@ -0,0 +1,5 @@
+require 'gli'
+module LMCAdm
+  include GLI::App
+  extend self
+end