7665d52a0c
A follow up work item from I52ff2020ef2fcbdc8a98280b73c6fd4a93bc8e0f to support domain scoped users and projects for ec2creds in the v3 identity api. Related-Bug: 1236326 Change-Id: If4ac5356ade8cff347bb9eb9f88d1ace82bb7275
238 lines
7.9 KiB
Python
238 lines
7.9 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
"""Identity v3 EC2 Credentials action implementations"""
|
|
|
|
import logging
|
|
import six
|
|
|
|
from cliff import command
|
|
from cliff import lister
|
|
from cliff import show
|
|
|
|
from openstackclient.common import utils
|
|
from openstackclient.i18n import _ # noqa
|
|
from openstackclient.identity import common
|
|
|
|
|
|
def _determine_ec2_user(parsed_args, client_manager):
|
|
"""Determine a user several different ways.
|
|
|
|
Assumes parsed_args has user and user_domain arguments. Attempts to find
|
|
the user if domain scoping is provided, otherwise revert to a basic user
|
|
call. Lastly use the currently authenticated user.
|
|
|
|
"""
|
|
|
|
user_domain = None
|
|
if parsed_args.user_domain:
|
|
user_domain = common.find_domain(client_manager.identity,
|
|
parsed_args.user_domain)
|
|
if parsed_args.user:
|
|
if user_domain is not None:
|
|
user = utils.find_resource(client_manager.identity.users,
|
|
parsed_args.user,
|
|
domain_id=user_domain.id).id
|
|
else:
|
|
user = utils.find_resource(
|
|
client_manager.identity.users,
|
|
parsed_args.user).id
|
|
else:
|
|
# Get the user from the current auth
|
|
user = client_manager.auth_ref.user_id
|
|
return user
|
|
|
|
|
|
class CreateEC2Creds(show.ShowOne):
|
|
"""Create EC2 credentials"""
|
|
|
|
log = logging.getLogger(__name__ + ".CreateEC2Creds")
|
|
|
|
def get_parser(self, prog_name):
|
|
parser = super(CreateEC2Creds, self).get_parser(prog_name)
|
|
parser.add_argument(
|
|
'--project',
|
|
metavar='<project>',
|
|
help=_('Specify an alternate project'
|
|
' (default: current authenticated project)'),
|
|
)
|
|
parser.add_argument(
|
|
'--user',
|
|
metavar='<user>',
|
|
help=_('Specify an alternate user'
|
|
' (default: current authenticated user)'),
|
|
)
|
|
parser.add_argument(
|
|
'--user-domain',
|
|
metavar='<user-domain>',
|
|
help=('Domain the user belongs to (name or ID). '
|
|
'This can be used in case collisions between user names '
|
|
'exist.')
|
|
)
|
|
parser.add_argument(
|
|
'--project-domain',
|
|
metavar='<project-domain>',
|
|
help=('Domain the project belongs to (name or ID). '
|
|
'This can be used in case collisions between project names '
|
|
'exist.')
|
|
)
|
|
return parser
|
|
|
|
def take_action(self, parsed_args):
|
|
self.log.debug('take_action(%s)', parsed_args)
|
|
identity_client = self.app.client_manager.identity
|
|
client_manager = self.app.client_manager
|
|
user = self.determine_ec2_user(parsed_args, client_manager)
|
|
|
|
project_domain = None
|
|
if parsed_args.project_domain:
|
|
project_domain = common.find_domain(identity_client,
|
|
parsed_args.project_domain)
|
|
|
|
if parsed_args.project:
|
|
if project_domain is not None:
|
|
project = utils.find_resource(identity_client.projects,
|
|
parsed_args.project,
|
|
domain_id=project_domain.id).id
|
|
else:
|
|
project = utils.find_resource(
|
|
identity_client.projects,
|
|
parsed_args.project).id
|
|
else:
|
|
# Get the project from the current auth
|
|
project = self.app.client_manager.auth_ref.project_id
|
|
|
|
creds = identity_client.ec2.create(user, project)
|
|
|
|
info = {}
|
|
info.update(creds._info)
|
|
|
|
if 'tenant_id' in info:
|
|
info.update(
|
|
{'project_id': info.pop('tenant_id')}
|
|
)
|
|
|
|
return zip(*sorted(six.iteritems(info)))
|
|
|
|
|
|
class DeleteEC2Creds(command.Command):
|
|
"""Delete EC2 credentials"""
|
|
|
|
log = logging.getLogger(__name__ + '.DeleteEC2Creds')
|
|
|
|
def get_parser(self, prog_name):
|
|
parser = super(DeleteEC2Creds, self).get_parser(prog_name)
|
|
parser.add_argument(
|
|
'access_key',
|
|
metavar='<access-key>',
|
|
help=_('Credentials access key'),
|
|
)
|
|
parser.add_argument(
|
|
'--user',
|
|
metavar='<user>',
|
|
help=_('Specify a user'),
|
|
)
|
|
parser.add_argument(
|
|
'--user-domain',
|
|
metavar='<user-domain>',
|
|
help=('Domain the user belongs to (name or ID). '
|
|
'This can be used in case collisions between user names '
|
|
'exist.')
|
|
)
|
|
return parser
|
|
|
|
def take_action(self, parsed_args):
|
|
self.log.debug('take_action(%s)', parsed_args)
|
|
client_manager = self.app.client_manager
|
|
user = self.determine_ec2_user(parsed_args, client_manager)
|
|
client_manager.identity.ec2.delete(user, parsed_args.access_key)
|
|
|
|
|
|
class ListEC2Creds(lister.Lister):
|
|
"""List EC2 credentials"""
|
|
|
|
log = logging.getLogger(__name__ + '.ListEC2Creds')
|
|
|
|
def get_parser(self, prog_name):
|
|
parser = super(ListEC2Creds, self).get_parser(prog_name)
|
|
parser.add_argument(
|
|
'--user',
|
|
metavar='<user>',
|
|
help=_('Specify a user'),
|
|
)
|
|
parser.add_argument(
|
|
'--user-domain',
|
|
metavar='<user-domain>',
|
|
help=('Domain the user belongs to (name or ID). '
|
|
'This can be used in case collisions between user names '
|
|
'exist.')
|
|
)
|
|
return parser
|
|
|
|
def take_action(self, parsed_args):
|
|
self.log.debug('take_action(%s)', parsed_args)
|
|
client_manager = self.app.client_manager
|
|
user = self.determine_ec2_user(parsed_args, client_manager)
|
|
|
|
columns = ('access', 'secret', 'tenant_id', 'user_id')
|
|
column_headers = ('Access', 'Secret', 'Project ID', 'User ID')
|
|
data = client_manager.identity.ec2.list(user)
|
|
|
|
return (column_headers,
|
|
(utils.get_item_properties(
|
|
s, columns,
|
|
formatters={},
|
|
) for s in data))
|
|
|
|
|
|
class ShowEC2Creds(show.ShowOne):
|
|
"""Display EC2 credentials details"""
|
|
|
|
log = logging.getLogger(__name__ + '.ShowEC2Creds')
|
|
|
|
def get_parser(self, prog_name):
|
|
parser = super(ShowEC2Creds, self).get_parser(prog_name)
|
|
parser.add_argument(
|
|
'access_key',
|
|
metavar='<access-key>',
|
|
help=_('Credentials access key'),
|
|
)
|
|
parser.add_argument(
|
|
'--user',
|
|
metavar='<user>',
|
|
help=_('Specify a user'),
|
|
)
|
|
parser.add_argument(
|
|
'--user-domain',
|
|
metavar='<user-domain>',
|
|
help=('Domain the user belongs to (name or ID). '
|
|
'This can be used in case collisions between user names '
|
|
'exist.')
|
|
)
|
|
return parser
|
|
|
|
def take_action(self, parsed_args):
|
|
self.log.debug('take_action(%s)', parsed_args)
|
|
client_manager = self.app.client_manager
|
|
user = self.determine_ec2_user(parsed_args, client_manager)
|
|
creds = client_manager.identity.ec2.get(user, parsed_args.access_key)
|
|
|
|
info = {}
|
|
info.update(creds._info)
|
|
|
|
if 'tenant_id' in info:
|
|
info.update(
|
|
{'project_id': info.pop('tenant_id')}
|
|
)
|
|
|
|
return zip(*sorted(six.iteritems(info)))
|