mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-04-26 20:31:27 -07:00
0f893027c4
Start using this to construct shade OpenStack Cloud objects in a consistent manner. This will let us centralize things like dealing with password arguments and whatnot. It also allows us to introduce the ability to pass a fully formed config dict directly to the module. Migrate all OpenStack modules to use openstack_cloud_from_module. Have it return the shade library since it's responsible for importing shade and shade is needed for the exceptions. Only pull specific OpenStack arguments for the constructor Rather than passing **module.params to the shade constructor, pull out only the values that make sense. This should prevent the issues with module parameters stepping on shade parameters. Replace module.params.pop with module.params.get We don't need to pop these anymore since the shade constructor is now using opt-in values. Using real urls is ungood. Use example.com domains. Also, get rid of the antiquated port numbers.
126 lines
3.2 KiB
Python
126 lines
3.2 KiB
Python
#!/usr/bin/python
|
|
# Copyright (c) 2016 IBM
|
|
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
|
|
from __future__ import absolute_import, division, print_function
|
|
__metaclass__ = type
|
|
|
|
|
|
ANSIBLE_METADATA = {'metadata_version': '1.1',
|
|
'status': ['preview'],
|
|
'supported_by': 'community'}
|
|
|
|
|
|
DOCUMENTATION = '''
|
|
---
|
|
module: os_keystone_role
|
|
short_description: Manage OpenStack Identity Roles
|
|
extends_documentation_fragment: openstack
|
|
version_added: "2.1"
|
|
author: "Monty Taylor (@emonty), David Shrewsbury (@Shrews)"
|
|
description:
|
|
- Manage OpenStack Identity Roles.
|
|
options:
|
|
name:
|
|
description:
|
|
- Role Name
|
|
required: true
|
|
state:
|
|
description:
|
|
- Should the resource be present or absent.
|
|
choices: [present, absent]
|
|
default: present
|
|
availability_zone:
|
|
description:
|
|
- Ignored. Present for backwards compatibility
|
|
required: false
|
|
requirements:
|
|
- "python >= 2.6"
|
|
- "shade"
|
|
'''
|
|
|
|
EXAMPLES = '''
|
|
# Create a role named "demo"
|
|
- os_keystone_role:
|
|
cloud: mycloud
|
|
state: present
|
|
name: demo
|
|
|
|
# Delete the role named "demo"
|
|
- os_keystone_role:
|
|
cloud: mycloud
|
|
state: absent
|
|
name: demo
|
|
'''
|
|
|
|
RETURN = '''
|
|
role:
|
|
description: Dictionary describing the role.
|
|
returned: On success when I(state) is 'present'.
|
|
type: complex
|
|
contains:
|
|
id:
|
|
description: Unique role ID.
|
|
type: string
|
|
sample: "677bfab34c844a01b88a217aa12ec4c2"
|
|
name:
|
|
description: Role name.
|
|
type: string
|
|
sample: "demo"
|
|
'''
|
|
|
|
from ansible.module_utils.basic import AnsibleModule
|
|
from ansible.module_utils.openstack import openstack_full_argument_spec, openstack_module_kwargs, openstack_cloud_from_module
|
|
|
|
|
|
def _system_state_change(state, role):
|
|
if state == 'present' and not role:
|
|
return True
|
|
if state == 'absent' and role:
|
|
return True
|
|
return False
|
|
|
|
|
|
def main():
|
|
argument_spec = openstack_full_argument_spec(
|
|
name=dict(required=True),
|
|
state=dict(default='present', choices=['absent', 'present']),
|
|
)
|
|
|
|
module_kwargs = openstack_module_kwargs()
|
|
module = AnsibleModule(argument_spec,
|
|
supports_check_mode=True,
|
|
**module_kwargs)
|
|
|
|
name = module.params.get('name')
|
|
state = module.params.get('state')
|
|
|
|
shade, cloud = openstack_cloud_from_module(module)
|
|
try:
|
|
|
|
role = cloud.get_role(name)
|
|
|
|
if module.check_mode:
|
|
module.exit_json(changed=_system_state_change(state, role))
|
|
|
|
if state == 'present':
|
|
if role is None:
|
|
role = cloud.create_role(name)
|
|
changed = True
|
|
else:
|
|
changed = False
|
|
module.exit_json(changed=changed, role=role)
|
|
elif state == 'absent':
|
|
if role is None:
|
|
changed = False
|
|
else:
|
|
cloud.delete_role(name)
|
|
changed = True
|
|
module.exit_json(changed=changed)
|
|
|
|
except shade.OpenStackCloudException as e:
|
|
module.fail_json(msg=str(e))
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|