mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-04-26 20:31:27 -07:00
Start using this to construct shade OpenStack Cloud objects in a consistent manner. This will let us centralize things like dealing with password arguments and whatnot. It also allows us to introduce the ability to pass a fully formed config dict directly to the module. Migrate all OpenStack modules to use openstack_cloud_from_module. Have it return the shade library since it's responsible for importing shade and shade is needed for the exceptions. Only pull specific OpenStack arguments for the constructor Rather than passing **module.params to the shade constructor, pull out only the values that make sense. This should prevent the issues with module parameters stepping on shade parameters. Replace module.params.pop with module.params.get We don't need to pop these anymore since the shade constructor is now using opt-in values. Using real urls is ungood. Use example.com domains. Also, get rid of the antiquated port numbers.
107 lines
2.8 KiB
Python
107 lines
2.8 KiB
Python
#!/usr/bin/python
|
|
# Copyright (c) 2015 Hewlett-Packard Development Company, L.P.
|
|
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
|
|
from __future__ import absolute_import, division, print_function
|
|
__metaclass__ = type
|
|
|
|
|
|
ANSIBLE_METADATA = {'metadata_version': '1.1',
|
|
'status': ['preview'],
|
|
'supported_by': 'community'}
|
|
|
|
|
|
DOCUMENTATION = '''
|
|
---
|
|
module: os_user_group
|
|
short_description: Associate OpenStack Identity users and groups
|
|
extends_documentation_fragment: openstack
|
|
version_added: "2.0"
|
|
author: "Monty Taylor (@emonty)"
|
|
description:
|
|
- Add and remove users from groups
|
|
options:
|
|
user:
|
|
description:
|
|
- Name or id for the user
|
|
required: true
|
|
group:
|
|
description:
|
|
- Name or id for the group.
|
|
required: true
|
|
state:
|
|
description:
|
|
- Should the user be present or absent in the group
|
|
choices: [present, absent]
|
|
default: present
|
|
availability_zone:
|
|
description:
|
|
- Ignored. Present for backwards compatibility
|
|
required: false
|
|
requirements:
|
|
- "python >= 2.6"
|
|
- "shade"
|
|
'''
|
|
|
|
EXAMPLES = '''
|
|
# Add the demo user to the demo group
|
|
- os_user_group:
|
|
cloud: mycloud
|
|
user: demo
|
|
group: demo
|
|
'''
|
|
|
|
from ansible.module_utils.basic import AnsibleModule
|
|
from ansible.module_utils.openstack import openstack_full_argument_spec, openstack_module_kwargs, openstack_cloud_from_module
|
|
|
|
|
|
def _system_state_change(state, in_group):
|
|
if state == 'present' and not in_group:
|
|
return True
|
|
if state == 'absent' and in_group:
|
|
return True
|
|
return False
|
|
|
|
|
|
def main():
|
|
argument_spec = openstack_full_argument_spec(
|
|
user=dict(required=True),
|
|
group=dict(required=True),
|
|
state=dict(default='present', choices=['absent', 'present']),
|
|
)
|
|
|
|
module_kwargs = openstack_module_kwargs()
|
|
module = AnsibleModule(argument_spec,
|
|
supports_check_mode=True,
|
|
**module_kwargs)
|
|
|
|
user = module.params['user']
|
|
group = module.params['group']
|
|
state = module.params['state']
|
|
|
|
shade, cloud = openstack_cloud_from_module(module)
|
|
try:
|
|
in_group = cloud.is_user_in_group(user, group)
|
|
|
|
if module.check_mode:
|
|
module.exit_json(changed=_system_state_change(state, in_group))
|
|
|
|
changed = False
|
|
if state == 'present':
|
|
if not in_group:
|
|
cloud.add_user_to_group(user, group)
|
|
changed = True
|
|
|
|
elif state == 'absent':
|
|
if in_group:
|
|
cloud.remove_user_from_group(user, group)
|
|
changed = True
|
|
|
|
module.exit_json(changed=changed)
|
|
|
|
except shade.OpenStackCloudException as e:
|
|
module.fail_json(msg=str(e), extra_data=e.extra_data)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|