Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/openstack/cloud/__pycache__/_identity.cpython-39.pyc
Ðазад
a t�h� � @ sV d dl Z d dlZd dlmZ d dlmZ d dlmZ d dlmZ G dd� dej�Z dS )� N)�exc)� _normalize)�_utils)�utilsc @ s" e Zd Zedd� �Ze�� d�dd��Zd�dd�Zd�dd �Z d�d d �Z d�d d�Z d�dd�Z e� dd�e�� dd� ��Ze� dd�d�dd��Ze� d�d�dd��Zd�dd�Ze� ddd dd d d �d d!� �Zd�d"d#�Ze� d�d$d%� �Zd&d'� Zd(d)� Zd*d+� Zd,d-� Ze� d.d/d �d�d0d1��Ze� dd d.d/d �d2d3� �Zd4d5� Zd�d6d7�Z d�d8d9�Z d:d;� Z e� d<d=d>�d�d?d@��Z e� d dAdBdCdD�dEdF� �Z dGdH� Z!d�dIdJ�Z"d�dKdL�Z#dMdN� Z$d�dOdP�Z%d�dQdR�Z&d�dSdT�Z'dUdV� Z(d�dWdX�Z)d�dYdZ�Z*e� d�e�� d[d\� ��Z+e� d�d�d]d^��Z,e� d�d�d_d`��Z-d�dadb�Z.e� d�d�dcdd��Z/e� d�dedf� �Z0e� d�dgdh� �Z1e� d�d�didj��Z2e� d�d�dkdl��Z3d�dmdn�Z4dodp� Z5d�dqdr�Z6e� d�dsdt� �Z7e� d�dudv� �Z8e� d�dwdx� �Z9d�dydz�Z:d�d}d~�Z;d�dd��Z<d�d�� Z=d�d�� Z>d�d�d��Z?dS )��IdentityCloudMixinc C s* d| j vr | jdddd�| j d< | j d S )N�identity� z3.latest)� min_versionZ max_version)Z _raw_clientsZ_get_versioned_client)�self� r ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/openstack/cloud/_identity.py�_identity_client s � z#IdentityCloudMixin._identity_clientNc C s� t ||d�}| �dd�r d|d< tjf i |��\}}zD| �dd�rHd}nd}| jjdj|d �|d �}| �| �||��}W nB t y� } z*| j j d d d � t � t| ���W Y d} ~ n d} ~ 0 0 t�|||�S )az List projects. With no parameters, returns a full listing of all visible projects. :param domain_id: domain ID to scope the searched projects. :param name_or_id: project name or ID. :param filters: a dict containing additional filters to use OR A string containing a jmespath expression for further filtering. Example:: "[?last_name==`Smith`] | [?other.gender]==`Female`]" :returns: a list of ``munch.Munch`` containing the projects :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. )�filters� domain_idr � �project�obj_name�projects�tenants� /{endpoint}��endpoint��paramszFailed to list projectsT)�exc_infoN)�dict�_is_client_versionr Z_split_filtersr �get�formatZ_normalize_projects�_get_and_munchify� Exception�log�debugr �OpenStackCloudException�strr � _filter_list) r r � name_or_idr �kwargsZpushdown�key�datar �er r r � list_projects# s* � � �$z IdentityCloudMixin.list_projectsc C s | j |||d�S )aI Backwards compatibility method for search_projects search_projects originally had a parameter list that was name_or_id, filters and list had domain_id first. This method exists in this form to allow code written with positional parameter to still work. But really, use keyword arguments. )r r& r )r+ �r r& r r r r r �search_projectsK s �z"IdentityCloudMixin.search_projectsc C s t j| d|||d�S )a� Get exactly one project. :param name_or_id: project name or ID. :param filters: a dict containing additional filters to use. :param domain_id: domain ID (identity v3 only). :returns: a list of ``munch.Munch`` containing the project description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. r �r �r � _get_entityr, r r r � get_projectV s �z IdentityCloudMixin.get_projectc K s� t �dj|d���� | j||d�}|s4t�d| ��|d urJ|�d|i� | �dd�r�| jj d|d d |id �}| � d |�}n(| jj d |d d |id �}| � d |�}| � |�}W d � n1 s�0 Y | j �| � |S )Nz#Error in updating project {project}�r r. zProject %s not found.�enabledr r � /projects/�idr ��json� /tenants/�tenant)r �shade_exceptionsr r1 r r# �updater r �patchr �post�_normalize_projectr+ � invalidate)r r& r3 r r' Zprojr) r r r r �update_projecte s0 ��� �� ( z!IdentityCloudMixin.update_projectTc C s� t �dj|d���v | �|�}|�|||d�� d\}}| �dd�rLd\}}| jjdj|d �||id �}| �| � ||��} W d � n1 s�0 Y | j � | � | S ) zCreate a project.z#Error in creating project {project}r2 )�name� descriptionr3 )r r9 r r )r r r r r6 N) r r: r �_get_domain_id_param_dictr; r r r= r> r r+ r? ) r rA rB r r3 Z project_refr r( r) r r r r �create_project~ s( � � � �" z!IdentityCloudMixin.create_projectc C s� t �dj|d���z | j||d�}|du rH| j�d|� W d � dS | �dd�rj| j�d |d � n| j�d |d � W d � n1 s�0 Y d S ) as Delete a project. :param string name_or_id: Project name or ID. :param string domain_id: Domain ID containing the project(identity v3 only). :returns: True if delete succeeded, False if the project was not found. :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call z#Error in deleting project {project}r2 r. Nz!Project %s not found for deletingFr r r4 r5 r8 T) r r: r r1 r! r" r r �delete)r r& r r r r r �delete_project� s ��� 2z!IdentityCloudMixin.delete_projectr rA c K s" | j jd|d�}t�| �d|��S )z�List users. :param domain_id: Domain ID. (v3) :returns: a list of ``munch.Munch`` containing the user description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. �/usersr �users)r r r �normalize_usersr �r r' r) r r r � list_users� s �z IdentityCloudMixin.list_usersc K s4 |rt �|�s||d< | jf i |��}t �|||�S )a Search users. :param string name_or_id: user name or ID. :param domain_id: Domain ID. (v3) :param filters: a dict containing additional filters to use. OR A string containing a jmespath expression for further filtering. Example:: "[?last_name==`Smith`] | [?other.gender]==`Female`]" :returns: a list of ``munch.Munch`` containing the users :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. rA )r � _is_uuid_likerK r% )r r& r r' rH r r r � search_users� s z IdentityCloudMixin.search_usersc K s* t �|�s||d< t j| d||fi |��S )a' Get exactly one user. :param string name_or_id: user name or ID. :param domain_id: Domain ID. (v3) :param filters: a dict containing additional filters to use. OR A string containing a jmespath expression for further filtering. Example:: "[?last_name==`Smith`] | [?other.gender]==`Female`]" :returns: a single ``munch.Munch`` containing the user description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. rA �user)r rL r0 �r r& r r' r r r �get_user� s zIdentityCloudMixin.get_userc C sB | j jdj|d�dj|d�d�}| �d|�}|r>|r>t�|�}|S )z�Get a user by ID. :param string user_id: user ID :param bool normalize: Flag to control dict normalization :returns: a single ``munch.Munch`` containing the user description � /users/{user}�rN z$Error getting user with ID {user_id})�user_id�� error_messagerN )r r r r r rI )r rS � normalizer) rN r r r �get_user_by_id� s �� z!IdentityCloudMixin.get_user_by_id�emailr3 �passwordrB �default_projectc K s~ | j �| � i }d|v r,|d r,|d |d< | j|fi |��}| �dd��r|�dd � |�dd � |�dd � |�dd �}|d ur�t�dj|d���@ d �|�}| jj d j|d d �d d|ii|d�}W d � n1 s�0 Y | jj dj|d d�d |id�|�d�}nFd|v �r.|d d u �r.|d= | jj dj|d d�d |id�|�d�}| � d |�}| j �| � t� |g�d S )Nr r r rB rZ rY z"Error updating password for {user}rR z#Error updating password for user {}z /users/{u}/OS-KSADM/passwordr5 )�urN �r7 rU rQ zError in updating user {}r ) rK r? rP r �popr r: r r �putr< r rI )r r& r' Z user_kwargsrN rY � error_msgr) r r r � update_user� sJ ��� �$�� z IdentityCloudMixin.update_userc C s� | � ||�}|�||||d�� | �dd�r6||d< n|durJ| j�d� dj|d�} | jjd d |i| d �} | �d | �} | j � | � t � | g�d S ) zCreate a user.)rA rY rX r3 r r rB Nz5description parameter is not supported on Keystone v2z Error in creating user {user}rR rG rN r\ r ) �_get_identity_paramsr; r r! �infor r r= r rK r? r rI ) r rA rY rX rZ r3 r rB r r_ r) rN r r r � create_user- s" � � � z IdentityCloudMixin.create_userc K s~ | j �| � | j|fi |��}|s8| j�d�|�� dS | j|d dd�}| jjdj|d d�dj|d�d� | j �| � d S ) Nz User {0} not found for deletingFr5 )rV rQ rR z Error in deleting user {user}rT T) rK r? rP r! r" r rW r rE )r r& r' rN r r r � delete_userB s ��� z IdentityCloudMixin.delete_userc C sH | � |�}|s t�dj|d���| �|�}|s@t�dj|d���||fS )NzUser {user} not foundrR zGroup {user} not found)rP r r# r � get_group)r Zuser_name_or_id�group_name_or_idrN �groupr r r �_get_user_and_groupW s � �z&IdentityCloudMixin._get_user_and_groupc C sD | � ||�\}}dj||d�}| jjdj|d |d d�|d� dS )z�Add a user to a group. :param string name_or_id: User name or ID :param string group_name_or_id: Group name or ID :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call z)Error adding user {user} to group {group}�rN rg �/groups/{g}/users/{u}r5 ��gr[ rT N)rh r r r^ �r r& rf rN rg r_ r r r �add_user_to_groupd s ��z$IdentityCloudMixin.add_user_to_groupc C sP | � ||�\}}z$| j�dj|d |d d�� W dS tjyJ Y dS 0 dS )aK Check to see if a user is in a group. :param string name_or_id: User name or ID :param string group_name_or_id: Group name or ID :returns: True if user is in the group, False otherwise :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call rj r5 rk TFN)rh r �headr r ZOpenStackCloudURINotFound)r r& rf rN rg r r r �is_user_in_groupu s �z#IdentityCloudMixin.is_user_in_groupc C sD | � ||�\}}dj||d�}| jjdj|d |d d�|d� dS )a Remove a user from a group. :param string name_or_id: User name or ID :param string group_name_or_id: Group name or ID :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call z-Error removing user {user} from group {group}ri rj r5 rk rT N)rh r r rE rm r r r �remove_user_from_group� s ��z)IdentityCloudMixin.remove_user_from_group�type� service_typec K s� |� dd�}|� dd�}| �dd�r:d\}}|p2||d< n d\}}|pH||d< ||d< ||d < d j|d �}| jj|||i|d �} | �|| �} t�| g�d S )a� Create a service. :param name: Service name. :param type: Service type. (type or service_type required.) :param service_type: Service type. (type or service_type required.) :param description: Service description (optional). :param enabled: Whether the service is enabled (v3 only) :returns: a ``munch.Munch`` containing the services description, i.e. the following attributes:: - id: <service id> - name: <service name> - type: <service type> - service_type: <service type> - description: <service description> :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call. rr Nrs r r ��/OS-KSADM/serviceszOS-KSADM:service�� /services�servicer3 rA z Failed to create service {name}�rA r\ r )r] r r r r= r r �normalize_keystone_services) r rA r3 r' �type_rs �urlr( �msgr) rx r r r �create_service� s � z!IdentityCloudMixin.create_servicec K s� | � dd�rt�d��|�dd �}|�dd �}|s6|rB|p<||d< | � dd�rXd\}}nd\}}| �|�}dj|d �}| jjd j||d d �||i|d �} | �|| �}t � |g�d S )Nr r z8Unavailable Feature: Service update requires Identity v3rr rs rt rv z#Error in updating service {service}�rx � {url}/{id}r5 �r| r5 r\ r ) r r � OpenStackCloudUnavailableFeaturer] � get_servicer r r< r r rz ) r r& r' r{ rs r| r( rx r} r) r r r �update_service� s& � � z!IdentityCloudMixin.update_servicec C sR | � dd�r d\}}ddi}n d\}}i }| jj||dd�}| �||�}t�|�S ) z�List all Keystone services. :returns: a list of ``munch.Munch`` containing the services description :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call. r r )ru zOS-KSADM:services� interface�admin)rw �serviceszFailed to list services��endpoint_filterrU )r r r r r rz )r r| r( r� r) r� r r r � list_services� s � z IdentityCloudMixin.list_servicesc C s | � � }t�|||�S )a� Search Keystone services. :param name_or_id: Name or id of the desired service. :param filters: a dict containing additional filters to use. e.g. {'type': 'network'}. :returns: a list of ``munch.Munch`` containing the services description :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call. )r� r r% )r r& r r� r r r �search_services� s z"IdentityCloudMixin.search_servicesc C s t �| d||�S )au Get exactly one Keystone service. :param name_or_id: Name or id of the desired service. :param filters: a dict containing additional filters to use. e.g. {'type': 'network'} :returns: a ``munch.Munch`` containing the services description, i.e. the following attributes:: - id: <service id> - name: <service name> - type: <service type> - description: <service description> :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call or if multiple matches are found. rx r/ )r r& r r r r r� s z IdentityCloudMixin.get_servicec C s| | j |d�}|du r&| j�d|� dS | �dd�r@d}dd i}nd }i }d j|d d �}| jjdj||d d�||d� dS )a Delete a Keystone service. :param name_or_id: Service name or id. :returns: True if delete succeeded, False otherwise. :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call �r& Nz!Service %s not found for deletingFr r ru r� r� rw z Failed to delete service {id}r5 �r5 r� r� r� T)r� r! r" r r r rE )r r& rx r| r� r_ r r r �delete_service s �z!IdentityCloudMixin.delete_service� public_url� internal_url� admin_urlc K s |� dd�}|� dd�}|� dd�} |s,|rB|s8|s8| rBt�d��| j|d�} | du rht�dj|d���| �d d ��r"|r�|d kr�t�d j|d���d |i} n:i } |r�| �d |i� |r�| �d|i� | r�| �d| i� | �| d |d�� | jjdd| iddidj| d d�d�} | � d| �gS g } |�rH| � ||| d ||d�� n|||| d d�} |�r|| �|d d�� | � | � � � |�r�| �|d d�� | � | � � � | �r�| �| dd�� | � | � � � g }dj| d d�}| D ].}| jjdd|i|d �} |� | � d| �� �q�|S dS ) a_ Create a Keystone endpoint. :param service_name_or_id: Service name or id for this endpoint. :param url: URL of the endpoint :param interface: Interface type of the endpoint :param public_url: Endpoint public URL. :param internal_url: Endpoint internal URL. :param admin_url: Endpoint admin URL. :param region: Endpoint region. :param enabled: Whether the endpoint is enabled NOTE: Both v2 (public_url, internal_url, admin_url) and v3 (url, interface) calling semantics are supported. But you can only use one of them at a time. :returns: a list of ``munch.Munch`` containing the endpoint description :raises: OpenStackCloudException if the service cannot be found or if something goes wrong during the OpenStack API call. r� Nr� r� zUcreate_endpoint takes either url and interface OR public_url, internal_url, admin_urlr� zservice {service} not foundr r r �publicz�Error adding endpoint for service {service}. On a v2 cloud the url/interface API may only be used for public url. Try using the public_url, internal_url, admin_url parameters instead of url and interfaceZ publicurlZ internalurlZadminurlr5 )� service_id�region� /endpointsr r� r� z/Failed to create endpoint for service {service}rA )r7 r� rU )r| r� r� r3 r� )r� r3 r� )r| r� Zinternalr\ ) r] r r# r� r r r; r r= r �append�copy)r �service_name_or_idr| r� r� r3 r' r� r� r� rx Z endpoint_argsr) Zendpoints_args� endpointsr_ �argsr r r �create_endpoint8 s� � ���� �����������z"IdentityCloudMixin.create_endpointr� r| r� r� c K s` | � dd�rt�d��|�dd �}|d ur2||d< | jjd�|�d|id�|�d �}| �d|�S ) Nr r z$Unavailable Feature: Endpoint updater� r� z /endpoints/{}r z Failed to update endpoint {}r\ )r r r� r] r r< r r )r Z endpoint_idr' r� r) r r r �update_endpoint� s � �z"IdentityCloudMixin.update_endpointc C sF | � dd�}|r dddiini }| jjd ddi|��}| �d |�}|S ) z�List Keystone endpoints. :returns: a list of ``munch.Munch`` containing the endpoint description :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. r r r� r� r� r� rU zFailed to list endpointsr� )r� )r r r r )r �v2r' r) r� r r r �list_endpoints� s ��� z!IdentityCloudMixin.list_endpointsc C s | � � }t�|||�S )a� List Keystone endpoints. :param id: endpoint id. :param filters: a dict containing additional filters to use. e.g. {'region': 'region-a.geo-1'} :returns: a list of ``munch.Munch`` containing the endpoint description. Each dict contains the following attributes:: - id: <endpoint id> - region: <endpoint region> - public_url: <endpoint public url> - internal_url: <endpoint internal url> (optional) - admin_url: <endpoint admin url> (optional) :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. )r� r r% )r r5 r r� r r r �search_endpoints� s z#IdentityCloudMixin.search_endpointsc C s t �| d||�S )aF Get exactly one Keystone endpoint. :param id: endpoint id. :param filters: a dict containing additional filters to use. e.g. {'region': 'region-a.geo-1'} :returns: a ``munch.Munch`` containing the endpoint description. i.e. a ``munch.Munch`` containing the following attributes:: - id: <endpoint id> - region: <endpoint region> - public_url: <endpoint public url> - internal_url: <endpoint internal url> (optional) - admin_url: <endpoint admin url> (optional) r r/ )r r5 r r r r � get_endpoint� s z IdentityCloudMixin.get_endpointc C sv | j |d�}|du r&| j�d|� dS | �dd�}|rBddd iini }d j|d�}| jjd j|d�fd |i|�� d S )a Delete a Keystone endpoint. :param id: Id of the endpoint to delete. :returns: True if delete succeeded, False otherwise. :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call. r� Nz"Endpoint %s not found for deletingFr r r� r� r� z Failed to delete endpoint {id}z/endpoints/{id}rU T)r� r! r" r r r rE )r r5 r r� r' r_ r r r �delete_endpoint� s ��z"IdentityCloudMixin.delete_endpointc C sX ||d�}|dur||d< dj |d�}| jjdd|i|d�}| �d|�}t�|g�d S ) aZ Create a domain. :param name: The name of the domain. :param description: A description of the domain. :param enabled: Is the domain enabled or not (default True). :returns: a ``munch.Munch`` containing the domain representation. :raise OpenStackCloudException: if the domain cannot be created. )rA r3 NrB z Failed to create domain {name}ry �/domains�domainr\ r )r r r= r r �normalize_domains)r rA rB r3 � domain_refr} r) r� r r r � create_domain s � z IdentityCloudMixin.create_domainc C s� |d u rF|d u rt �d��| �d |�}|d u r>t �d�|���|d }i }|�|rZd|ini � |�|rpd|ini � |�|d ur�d|ini � dj|d�}| jjd j|d�d |i|d �} | �d | �} t� | g�d S ) N�2You must pass either domain_id or name_or_id valuez!Domain {0} not found for updatingr5 rA rB r3 z Error in updating domain {id}r� � /domains/{id}r� r\ r ) r r# � get_domainr r; r r< r r r� ) r r rA rB r3 r& �domr� r_ r) r� r r r � update_domain s, � � � z IdentityCloudMixin.update_domainc C s~ |du rH|du rt �d��| j|d�}|du r@| j�d|� dS |d }| j|dd� dj|d �}| jjd j|d �|d � d S ) a> Delete a domain. :param domain_id: ID of the domain to delete. :param name_or_id: Name or ID of the domain to delete. :returns: True if delete succeeded, False otherwise. :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call. Nr� r� z Domain %s not found for deletingFr5 )r3 z Failed to delete domain {id}r� r� rT T) r r# r� r! r" r� r r rE )r r r& r� r_ r r r � delete_domain8 s$ � � �z IdentityCloudMixin.delete_domainc K s( | j jd|dd�}| �d|�}t�|�S )z�List Keystone domains. :returns: a list of ``munch.Munch`` containing the domain description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. r� zFailed to list domains�r rU �domains)r r r r r� )r r r) r� r r r � list_domainsW s � z IdentityCloudMixin.list_domainsc C s> |du r i }|dur*| � � }t�|||�S | j f i |��S dS )aV Search Keystone domains. :param name_or_id: domain name or id :param dict filters: A dict containing additional filters to use. Keys to search on are id, name, enabled and description. :returns: a list of ``munch.Munch`` containing the domain description. Each ``munch.Munch`` contains the following attributes:: - id: <domain id> - name: <domain name> - description: <domain description> :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. N)r� r r% )r r r& r� r r r �search_domainsd s z!IdentityCloudMixin.search_domainsc C sj |du r&t |d�r|S t�| d||�S dj|d�}| jjdj|d�|d�}| �d|�}t�|g�d S dS ) a� Get exactly one Keystone domain. :param domain_id: domain id. :param name_or_id: domain name or id. :param dict filters: A dict containing additional filters to use. Keys to search on are id, name, enabled and description. :returns: a ``munch.Munch`` containing the domain description, or None if not found. Each ``munch.Munch`` contains the following attributes:: - id: <domain id> - name: <domain name> - description: <domain description> :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. Nr5 r� zFailed to get domain {id}r� r� rT r )�hasattrr r0 r r r r r� )r r r& r r_ r) r� r r r r� | s � z IdentityCloudMixin.get_domainc K s$ | j jd|dd�}t�| �d|��S )a List Keystone Groups. :param domain_id: domain id. :returns: A list of ``munch.Munch`` containing the group description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. �/groupszFailed to list groupsr� �groups)r r r �normalize_groupsr rJ r r r � list_groups� s �z IdentityCloudMixin.list_groupsc K s | j f i |��}t�|||�S )as Search Keystone groups. :param name: Group name or id. :param filters: A dict containing additional filters to use. :param domain_id: domain id. :returns: A list of ``munch.Munch`` containing the group description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. )r� r r% )r r& r r' r� r r r � search_groups� s z IdentityCloudMixin.search_groupsc K s t j| d||fi |��S )aq Get exactly one Keystone group. :param id: Group name or id. :param filters: A dict containing additional filters to use. :param domain_id: domain id. :returns: A ``munch.Munch`` containing the group description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. rg r/ rO r r r re � s z IdentityCloudMixin.get_groupc C s� d|i}|r||d< |rF| � |�}|s:t�dj||d���|d |d< dj|d�}| jjd d |i|d �}| �d |�}| j�| � t � |g�d S ) ao Create a group. :param string name: Group name. :param string description: Group description. :param string domain: Domain name or ID for the group. :returns: A ``munch.Munch`` containing the group description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. rA rB z6Creating group {group} failed: Invalid domain {domain})rg r� r5 r z Error creating group {group})rg r� rg r\ r ) r� r r# r r r= r r� r? r r� ) r rA rB r� � group_refr� r_ r) rg r r r � create_group� s& �� � z IdentityCloudMixin.create_groupc K s� | j �| � | j|fi |��}|du r6t�d�|���i }|rF||d< |rR||d< dj|d�}| jjdj|d d �d |i|d �}| �d |�}| j �| � t � |g�d S ) af Update an existing group :param string name: New group name. :param string description: New group description. :param domain_id: domain id. :returns: A ``munch.Munch`` containing the group description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. Nz Group {0} not found for updatingrA rB z Unable to update group {name}ry � /groups/{id}r5 r� rg r\ r ) r� r? re r r# r r r< r r r� ) r r& rA rB r' rg r� r_ r) r r r � update_group� s& � � z IdentityCloudMixin.update_groupc K sd | j |fi |��}|du r,| j�d|� dS dj|d�}| jjdj|d d�|d � | j�| � d S ) a+ Delete a group :param name_or_id: ID or name of the group to delete. :param domain_id: domain id. :returns: True if delete succeeded, False otherwise. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. Nz Group %s not found for deletingFz Unable to delete group {name}ry r� r5 r� rT T)re r! r" r r rE r� r? )r r& r' rg r_ r r r � delete_group s � � z IdentityCloudMixin.delete_groupc K s< | � dd�}|rdnd}| jj||dd�}| �| �d|��S )a List Keystone roles. :param domain_id: domain id for listing roles (v3) :returns: a list of ``munch.Munch`` containing the role description. :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. r r �/OS-KSADM/roles�/roleszFailed to list rolesr� �roles)r r r Z_normalize_rolesr )r r' r� r| r) r r r � list_roles( s �z IdentityCloudMixin.list_rolesc K s | j f i |��}t�|||�S )a; Seach Keystone roles. :param string name: role name or id. :param dict filters: a dict containing additional filters to use. :param domain_id: domain id (v3) :returns: a list of ``munch.Munch`` containing the role description. Each ``munch.Munch`` contains the following attributes:: - id: <role id> - name: <role name> - description: <role description> :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. )r� r r% )r r& r r' r� r r r � search_roles9 s z IdentityCloudMixin.search_rolesc K s t j| d||fi |��S )a5 Get exactly one Keystone role. :param id: role name or id. :param filters: a dict containing additional filters to use. :param domain_id: domain id (v3) :returns: a single ``munch.Munch`` containing the role description. Each ``munch.Munch`` contains the following attributes:: - id: <role id> - name: <role name> - description: <role description> :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. �roler/ rO r r r �get_roleN s zIdentityCloudMixin.get_rolec K sp | j jdj||d�dd�}| �d|�}g }|D ]<}|d urF||jkrFq.|�d|jidd|iid|id�� q.|S ) Nz$/tenants/{tenant}/users/{user}/roles)r9 rN � Failed to list role assignmentsrT r� r5 r )r� �scoperN )r r r r r5 r� ) r rN r r� r' r) r� �retZtmproler r r � _keystone_v2_role_assignmentsb s, �� ����� z0IdentityCloudMixin._keystone_v2_role_assignmentsc K s� dD ]"}||v r|| ||d < ||= qdD ]&}||v r,|| |d| d < ||= q,d|v rn|d |d< |d= | j jd|dd �}| �d |�S ) N)rg r� rN z.id)r r� zscope.Z!os_inherit_extension_inherited_toz scope.OS-INHERIT:inherited_toz/role_assignmentsr� r� Zrole_assignments)r r r )r r �kr) r r r � _keystone_v3_role_assignments~ s" ��z0IdentityCloudMixin._keystone_v3_role_assignmentsc C s� |si }|� � D ] \}}t|tj�r|d ||< q| �dd�rv|�d�du sZ|�d�du rdt�d��| jf i |��}n| j f i |��}t � |�S )a` List Keystone role assignments :param dict filters: Dict of filter conditions. Acceptable keys are: * 'user' (string) - User ID to be used as query filter. * 'group' (string) - Group ID to be used as query filter. * 'project' (string) - Project ID to be used as query filter. * 'domain' (string) - Domain ID to be used as query filter. * 'role' (string) - Role ID to be used as query filter. * 'os_inherit_extension_inherited_to' (string) - Return inherited role assignments for either 'projects' or 'domains' * 'effective' (boolean) - Return effective role assignments. * 'include_subtree' (boolean) - Include subtree 'user' and 'group' are mutually exclusive, as are 'domain' and 'project'. NOTE: For keystone v2, only user, project, and role are used. Project and user are both required in filters. :returns: a list of ``munch.Munch`` containing the role assignment description. Contains the following attributes:: - id: <role id> - user|group: <user or group id> - project|domain: <project or domain id> :raises: ``OpenStackCloudException``: if something goes wrong during the OpenStack API call. r5 r r r NrN z-Must provide project and user for keystone v2) �items� isinstance�munchZMunchr r r r# r� r� r Znormalize_role_assignments)r r r� �vZ assignmentsr r r �list_role_assignments� s $ �z(IdentityCloudMixin.list_role_assignmentsc K sX | � dd�}|rdnd}||d< dj|d�}| jj|d|i|d �}| �d|�}| �|�S ) a Create a Keystone role. :param string name: The name of the role. :param domain_id: domain id (v3) :returns: a ``munch.Munch`` containing the role description :raise OpenStackCloudException: if the role cannot be created r r r� r� rA z Failed to create role {name}ry r� r\ )r r r r= r �_normalize_role)r rA r' r� r| r} r) r� r r r � create_role� s � z IdentityCloudMixin.create_rolec K s� | � dd�rt�d��||d< | jf i |��}|du rH| j�d|� dS dj|d �}|jd |id �}| jj d ||d �}| � d|�}| � |�S )a; Update a Keystone role. :param name_or_id: Name or id of the role to update :param string name: The new role name :param domain_id: domain id :returns: a ``munch.Munch`` containing the role description :raise OpenStackCloudException: if the role cannot be created r r z5Unavailable Feature: Role update requires Identity v3r& Nz Role %s not found for updatingFz Failed to update role {name}ry rA )Zrole_idr� r� )rU r7 r� ) r r r� r� r! r" r r5 r r< r r� )r r& rA r' r� r} Z json_kwargsr) r r r � update_role� s$ �� � z IdentityCloudMixin.update_rolec K sr | j |fi |��}|du r,| j�d|� dS | �dd�}dj|rDdnd|d d �}d j|d �}| jj||d � dS )a5 Delete a Keystone role. :param string id: Name or id of the role to delete. :param domain_id: domain id (v3) :returns: True if delete succeeded, False otherwise. :raises: ``OpenStackCloudException`` if something goes wrong during the OpenStack API call. Nz Role %s not found for deletingFr r z{preffix}/{id}r� r� r5 )Zpreffixr5 z Unable to delete role {name}ry rT T)r� r! r" r r r rE )r r& r' r� r� r| r_ r r r � delete_role s � � z IdentityCloudMixin.delete_rolec C s� | � |�}|d u ri S d|ji}| �dd�}i }|sR|rR| �|�d |d< |d< |r�|rt| j||d |d�|d< n| j||d �|d< |r�|�dd � | j||d �|d < |s�|r�| j||d �|d < |S ) Nr� r r r5 r r� )r r rN �r r rg )r� r5 r r� rP r] r1 re ) r r� rN rg r r� r) Zis_keystone_v2r r r r �_get_grant_revoke_params s, �� z+IdentityCloudMixin._get_grant_revoke_paramsF�< c C s� | � |||||�}|�� } |s.t�d�|���|�d�durT|�d�durTt�d��|�d�du rz|�d�du rzt�d��| �dd�r�|�d �du r�t�d ��| j| d �r�| j� d � d S d�|�} | �dd��rdj|d d |d d |d d�} | j j | | ddid� n�|�d �du �r8|�d�du �r8t�d��|�d��rTd�|d �} nd�|d d �} |�d��r�| d�|d d �7 } n| d�|d d �7 } | d �|�d��7 } | j j | | d � |�r�t � |d �D ]} | j| d ��r� �q�q�d S ) a Grant a role to a user. :param string name_or_id: The name or id of the role. :param string user: The name or id of the user. :param string group: The name or id of the group. (v3) :param string project: The name or id of the project. :param string domain: The id of the domain. (v3) :param bool wait: Wait for role to be granted :param int timeout: Timeout to wait for role to be granted NOTE: domain is a required argument when the grant is on a project, user or group specified by name. In that situation, they are all considered to be in that domain. If different domains are in use in the same role grant, it is required to specify those by ID. NOTE: for wait and timeout, sometimes granting roles is not instantaneous. NOTE: project is required for keystone v2 :returns: True if the role is assigned, otherwise False :raise OpenStackCloudException: if the role cannot be granted �Role {0} not found.rN Nrg �*Specify either a group or a user, not both�%Must specify either a user or a groupr r r �$Must specify project for keystone v2r� zAssignment already existsFz"Error granting access to role: {0}�)/tenants/{t}/users/{u}/roles/OS-KSADM/{r}r5 r� ��tr[ �rr� r� �rU r� r� �'Must specify either a domain or project� /domains/{}� /projects/{}� /groups/{}� /users/{}� /roles/{}rT z&Timeout waiting for role to be grantedT)r� r� r r# r r r r� r! r" r r^ r �iterate_timeout� r r& rN rg r r� �wait�timeoutr) r r_ r| �countr r r � grant_role> sj �� � � �� � � � � z IdentityCloudMixin.grant_rolec C s� | � |||||�}|�� } |s.t�d�|���|�d�durT|�d�durTt�d��|�d�du rz|�d�du rzt�d��| �dd�r�|�d �du r�t�d ��| j| d �s�| j� d � d S d�|�} | �dd��rdj|d d |d d |d d�} | j j | | ddid� n�|�d �du �r8|�d�du �r8t�d��|�d��rTd�|d �} nd�|d d �} |�d��r�| d�|d d �7 } n| d�|d d �7 } | d �|�d��7 } | j j | | d � |�r�t � |d �D ]} | j| d ��s� �q�q�d S ) a� Revoke a role from a user. :param string name_or_id: The name or id of the role. :param string user: The name or id of the user. :param string group: The name or id of the group. (v3) :param string project: The name or id of the project. :param string domain: The id of the domain. (v3) :param bool wait: Wait for role to be revoked :param int timeout: Timeout to wait for role to be revoked NOTE: for wait and timeout, sometimes revoking roles is not instantaneous. NOTE: project is required for keystone v2 :returns: True if the role is revoke, otherwise False :raise OpenStackCloudException: if the role cannot be removed r� rN Nrg r� r� r r r r� r� zAssignment does not existFz"Error revoking access to role: {0}r� r5 r� r� r� r� r� r� r� r� r� r� r� r� rT z&Timeout waiting for role to be revokedT)r� r� r r# r r r r� r! r" r rE r r� r� r r r � revoke_role� sl �� � � �� �� � � z IdentityCloudMixin.revoke_rolec C sD |r<| � |�}|si S | �dd�r.d|d iS d|d iS ni S d S )Nr r Zdefault_project_idr5 Z tenant_id)r1 r )r r& r r r r �_get_project_id_param_dict� s z-IdentityCloudMixin._get_project_id_param_dictc C s. | � dd�r&|s t�d��q*d|iS ni S dS )zGet a useable domain.r r zAUser or project creation requires an explicit domain_id argument.r N)r r r# )r r r r r rC � s � z,IdentityCloudMixin._get_domain_id_param_dictc C s( i }|� | �|�� |� | �|�� |S )z�Get the domain and project/tenant parameters if needed. keystone v2 and v3 are divergent enough that we need to pass or not pass project or tenant_id or domain or nothing in a sane manner. )r; rC r� )r r r r� r r r ra � s z'IdentityCloudMixin._get_identity_params)NNN)NNN)NN)NN)NNT)N)NN)N)T)NNNTNN)T)NN)N)NNNT)NN)N)NT)NNNNN)NN)NN)NNN)NN)N)N)NN)NN)N)NN)N)NNNN)NNNNFr� )NNNNFr� )NN)@�__name__� __module__� __qualname__�propertyr r Zcache_on_argumentsr+ r- r1 r@ rD rF Z valid_kwargsrK rM rP rW r` rc rd rh rn rp rq r~ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� re r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� rC ra r r r r r s� ' � � - � ) � � i � � " " � < � ! � R � O r ) �typesr� Zopenstack.cloudr r r Z openstackr Z Normalizerr r r r r �<module> s
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка