File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/keystone.cpython-310.pyc
Back
o ;j[� � @ s� d Z ddlZddlZdZz&ddlZddlmZ dZddl m Z ddl m Z ddlm Z ddlmZ W n ey; Y nw d ad ae�e�Zd d � Zd_d d�Zd_dd�Zd_dd�Z d`dd�Z dadd�Z dadd�Z dbdd�Z dbdd �Z d_d d �Z dcd d �Z dbd!d"�Z!d_d#d$�Z"dbd%d&�Z#dbd'd(�Z$d_d)d*�Z% ddd+d,�Z&dbd-d.�Z'dbd/d0�Z(d_d1d2�Z) ded3d4�Z* ded5d6�Z+dbd7d8�Z,dbd9d:�Z-dbd;d<�Z.dbd=d>�Z/d_d?d@�Z0d_dAdB�Z1 d`dCdD�Z2 d`dEdF�Z3d_dGdH�Z4d_dIdJ�Z5dbdKdL�Z6 dfdMdN�Z7dbdOdP�Z8 dgdQdR�Z9 dadSdT�Z: dadUdV�Z; dhdWdX�Z< dhdYdZ�Z= dcd[d\�Z>d_d]d^�Z?dS )iaf Module for handling openstack keystone calls. :optdepends: - keystoneclient Python adapter :configuration: This module is not usable until the following are specified either in a pillar or in the minion's config file: .. code-block:: yaml keystone.user: admin keystone.password: verybadpass keystone.tenant: admin keystone.tenant_id: f80919baedab48ec8931f200c65a50df keystone.auth_url: 'http://127.0.0.1:5000/v2.0/' keystone.verify_ssl: True OR (for token based authentication) .. code-block:: yaml keystone.token: 'ADMIN' keystone.endpoint: 'http://127.0.0.1:35357/v2.0' If configuration for multiple openstack accounts is required, they can be set up as different configuration profiles. For example: .. code-block:: yaml openstack1: keystone.user: admin keystone.password: verybadpass keystone.tenant: admin keystone.tenant_id: f80919baedab48ec8931f200c65a50df keystone.auth_url: 'http://127.0.0.1:5000/v2.0/' keystone.verify_ssl: True openstack2: keystone.user: admin keystone.password: verybadpass keystone.tenant: admin keystone.tenant_id: f80919baedab48ec8931f200c65a50df keystone.auth_url: 'http://127.0.0.2:5000/v2.0/' keystone.verify_ssl: True With this configuration in place, any of the keystone functions can make use of a configuration profile by declaring it explicitly. For example: .. code-block:: bash salt '*' keystone.tenant_list profile=openstack1 � NF)�clientT��session)�generic)�discover� �tenantsc C s t rdS dS )zL Only load this module if keystone is installed on this minion. Zkeystone)FzXkeystone execution module cannot be loaded: keystoneclient python library not available.)� HAS_KEYSTONE� r r �I/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/keystone.py� __virtual__P s r c s� | r| d �nd�d� �fdd� }|dd�}|dd �}|d d�}|d �}|d d �}|dd�}|d�} |dd�} |dd�} |dd�} |dd�} | rN| | d�}n|||||| | d�}|r^d|d< | |d< |S )z get connection args z :keystone.z keystone.Nc s � � d| td �| |��S )zL look in connection_args first, then default to config file Z connection_z config.get)�get�__salt__)�key�default��connection_args�prefixr r r g s �z_get_kwargs.<locals>.get�userZadmin�passwordZADMIN�tenant� tenant_id�auth_urlz http://127.0.0.1:35357/v2.0/�insecureF�token�endpoint�http://127.0.0.1:35357/v2.0�user_domain_nameZDefault�project_domain_name� verify_sslT)r r )�usernamer � tenant_namer r r r �Nr )�profiler r r r r r r r r r r r r �kwargsr r r � _get_kwargs^ s: � r% c K sd t d d| i|��}|�d|�dd��}ztjjj|dd|d d�d d d W S ty1 Y dS w ) z� Returns the API version derived from endpoint's response. CLI Example: .. code-block:: bash salt '*' keystone.api_version r# r r NT�jsonr )�decodeZ decode_typer �dict�version�idr )r% r �salt�utils�http�query�KeyError)r# r r$ r r r r � api_version� s ���� �r0 c K s� t d dd� tdd| i|��}tj|d d�}|�d�}|�d�}|r-d ad a||d< n||d< |�d � |�d � tj di |��}t j |d �}|j |d�}|S )z� Set up keystone credentials. Only intended to be used within Keystone-enabled modules. CLI Example: .. code-block:: bash salt '*' keystone.auth zversions.warn_untilZArgonzwThe keystone module has been deprecated and will be removed in {version}. Please update to using the keystoneng moduler# r )r zv2.0zv3.0� �projectsr r )�authr Nr ) Z __utils__r% r ZDiscoverZurl_for�_OS_IDENTITY_API_VERSION�_TENANTS�popr ZPasswordr ZSessionZ create_client) r# r r$ ZdiscZ v2_auth_urlZ v3_auth_urlr3 ZsessZks_clr r r r3 � s& � r3 c K s� t |fi |��}|rtd||d�|��| d } | s ddiS |r.td||d�|��| d }|s4ddiS |j�| |�}|j|j|j|jd�S ) aL Create EC2-compatible credentials for user per tenant CLI Examples: .. code-block:: bash salt '*' keystone.ec2_credentials_create name=admin tenant=admin salt '*' keystone.ec2_credentials_create user_id=c965f79c4f864eaaa9c3b41904e67082 tenant_id=722787eb540849158668370dc627ec5f ��namer# r* �Error�Could not resolve User IDzCould not resolve Tenant ID)�access�secretr �user_idNr ) r3 �user_get� tenant_get�ec2�creater; r< r r= )r= r8 r r r# r �kstoneZnewec2r r r �ec2_credentials_create� s" ��rC c K s\ t |fi |��}|rtd |dd�|��| d } | s ddiS |j�| |� d|� d| � d�S ) aP Delete EC2-compatible credentials CLI Examples: .. code-block:: bash salt '*' keystone.ec2_credentials_delete 860f8c2c38ca4fab989f9bc56a061a64 access_key=5f66d2f24f604b8bb9cd28886106f442 salt '*' keystone.ec2_credentials_delete name=admin access_key=5f66d2f24f604b8bb9cd28886106f442 Nr7 r* r9 r: z ec2 key "z" deleted under user id "�"r )r3 r> r@ �delete)r= r8 Z access_keyr# r rB r r r �ec2_credentials_delete� s rF c K s� t |fi |��}i }|r |j�� D ] }|j|kr |j} nq| s$ddiS |s*ddiS |jjd| ||d�|��}|j|j|j |j d�||j< |S )a� Return ec2_credentials for a user (keystone ec2-credentials-get) CLI Examples: .. code-block:: bash salt '*' keystone.ec2_credentials_get c965f79c4f864eaaa9c3b41904e67082 access=722787eb540849158668370 salt '*' keystone.ec2_credentials_get user_id=c965f79c4f864eaaa9c3b41904e67082 access=722787eb540849158668370 salt '*' keystone.ec2_credentials_get name=nova access=722787eb540849158668370dc627ec5f r9 �Unable to resolve user idzAccess key is required)r= r; r# )r= r r; r< Nr ) r3 �users�listr8 r* r@ r r= r r; r< ) r= r8 r; r# r rB �retr Zec2_credentialsr r r �ec2_credentials_get s. ��� �rK c K sz t |fi |��}i }|r |j�� D ] }|j|kr |j} nq| s$ddiS |j�| �D ]}|j|j|j|j d�||j< q*|S )am Return a list of ec2_credentials for a specific user (keystone ec2-credentials-list) CLI Examples: .. code-block:: bash salt '*' keystone.ec2_credentials_list 298ce377245c4ec9b70e1c639c89e654 salt '*' keystone.ec2_credentials_list user_id=298ce377245c4ec9b70e1c639c89e654 salt '*' keystone.ec2_credentials_list name=jack r9 rG )r= r r; r< ) r3 rH rI r8 r* r@ r= r r; r< )r= r8 r# r rB rJ r Zec2_credentialr r r �ec2_credentials_list1 s" ��rL c s� t |fi |�� t|fi |��}| |vrddiS || d �t|fi |��}dd� � ��fdd�|�� D �D �}t|�dkrFdd�|| �iS t|�dkrP|d S dd iS ) z� Return a specific endpoint (keystone endpoint-get) CLI Example: .. code-block:: bash salt 'v2' keystone.endpoint_get nova [region=RegionOne] salt 'v3' keystone.endpoint_get nova interface=admin [region=RegionOne] r9 �$Could not find the specified servicer* c S s g | ]}|r|�qS r r )�.0Z_fr r r � <listcomp>c s ��z endpoint_get.<locals>.<listcomp>c sH g | ] }|d �kr �r|d �kr n � r |d � kr n |nd�qS )� service_id�regionT� interfaceNr )rN �e�rR rQ rP r r rO e s ������ zHMultiple endpoints found ({}) for the {} service. Please specify region.r z1Could not find endpoint for the specified service)r3 � service_list� endpoint_list�values�len�format)�servicerQ r# rR r �services� endpointsrS r rT r � endpoint_getP s& �� � r^ c �D t | fi |��}i }|j�� D ]� � fdd�t� �D �|� j< q|S )z� Return a list of available endpoints (keystone endpoints-list) CLI Example: .. code-block:: bash salt '*' keystone.endpoint_list c �8 i | ]}|� d �stt� |�tttf�r|t� |��qS ��_�� startswith� isinstance�getattr�strr( �bool�rN �value�r r r � <dictcomp>� � �� �z!endpoint_list.<locals>.<dictcomp>)r3 r] rI �dirr* �r# r rB rJ r rk r rW } s �rW c K s� t |fi |��} td | |d�|��} | rd| v r ddiS tdkr/| jj| | d |||d� n| jj|| | d |||d� t| |||fi |��S ) aI Create an endpoint for an Openstack service CLI Examples: .. code-block:: bash salt 'v2' keystone.endpoint_create nova 'http://public/url' 'http://internal/url' 'http://adminurl/url' region salt 'v3' keystone.endpoint_create nova url='http://public/url' interface='public' region='RegionOne' r7 r9 rM r r* )r[ Z region_id�urlrR )rQ rP � publicurl�adminurl� internalurlNr )r3 � service_getr4 r] rA r^ ) r[ rq rs rr rQ r# rp rR r rB Zkeystone_servicer r r �endpoint_create� s& � �ru c K st t |fi |��}t| |||fi |��}|rd|v r ddiS |j�|d � t| |||fi |��}|r6d|v r8dS dS )z� Delete endpoints of an Openstack service CLI Examples: .. code-block:: bash salt 'v2' keystone.endpoint_delete nova [region=RegionOne] salt 'v3' keystone.endpoint_delete nova interface=admin [region=RegionOne] r9 z,Could not find any endpoints for the servicer* TN)r3 r^ r] rE )r[ rQ r# rR r rB r r r r �endpoint_delete� s �rv c K sX t |fi |��}dtd| |d�|��vr dd| � d�iS |j�| � td| |d�|��S )zw Create a named role. CLI Example: .. code-block:: bash salt '*' keystone.role_create admin r9 r7 zRole "z" already existsNr )r3 �role_get�rolesrA )r8 r# r rB r r r � role_create� s ry c K s� t |fi |��}|r |j�� D ] }|j|kr|j} nq| s"ddiS |j�| �}|j�|� d| � d�}|r>|d|� d�7 }|S )a# Delete a role (keystone role-delete) CLI Examples: .. code-block:: bash salt '*' keystone.role_delete c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.role_delete role_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.role_delete name=admin r9 �Unable to resolve role idzRole ID � deleted� (�))r3 rx rI r8 r* r rE )�role_idr8 r# r rB �rolerJ r r r � role_delete� s � r� c K sl t |fi |��}i }|r |j�� D ] }|j|kr |j} nq| s$ddiS |j�| �}|j|jd�||j< |S )a Return a specific roles (keystone role-get) CLI Examples: .. code-block:: bash salt '*' keystone.role_get c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.role_get role_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.role_get name=nova r9 rz )r* r8 )r3 rx rI r8 r* r )r~ r8 r# r rB rJ r r r r rw s � rw c r_ )z� Return a list of available roles (keystone role-list) CLI Example: .. code-block:: bash salt '*' keystone.role_list c r` ra rc ri �r r r rl 2 rm z role_list.<locals>.<dictcomp>)r3 rx rI rn r8 ro r r� r � role_list% � �r� c K s8 t |fi |��}|jj| ||d�}t|jfd|i|��S )z� Add service to Keystone service catalog CLI Examples: .. code-block:: bash salt '*' keystone.service_create nova compute 'OpenStack Compute Service' )� descriptionr# )r3 r\ rA rt r* )r8 Z service_typer� r# r rB r[ r r r �service_create; s r� c K sH t |fi |��}|rtd||d�|��| d } |j�| � d| � d�S )z� Delete a service from Keystone service catalog CLI Examples: .. code-block:: bash salt '*' keystone.service_delete c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.service_delete name=nova r7 r* zKeystone service ID "z " deletedNr )r3 rt r\ rE )rP r8 r# r rB r r r �service_deleteM s � r� c st t |fi |��}i }|r |j�� D ] � � j|kr � j} nq| s$ddiS |j�| �� � fdd�t� �D �|� j< |S )a2 Return a specific services (keystone service-get) CLI Examples: .. code-block:: bash salt '*' keystone.service_get c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.service_get service_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.service_get name=nova r9 z Unable to resolve service idc r` ra rc ri �r[ r r rl w rm z service_get.<locals>.<dictcomp>)r3 r\ rI r8 r* r rn )rP r8 r# r rB rJ r r� r rt a s � �rt c r_ )z� Return a list of available services (keystone services-list) CLI Example: .. code-block:: bash salt '*' keystone.service_list c r` ra rc ri r� r r rl � rm z service_list.<locals>.<dictcomp>)r3 r\ rI rn r8 ro r r� r rV � r� rV c K s< t |fi |��}t|td��| ||�}t|jfd|i|��S )z� Create a keystone tenant CLI Examples: .. code-block:: bash salt '*' keystone.tenant_create nova description='nova tenant' salt '*' keystone.tenant_create test enabled=False Nr# �r3 rf r5 rA r? r* )r8 r� �enabledr# r rB �newr r r � tenant_create� s r� c K s@ t |fi |��}t|td�j| |||d�}t|jfd|i|��S )a� Create a keystone project. Overrides keystone tenant_create form api V2. For keystone api V3. .. versionadded:: 2016.11.0 name The project name, which must be unique within the owning domain. domain The domain name. description The project description. enabled Enables or disables the project. profile Configuration profile - if configuration for multiple openstack accounts required. CLI Examples: .. code-block:: bash salt '*' keystone.project_create nova default description='Nova Compute Project' salt '*' keystone.project_create test default enabled=False N)r8 �domainr� r� r# r� )r8 r� r� r� r# r rB r� r r r �project_create� s �r� c K s� t |fi |��}|r t|td��� D ] }|j|kr |j} nq| s%ddiS t|td��| � d| � d�}|r>|d|� d�7 }|S )a. Delete a tenant (keystone tenant-delete) CLI Examples: .. code-block:: bash salt '*' keystone.tenant_delete c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.tenant_delete tenant_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.tenant_delete name=demo Nr9 �Unable to resolve tenant idz Tenant ID r{ r| r} )r3 rf r5 rI r8 r* rE )r r8 r# r rB r rJ r r r � tenant_delete� s � r� c K �2 t |fi |�� tdkrtd| |dd�|��S dS )aV Delete a project (keystone project-delete). Overrides keystone tenant-delete form api V2. For keystone api V3 only. .. versionadded:: 2016.11.0 project_id The project id. name The project name. profile Configuration profile - if configuration for multiple openstack accounts required. CLI Examples: .. code-block:: bash salt '*' keystone.project_delete c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.project_delete project_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.project_delete name=demo r N�r r8 r# Fr )r3 r4 r� �� project_idr8 r# r r r r �project_delete� s ��r� c s� t |fi |��}i }|r!t|td��� D ] � � j|kr � j} nq| s'ddiS t|td��| �� � fdd�t� �D �|� j< |S )a, Return a specific tenants (keystone tenant-get) CLI Examples: .. code-block:: bash salt '*' keystone.tenant_get c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.tenant_get tenant_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.tenant_get name=nova Nr9 r� c r` ra rc ri �r r r rl # rm z tenant_get.<locals>.<dictcomp>)r3 rf r5 rI r8 r* r rn )r r8 r# r rB rJ r r� r r? s � �r? c K r� )aT Return a specific projects (keystone project-get) Overrides keystone tenant-get form api V2. For keystone api V3 only. .. versionadded:: 2016.11.0 project_id The project id. name The project name. profile Configuration profile - if configuration for multiple openstack accounts required. CLI Examples: .. code-block:: bash salt '*' keystone.project_get c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.project_get project_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.project_get name=nova r Nr� Fr )r3 r4 r? r� r r r � project_get, s ��r� c sJ t | fi |��}i }t|td��� D ]� � fdd�t� �D �|� j< q|S )z� Return a list of available tenants (keystone tenants-list) CLI Example: .. code-block:: bash salt '*' keystone.tenant_list Nc r` ra rc ri r� r r rl ] rm z tenant_list.<locals>.<dictcomp>)r3 rf r5 rI rn r8 ro r r� r � tenant_listO s �r� c K s, t | fi |�� tdkrt| fi |��S dS )as Return a list of available projects (keystone projects-list). Overrides keystone tenants-list form api V2. For keystone api V3 only. .. versionadded:: 2016.11.0 profile Configuration profile - if configuration for multiple openstack accounts required. CLI Example: .. code-block:: bash salt '*' keystone.project_list r F)r3 r4 r� )r# r r r r � project_listf s r� c s� t |fi |��}| s t|td��� D ] }|j|kr |j} nq| s%ddiS t|td��| �}|s3|j}|s8|j}|du r?|j}t|td�j | |||d�� � fdd�t � �D �S )a� Update a tenant's information (keystone tenant-update) The following fields may be updated: name, description, enabled. Can only update name if targeting by ID CLI Examples: .. code-block:: bash salt '*' keystone.tenant_update name=admin enabled=True salt '*' keystone.tenant_update c965f79c4f864eaaa9c3b41904e67082 name=admin email=admin@domain.com Nr9 r� )r8 r� r� c r` ra rc ri ��updatedr r rl � rm z!tenant_update.<locals>.<dictcomp>) r3 rf r5 rI r8 r* r r� r� �updatern )r r8 r� r� r# r rB r r r� r � tenant_update s, � � �r� c K s6 t |fi |�� tdkrtd| ||||d�|��S dS )aJ Update a tenant's information (keystone project-update) The following fields may be updated: name, description, enabled. Can only update name if targeting by ID Overrides keystone tenant_update form api V2. For keystone api V3 only. .. versionadded:: 2016.11.0 project_id The project id. name The project name, which must be unique within the owning domain. description The project description. enabled Enables or disables the project. profile Configuration profile - if configuration for multiple openstack accounts required. CLI Examples: .. code-block:: bash salt '*' keystone.project_update name=admin enabled=True salt '*' keystone.project_update c965f79c4f864eaaa9c3b41904e67082 name=admin email=admin@domain.com r )r r8 r� r� r# FNr )r3 r4 r� )r� r8 r� r� r# r r r r �project_update� s (�� r� c K s8 t | fi |��}|j�� }|d |d |d |d d�S )z� Return the configured tokens (keystone token-get) CLI Example: .. code-block:: bash salt '*' keystone.token_get c965f79c4f864eaaa9c3b41904e67082 r* �expiresr= r )r* r� r= r )r3 Zservice_catalogZ get_token)r# r rB r r r r � token_get� s �r� c sb t | fi |��}i }|j�� D ] � � fdd�t� �D �|� j< t� dd�}|r.||� j d< q|S )z� Return a list of available users (keystone user-list) CLI Example: .. code-block:: bash salt '*' keystone.user_list c �< i | ]}|� d �stt� |d�tttf�r|t� |d��qS �rb Nrc ri �r r r rl � �� �z user_list.<locals>.<dictcomp>�tenantIdNr )r3 rH rI rn r8 rf )r# r rB rJ r r r� r � user_list� s � �r� c s� t |fi |��}i }|r |j�� D ] � � j|kr � j} nq| s$ddiS z|j�| �� W n tjjyF d| � d�}t � |� d|i Y S w � fdd�t � �D �|� j< t � dd�}|rd||� j d < |S ) a Return a specific users (keystone user-get) CLI Examples: .. code-block:: bash salt '*' keystone.user_get c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.user_get user_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.user_get name=nova r9 rG zCould not find user '�'c r� r� rc ri r� r r rl 0 r� z user_get.<locals>.<dictcomp>r� Nr ) r3 rH rI r8 r* r �keystoneclient� exceptionsZNotFound�log�errorrn rf )r= r8 r# r rB rJ �msgr r r� r r> s0 � � � r> c K sj t |fi |��} tdkr |r|s|}| jj| |||||d�} n | jj| ||||d�} t| jfd|i|��S )z� Create a user (keystone user-create) CLI Examples: .. code-block:: bash salt '*' keystone.user_create name=jack password=zero email=jack@halloweentown.org tenant_id=a28a7b5a999a455f84b1f5210264375e enabled=True r )r8 r �emailr� r� r� )r8 r r� r r� r# )r3 r4 rH rA r> r* ) r8 r r� r r� r# r� r� r rB �itemr r r � user_create= s( � �r� c K st t |fi |��}|r |j�� D ] }|j|kr|j} nq| s"ddiS |j�| � d| � d�}|r8|d|� d�7 }|S )a" Delete a user (keystone user-delete) CLI Examples: .. code-block:: bash salt '*' keystone.user_delete c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.user_delete user_id=c965f79c4f864eaaa9c3b41904e67082 salt '*' keystone.user_delete name=nova r9 rG zUser ID r{ r| r} )r3 rH rI r8 r* rE )r= r8 r# r rB r rJ r r r � user_deletej s � r� c K sN t |fi |��} | s"| j�� D ] } | j|kr| j} nq| s"ddiS | j�| �} |s-| j}|s2| j}|du r9| j}tdkrw|du rHt | dd�}nt |�}d} |rb| j �� D ] } | j|kra| j} nqU| sjt | dd�} | jj | ||||| d� n)| jj | |||d� d} |r�| j �� D ] }|j|kr�|j} nq�| r�| j�| | � d | � �}|S ) a� Update a user's information (keystone user-update) The following fields may be updated: name, email, enabled, tenant. Because the name is one of the fields, a valid user id is required. CLI Examples: .. code-block:: bash salt '*' keystone.user_update user_id=c965f79c4f864eaaa9c3b41904e67082 name=newname salt '*' keystone.user_update c965f79c4f864eaaa9c3b41904e67082 name=newname email=newemail@domain.com r9 rG Nr r� r� )r r8 r� r� r� r� )r r8 r� r� zInfo updated for user ID )r3 rH rI r8 r* r r� r� r4 rf rg r2 r� r Z update_tenant)r= r8 r� r� r r# �projectr� r rB r r� Zprojr ZtntrJ r r r � user_update� sb � � � � r� c K s� t |fi |��}d|v r|�d�}ntdkr td dd�}ntd dd�}| r9|j�� D ] }|j| kr8|j} nq,|s?ddiS |||d �}ztdkrUtj d i |�� W d S t j d i |�� W d S t j j t j jfyo Y d S w )a Verify a user's password CLI Examples: .. code-block:: bash salt '*' keystone.user_verify_password name=test password=foobar salt '*' keystone.user_verify_password user_id=c965f79c4f864eaaa9c3b41904e67082 password=foobar Zconnection_endpointr z config.optionzkeystone.endpointzhttp://127.0.0.1:35357/v3r r9 zUnable to resolve user name)r r r FTNr )r3 r r4 r rH rI r* r8 �client3ZClientr r� r� � UnauthorizedZAuthorizationFailure) r= r8 r r# r rB r r r$ r r r �user_verify_password� s> �� � �� ��r� c K s� t |fi |��}|r |j�� D ] }|j|kr|j} nq| s"ddiS tdkr/|jj| |d� n|jj| |d� d| � �}|rF|d|� d�7 }|S )a~ Update a user's password (keystone user-password-update) CLI Examples: .. code-block:: bash salt '*' keystone.user_password_update c965f79c4f864eaaa9c3b41904e67082 password=12345 salt '*' keystone.user_password_update user_id=c965f79c4f864eaaa9c3b41904e67082 password=12345 salt '*' keystone.user_password_update name=nova password=12345 r9 rG r )r r z Password updated for user ID r| r} )r3 rH rI r8 r* r4 r� Zupdate_password)r= r8 r r# r rB r rJ r r r �user_password_update s � r� c K sb t |fi | ��} |r|s|}n|r|s|}|r'td ||d�| ��| �d�} nttt| fd|i| ���� ��d }| s?ddiS |rQtd ||d�| ��| �d�}nttt|fd|i| ���� ��d }|siddiS |rztd ||d�| ��| d }nttt|fd|i| ���� ��d }|s�ddiS td kr�| j j || |d � n| j � | ||� d } | � |||�S )a\ Add role for user in tenant (keystone user-role-add) CLI Examples: .. code-block:: bash salt '*' keystone.user_role_add user_id=298ce377245c4ec9b70e1c639c89e654 tenant_id=7167a092ece84bae8cead4bf9d15bb3b role_id=ce377245c4ec9b70e1c639c89e8cead4 salt '*' keystone.user_role_add user=admin tenant=admin role=admin r7 r* r# r8 r9 rG �#Unable to resolve tenant/project idrz r �r r� z8"{0}" role added for user "{1}" for "{2}" tenant/projectNr ) r3 r> r �next�iter�keysr? rw r4 rx ZgrantZ add_user_rolerZ � r= r r r r~ r r# r� � project_namer rB Zret_msgr r r � user_role_add% sN � ����� �r� c K sV t |fi | ��} |r|s|}n|r|s|}|r'td ||d�| ��| �d�} nttt| fd|i| ���� ��d }| s?ddiS |rQtd ||d�| ��| �d�}nttt|fd|i| ���� ��d }|siddiS |rztd ||d�| ��| d }n ttt|��� ��d }|s�ddiS td kr�| j j || |d � n| j � | ||� d } | � |||�S )ah Remove role for user in tenant (keystone user-role-remove) CLI Examples: .. code-block:: bash salt '*' keystone.user_role_remove user_id=298ce377245c4ec9b70e1c639c89e654 tenant_id=7167a092ece84bae8cead4bf9d15bb3b role_id=ce377245c4ec9b70e1c639c89e8cead4 salt '*' keystone.user_role_remove user=admin tenant=admin role=admin r7 r* r# r8 r9 rG r� rz r r� z4"{0}" role removed for user "{1}" under "{2}" tenantNr ) r3 r> r r� r� r� r? rw r4 rx ZrevokeZremove_user_rolerZ r� r r r �user_role_removel sJ � ����� r� c s t |fi |��}i } |r|s|}n|r|s|}|r+|j�� D ] } | j|kr*| j} nq |rBt|td��� D ] } | j|krA| j} nq5| rF|sJddiS tdkri|jj| |d�D ]� � fdd�t � �D �| � j< qV| S |jj | |d�D ]� � j� j| |d �| � j< qq| S ) a@ Return a list of available user_roles (keystone user-roles-list) CLI Examples: .. code-block:: bash salt '*' keystone.user_role_list user_id=298ce377245c4ec9b70e1c639c89e654 tenant_id=7167a092ece84bae8cead4bf9d15bb3b salt '*' keystone.user_role_list user_name=admin tenant_name=admin Nr9 z+Unable to resolve user or tenant/project idr r� c r` ra rc ri r� r r rl � rm z"user_role_list.<locals>.<dictcomp>)r r )r* r8 r= r ) r3 rH rI r8 r* rf r5 r4 rx rn Zroles_for_user) r= r Z user_namer! r# r� r� r rB rJ r r r r� r �user_role_list� sB � � ���r� c K s4 t | fi |��}g }|j�� D ]}|�|j� q|S )z� Template for writing list functions Return a list of available items (keystone items-list) CLI Example: .. code-block:: bash salt '*' keystone.item_list )r3 �itemsrI �append�__dict__)r# r rB rJ r� r r r � _item_list� s r� r" )NNNNN)NNNN)NNN)NNNNNNN)NN)NTN)NTNNN)NNNNNNNN) NNNNNNNNN)@�__doc__�loggingZsalt.utils.httpr+ r Zkeystoneclient.exceptionsr� Zkeystoneclient.v2_0r Z keystoneauth1r Zkeystoneauth1.identityr r Zkeystoneclient.v3r� � ImportErrorr4 r5 � getLogger�__name__r� r r% r0 r3 rC rF rK rL r^ rW ru rv ry r� rw r� r� r� rt rV r� r� r� r� r? r� r� r� r� r� r� r� r> r� r� r� r� r� r� r� r� r� r r r r �<module> s 5 � 0 % �- � � % - �. � � � � & " # �2 � 7 - � - �P �0 �" �H �F �>
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings