Scott Baker | b63ea79 | 2016-08-11 10:24:48 -0700 | [diff] [blame^] | 1 | import os |
| 2 | import base64 |
| 3 | from collections import defaultdict |
| 4 | from django.db.models import F, Q |
| 5 | from xos.config import Config |
| 6 | from synchronizers.base.openstacksyncstep import OpenStackSyncStep |
| 7 | from synchronizers.base.syncstep import * |
| 8 | from core.models.site import Controller, SiteDeployment, SiteDeployment |
| 9 | from core.models.user import User |
| 10 | from core.models.controlleruser import ControllerUser |
| 11 | from synchronizers.base.ansible import * |
| 12 | from openstack_xos.driver import OpenStackDriver |
| 13 | from xos.logger import observer_logger as logger |
| 14 | import json |
| 15 | |
| 16 | class SyncControllerUsers(OpenStackSyncStep): |
| 17 | provides=[User] |
| 18 | requested_interval=0 |
| 19 | observes=ControllerUser |
| 20 | playbook='sync_controller_users.yaml' |
| 21 | |
| 22 | def map_sync_inputs(self, controller_user): |
| 23 | if not controller_user.controller.admin_user: |
| 24 | logger.info("controller %r has no admin_user, skipping" % controller_user.controller) |
| 25 | return |
| 26 | |
| 27 | # All users will have at least the 'user' role at their home site/tenant. |
| 28 | # We must also check if the user should have the admin role |
| 29 | |
| 30 | roles = ['user'] |
| 31 | if controller_user.user.is_admin: |
| 32 | driver = OpenStackDriver().admin_driver(controller=controller_user.controller) |
| 33 | roles.append(driver.get_admin_role().name) |
| 34 | |
| 35 | # setup user home site roles at controller |
| 36 | if not controller_user.user.site: |
| 37 | raise Exception('Siteless user %s'%controller_user.user.email) |
| 38 | else: |
| 39 | # look up tenant id for the user's site at the controller |
| 40 | #ctrl_site_deployments = SiteDeployment.objects.filter( |
| 41 | # site_deployment__site=controller_user.user.site, |
| 42 | # controller=controller_user.controller) |
| 43 | |
| 44 | #if ctrl_site_deployments: |
| 45 | # # need the correct tenant id for site at the controller |
| 46 | # tenant_id = ctrl_site_deployments[0].tenant_id |
| 47 | # tenant_name = ctrl_site_deployments[0].site_deployment.site.login_base |
| 48 | user_fields = { |
| 49 | 'endpoint':controller_user.controller.auth_url, |
| 50 | 'endpoint_v3': controller_user.controller.auth_url_v3, |
| 51 | 'domain': controller_user.controller.domain, |
| 52 | 'name': controller_user.user.email, |
| 53 | 'email': controller_user.user.email, |
| 54 | 'password': controller_user.user.remote_password, |
| 55 | 'admin_user': controller_user.controller.admin_user, |
| 56 | 'admin_password': controller_user.controller.admin_password, |
| 57 | 'ansible_tag':'%s@%s'%(controller_user.user.email.replace('@','-at-'),controller_user.controller.name), |
| 58 | 'admin_project': controller_user.controller.admin_tenant, |
| 59 | 'roles':roles, |
| 60 | 'project':controller_user.user.site.login_base |
| 61 | } |
| 62 | return user_fields |
| 63 | |
| 64 | def map_sync_outputs(self, controller_user, res): |
| 65 | controller_user.kuser_id = res[0]['user']['id'] |
| 66 | controller_user.backend_status = '1 - OK' |
| 67 | controller_user.save() |
| 68 | |
| 69 | def delete_record(self, controller_user): |
| 70 | if controller_user.kuser_id: |
| 71 | driver = self.driver.admin_driver(controller=controller_user.controller) |
| 72 | driver.delete_user(controller_user.kuser_id) |