mirror of
https://github.com/yunionio/cloudpods.git
synced 2026-06-23 20:50:45 +08:00
1. Query 'scope=system' and 'system=true' is neccessary when fetching all users or groups from Keystone. Without these, users and groups in other domains (non-caller domains), as well as system-level users, cannot be detected. 2. Query 'scope=system' is neccessary when fetching all project from Keystone.
228 lines
6.9 KiB
Go
228 lines
6.9 KiB
Go
// Copyright 2019 Yunion
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package shell
|
|
|
|
import (
|
|
"yunion.io/x/jsonutils"
|
|
|
|
api "yunion.io/x/onecloud/pkg/apis/identity"
|
|
"yunion.io/x/onecloud/pkg/mcclient"
|
|
"yunion.io/x/onecloud/pkg/mcclient/modules"
|
|
"yunion.io/x/onecloud/pkg/mcclient/options"
|
|
)
|
|
|
|
func init() {
|
|
type GroupListOptions struct {
|
|
options.BaseListOptions
|
|
Name string `help:"Filter by name"`
|
|
OrderByDomain string `help:"order by domain name" choices:"asc|desc"`
|
|
}
|
|
R(&GroupListOptions{}, "group-list", "List groups", func(s *mcclient.ClientSession, args *GroupListOptions) error {
|
|
params, err := options.ListStructToParams(args)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
result, err := modules.Groups.List(s, params)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
printList(result, modules.Groups.GetColumns(s))
|
|
return nil
|
|
})
|
|
|
|
type GroupShowOptions struct {
|
|
ID string `help:"ID or Name of group"`
|
|
Domain string `help:"Id or Name of domain"`
|
|
}
|
|
R(&GroupShowOptions{}, "group-show", "Show details of a group", func(s *mcclient.ClientSession, args *GroupShowOptions) error {
|
|
params := jsonutils.NewDict()
|
|
if len(args.Domain) > 0 {
|
|
domainId, err := modules.Domains.GetId(s, args.Domain, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
params.Add(jsonutils.NewString(domainId), "domain_id")
|
|
}
|
|
grpId, err := modules.Groups.GetId(s, args.ID, params)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
result, err := modules.Groups.GetById(s, grpId, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
printObject(result)
|
|
return nil
|
|
})
|
|
R(&GroupShowOptions{}, "group-user-list", "Show members of a group", func(s *mcclient.ClientSession, args *GroupShowOptions) error {
|
|
params := jsonutils.NewDict()
|
|
if len(args.Domain) > 0 {
|
|
domainId, err := modules.Domains.GetId(s, args.Domain, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
params.Add(jsonutils.NewString(domainId), "domain_id")
|
|
}
|
|
grpId, err := modules.Groups.GetId(s, args.ID, params)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
users, err := modules.Groups.GetUsers(s, grpId, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
printList(users, modules.UsersV3.GetColumns(s))
|
|
return nil
|
|
})
|
|
|
|
type GroupCreateOptions struct {
|
|
NAME string `help:"Name of the group"`
|
|
Desc string `help:"Description"`
|
|
Domain string `help:"Domain ID or Name"`
|
|
}
|
|
R(&GroupCreateOptions{}, "group-create", "Create a group", func(s *mcclient.ClientSession, args *GroupCreateOptions) error {
|
|
params := jsonutils.NewDict()
|
|
params.Add(jsonutils.NewString(args.NAME), "name")
|
|
if len(args.Desc) > 0 {
|
|
params.Add(jsonutils.NewString(args.Desc), "description")
|
|
}
|
|
if len(args.Domain) > 0 {
|
|
domainId, e := modules.Domains.GetId(s, args.Domain, nil)
|
|
if e != nil {
|
|
return e
|
|
}
|
|
params.Add(jsonutils.NewString(domainId), "domain_id")
|
|
}
|
|
result, e := modules.Groups.Create(s, params)
|
|
if e != nil {
|
|
return e
|
|
}
|
|
printObject(result)
|
|
return nil
|
|
})
|
|
|
|
R(&GroupShowOptions{}, "group-delete", "Delete a group", func(s *mcclient.ClientSession, args *GroupShowOptions) error {
|
|
params := jsonutils.NewDict()
|
|
if len(args.Domain) > 0 {
|
|
domainId, err := modules.Domains.GetId(s, args.Domain, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
params.Add(jsonutils.NewString(domainId), "domain_id")
|
|
}
|
|
grpId, err := modules.Groups.GetId(s, args.ID, params)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
result, err := modules.Groups.Delete(s, grpId, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
printObject(result)
|
|
return nil
|
|
})
|
|
|
|
R(&GroupShowOptions{}, "group-project-list", "List projects of group", func(s *mcclient.ClientSession, args *GroupShowOptions) error {
|
|
query := jsonutils.NewDict()
|
|
if len(args.Domain) > 0 {
|
|
domainId, err := modules.Domains.GetId(s, args.Domain, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
query.Add(jsonutils.NewString(domainId), "domain_id")
|
|
}
|
|
uid, err := modules.Groups.GetId(s, args.ID, query)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
projects, e := modules.Groups.GetProjects(s, uid)
|
|
if e != nil {
|
|
return e
|
|
}
|
|
printList(projects, modules.Projects.GetColumns(s))
|
|
return nil
|
|
})
|
|
|
|
type GroupJoinProjectOptions struct {
|
|
Group string `help:"Group Id or name" optional:"false" positional:"true"`
|
|
Project []string `help:"Projects to join" nargs:"+"`
|
|
Role []string `help:"User join project with roles" nargs:"+"`
|
|
}
|
|
R(&GroupJoinProjectOptions{}, "group-join-project", "Group join projects with roles", func(s *mcclient.ClientSession, args *GroupJoinProjectOptions) error {
|
|
input := api.SJoinProjectsInput{}
|
|
input.Projects = args.Project
|
|
input.Roles = args.Role
|
|
result, err := modules.Groups.PerformAction(s, args.Group, "join", jsonutils.Marshal(input))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
printObject(result)
|
|
return nil
|
|
})
|
|
|
|
type GroupLeaveProjectsOptions struct {
|
|
Group string `help:"group id or name" optional:"false" positional:"true"`
|
|
Project string `help:"project id or name" optional:"false" positional:"true"`
|
|
Role []string `help:"roles to remove" nargs:"+"`
|
|
}
|
|
R(&GroupLeaveProjectsOptions{}, "group-leave-project", "Leave a group from projects", func(s *mcclient.ClientSession, args *GroupLeaveProjectsOptions) error {
|
|
input := api.SLeaveProjectsInput{}
|
|
input.ProjectRoles = make([]api.SProjectRole, len(args.Role))
|
|
for i := range args.Role {
|
|
input.ProjectRoles[i].Project = args.Project
|
|
input.ProjectRoles[i].Role = args.Role[i]
|
|
}
|
|
result, err := modules.Groups.PerformAction(s, args.Group, "leave", jsonutils.Marshal(input))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
printObject(result)
|
|
return nil
|
|
})
|
|
|
|
type GroupBindGuestsOptions struct {
|
|
ID string `help:"ID"`
|
|
Guest []string `help:"ID or Name of Guest"`
|
|
}
|
|
|
|
R(&GroupBindGuestsOptions{}, "instance-group-bind-guests", "bind instancegroup to guests",
|
|
func(s *mcclient.ClientSession, opts *GroupBindGuestsOptions) error {
|
|
params, err := options.StructToParams(opts)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
sp, err := modules.InstanceGroup.PerformAction(s, opts.ID, "bind-guests", params)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
printObject(sp)
|
|
return nil
|
|
})
|
|
|
|
R(&GroupBindGuestsOptions{}, "instance-group-unbind-guests", "bind instancegroup to guests",
|
|
func(s *mcclient.ClientSession, opts *GroupBindGuestsOptions) error {
|
|
params, err := options.StructToParams(opts)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
sp, err := modules.InstanceGroup.PerformAction(s, opts.ID, "unbind-guests", params)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
printObject(sp)
|
|
return nil
|
|
})
|
|
}
|