7f7e1010ef
This is partial revert of 0ed626e146 .
After discussing several problems caused by scope separation, we
decided to suspend implementing the scope enforcement and focus on
project personas like reader role. As the result of that decision,
the system admin persona will be removed, thus we should use
the project admin persona instead. The previous policy rules to allow
system scope access have been reverted by [1].
This does not revert the original patch to keep the unit tests which
were hugely refactored by that change.
[1] 066e1e69d1394839a9f0bde4ca8c3a0db2d52396
Change-Id: I85847850602ab3526d2fdb1a56bb927183198825
67 lines
1.8 KiB
Ruby
67 lines
1.8 KiB
Ruby
require File.join(File.dirname(__FILE__), '..','..','..', 'puppet/provider/nova')
|
|
|
|
Puppet::Type.type(:nova_service).provide(
|
|
:openstack,
|
|
:parent => Puppet::Provider::Nova
|
|
) do
|
|
desc <<-EOT
|
|
Provider to manage nova host services
|
|
EOT
|
|
|
|
@credentials = Puppet::Provider::Openstack::CredentialsV3.new
|
|
|
|
mk_resource_methods
|
|
|
|
def self.instances
|
|
hosts = {}
|
|
request('compute service', 'list').collect do |host_svc|
|
|
hname = host_svc[:host]
|
|
if hosts[hname].nil?
|
|
hosts[hname] = Hash.new {|h,k| h[k]=[]}
|
|
hosts[hname][:ids] = []
|
|
hosts[hname][:service_name] = []
|
|
end
|
|
hosts[hname][:ids] << host_svc[:id]
|
|
hosts[hname][:service_name] << host_svc[:binary]
|
|
end
|
|
hosts.collect do |hname, host|
|
|
new(
|
|
:ensure => :present,
|
|
:name => hname,
|
|
:ids => host[:ids],
|
|
:service_name => host[:service_name]
|
|
)
|
|
end
|
|
end
|
|
|
|
def self.prefetch(resources)
|
|
instances_ = self.instances
|
|
resources.keys.each do |name|
|
|
if provider = instances_.find{ |instance| instance.name == name }
|
|
resources[name].provider = provider
|
|
end
|
|
end
|
|
end
|
|
|
|
def exists?
|
|
@property_hash[:ensure] == :present
|
|
end
|
|
|
|
def destroy
|
|
return unless @property_hash[:ids].kind_of?(Array)
|
|
svcname_id_map = @property_hash[:service_name].zip(@property_hash[:ids]) || {}
|
|
svcname_id_map.each do |service_name, id|
|
|
if (@resource[:service_name].empty? ||
|
|
(@resource[:service_name].include? service_name))
|
|
self.class.request('compute service', 'delete', id)
|
|
end
|
|
end
|
|
@property_hash.clear
|
|
end
|
|
|
|
def create
|
|
warning("Nova_service provider can only delete compute services because "\
|
|
"of openstackclient limitations.")
|
|
end
|
|
end
|