VhNLddlmZmZmZeZdZdZdZddl m Z ddl m Z ddl mZddlmZmZmZmZGd d eZd Zed k(rey y ))absolute_importdivisionprint_functiona module: gitlab_group short_description: Creates/updates/deletes GitLab Groups description: - When the group does not exist in GitLab, it will be created. - When the group does exist and state=absent, the group will be deleted. author: - Werner Dijkerman (@dj-wasabi) - Guillaume Martinez (@Lunik) requirements: - python-gitlab python module extends_documentation_fragment: - community.general.auth_basic - community.general.gitlab - community.general.attributes attributes: check_mode: support: full diff_mode: support: none options: auto_devops_enabled: description: - Default to Auto DevOps pipeline for all projects within this group. type: bool version_added: 3.7.0 avatar_path: description: - Absolute path image to configure avatar. File size should not exceed 200 kb. - This option is only used on creation, not for updates. type: path version_added: 4.2.0 default_branch: description: - All merge requests and commits are made against this branch unless you specify a different one. type: str version_added: 9.5.0 description: description: - A description for the group. type: str enabled_git_access_protocol: description: - V(all) means SSH and HTTP(S) is enabled. - V(ssh) means only SSH is enabled. - V(http) means only HTTP(S) is enabled. - Only available for top level groups. choices: ["all", "ssh", "http"] type: str version_added: 9.5.0 force_delete: description: - Force delete group even if projects in it. - Used only when O(state=absent). type: bool default: false version_added: 7.5.0 lfs_enabled: description: - Projects in this group can use Git LFS. type: bool version_added: 9.5.0 lock_duo_features_enabled: description: - Enforce GitLab Duo features for all subgroups. - Only available for top level groups. type: bool version_added: 9.5.0 membership_lock: description: - Users cannot be added to projects in this group. type: bool version_added: 9.5.0 mentions_disabled: description: - Group mentions are disabled. type: bool version_added: 9.5.0 name: description: - Name of the group you want to create. required: true type: str parent: description: - Allow to create subgroups. - ID or Full path of parent group in the form of group/name. type: str path: description: - The path of the group you want to create, this will be api_url/group_path. - If not supplied, the group_name will be used. type: str prevent_forking_outside_group: description: - Prevent forking outside of the group. type: bool version_added: 9.5.0 prevent_sharing_groups_outside_hierarchy: description: - Members cannot invite groups outside of this group and its subgroups. - Only available for top level groups. type: bool version_added: 9.5.0 project_creation_level: description: - Determine if developers can create projects in the group. choices: ["developer", "maintainer", "noone"] type: str version_added: 3.7.0 request_access_enabled: description: - Users can request access (if visibility is public or internal). type: bool version_added: 9.5.0 service_access_tokens_expiration_enforced: description: - Service account token expiration. - Changes will not affect existing token expiration dates. - Only available for top level groups. type: bool version_added: 9.5.0 share_with_group_lock: description: - Projects cannot be shared with other groups. type: bool version_added: 9.5.0 require_two_factor_authentication: description: - Require all users in this group to setup two-factor authentication. type: bool version_added: 3.7.0 state: description: - Create or delete group. - Possible values are present and absent. default: present type: str choices: ["present", "absent"] subgroup_creation_level: description: - Allowed to create subgroups. choices: ["maintainer", "owner"] type: str version_added: 3.7.0 two_factor_grace_period: description: - Delay 2FA enforcement (hours). type: str version_added: 9.5.0 visibility: description: - Default visibility of the group. choices: ["private", "internal", "public"] default: private type: str wiki_access_level: description: - V(enabled) means everyone can access the wiki. - V(private) means only members of this group can access the wiki. - V(disabled) means group-level wiki is disabled. choices: ["enabled", "private", "disabled"] type: str version_added: 9.5.0 a  - name: "Delete GitLab Group" community.general.gitlab_group: api_url: https://gitlab.example.com/ api_token: "{{ access_token }}" name: my_first_group state: absent - name: "Create GitLab Group" community.general.gitlab_group: api_url: https://gitlab.example.com/ validate_certs: true api_username: dj-wasabi api_password: "MySecretPassword" name: my_first_group path: my_first_group state: present # The group will by created at https://gitlab.dj-wasabi.local/super_parent/parent/my_first_group - name: "Create GitLab SubGroup" community.general.gitlab_group: api_url: https://gitlab.example.com/ validate_certs: true api_username: dj-wasabi api_password: "MySecretPassword" name: my_first_group path: my_first_group state: present parent: "super_parent/parent" # Other group which only allows sub-groups - no projects - name: "Create GitLab Group for SubGroups only" community.general.gitlab_group: api_url: https://gitlab.example.com/ validate_certs: true api_username: dj-wasabi api_password: "MySecretPassword" name: my_main_group path: my_main_group state: present project_creation_level: noone auto_devops_enabled: false subgroup_creation_level: maintainer a msg: description: Success or failure message. returned: always type: str sample: "Success" result: description: JSON-parsed response from the server. returned: always type: dict error: description: The error message returned by the GitLab API. returned: failed type: str sample: "400: path is already in use" group: description: API object. returned: always type: dict )basic_auth_argument_spec) AnsibleModule) to_native)auth_argument_spec find_groupgitlab_authenticationgitlabcDeZdZdZ dZ dZ dZ dZ d dZ dZ y) GitLabGroupc.||_||_d|_yN)_module_gitlab group_object)selfmodulegitlab_instances r/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/gitlab_group.py__init__zGitLabGroup.__init__s &  c | |jSyr)id)rgroups r get_group_idzGitLabGroup.get_group_id s  88OrcRd}id|dd|dd|dd|dd|dd|dd|d |d d |d d |d d |d d |d d|dd|dd|dd|d}|jdr ||d|d<|jdr ||d|d<|jdr ||d|d<|jdr ||d|d<|jdrt|d|d<|jB|j||d<|j |}|dr t |dd|_d}n|j|j|\}}||_|rH|jjr |jjdd|z |jyy#t$r9}|jjdj|d|Yd}~d}~wwxYw#t$r)}|jjd|zYd}~yd}~wwxYw) NFauto_devops_enableddefault_branch description lfs_enabledmembership_lockmentions_disablednamepathprevent_forking_outside_groupproject_creation_levelrequest_access_enabled!require_two_factor_authenticationshare_with_group_locksubgroup_creation_level visibilitywiki_access_levelenabled_git_access_protocollock_duo_features_enabled(prevent_sharing_groups_outside_hierarchy)service_access_tokens_expiration_enforcedtwo_factor_grace_period parent_id avatar_pathrbzCannot open {0}: {1}msgT,Successfully created or updated the group %schangedr8zFailed to update group: %s )getintrr create_groupopenavatarIOErrorr fail_jsonformat update_group check_mode exit_jsonsave Exception)rr%parentoptionsr;payloadres rcreate_or_update_groupz"GitLabGroup.create_or_update_groups !7+@#A g&67  7=1  7=1  w'89  ) ? ;;B CCJKvCwG? @ ;;0 114W=V5W1XG- .    $#'#4#4V##EELG!..t/@/@'JNGU! ||&& &&t9gjn9n&o N #iLL**/E/L/LWUbMcef/g*hhi N &&+H1+L&MM Ns0'F/G4/ G18/G,,G14 H&=H!!H&c~|jjry |jDcic] \}}| || }}}|jjj |}|Scc}}w#t jj$r3}|jjdt|zYd}~Sd}~wwxYw)NTzFailed to create group: %s r7) rrEitemsrgroupscreater exceptionsGitlabCreateErrorrBr)r argumentsarg_key arg_valuefilteredrrLs rr>zGitLabGroup.create_groupTs << " " UEN__EVp/Aw ZcZo*pHpLL''..x8E q!!33 U LL " "'DyQR|'S " T T  Us,A, A&A&(A,&A,,B< (B77B<cd}|jD]'\}}| t|||k7st|||d})||fS)NFT)rOgetattrsetattr)rrrTr;rUrVs rrDzGitLabGroup.update_groupfsU"+//"3 # GY$5'*i7E7I6"G  # rcv|j}|sEt|jjddk\r|jj dy|jj ry |jy#t$r2}|jj dt|zYd}~yd}~wwxYw)NF)allzThere are still projects in this group. These needs to be moved or deleted before this group can be removed. Use 'force_delete' to 'true' to force deletion of existing projects.r7TzFailed to delete group: %s ) rlenprojectslistrrBrEdeleterHr)rforcerrLs r delete_groupzGitLabGroup.delete_groupts!!U^^00U0;<A LL " "\ #  ||&& Y  Y &&+H9UV<+W&XX Ys,A== B8(B33B8cDt|j|}|r||_yy)NTF)r rr)rproject_identifierrs r exists_groupzGitLabGroup.exists_groups$4<<);<  %D rN)F) __name__ __module__ __qualname__rrrMr>rDrcrfrrrrsE!   :x   Y$rrc F t}|jt|jtd@idtddtddtddtdd tdgd  d tdd dtddtddtddtddtdddtddtddtddtddtdgd dtddtddtddtddtdd d!d g"d#tdd$d%g d&tdd'tdd(gd)"d*tdgd+ t |d,d-gd,d.gd/d-gd/d.gd/d,ggd/d0gggd1gd2}t |}|j d}|j d}|j d}|j d}|j d }|j d }|j d} |j d} |j d'} |j d} |j d} |j d}|j d}|j d}|j d}|j d}|j d}|j d}|j d}|j d}|j d}|j d}|j d#}|j d&}|j d*}| | jd3d4} t||}d}|rBt||}|s|jd56|j|jd7z| z}n|j| }|d!k(r>|r)|j|8|jdd9| z:n|jd d;:|d k(r|j| |id|d|d|d|d |d| d| d|d|d| d|d|d|d|d|d|d|||| |d<r,|jdd=| z|j j">y|jd d?| z|j j">yy)ANrbool)typer5r&r strr!r/)r\sshhttp)rmchoices force_deleteF)rmdefaultr"r0r#r$r%T)rmrequiredrIr'r1r() developer maintainernooner)r*r2r+statepresentabsent)rmrsrqr,rvownerr3r-private)internalr|publicr.)enabledr|disabled api_token api_job_tokenapi_oauth_token api_username api_password)rrrr) argument_specmutually_exclusiverequired_togetherrequired_one_ofsupports_check_mode _z9Failed to create GitLab group: Parent group doesn't existr7/)rbzSuccessfully deleted group %sr:zGroup deleted or does not exist)r,r3r-r.r9)r;r8rzNo need to update the group %srj)rupdater dictrr paramsreplacerr rBrf full_pathrcrFrMr_attrs)rrrrr5r r!r/rr group_name group_pathgroup_visibilityr"r0r#r$parent_identifierr'r1r(r)r*r2r+rxr,r3r. gitlab_group parent_group group_existss rmainrs,.M+-. f-f%'e$  %)e=S$T  vu5 f%#'F"3&)F+ut ,u '+&72661B $8\]!" $0#$+/F*;%&37F2C'(#/)*y8Y:OP+,!%%,9P Q-.!%% 0/0UI?`a12E3UV38# / * + , _ - . / [ )  ^ ,  N !F&,F3O --(=>-- .K]]#34N-- .K"(--0M"N==0Lv&Jv&J}}\2-- .K & .I Jmm$56O &9: h/$*MM2Q$R!/5}}=g/h,#]]+CD#]]+CD(. 6Y(Z%06 >i0j-"MM*AB MM' "E$mm,EF$mm,EF &9:''S1 v7LL!/3DE    !\  ]#001G1G#1MPZ1Z[ #00<     % %L % 9   T/NQ[/[  \   U0Q  R   . .z<J !#6J ;J  nJ  ; J *+F J ; J  ()BJ  J  !2J  JJ  ,-JJ  78`J  %&<J  %&<J  01RJ 89b!J " $%:#J $(?'>*!2+J  .   T/]`j/jr~sLsLsSsS  T   U0PS]0]eqe~e~fFfF  G5r__main__N) __future__rrrrm __metaclass__ DOCUMENTATIONEXAMPLESRETURNansible.module_utils.apiransible.module_utils.basicr+ansible.module_utils.common.text.convertersrAansible_collections.community.general.plugins.module_utils.gitlabr r r r objectrrrgrjrrrskA@ f P+ Z 0>4A N&NbGD zFr