VhVZzddlmZmZmZeZdZdZdZddl m Z ddl m Z m Z GddeZd Zed k(rey y ) )absolute_importdivisionprint_functiona module: manageiq_group short_description: Management of groups in ManageIQ extends_documentation_fragment: - community.general.manageiq - community.general.attributes author: Evert Mulder (@evertmulder) description: - The manageiq_group module supports adding, updating and deleting groups in ManageIQ. requirements: - manageiq-client attributes: check_mode: support: none diff_mode: support: none options: state: type: str description: - V(absent) - group should not exist, - V(present) - group should exist. choices: ['absent', 'present'] default: 'present' description: type: str description: - The group description. required: true role_id: type: int description: - The the group role ID. required: false role: type: str description: - The the group role name. - The O(role_id) has precedence over the O(role) when supplied. required: false default: tenant_id: type: int description: - The tenant for the group identified by the tenant ID. required: false default: tenant: type: str description: - The tenant for the group identified by the tenant name. - The O(tenant_id) has precedence over the O(tenant) when supplied. - Tenant names are case sensitive. required: false default: managed_filters: description: The tag values per category. type: dict required: false default: managed_filters_merge_mode: type: str description: - In merge mode existing categories are kept or updated, new categories are added. - In replace mode all categories will be replaced with the supplied O(managed_filters). choices: [merge, replace] default: replace belongsto_filters: description: A list of strings with a reference to the allowed host, cluster or folder. type: list elements: str required: false default: belongsto_filters_merge_mode: type: str description: - In merge mode existing settings are merged with the supplied O(belongsto_filters). - In replace mode current values are replaced with the supplied O(belongsto_filters). choices: [merge, replace] default: replace a; - name: Create a group in ManageIQ with the role EvmRole-user and tenant 'my_tenant' community.general.manageiq_group: description: 'MyGroup-user' role: 'EvmRole-user' tenant: 'my_tenant' manageiq_connection: url: 'http://127.0.0.1:3000' username: 'admin' password: 'smartvm' validate_certs: false # only do this when you trust the network! - name: Create a group in ManageIQ with the role EvmRole-user and tenant with tenant_id 4 community.general.manageiq_group: description: 'MyGroup-user' role: 'EvmRole-user' tenant_id: 4 manageiq_connection: url: 'http://127.0.0.1:3000' username: 'admin' password: 'smartvm' validate_certs: false # only do this when you trust the network! - name: - Create or update a group in ManageIQ with the role EvmRole-user and tenant my_tenant. - Apply 3 prov_max_cpu and 2 department tags to the group. - Limit access to a cluster for the group. community.general.manageiq_group: description: 'MyGroup-user' role: 'EvmRole-user' tenant: my_tenant managed_filters: prov_max_cpu: - '1' - '2' - '4' department: - defense - engineering managed_filters_merge_mode: replace belongsto_filters: - "/belongsto/ExtManagementSystem|ProviderName/EmsFolder|Datacenters/EmsFolder|dc_name/EmsFolder|host/EmsCluster|Cluster name" belongsto_filters_merge_mode: merge manageiq_connection: url: 'http://127.0.0.1:3000' username: 'admin' password: 'smartvm' validate_certs: false # only do this when you trust the network! - name: Delete a group in ManageIQ community.general.manageiq_group: state: 'absent' description: 'MyGroup-user' manageiq_connection: url: 'http://127.0.0.1:3000' username: 'admin' password: 'smartvm' - name: Delete a group in ManageIQ using a token community.general.manageiq_group: state: 'absent' description: 'MyGroup-user' manageiq_connection: url: 'http://127.0.0.1:3000' token: 'sometoken' aG group: description: The group. returned: success type: complex contains: description: description: The group description. returned: success type: str id: description: The group ID. returned: success type: int group_type: description: The group type, system or user. returned: success type: str role: description: The group role name. returned: success type: str tenant: description: The group tenant name. returned: success type: str managed_filters: description: The tag values per category. returned: success type: dict belongsto_filters: description: A list of strings with a reference to the allowed host, cluster or folder. returned: success type: list created_on: description: Group creation date. returned: success type: str sample: "2018-08-12T08:37:55+00:00" updated_on: description: Group update date. returned: success type: int sample: "2018-08-12T08:37:55+00:00" ) AnsibleModule)ManageIQmanageiq_argument_specceZdZdZdZdZdZdZedZ dZ dZ d Z d Z ed Zed Zed ZedZy) ManageIQgroupzH Object to execute group management operations in manageiq. c||_|jj|_|jj|_|jj|_yN)manageiqmoduleapi_urlclient)selfr s t/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/manageiq_group.py__init__zManageIQgroup.__init__s<  mm** }},, mm** c|jjjj|}t |dk(ry|dS)zy Search for group object by description. Returns: the group, or None if group was not found.  descriptionrN)r collectionsgroupsfind_bylen)rrrs rgroupzManageIQgroup.groups@ ((//77K7P v;! !9 rc|rH|jjd|}|s(|jjdt |z|S|r|jj j j|}|s|jjd|zt|dkDr|jjd|z|d}|Sy ) z Search for tenant entity by name or id Returns: the tenant entity, None if no id or name was supplied tenantsz)Tenant with id '%s' not found in manageiqmsgnamez!Tenant '%s' not found in manageiqz0Multiple tenants found in manageiq with name '%srN) r get_entityr fail_jsonstrrrrr)r tenant_id tenant_nametenant tenant_ress rr)zManageIQgroup.tenants [[++IyAF %%*UX[\eXf*f%gM![[44<<DD+DV !KK)).QT_._)`z?Q&KK)).`cn.n)o#A rc|rH|jjd|}|s(|jjdt |z|S|r|jj j j|}|s|jjd|zt|dkDr|jjd|z|dSy ) z Search for a role object by name or id. Returns: the role entity, None no id or name was supplied the role, or send a module Fail signal if role not found. rolesz'Role with id '%s' not found in manageiqrr!zRole '%s' not found in manageiqr#z.Multiple roles found in manageiq with name '%srN) rr$rr%r&rr,rr)rrole_id role_namerolerole_ress rr/zManageIQgroup.roles ;;))'7;D %%*SVYZaVb*b%cK;;2288@@i@PKK)).OR[.[)\x=1$KK)).^aj.j)k{"rc`|r|s|S|s|r|S|j}|j||S)a Create an merged update object for manageiq group filters. The input dict contain the tag values per category. If the new values contain the category, all tags for that category are replaced If the new values do not contain the category, the existing tags are kept Returns: the nested array with the merged values, used in the update post body )copyupdate)norm_current_valuesnorm_updated_valuesress rmerge_dict_valueszManageIQgroup.merge_dict_valuess@ (;& &$)<& &"&&( &' rc l |jd|d}|jj|d}d d ur|jj |d td d|dd|dS#t$r8}|jj d|ddt |Yd }~{d }~wwxYw)z Deletes a group from manageiq. Returns: a dict of: changed: boolean indicating if the entity was updated. msg: a short message describing the operation executed. z/groups/iddelete)actionzfailed to delete group r: rNsuccessFmessageTzdeleted group with id changedr )rrpost Exceptionrr%r&dict)rrurlresultes r delete_groupzManageIQgroup.delete_group8s h$(LL%+>C[[%%c(%;F )  % KK ! !fY&7 ! 816}1EuT{SU U  h KK ! !}I]_bcd_e&f ! g g hs1A22 B3;.B..B3c |s|s|r|jddg |d} d} i} |r|d|k7r|| d<d} |r|d|d k7rt|d  | d <d} |r| |d k7rt|d  | d <d} |s|rH|d} d| vr|j|} | |d| d<d} n#| d}|j |||||}|r|| d<d} | stdd|dzS |j j |dd| d} t| d|dd|d S#t$rd} YwxYw#t$r8}|jjd|d dt|Yd}~fd}~wwxYw)z Edit a manageiq group. Returns: a dict of: changed: boolean indicating if the entity was updated. msg: a short message describing the operation executed. miq_user_role_name entitlement) attributesNFrTr'r9r9r)r"r/filtersmanaged belongstozgroup %s is not changed.r@hrefeditr;resourcezfailed to update group r<rzsuccessfully updated the group r?) reloadAttributeErrorrD%normalized_managed_tag_filters_to_miqedit_group_edit_filtersrrBrCrr%r&)rrrr/r)norm_managed_filtersmanaged_filters_merge_modebelongsto_filtersbelongsto_filters_merge_mode current_rolerArUrKmanaged_tag_filters_post_bodycurrent_filters new_filtersrGs r edit_groupzManageIQgroup.edit_groupMs '+< LL%9=$IL J  !56L 5/;>&1H] #G eK(F4L8!%!6HX G LDL0#tDz2HV G #4 .K +040Z0Z[o0p-2O^o&p#"-i"8"::?;OQk;LNjl *5HY'"G.}1EEG G  a KK  U6]6H  MGBG BVX]^bXcdf fc L \ a KK ! !vX[\]X^&_ ! ` ` as)D#D$ D! D!$ E%-.E  E%cd}i}|jdt}|r t|} n t} || k(r |d|d<n5|dk(r |j| t||d<nt| |d<d}|j |} | |k(r d|vrK|d|d<nB|dk(r'|j | |} |j | |d<n|j ||d<d}|sy|S)z Edit a manageiq group filters. Returns: None if no the group was not updated If the group was updated the post body part for updating the group FrQmergeTrPN)getsetr3listmanageiq_filters_to_sorted_dictr7rX) rr`rZr[r\r]filters_updatednew_filters_resourcecurrent_belongsto_setnew_belongsto_setnorm_current_filters merged_dicts rrYz%ManageIQgroup.edit_group_edit_filterss! ! / 3 3K G  #$5 6  #  $5 50? 0L  -+w6%,,->?489N4O$[1489J4K$[1"O $CCOT #7 7O+2A)2L$Y/)W4"445IK_` 262\2\]h2i$Y/262\2\]q2r$Y/"O##rc 2t|jD])\}}|dvs |jjd|z+d|jz}d|i} |t|d | d <|t|d | d <|s|r|j |} | |d | d < |j j|d| } tdd|z dddS#t$r5} |jjd|dt| Yd} ~ Sd} ~ wwxYw)z Creates the group in manageiq. Returns: the created group id, name, created_on timestamp, updated_on timestamp. r)Nzmissing required argument: %srz %s/groupsrNr9rMr/r)rOrNcreaterTzfailed to create group r<Tzsuccessfully created group %sresultsr)rAr group_id) rDitemsrr%rrXrrBrCr&) rrr/r)rZr\keyvaluerErUr_rFrGs r create_groupzManageIQgroup.create_groupsC;7==? QJC " %%*IC*O%P QDLL(!;/  #tDz2HV   !%!6HX  #4,0,V,VWk,l ).KZk"lHY  _[[%%c(X%NF/+=I&q)$/   _ KK ! !VYZ[V\&] ! ^ ^ _s C D!+DDc:|syt|jSr )rgvalues)rZs rrXz3ManageIQgroup.normalized_managed_tag_filters_to_miqs#(//122rc|jd}|syi}|D].}|j|djdd}|||<0|S)NrPr/)resortsplit)r`current_managed_filtersr6tag_listrus rrhz-ManageIQgroup.manageiq_filters_to_sorted_dicts_"1"5"5i"@&/ H MMO1+##C(+CCH  rc|syi}|D]v}g}t||ts!|jdj|||D]}d|zdz|z}|j | |sb|j |||<x|S)Nz.Entry "{0}" of managed_filters must be a list!rz /managed/r{) isinstancergr%formatappendr})managed_filtersrr6cat_key cat_arraytagsmiq_managed_tags r-normalize_user_managed_filters_to_sorted_dictz;ManageIQgroup.normalize_user_managed_filters_to_sorted_dicts& )GIog6=  %U%\%\]d%e f'0 2"-"7#"="D  1 2 (G  ) rc  |d}d}d}d|dvr}|dd}|jd}|jd}|rQi}|D]J}|djdd }g}|D]%} |j| jdd '|||<Lt |d |d ||d d|||d|d|d S#t$rd}YwxYw)z Creates the ansible result object from a manageiq group entity Returns: a dict with the group id, description, role, tenant, filters, group_type, created_on, updated_on rJNrNrKrQrPrr{r|r9rr)r" group_type created_on updated_on) r9rr/r)rr\rrr)rWrer~rrD) rr.rr\rNgroup_managed_filtersrrurts rcreate_result_groupz!ManageIQgroup.create_result_groups  23I  m, ,M*95G ' K 8 $+KK $: !$"$ 50H"1+++C03CD%5 AGGCLO45+/OC( 0T{m,?6*+/\*\*\*  % I sB88 CCN)__name__ __module__ __qualname____doc__rrr)r/ staticmethodr7rHrbrYrwrXrhrrrrr r s+ 004U*BfH1$f# J33   $$ $ rr cttddtddgdtddtddtddtddtdd tdd d gd tdd dtdd d gd  }|jtt|}|jd}|jd}|jd}|jd}|jd}|jd}|jd}|jd} |jd} |jd} t |} t | } | j|}|dk(r$|r| j|}ntdd|z}|dk(r| j||}| j||}| j||}|r| j|||||| | | }n4| j||||| }| jjd|d}|j!dgd !| j#||d"<|j$d#iy)$NTr&)requiredtypeabsentpresent)choicesdefaultFintrDrdreplace)rrrrg)rrelements) rstater-r/r'r)rr[r\r]) argument_specrrr-r/r'r)rr[r\r]z%group '%s' does not exist in manageiqr@rrs resources)rJr)rK)expandrLrr)rDr3rrparamsrr rrHr)r/rrbrwrr$rVr exit_json)rrrrr-r.r'r(rr[r\r]r manageiq_grouprres_argsr)r/rZs rmainr9sq$U3Hi0)De%0 5u -E2U/e&9#')@T^g#hFUK%)57IBV`i%j M/12 #F-- .K MM' "EmmI&G f%I k*I--)Kmm$56O!'/K!L &9:#)==1O#P H"8,N   -E  %2259H;kIKH  &&y+>""7I6-[[\kmst %00 T61EGa1BD`bH &22;fNbduvHOO..x*9MNE K4c d*>>uEF x r__main__N) __future__rrrr __metaclass__ DOCUMENTATIONEXAMPLESRETURNansible.module_utils.basicrCansible_collections.community.general.plugins.module_utils.manageiqrrobjectr rrrrrrs_CB T lA F, \5p` F` F C!L zFr