blob: af996731ec1a68a5d143c416cede8f09ca99c38e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
|
#!/bin/bash
#
# Copyright (C) 2014 Wind River Systems, Inc.
#
# The identity.sh provides utilities for services to add tenant/role/users,
# and service/endpoints into keystone database
#
# Use shared secret for authentication before any user created.
export OS_SERVICE_TOKEN="password"
export OS_SERVICE_ENDPOINT="http://localhost:35357/v2.0"
declare -A PARAMS
# Shortcut function to get a newly generated ID
function get_field () {
while read data; do
if [ "$1" -lt 0 ]; then
field="(\$(NF$1))"
else
field="\$$(($1 + 1))"
fi
echo "$data" | awk -F'[ \t]*\\|[ \t]*' "{print $field}"
done
}
# Usage help
help () {
if [ $# -eq 0 ]; then
echo "Usage: $0 <subcommand> ..."
echo ""
echo "Keystone CLI wrapper to create tenant/user/role, and service/endpoint."
echo "It uses the default tenant, user and password from environment variables"
echo "(OS_TENANT_NAME, OS_USERNAME, OS_PASSWORD) to authenticate with keystone."
echo ""
echo "Positional arguments:"
echo " <subcommand>"
echo " user-create"
echo " service-create"
echo ""
echo "See \"identity.sh help COMMAND\" for help on a specific command."
exit 0
fi
case "$2" in
service-create)
echo "Usage: $0 $2 [--name=<name>] [--type=<type>] [--description=<description>] [--region=<region>] [--publicurl=<public url>] [--adminurl=<admin url>] [--internalurl=<internal url>]"
echo ""
echo "Create service and endpoint in keystone."
echo ""
echo "Arguments:"
echo " --name=<name>"
echo " The name of the service"
echo " --type=<type>"
echo " The type of the service"
echo " --description=<description>"
echo " Description of the service"
echo " --region=<region>"
echo " The region of the service"
echo " --publicurl=<public url>"
echo " Public URL of the service endpoint"
echo " --adminurl=<admin url>"
echo " Admin URL of the service endpoint"
echo " --internalurl=<internal url>"
echo " Internal URL of the service endpoint"
;;
user-create)
echo "Usage: $0 $2 [--name=<name>] [--pass=<password>] [--tenant=<tenant>] [--role=<role>] [--email=<email>]"
echo ""
echo "Arguments:"
echo " --name=<name>"
echo " The name of the user"
echo " --pass=<password>"
echo " The password of the user"
echo " --tenant=<tenant>"
echo " The tenant of the user belongs to"
echo " --role=<role>"
echo " The role of the user in the <tenant>"
echo " --email=<email>"
echo " The email of the user"
;;
*)
echo "Usage: $0 help <subcommand> ..."
echo ""
exit 0
;;
esac
}
# Parse the command line parameters in an map
parse_param () {
while [ $# -ne 0 ]; do
param=$1
shift
key=`echo $param | cut -d '=' -f 1`
key=`echo $key | tr -d '[-*2]'`
PARAMS[$key]=`echo $param | cut -d '=' -f 2`
done
}
# Create tenant/role/user, and add user to the tenant as role
user-create () {
# validation checking
if [[ "$@" =~ ^--name=.*\ --pass=.*\ --tenant=.*\ --role=.*\ --email=.*$ ]]; then
params=`echo "$@" | sed -e 's%--name=\(.*\) --pass=\(.*\) --tenant=\(.*\) --role=\(.*\) --email=\(.*\)%--name=\1|--pass=\2|--tenant=\3|--role=\4|--email=\5%g'`
else
help
exit 1
fi
# parse the cmdline parameters
IFS="|"
parse_param $params
unset IFS
echo "Adding user in keystone ..."
if [ "x${PARAMS["tenant"]}" != "x" ]; then
# check if tenant exist, create it if not
TENANT_ID=$(keystone tenant-get ${PARAMS["tenant"]} | grep " id " | get_field 2)
if [ "x$TENANT_ID" == "x" ]; then
echo "Creating tenant ${PARAMS["tenant"]} in keystone ..."
TENANT_ID=$(keystone tenant-create --name=${PARAMS["tenant"]} | grep " id " | get_field 2)
fi
echo "Tenant list:"
keystone tenant-list
fi
if [ "x${PARAMS["role"]}" != "x" ]; then
# check if role exist, create it if not
ROLE_ID=$(keystone role-get ${PARAMS["role"]} | grep " id " | get_field 2)
if [ "x$ROLE_ID" == "x" ]; then
echo "Creating role ${PARAMS["role"]} in keystone ..."
ROLE_ID=$(keystone role-create --name=${PARAMS["role"]} | grep " id " | get_field 2)
fi
echo "Role list:"
keystone role-list
fi
if [ "x${PARAMS["name"]}" != "x" ]; then
# check if user exist, create it if not
USER_ID=$(keystone user-get ${PARAMS["name"]} | grep " id " | get_field 2)
if [ "x$USER_ID" == "x" ]; then
echo "Creating user ${PARAMS["name"]} in keystone ..."
USER_ID=$(keystone user-create --name=${PARAMS["name"]} --pass=${PARAMS["pass"]} --tenant-id $TENANT_ID --email=${PARAMS["email"]} | grep " id " | get_field 2)
fi
echo "User list:"
keystone user-list
fi
if [ "x$USER_ID" != "x" ] && [ "x$TENANT_ID" != "x" ] && [ "x$ROLE_ID" != "x" ]; then
# add the user to the tenant as role
keystone user-role-list --user-id $USER_ID --tenant-id $TENANT_ID | grep $ROLE_ID &> /dev/null
if [ $? -eq 1 ]; then
echo "Adding user ${PARAMS["name"]} in tenant ${PARAMS["tenant"]} as ${PARAMS["role"]} ..."
keystone user-role-add --tenant-id $TENANT_ID --user-id $USER_ID --role-id $ROLE_ID
fi
fi
if [ "x$USER_ID" != "x" ] && [ "x$TENANT_ID" != "x" ]; then
echo "User ${PARAMS["name"]} in Tenant ${PARAMS["tenant"]} role list:"
keystone user-role-list --user-id $USER_ID --tenant-id $TENANT_ID
fi
}
# Create service and its endpoint
service-create () {
# validation checking
if [[ "$@" =~ ^--name=.*\ --type=.*\ --description=.*\ --region=.*\ --publicurl=.*\ --adminurl=.*\ --internalurl=.*$ ]]; then
params=`echo "$@" | sed -e 's%--name=\(.*\) --type=\(.*\) --description=\(.*\) --region=\(.*\) --publicurl=\(.*\) --adminurl=\(.*\) --internalurl=\(.*\)%--name=\1|--type=\2|--description=\3|--region=\4|--publicurl=\5|--adminurl=\6|--internalurl=\7%g'`
else
help
exit 1
fi
# parse the cmdline parameters
IFS=$"|"
parse_param $params
unset IFS
echo "Creating service in keystone ..."
if [ "x${PARAMS["name"]}" != "x" ]; then
# check if service already created, create it if not
SERVICE_ID=$(keystone service-get ${PARAMS["name"]} | grep " id " | get_field 2)
if [ "x$SERVICE_ID" == "x" ]; then
echo "Adding service ${PARAMS["name"]} in keystone ..."
SERVICE_ID=$(keystone service-create --name ${PARAMS["name"]} --type ${PARAMS["type"]} --description "${PARAMS["description"]}" | grep " id " | get_field 2)
fi
echo "Service list:"
keystone service-list
fi
if [ "x$SERVICE_ID" != "x" ]; then
# create its endpoint
keystone endpoint-list | grep $SERVICE_ID | grep ${PARAMS["region"]} | grep ${PARAMS["publicurl"]} | grep ${PARAMS["adminurl"]} | grep ${PARAMS["internalurl"]}
if [ $? -eq 1 ]; then
echo "Creating endpoint for ${PARAMS["name"]} in keystone ..."
keystone endpoint-create --region ${PARAMS["region"]} --service-id $SERVICE_ID --publicurl ${PARAMS["publicurl"]} --adminurl ${PARAMS["adminurl"]} --internalurl ${PARAMS["internalurl"]}
fi
echo "Endpoints list:"
keystone endpoint-list
fi
}
case "$1" in
service-create)
shift
service-create $@
;;
user-create)
shift
user-create $@
;;
help)
help $@
;;
*)
help
exit 0
;;
esac
exit 0
|
