+ lj3^RIHt^RIHt^RIHt^RIHt^RIH t ^RIH t ^RIH t ]Pt Rt RR ltR tRR ltR tRtRRRRRR/tRRltRRlt!RR]P,4tR #)) lockutils)clients)config)auth) dynamic_creds) preprov_creds) exceptionsc,VR8Xd\PPpM9VR8Xd\PPpM\P !VR7hRVRVR\P PR\PP/#)v3v2)identity_versionr identity_uricredentials_domain admin_role) CONFidentityuri_v3urir InvalidIdentityVersionrdefault_credentials_domain_namer)r rs& f/Users/user/workspace/sujinbaek/cqa-test-app/flava-qa/cqa-cloud-api-test/common/credentials_factory.py_get_common_provider_paramsr*s{4}}++ T !}}(( //-/ / , diiGGdmm..  Nc\V4pT;'g\RVR7pVR8Xd\PPpM!VR8Xd\PP p\ V3/\ RV3R\PP3R\PP3R\PP3R \PP3R \PP3R \PP3R \PP 3R \PP";'d \PP$'*3RRX3. 4B#)aDynamic provider parameters setup from config This helper returns a dict of parameter that can be used to initialise a `DynamicCredentialProvider` according to tempest configuration. Parameters that are not configuration specific (name, network_resources) are not returned. :param identity_version: 'v2' or 'v3' :param admin_creds: An object of type `auth.Credentials`. If None, it is built from the configuration file as well. :return: A dict with the parameters Tfill_inr r r admin_credsidentity_admin_domain_scopeidentity_admin_role extra_rolesneutron_availableproject_network_cidrproject_network_mask_bitspublic_network_idcreate_networksidentity_admin_endpoint_type)resource_prefixtempest)r get_configured_admin_credentialsrrv3_endpoint_typev2_admin_endpoint_typedictadmin_domain_scoperr tempest_rolesservice_availableneutronnetworkr"r#r$create_isolated_networksshared_physical_network)r r_common_params endpoint_types&& rget_dynamic_provider_paramsr6:sB11ABN99!A'7"9K4 66 T ! <<  $  $ & (H(HI  8 89  //0 d44<<= !B!BC $dll&L&LM dll<<= TYY??BB!\\AAEB D& '7 ( #  rc \V4p\PPp\ V3/\ R\ P !\43R\PP3R\PP3RV3.4B#)aZPre-provisioned provider parameters setup from config This helper returns a dict of parameter that can be used to initialise a `PreProvisionedCredentialProvider` according to tempest configuration. Parameters that are not configuration specific (name) are not returned. :param identity_version: 'v2' or 'v3' :return: A dict with the parameters accounts_lock_dirtest_accounts_fileobject_storage_operator_role"object_storage_reseller_admin_role) rrobject_storagereseller_admin_roler,r get_lock_pathrr9 operator_role)r r4r=s& rget_preprov_provider_paramsr@^s11ABN--AA  $ i55d;< tyy;;< ')<)<)J)JK -/BC (# rcT;'g\PPp\PP'g V'd$\ P !RRVRV/\V4B#\PP'd"\P!RRV/\V4B#\P!R4h)a1Return the right implementation of CredentialProvider based on config This helper returns the right implementation of CredentialProvider based on config and on the value of force_tenant_isolation. :param name: When provided, it makes it possible to associate credential artifacts back to the owner (test class). :param network_resources: Dictionary of network resources to be allocated for each test account. Only valid for the dynamic credentials provider. :param force_tenant_isolation: Always return a `DynamicCredentialProvider`, regardless of the configuration. :param identity_version: Use the specified identity API version, regardless of the configuration. Valid values are 'v2', 'v3'. namenetwork_resources%A valid credential provider is needed)rr auth_versionruse_dynamic_credentialsrDynamicCredentialProviderr6r9r PreProvisionedCredentialProviderr@r InvalidConfiguration)rBrCforce_tenant_isolationr s&&&&rget_credentials_providerrLrs,(EE4==+E+E yy(((,B66==/=**:;= = 99 ' ' ' AAAA-.>?A A1179 9rc\Rp\PP'dV#\PP'd<\P !RRR/\ V4BpVP4'gRpV#\RVR7V# \PdRpT#i;i)a*Helper to check for admin credentials Helper function to check if a set of admin credentials is available so we can do a single call from skip_checks. This helper depends on identity_version as there may be admin credentials available for v2 but not for v3. :param identity_version: 'v2' or 'v3' TrB check_adminFrrE) rrrGr9rrIr@admin_availabler)r rJ)r is_admincheck_accountss& ris_admin_availablerRsH yy(((  % % %&GG==)*:;=--//H O   ,U>N P O.. H O s BB+*B+cd\PP'dR#\PP'd#\P !RRR/\ V4BpM\P!R4hVP4'gR#R# \PdR#i;i)a=Helper to check for alt credentials Helper function to check if a second set of credentials is available (aka alt credentials) so we can do a single call from skip_checks. This helper depends on identity_version as there may be alt credentials available for v2 but not for v3. :param identity_version: 'v2' or 'v3' TrB check_altrDFrE) rrrGr9rrIr@r rJ is_multi_user)r rQs& ris_alt_availablerVs yy((( yy###&GG==)*:;=-- 35 5++--  * *s<BB/.B/identity_adminuseralt_usercLT;'g\PPpVR 9d\P!RV,4h.R OpVR8XdEVP R4VP R4VP R4VP R4\ P!4pVF&p\\PRV,4W4&K( \R RVR V/VBpV'g5VP4'gR p\P!Wa,4hV#)a"Get admin credentials from the config file Read credentials from configuration, builds a Credentials object based on the specified or configured version :param fill_in: If True, a request to the Token API is submitted, and the credential object is filled in with all names and IDs from the token API response. :param identity_version: The identity version to talk to and the type of credentials object to be created. 'v2' or 'v3'. :returns: An object of a sub-type of `auth.Credentials` r zUnsupported auth version: %s domain_nameuser_domain_nameproject_domain_namesystemadmin_rr zThe admin credentials are incorrectly set in the config file for identity version %s. Double check that all required values are assigned.)r r )usernamepassword project_namerE) rrrFr rJappendrservice_client_configgetattrrget_credentialsis_valid)rr conf_attributesparamsattr credentialsmsgs&& rr)r)s(EE4==+E+E|+-- *-= =? ?'O4}-1245x(  ) ) +Ftyy(T/:  "O'O3COGMOK ##%%3C11#2HI I rc >\\P!43/VBpT;'g\PP pVR8Xd\ R\PP44pVPR4'gDVPVP44'g\PPpWSR&\PPpM\PPp\P !V3RVRV/VB#)aZGet credentials from dict based on config Wrapper around auth.get_credentials to use the configured identity version if none is specified. :param fill_in: If True, a request to the Token API is submitted, and the credential object is filled in with all names and IDs from the token API response. :param identity_version: The identity version to talk to and the type of credentials object to be created. 'v2' or 'v3'. :param kwargs: Attributes to be used to build the Credentials object. :returns: An object of a sub-type of `auth.Credentials` r c38"TFpRV9gK VxK R#5i)domainNrE).0xs& r "get_credentials.. s .'L!'1}A'Ls  r^r[rr )r,rrdrrrFsetrKeystoneV3Credentials ATTRIBUTESget intersectionkeysrrrrf)rr kwargsri domain_fieldsr[auth_urls&&, rrfrf s&..0 ;F ;F'EE4==+E+E4.t'A'A'L'L..  8$$!..v{{}==))CCK%0= !==''==$$    *(/ *1A *#) **rc6aa]tRtRtoRtV3RltRtVtV;t#) AdminManageri4zBManager that uses admin credentials for its managed client objectsc@<\\V` \4R7R#))rkN)superr~__init__r))self __class__s&rrAdminManager.__init__7s lD*8: + rs'$$ {{ #  !H($9N<F' #)X#*P<7??