Add identity polices support

Author: niuzhenguo

openstack/identity/v3.0/policies/requests.go

@@ -0,0 +1,87 @@
+package policies
+
+import (
+	"github.com/huaweicloud/golangsdk"
+)
+
+// Get retrieves details on a single policy, by ID.
+func Get(client *golangsdk.ServiceClient, id string) (r GetResult) {
+	_, r.Err = client.Get(resourceURL(client, id), &r.Body, &golangsdk.RequestOpts{
+		OkCodes:     []int{200},
+		MoreHeaders: map[string]string{"Content-Type": "application/json"},
+	})
+	return
+}
+
+// CreateOptsBuilder allows extensions to add additional parameters to
+// the Create request.
+type CreateOptsBuilder interface {
+	ToPolicyCreateMap() (map[string]interface{}, error)
+}
+
+type Policy struct {
+	Version   string      `json:"Version" required:"true"`
+	Statement []Statement `json:"Statement" required:"true"`
+}
+
+type Statement struct {
+	Action    []string                       `json:"Action" required:"true"`
+	Effect    string                         `json:"Effect" required:"true"`
+	Condition map[string]map[string][]string `json:"Condition,omitempty"`
+	Resource  []string                       `json:"Resource,omitempty"`
+}
+
+// CreateOpts provides options used to create a policy.
+type CreateOpts struct {
+	Name        string `json:"display_name" required:"true"`
+	Type        string `json:"type" required:"true"`
+	Description string `json:"description" required:"true"`
+	Policy      Policy `json:"policy" required:"true"`
+}
+
+// ToPolicyCreateMap formats a CreateOpts into a create request.
+func (opts CreateOpts) ToPolicyCreateMap() (map[string]interface{}, error) {
+	b, err := golangsdk.BuildRequestBody(opts, "role")
+	if err != nil {
+		return nil, err
+	}
+
+	return b, nil
+}
+
+// Create creates a new Policy.
+func Create(client *golangsdk.ServiceClient, opts CreateOptsBuilder) (r CreateResult) {
+	b, err := opts.ToPolicyCreateMap()
+	if err != nil {
+		r.Err = err
+		return
+	}
+	_, r.Err = client.Post(rootURL(client), &b, &r.Body, &golangsdk.RequestOpts{
+		OkCodes:     []int{201},
+		MoreHeaders: map[string]string{"Content-Type": "application/json"},
+	})
+	return
+}
+
+// Update updates an existing Policy.
+func Update(client *golangsdk.ServiceClient, roleID string, opts CreateOptsBuilder) (r UpdateResult) {
+	b, err := opts.ToPolicyCreateMap()
+	if err != nil {
+		r.Err = err
+		return
+	}
+	_, r.Err = client.Patch(resourceURL(client, roleID), &b, &r.Body, &golangsdk.RequestOpts{
+		OkCodes:     []int{200},
+		MoreHeaders: map[string]string{"Content-Type": "application/json"},
+	})
+	return
+}
+
+// Delete deletes a policy.
+func Delete(client *golangsdk.ServiceClient, roleID string) (r DeleteResult) {
+	_, r.Err = client.Delete(resourceURL(client, roleID), &golangsdk.RequestOpts{
+		OkCodes:     []int{200},
+		MoreHeaders: map[string]string{"Content-Type": "application/json"},
+	})
+	return
+}

openstack/identity/v3.0/policies/results.go

@@ -0,0 +1,53 @@
+package policies
+
+import (
+	"github.com/huaweicloud/golangsdk"
+)
+
+type Role struct {
+	ID          string `json:"id"`
+	Name        string `json:"display_name"`
+	Catalog     string `json:"catalog"`
+	Description string `json:"description"`
+	Type        string `json:"type"`
+	Policy      Policy `json:"policy" required:"true"`
+	DomainId    string `json:"domain_id"`
+	References  int    `json:"references"`
+}
+
+type roleResult struct {
+	golangsdk.Result
+}
+
+// GetResult is the response from a Get operation. Call its Extract method
+// to interpret it as a Role.
+type GetResult struct {
+	roleResult
+}
+
+// CreateResult is the response from a Create operation. Call its Extract method
+// to interpret it as a Role
+type CreateResult struct {
+	roleResult
+}
+
+// UpdateResult is the response from an Update operation. Call its Extract
+// method to interpret it as a Role.
+type UpdateResult struct {
+	roleResult
+}
+
+// DeleteResult is the response from a Delete operation. Call its ExtractErr to
+// determine if the request succeeded or failed.
+type DeleteResult struct {
+	golangsdk.ErrResult
+}
+
+// Extract interprets any roleResults as a Role.
+func (r roleResult) Extract() (*Role, error) {
+	var s struct {
+		Role *Role `json:"role"`
+	}
+	err := r.ExtractInto(&s)
+	return s.Role, err
+}

openstack/identity/v3.0/policies/urls.go

@@ -0,0 +1,16 @@
+package policies
+
+import "github.com/huaweicloud/golangsdk"
+
+const (
+	rootPath = "OS-ROLE"
+	rolePath = "roles"
+)
+
+func rootURL(client *golangsdk.ServiceClient) string {
+	return client.ServiceURL(rootPath, rolePath)
+}
+
+func resourceURL(client *golangsdk.ServiceClient, roleID string) string {
+	return client.ServiceURL(rootPath, rolePath, roleID)
+}