Add IAM apis into the project

acceptance/openstack/client_test.go

@@ -18,6 +18,8 @@ func TestAuthenticatedClient(t *testing.T) {
 		t.Fatalf("Unable to acquire credentials: %v", err)
 	}
 
+	t.Logf("AuthOptionsFromEnv: %+v", ao)
+
 	client, err := openstack.AuthenticatedClient(ao)
 	if err != nil {
 		t.Fatalf("Unable to authenticate: %v", err)

acceptance/openstack/identity/v2/tenant_test.go

@@ -13,7 +13,7 @@ import (
 func TestTenantsList(t *testing.T) {
 	client, err := clients.NewIdentityV2Client()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	allPages, err := tenants.List(client, nil).AllPages()
@@ -34,7 +34,7 @@ func TestTenantsList(t *testing.T) {
 func TestTenantsCRUD(t *testing.T) {
 	client, err := clients.NewIdentityV2AdminClient()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	tenant, err := CreateTenant(t, client, nil)

acceptance/openstack/identity/v3/endpoint_test.go

@@ -15,7 +15,7 @@ import (
 func TestEndpointsList(t *testing.T) {
 	client, err := clients.NewIdentityV3Client()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	allPages, err := endpoints.List(client, nil).AllPages()
@@ -33,10 +33,38 @@ func TestEndpointsList(t *testing.T) {
 	}
 }
 
+func TestEndpointsGet(t *testing.T) {
+
+	client, err := clients.NewIdentityV3Client()
+	if err != nil {
+		t.Fatalf("Unable to obtain an identity client: %v", err)
+	}
+
+	allPages, err := endpoints.List(client, nil).AllPages()
+	if err != nil {
+		t.Fatalf("Unable to list endpoints: %v", err)
+	}
+
+	allEndpoints, err := endpoints.ExtractEndpoints(allPages)
+	if err != nil {
+		t.Fatalf("Unable to extract endpoints: %v", err)
+	}
+
+	if len(allEndpoints) > 0 {
+		endpoint := allEndpoints[0]
+		p, err := endpoints.Get(client, endpoint.ID).Extract()
+		if err != nil {
+			t.Fatalf("Unable to get endpoint: %v", err)
+		}
+
+		tools.PrintResource(t, p)
+	}
+}
+
 func TestEndpointsNavigateCatalog(t *testing.T) {
 	client, err := clients.NewIdentityV3Client()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	// Discover the service we're interested in.
@@ -51,7 +79,7 @@ func TestEndpointsNavigateCatalog(t *testing.T) {
 
 	allServices, err := services.ExtractServices(allPages)
 	if err != nil {
-		t.Fatalf("Unable to extract service: %v")
+		t.Fatalf("Unable to extract service: %v", err)
 	}
 
 	if len(allServices) != 1 {
@@ -74,7 +102,7 @@ func TestEndpointsNavigateCatalog(t *testing.T) {
 
 	allEndpoints, err := endpoints.ExtractEndpoints(allPages)
 	if err != nil {
-		t.Fatalf("Unable to extract endpoint: %v")
+		t.Fatalf("Unable to extract endpoint: %v", err)
 	}
 
 	if len(allEndpoints) != 1 {

acceptance/openstack/identity/v3/group_users_test.go

@@ -0,0 +1,85 @@
+// +build acceptance
+
+package v3
+
+import (
+	"testing"
+
+	"github.com/huaweicloud/golangsdk/acceptance/clients"
+	"github.com/huaweicloud/golangsdk/acceptance/tools"
+	"github.com/huaweicloud/golangsdk/openstack/identity/v3/groups"
+	"github.com/huaweicloud/golangsdk/openstack/identity/v3/users"
+)
+
+func TestGroupUsersCRUD(t *testing.T) {
+
+	client, err := clients.NewIdentityV3Client()
+	if err != nil {
+		t.Fatalf("Unable to obtain an identity client: %v", err)
+	}
+
+	// Create Group in the default domain
+	createGroupOpts := groups.CreateOpts{
+		Name:     "testgroup",
+		DomainID: "default",
+		Extra: map[string]interface{}{
+			"email": "testgroup@example.com",
+		},
+	}
+	group, err := CreateGroup(t, client, &createGroupOpts)
+	if err != nil {
+		t.Fatalf("Unable to create group: %v", err)
+	}
+	defer DeleteGroup(t, client, group.ID)
+
+	tools.PrintResource(t, group)
+	tools.PrintResource(t, group.Extra)
+
+	// Create a test user
+	createUserOpts := users.CreateOpts{
+		Password: "foobar",
+		DomainID: "default",
+		Options: map[users.Option]interface{}{
+			users.IgnorePasswordExpiry: true,
+			users.MultiFactorAuthRules: []interface{}{
+				[]string{"password", "totp"},
+				[]string{"password", "custom-auth-method"},
+			},
+		},
+		Extra: map[string]interface{}{
+			"email": "jsmith@example.com",
+		},
+	}
+	user, err := CreateUser(t, client, &createUserOpts)
+	if err != nil {
+		t.Fatalf("Unable to create user: %v", err)
+	}
+	defer DeleteUser(t, client, user.ID)
+
+	tools.PrintResource(t, user)
+	tools.PrintResource(t, user.Extra)
+
+	err = users.AddUserToGroup(client, group.ID, user.ID).ExtractErr()
+	if err != nil {
+		t.Fatalf("Unable to add user to group: %v", err)
+	}
+
+	allPages, err := users.ListInGroup(client, group.ID, nil).AllPages()
+	if err != nil {
+		t.Fatalf("Unable to list users: %v", err)
+	}
+	_, err = users.ExtractUsers(allPages)
+	if err != nil {
+		t.Fatalf("Unable to extract users: %v", err)
+	}
+
+	err = users.CheckGroupUser(client, group.ID, user.ID).ExtractErr()
+	if err != nil {
+		t.Fatalf("Didn't successfully add user to group")
+	}
+
+	err = users.DeleteGroupUser(client, group.ID, user.ID).ExtractErr()
+	if err != nil {
+		t.Fatalf("Unable to remove user from group: %v", err)
+	}
+}

acceptance/openstack/identity/v3/projects_test.go

@@ -64,7 +64,7 @@ func TestProjectsGet(t *testing.T) {
 func TestProjectsCRUD(t *testing.T) {
 	client, err := clients.NewIdentityV3Client()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	project, err := CreateProject(t, client, nil)
@@ -91,7 +91,7 @@ func TestProjectsCRUD(t *testing.T) {
 func TestProjectsDomain(t *testing.T) {
 	client, err := clients.NewIdentityV3Client()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	var iTrue = true
@@ -126,14 +126,14 @@ func TestProjectsDomain(t *testing.T) {
 
 	_, err = projects.Update(client, projectDomain.ID, updateOpts).Extract()
 	if err != nil {
-		t.Fatalf("Unable to disable domain: %v")
+		t.Fatalf("Unable to disable domain: %v", err)
 	}
 }
 
 func TestProjectsNested(t *testing.T) {
 	client, err := clients.NewIdentityV3Client()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	projectMain, err := CreateProject(t, client, nil)

acceptance/openstack/identity/v3/roles_test.go

@@ -268,6 +268,30 @@ func TestRoleAssignToGroupOnDomain(t *testing.T) {
 	for _, roleAssignment := range allRoleAssignments {
 		tools.PrintResource(t, roleAssignment)
 	}
+
+	err = roles.CheckRoleOf(client, role.ID, roles.CheckRoleOfOpts{
+		GroupID:  group.ID,
+		DomainID: domain.ID,
+	}).ExtractErr()
+	if err != nil {
+		t.Fatalf("Unable to check role of domain: %v", err)
+	}
+
+	allPages, err = roles.ListRolesOf(client, roles.ListRolesOfOpts{
+		GroupID:  group.ID,
+		DomainID: domain.ID,
+	}).AllPages()
+	if err != nil {
+		t.Fatalf("Unable to list roles of domain: %v", err)
+	}
+	allRoles, err := roles.ExtractRoles(allPages)
+	if err != nil {
+		t.Fatalf("Unable to extract roles: %v", err)
+	}
+
+	for _, role := range allRoles {
+		tools.PrintResource(t, role)
+	}
 }
 
 func TestRoleAssignToGroupOnProject(t *testing.T) {
@@ -325,4 +349,28 @@ func TestRoleAssignToGroupOnProject(t *testing.T) {
 	for _, roleAssignment := range allRoleAssignments {
 		tools.PrintResource(t, roleAssignment)
 	}
+
+	err = roles.CheckRoleOf(client, role.ID, roles.CheckRoleOfOpts{
+		GroupID:   group.ID,
+		ProjectID: project.ID,
+	}).ExtractErr()
+	if err != nil {
+		t.Fatalf("Unable to check role of project: %v", err)
+	}
+
+	allPages, err = roles.ListRolesOf(client, roles.ListRolesOfOpts{
+		GroupID:   group.ID,
+		ProjectID: project.ID,
+	}).AllPages()
+	if err != nil {
+		t.Fatalf("Unable to list roles of project: %v", err)
+	}
+	allRoles, err := roles.ExtractRoles(allPages)
+	if err != nil {
+		t.Fatalf("Unable to extract roles: %v", err)
+	}
+
+	for _, role := range allRoles {
+		tools.PrintResource(t, role)
+	}
 }

acceptance/openstack/identity/v3/service_test.go

@@ -13,7 +13,7 @@ import (
 func TestServicesList(t *testing.T) {
 	client, err := clients.NewIdentityV3Client()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	listOpts := services.ListOpts{
@@ -36,6 +36,39 @@ func TestServicesList(t *testing.T) {
 
 }
 
+func TestServicesGet(t *testing.T) {
+
+	client, err := clients.NewIdentityV3Client()
+	if err != nil {
+		t.Fatalf("Unable to obtain an identity client: %v", err)
+	}
+
+	listOpts := services.ListOpts{
+		ServiceType: "identity",
+	}
+
+	allPages, err := services.List(client, listOpts).AllPages()
+	if err != nil {
+		t.Fatalf("Unable to list services: %v", err)
+	}
+
+	allServices, err := services.ExtractServices(allPages)
+	if err != nil {
+		t.Fatalf("Unable to extract services: %v", err)
+	}
+
+	if len(allServices) > 0 {
+
+		service := allServices[0]
+		p, err := services.Get(client, service.ID).Extract()
+		if err != nil {
+			t.Fatalf("Unable to get service: %v", err)
+		}
+
+		tools.PrintResource(t, p)
+	}
+}
+
 func TestServicesCRUD(t *testing.T) {
 	client, err := clients.NewIdentityV3Client()
 	if err != nil {
@@ -56,6 +89,11 @@ func TestServicesCRUD(t *testing.T) {
 	}
 	defer DeleteService(t, client, service.ID)
 
+	service, err = services.Get(client, service.ID).Extract()
+	if err != nil {
+		t.Fatalf("Unable to read service: %v", err)
+	}
+
 	tools.PrintResource(t, service)
 	tools.PrintResource(t, service.Extra)
 

acceptance/openstack/identity/v3/token_test.go

@@ -14,7 +14,7 @@ import (
 func TestGetToken(t *testing.T) {
 	client, err := clients.NewIdentityV3Client()
 	if err != nil {
-		t.Fatalf("Unable to obtain an identity client: %v")
+		t.Fatalf("Unable to obtain an identity client: %v", err)
 	}
 
 	ao, err := openstack.AuthOptionsFromEnv()
@@ -25,7 +25,7 @@ func TestGetToken(t *testing.T) {
 	authOptions := tokens.AuthOptions{
 		Username:   ao.Username,
 		Password:   ao.Password,
-		DomainName: "default",
+		DomainName: ao.DomainName,
 	}
 
 	token, err := tokens.Create(client, &authOptions).Extract()

acceptance/openstack/identity/v3/users_test.go

@@ -121,6 +121,15 @@ func TestUserCRUD(t *testing.T) {
 
 	tools.PrintResource(t, newUser)
 	tools.PrintResource(t, newUser.Extra)
+
+	updatePasswdOpts := users.UpdatePasswdOpts{
+		OriginalPassword: "foobar",
+		Password:         "barfoo",
+	}
+	err = users.UpdatePasswd(client, user.ID, updatePasswdOpts).ExtractErr()
+	if err != nil {
+		t.Fatalf("Unable to update user password: %v", err)
+	}
 }
 
 func TestUsersListGroups(t *testing.T) {

openstack/identity/v3/domains/results.go

@@ -21,6 +21,9 @@ type Domain struct {
 
 	// Name is the name of the domain.
 	Name string `json:"name"`
+
+	// EnterpriseName is the name of company user.
+	EnterpriseName string `json:"enterpriseName"`
 }
 
 type domainResult struct {