1 files changed, 123 insertions, 0 deletions
diff --git a/openstack/usr/share/openstack/modules/keystone_manage b/openstack/usr/share/openstack/modules/keystone_manage
new file mode 100644
index 00000000..780f7c9a
--- /dev/null
+++ b/openstack/usr/share/openstack/modules/keystone_manage
@@ -0,0 +1,123 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+
+DOCUMENTATION = '''
+---
+module: keystone_manage
+short_description: Initialize OpenStack Identity (keystone) database
+description: Create the tables for the database backend used by keystone
+options:
+  action:
+    description:
+      - action to perform. Currently only dbysnc is supported
+    required: true
+  conf:
+    description:
+      - path to keystone config file.
+    required: false
+    default: /etc/keystone/keystone.conf
+requirements: [ keystone ]
+author: Lorin Hochstein
+'''
+
+EXAMPLES = '''
+keystone_manage: action=dbsync
+'''
+
+import subprocess
+
+try:
+    # this is necessary starting from havana release due to bug 885529
+    # https://bugs.launchpad.net/glance/+bug/885529
+    from keystone.openstack.common import gettextutils
+    gettextutils.install('keystone')
+except AttributeError:
+    # this is not havana
+    pass
+
+try:
+    from keystone.common import sql
+    from migrate.versioning import api as versioning_api
+except ImportError:
+    keystone_found = False
+else:
+    keystone_found = True
+
+try:
+    # for icehouse
+    from keystone.common.sql import migration_helpers as migration
+except ImportError:
+    pass
+
+
+def will_db_change(conf):
+    """ Check if the database version will change after the sync.
+
+    conf is the path to the keystone config file
+
+    """
+    # Load the config file options
+    try:
+        # before icehouse
+        sql.migration.CONF(project='keystone', default_config_files=[conf])
+        current_version = sql.migration.db_version()
+    except AttributeError:
+        # starting with icehouse
+        sql.core.CONF(project='keystone', default_config_files=[conf])
+        current_version = migration.get_db_version()
+
+    # in havana the method _find_migrate_repo has been renamed to find_migrate_repo
+    try:
+        repo_path = migration.find_migrate_repo()
+    except AttributeError:
+        repo_path = migration._find_migrate_repo()
+    repo_version = versioning_api.repository.Repository(repo_path).latest
+    return current_version != repo_version
+
+
+def do_dbsync():
+    """Do the dbsync. Returns (returncode, stdout, stderr)"""
+    # We call keystone-manage db_sync on the shell rather than trying to
+    # do this in Python since we have no guarantees about changes to the
+    # internals.
+    args = ['keystone-manage', 'db_sync']
+
+    call = subprocess.Popen(args, shell=False,
+                         stdout=subprocess.PIPE, stderr=subprocess.PIPE)
+    out, err = call.communicate()
+    return (call.returncode, out, err)
+
+
+def main():
+
+    module = AnsibleModule(
+        argument_spec=dict(
+            action=dict(required=True),
+            conf=dict(required=False, default="/etc/keystone/keystone.conf")
+        ),
+        supports_check_mode=True
+    )
+
+    if not keystone_found:
+        module.fail_json(msg="keystone package could not be found")
+
+    action = module.params['action']
+    conf = module.params['conf']
+    if action not in ['dbsync', 'db_sync']:
+        module.fail_json(msg="Only supported action is 'dbsync'")
+
+    changed = will_db_change(conf)
+    if module.check_mode:
+        module.exit_json(changed=changed)
+
+    (res, stdout, stderr) = do_dbsync()
+
+    if res == 0:
+        module.exit_json(changed=changed, stdout=stdout, stderr=stderr)
+    else:
+        module.fail_json(msg="keystone-manage returned non-zero value: %d" % res,
+                         stdout=stdout, stderr=stderr)
+
+# this is magic, see lib/ansible/module_common.py
+#<<INCLUDE_ANSIBLE_MODULE_COMMON>>
+main()