# Encoding: utf-8
#
# Cookbook Name:: openstack-network
# Recipe:: identity_registration
#
# Copyright 2013, AT&T
# Copyright 2013, SUSE Linux GmbH
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

['quantum', 'neutron'].include?(node['openstack']['compute']['network']['service_type']) || return

require 'uri'

# Make Openstack object available in Chef::Recipe
class ::Chef::Recipe
  include ::Openstack
end

identity_admin_endpoint = endpoint 'identity-admin'

bootstrap_token = get_secret 'openstack_identity_bootstrap_token'
auth_uri = ::URI.decode identity_admin_endpoint.to_s

api_endpoint = endpoint 'network-api'

service_pass = get_password 'service', 'openstack-network'
service_tenant_name = node['openstack']['network']['service_tenant_name']
service_user = node['openstack']['network']['service_user']
service_role = node['openstack']['network']['service_role']

openstack_identity_register 'Register Network API Service' do
  auth_uri auth_uri
  bootstrap_token bootstrap_token
  service_name node['openstack']['network']['service_name']
  service_type node['openstack']['network']['service_type']
  service_description 'OpenStack Network Service'

  action :create_service
end

openstack_identity_register 'Register Network Endpoint' do
  auth_uri auth_uri
  bootstrap_token bootstrap_token
  service_type node['openstack']['network']['service_type']
  endpoint_region node['openstack']['network']['region']
  endpoint_adminurl api_endpoint.to_s
  endpoint_internalurl api_endpoint.to_s
  endpoint_publicurl api_endpoint.to_s

  action :create_endpoint
end

openstack_identity_register 'Register Service Tenant' do
  auth_uri auth_uri
  bootstrap_token bootstrap_token
  tenant_name service_tenant_name
  tenant_description 'Service Tenant'

  action :create_tenant
end

openstack_identity_register "Register #{service_user} User" do
  auth_uri auth_uri
  bootstrap_token bootstrap_token
  tenant_name service_tenant_name
  user_name service_user
  user_pass service_pass

  action :create_user
end

openstack_identity_register "Grant '#{service_role}' Role to #{service_user} User for #{service_tenant_name} Tenant" do
  auth_uri auth_uri
  bootstrap_token bootstrap_token
  tenant_name service_tenant_name
  user_name service_user
  role_name service_role

  action :grant_role
end
