Implement trust in identity v3 api

Added new module in identity v3 api to handle create, read, and delete
operations of trust resources.

Co-Authored-By: Lance Bragstad <lbragstad@gmail.com>
Co-Authored-By: Steve Martinelli <stevemar@ca.ibm.com>

Closes-Bug: #1413718
Change-Id: I2b360b141ff70d4f396466abede859a3db6644f4

2 files changed, 248 insertions, 1 deletions

diff --git a/openstackclient/tests/identity/v3/fakes.py b/openstackclient/tests/identity/v3/fakes.py
index 68e67519..c868401a 100644
--- a/openstackclient/tests/identity/v3/fakes.py
+++ b/openstackclient/tests/identity/v3/fakes.py
@@ -181,7 +181,7 @@ ENDPOINT = {
     'links': base_url + 'endpoints/' + endpoint_id,
 }
 
-user_id = 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa'
+user_id = 'bbbbbbb-aaaa-aaaa-aaaa-bbbbbbbaaaa'
 user_name = 'paul'
 user_description = 'Sir Paul'
 user_email = 'paul@applecorps.com'
@@ -196,6 +196,22 @@ USER = {
     'links': base_url + 'users/' + user_id,
 }
 
+trust_id = 't-456'
+trust_expires = None
+trust_impersonation = False
+trust_roles = {"id": role_id, "name": role_name},
+
+TRUST = {
+    'expires_at': trust_expires,
+    'id': trust_id,
+    'impersonation': trust_impersonation,
+    'links': base_url + 'trusts/' + trust_id,
+    'project_id': project_id,
+    'roles': trust_roles,
+    'trustee_user_id': user_id,
+    'trustor_user_id': user_id,
+}
+
 token_expires = '2014-01-01T00:00:00Z'
 token_id = 'tttttttt-tttt-tttt-tttt-tttttttttttt'
 
@@ -342,6 +358,8 @@ class FakeIdentityv3Client(object):
         self.session = mock.Mock()
         self.session.auth.auth_ref.service_catalog.resource_class = \
             fakes.FakeResource(None, {})
+        self.trusts = mock.Mock()
+        self.trusts.resource_class = fakes.FakeResource(None, {})
         self.users = mock.Mock()
         self.users.resource_class = fakes.FakeResource(None, {})
         self.role_assignments = mock.Mock()
diff --git a/openstackclient/tests/identity/v3/test_trust.py b/openstackclient/tests/identity/v3/test_trust.py
new file mode 100644
index 00000000..b3fbe7f0
--- /dev/null
+++ b/openstackclient/tests/identity/v3/test_trust.py
@@ -0,0 +1,229 @@
+#   Licensed under the Apache License, Version 2.0 (the "License"); you may
+#   not use this file except in compliance with the License. You may obtain
+#   a copy of the License at
+#
+#        http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+#   WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+#   License for the specific language governing permissions and limitations
+#   under the License.
+#
+
+import copy
+
+from openstackclient.identity.v3 import trust
+from openstackclient.tests import fakes
+from openstackclient.tests.identity.v3 import fakes as identity_fakes
+
+
+class TestTrust(identity_fakes.TestIdentityv3):
+
+    def setUp(self):
+        super(TestTrust, self).setUp()
+
+        self.trusts_mock = self.app.client_manager.identity.trusts
+        self.trusts_mock.reset_mock()
+        self.projects_mock = self.app.client_manager.identity.projects
+        self.projects_mock.reset_mock()
+        self.users_mock = self.app.client_manager.identity.users
+        self.users_mock.reset_mock()
+        self.roles_mock = self.app.client_manager.identity.roles
+        self.roles_mock.reset_mock()
+
+
+class TestTrustCreate(TestTrust):
+
+    def setUp(self):
+        super(TestTrustCreate, self).setUp()
+
+        self.projects_mock.get.return_value = fakes.FakeResource(
+            None,
+            copy.deepcopy(identity_fakes.PROJECT),
+            loaded=True,
+        )
+
+        self.users_mock.get.return_value = fakes.FakeResource(
+            None,
+            copy.deepcopy(identity_fakes.USER),
+            loaded=True,
+        )
+
+        self.roles_mock.get.return_value = fakes.FakeResource(
+            None,
+            copy.deepcopy(identity_fakes.ROLE),
+            loaded=True,
+        )
+
+        self.trusts_mock.create.return_value = fakes.FakeResource(
+            None,
+            copy.deepcopy(identity_fakes.TRUST),
+            loaded=True,
+        )
+
+        # Get the command object to test
+        self.cmd = trust.CreateTrust(self.app, None)
+
+    def test_trust_create_basic(self):
+        arglist = [
+            '--project', identity_fakes.project_id,
+            '--role', identity_fakes.role_id,
+            identity_fakes.user_id,
+            identity_fakes.user_id
+        ]
+        verifylist = [
+            ('project', identity_fakes.project_id),
+            ('impersonate', False),
+            ('role', [identity_fakes.role_id]),
+            ('trustor', identity_fakes.user_id),
+            ('trustee', identity_fakes.user_id),
+        ]
+        parsed_args = self.check_parser(self.cmd, arglist, verifylist)
+
+        # DisplayCommandBase.take_action() returns two tuples
+        columns, data = self.cmd.take_action(parsed_args)
+
+        # Set expected values
+        kwargs = {
+            'impersonation': False,
+            'project': identity_fakes.project_id,
+            'role_names': [identity_fakes.role_name],
+            'expires_at': None,
+        }
+        # TrustManager.create(trustee_id, trustor_id, impersonation=,
+        #   project=, role_names=, expires_at=)
+        self.trusts_mock.create.assert_called_with(
+            identity_fakes.user_id,
+            identity_fakes.user_id,
+            **kwargs
+        )
+
+        collist = ('expires_at', 'id', 'impersonation', 'project_id',
+                   'roles', 'trustee_user_id', 'trustor_user_id')
+        self.assertEqual(collist, columns)
+        datalist = (
+            identity_fakes.trust_expires,
+            identity_fakes.trust_id,
+            identity_fakes.trust_impersonation,
+            identity_fakes.project_id,
+            identity_fakes.role_name + ' ',
+            identity_fakes.user_id,
+            identity_fakes.user_id
+        )
+        self.assertEqual(datalist, data)
+
+
+class TestTrustDelete(TestTrust):
+
+    def setUp(self):
+        super(TestTrustDelete, self).setUp()
+
+        # This is the return value for utils.find_resource()
+        self.trusts_mock.get.return_value = fakes.FakeResource(
+            None,
+            copy.deepcopy(identity_fakes.TRUST),
+            loaded=True,
+        )
+        self.trusts_mock.delete.return_value = None
+
+        # Get the command object to test
+        self.cmd = trust.DeleteTrust(self.app, None)
+
+    def test_trust_delete(self):
+        arglist = [
+            identity_fakes.trust_id,
+        ]
+        verifylist = [
+            ('trust', [identity_fakes.trust_id])
+        ]
+        parsed_args = self.check_parser(self.cmd, arglist, verifylist)
+
+        self.cmd.take_action(parsed_args)
+
+        self.trusts_mock.delete.assert_called_with(
+            identity_fakes.trust_id,
+        )
+
+
+class TestTrustList(TestTrust):
+
+    def setUp(self):
+        super(TestTrustList, self).setUp()
+
+        self.trusts_mock.list.return_value = [
+            fakes.FakeResource(
+                None,
+                copy.deepcopy(identity_fakes.TRUST),
+                loaded=True,
+            ),
+        ]
+
+        # Get the command object to test
+        self.cmd = trust.ListTrust(self.app, None)
+
+    def test_trust_list_no_options(self):
+        arglist = []
+        verifylist = []
+        parsed_args = self.check_parser(self.cmd, arglist, verifylist)
+
+        # DisplayCommandBase.take_action() returns two tuples
+        columns, data = self.cmd.take_action(parsed_args)
+
+        self.trusts_mock.list.assert_called_with()
+
+        collist = ('ID', 'Expires At', 'Impersonation', 'Project ID',
+                   'Trustee User ID', 'Trustor User ID')
+        self.assertEqual(collist, columns)
+        datalist = ((
+            identity_fakes.trust_id,
+            identity_fakes.trust_expires,
+            identity_fakes.trust_impersonation,
+            identity_fakes.project_id,
+            identity_fakes.user_id,
+            identity_fakes.user_id
+        ), )
+        self.assertEqual(datalist, tuple(data))
+
+
+class TestTrustShow(TestTrust):
+
+    def setUp(self):
+        super(TestTrustShow, self).setUp()
+
+        self.trusts_mock.get.return_value = fakes.FakeResource(
+            None,
+            copy.deepcopy(identity_fakes.TRUST),
+            loaded=True,
+        )
+
+        # Get the command object to test
+        self.cmd = trust.ShowTrust(self.app, None)
+
+    def test_trust_show(self):
+        arglist = [
+            identity_fakes.trust_id,
+        ]
+        verifylist = [
+            ('trust', identity_fakes.trust_id),
+        ]
+        parsed_args = self.check_parser(self.cmd, arglist, verifylist)
+
+        # DisplayCommandBase.take_action() returns two tuples
+        columns, data = self.cmd.take_action(parsed_args)
+
+        self.trusts_mock.get.assert_called_with(identity_fakes.trust_id)
+
+        collist = ('expires_at', 'id', 'impersonation', 'project_id',
+                   'roles', 'trustee_user_id', 'trustor_user_id')
+        self.assertEqual(collist, columns)
+        datalist = (
+            identity_fakes.trust_expires,
+            identity_fakes.trust_id,
+            identity_fakes.trust_impersonation,
+            identity_fakes.project_id,
+            identity_fakes.role_name + ' ',
+            identity_fakes.user_id,
+            identity_fakes.user_id
+        )
+        self.assertEqual(datalist, data)