Use proxy layer in identity_user_info

- Changes the module to get user through proxy layer
- Adds a role to test the module
- Renames the return value to drop openstack_ prefix

Change-Id: I99e98a529ce74ff2ca77a67d09f188228e6a0e37

.zuul.yaml

@@ -70,6 +70,7 @@
         dns_zone_info
         floating_ip_info
         group
+        identity_user_info
         identity_role
         image
         keypair

ci/roles/identity_user_info/defaults/main.yml

@@ -0,0 +1,11 @@
+os_expected_user_info_fields:
+  - default_project_id
+  - description
+  - domain_id
+  - email
+  - id
+  - is_enabled
+  - links
+  - name
+  - password
+  - password_expires_at

ci/roles/identity_user_info/tasks/main.yml

@@ -0,0 +1,69 @@
+- name: Ensure user does not exist before tests
+  openstack.cloud.identity_user:
+     cloud: "{{ cloud }}"
+     state: absent
+     name: ansible_user
+
+- block:
+  - name: Get unexistent user
+    openstack.cloud.identity_user_info:
+      cloud: "{{ cloud }}"
+      name: ansible_user
+    register: userinfo
+  - name: Ensure nothing was returned
+    assert:
+      that: not userinfo.users
+
+- block:
+  - name: Create user
+    openstack.cloud.identity_user:
+       cloud: "{{ cloud }}"
+       state: present
+       name: ansible_user
+       password: secret
+       email: ansible.user@nowhere.net
+       domain: default
+       default_project: demo
+    register: user
+  - name: Create second user
+    openstack.cloud.identity_user:
+      cloud: "{{ cloud }}"
+      state: present
+      name: ansible_user2
+      password: secret
+      email: ansible.user2@nowhere.net
+      domain: default
+      default_project: demo
+    register: user
+  - name: Get first user info
+    openstack.cloud.identity_user_info:
+      cloud: "{{ cloud }}"
+      name: ansible_user
+    register: userinfo
+  - name: Assert only one result exists
+    assert:
+      that: "{{ userinfo.users | length }} == 1"
+  - name: Assert userinfo has fields
+    assert:
+      that: item in userinfo.users[0]
+    loop: "{{ os_expected_user_info_fields }}"
+
+- block:
+  - name: Get all users
+    openstack.cloud.identity_user_info:
+      cloud: "{{ cloud }}"
+    register: userinfo
+  - name: Assert results were returned
+    assert:
+      that: "{{ userinfo.users | length }} > 0"
+
+- name: Post-test cleanup
+  block:
+  - name: Ensure users do not exist
+    openstack.cloud.identity_user:
+      cloud: "{{ cloud }}"
+      state: absent
+      name: "{{ item }}"
+    loop:
+      - ansible_user
+      - ansible_user2

ci/run-collection.yml

@@ -16,6 +16,7 @@
       tags: dns
       when: sdk_version is version(0.28, '>=')
     - { role: floating_ip_info, tags: floating_ip_info }
+    - { role: identity_user_info, tags: identity_user_info }
     - { role: identity_role, tags: identity_role }
     - { role: image, tags: image }
     - { role: keypair, tags: keypair }

plugins/modules/identity_user_info.py

@@ -25,6 +25,7 @@ options:
         - A dictionary of meta data to use for further filtering.  Elements of
           this dictionary may be additional dictionaries.
      type: dict
+     default: {}
 requirements:
     - "python >= 3.6"
     - "openstacksdk"
@@ -39,7 +40,7 @@ EXAMPLES = '''
     cloud: awesomecloud
   register: result
 - debug:
-    msg: "{{ result.openstack_users }}"
+    msg: "{{ result.users }}"
 
 # Gather information about a previously created user by name
 - openstack.cloud.identity_user_info:
@@ -47,7 +48,7 @@ EXAMPLES = '''
     name: demouser
   register: result
 - debug:
-    msg: "{{ result.openstack_users }}"
+    msg: "{{ result.users }}"
 
 # Gather information about a previously created user in a specific domain
 - openstack.cloud.identity_user_info:
@@ -56,7 +57,7 @@ EXAMPLES = '''
     domain: admindomain
   register: result
 - debug:
-    msg: "{{ result.openstack_users }}"
+    msg: "{{ result.users }}"
 
 # Gather information about a previously created user in a specific domain with filter
 - openstack.cloud.identity_user_info:
@@ -67,15 +68,16 @@ EXAMPLES = '''
       enabled: False
   register: result
 - debug:
-    msg: "{{ result.openstack_users }}"
+    msg: "{{ result.users }}"
 '''
 
 
 RETURN = '''
-openstack_users:
+users:
     description: has all the OpenStack information about users
-    returned: always, but can be null
+    returned: always
-    type: complex
+    type: list
+    elements: dict
     contains:
         id:
             description: Unique UUID.
@@ -85,22 +87,39 @@ openstack_users:
             description: Username of the user.
             returned: success
             type: str
-        enabled:
-            description: Flag to indicate if the user is enabled
-            returned: success
-            type: bool
-        domain_id:
-            description: Domain ID containing the user
-            returned: success
-            type: str
         default_project_id:
             description: Default project ID of the user
             returned: success
             type: str
+        domain_id:
+            description: Domain ID containing the user
+            returned: success
+            type: str
         email:
             description: Email of the user
             returned: success
             type: str
+        is_enabled:
+            description: Flag to indicate if the user is enabled
+            returned: success
+            type: bool
+        links:
+            description: The links for the user resource
+            returned: success
+            type: complex
+            contains:
+                self:
+                    description: Link to this user resource
+                    returned: success
+                    type: str
+        password:
+            description: The default form of credential used during authentication.
+            returned: success
+            type: str
+        password_expires_at:
+            description: The date and time when the password expires. The time zone is UTC. A Null value means the password never expires.
+            returned: success
+            type: str
         username:
             description: Username with Identity API v2 (OpenStack Pike or earlier) else Null
             returned: success
@@ -114,7 +133,7 @@ class IdentityUserInfoModule(OpenStackModule):
     argument_spec = dict(
         name=dict(required=False, default=None),
         domain=dict(required=False, default=None),
-        filters=dict(required=False, type='dict', default=None),
+        filters=dict(required=False, type='dict', default={}),
     )
     module_kwargs = dict(
         supports_check_mode=True
@@ -128,21 +147,16 @@ class IdentityUserInfoModule(OpenStackModule):
         filters = self.params['filters']
 
         if domain:
-            try:
+            dom_obj = self.conn.identity.find_domain(domain)
-                # We assume admin is passing domain id
+            if dom_obj is None:
-                dom = self.conn.get_domain(domain)['id']
+                self.fail_json(
-                domain = dom
+                    msg="Domain name or ID '{0}' does not exist".format(domain))
-            except Exception:
+            filters['domain_id'] = dom_obj.id
-                # If we fail, maybe admin is passing a domain name.
-                # Note that domains have unique names, just like id.
-                dom = self.conn.search_domains(filters={'name': domain})
-                if dom:
-                    domain = dom[0]['id']
-                else:
-                    self.fail_json(msg='Domain name or ID does not exist')
 
-        users = self.conn.search_users(name, filters, domain_id=domain)
+        users = self.conn.identity.users(
-        self.exit_json(changed=False, openstack_users=users)
+            name=name, **filters)
+        users = [user.to_dict(computed=False) for user in users]
+        self.exit_json(changed=False, users=users)
 
 
 def main():