2 files changed, 119 insertions, 0 deletions
diff --git a/keystone-moon/keystone/resource/config_backends/__init__.py b/keystone-moon/keystone/resource/config_backends/__init__.py
new file mode 100644
index 00000000..e69de29b
--- /dev/null
+++ b/keystone-moon/keystone/resource/config_backends/__init__.py
diff --git a/keystone-moon/keystone/resource/config_backends/sql.py b/keystone-moon/keystone/resource/config_backends/sql.py
new file mode 100644
index 00000000..e54bf22b
--- /dev/null
+++ b/keystone-moon/keystone/resource/config_backends/sql.py
@@ -0,0 +1,119 @@
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from keystone.common import sql
+from keystone import exception
+from keystone.i18n import _
+from keystone import resource
+
+
+class WhiteListedConfig(sql.ModelBase, sql.ModelDictMixin):
+    __tablename__ = 'whitelisted_config'
+    domain_id = sql.Column(sql.String(64), primary_key=True)
+    group = sql.Column(sql.String(255), primary_key=True)
+    option = sql.Column(sql.String(255), primary_key=True)
+    value = sql.Column(sql.JsonBlob(), nullable=False)
+
+    def to_dict(self):
+        d = super(WhiteListedConfig, self).to_dict()
+        d.pop('domain_id')
+        return d
+
+
+class SensitiveConfig(sql.ModelBase, sql.ModelDictMixin):
+    __tablename__ = 'sensitive_config'
+    domain_id = sql.Column(sql.String(64), primary_key=True)
+    group = sql.Column(sql.String(255), primary_key=True)
+    option = sql.Column(sql.String(255), primary_key=True)
+    value = sql.Column(sql.JsonBlob(), nullable=False)
+
+    def to_dict(self):
+        d = super(SensitiveConfig, self).to_dict()
+        d.pop('domain_id')
+        return d
+
+
+class DomainConfig(resource.DomainConfigDriver):
+
+    def choose_table(self, sensitive):
+        if sensitive:
+            return SensitiveConfig
+        else:
+            return WhiteListedConfig
+
+    @sql.handle_conflicts(conflict_type='domain_config')
+    def create_config_option(self, domain_id, group, option, value,
+                             sensitive=False):
+        with sql.transaction() as session:
+            config_table = self.choose_table(sensitive)
+            ref = config_table(domain_id=domain_id, group=group,
+                               option=option, value=value)
+            session.add(ref)
+        return ref.to_dict()
+
+    def _get_config_option(self, session, domain_id, group, option, sensitive):
+        try:
+            config_table = self.choose_table(sensitive)
+            ref = (session.query(config_table).
+                   filter_by(domain_id=domain_id, group=group,
+                             option=option).one())
+        except sql.NotFound:
+            msg = _('option %(option)s in group %(group)s') % {
+                'group': group, 'option': option}
+            raise exception.DomainConfigNotFound(
+                domain_id=domain_id, group_or_option=msg)
+        return ref
+
+    def get_config_option(self, domain_id, group, option, sensitive=False):
+        with sql.transaction() as session:
+            ref = self._get_config_option(session, domain_id, group, option,
+                                          sensitive)
+        return ref.to_dict()
+
+    def list_config_options(self, domain_id, group=None, option=None,
+                            sensitive=False):
+        with sql.transaction() as session:
+            config_table = self.choose_table(sensitive)
+            query = session.query(config_table)
+            query = query.filter_by(domain_id=domain_id)
+            if group:
+                query = query.filter_by(group=group)
+                if option:
+                    query = query.filter_by(option=option)
+            return [ref.to_dict() for ref in query.all()]
+
+    def update_config_option(self, domain_id, group, option, value,
+                             sensitive=False):
+        with sql.transaction() as session:
+            ref = self._get_config_option(session, domain_id, group, option,
+                                          sensitive)
+            ref.value = value
+        return ref.to_dict()
+
+    def delete_config_options(self, domain_id, group=None, option=None,
+                              sensitive=False):
+        """Deletes config options that match the filter parameters.
+
+        Since the public API is broken down into calls for delete in both the
+        whitelisted and sensitive methods, we are silent at the driver level
+        if there was nothing to delete.
+
+        """
+        with sql.transaction() as session:
+            config_table = self.choose_table(sensitive)
+            query = session.query(config_table)
+            query = query.filter_by(domain_id=domain_id)
+            if group:
+                query = query.filter_by(group=group)
+                if option:
+                    query = query.filter_by(option=option)
+            query.delete(False)