ngine_io.cloudstack.user module – Manages users on Apache CloudStack based clouds.

Note

This module is part of the ngine_io.cloudstack collection (version 3.0.0).

You might already have this collection installed if you are using the ansible package. It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install ngine_io.cloudstack. You need further requirements to be able to use this module, see Requirements for details.

To use it in a playbook, specify: ngine_io.cloudstack.user.

New in ngine_io.cloudstack 0.1.0

Synopsis

  • Create, update, disable, lock, enable and remove users.

Aliases: cs_user

Requirements

The below requirements are needed on the host that executes this module.

  • python >= 2.6

  • cs >= 0.9.0

Parameters

Parameter

Comments

account

string

Account the user will be created under.

Required on state=present.

api_http_method

string

HTTP method used to query the API endpoint.

If not given, the CLOUDSTACK_METHOD env variable is considered.

Choices:

  • "get" ← (default)

  • "post"

api_key

string / required

API key of the CloudStack API.

If not given, the CLOUDSTACK_KEY env variable is considered.

api_secret

string / required

Secret key of the CloudStack API.

If not set, the CLOUDSTACK_SECRET env variable is considered.

api_timeout

integer

HTTP timeout in seconds.

If not given, the CLOUDSTACK_TIMEOUT env variable is considered.

Default: 10

api_url

string / required

URL of the CloudStack API e.g. https://cloud.example.com/client/api.

If not given, the CLOUDSTACK_ENDPOINT env variable is considered.

api_verify_ssl_cert

string

Verify CA authority cert file.

If not given, the CLOUDSTACK_VERIFY env variable is considered.

domain

string

Domain the user is related to.

Default: "ROOT"

email

string

Email of the user.

Required on state=present.

first_name

string

First name of the user.

Required on state=present.

keys_registered

boolean

If API keys of the user should be generated.

Note: Keys can not be removed by the API again.

Choices:

  • false ← (default)

  • true

last_name

string

Last name of the user.

Required on state=present.

password

string

Password of the user to be created.

Required on state=present.

Only considered on creation and will not be updated if user exists.

poll_async

boolean

Poll async jobs until job has finished.

Choices:

  • false

  • true ← (default)

state

string

State of the user.

unlocked is an alias for enabled.

Choices:

  • "present" ← (default)

  • "absent"

  • "enabled"

  • "disabled"

  • "locked"

  • "unlocked"

timezone

string

Timezone of the user.

username

string / required

Username of the user.

validate_certs

boolean

added in ngine_io.cloudstack 2.4.0

If false, SSL certificates will not be validated.

If not given, the CLOUDSTACK_DANGEROUS_NO_TLS_VERIFY env variable is considered.

This should only be used on personally controlled sites using self-signed certificates.

Choices:

  • false

  • true ← (default)

Notes

Note

  • A detailed guide about cloudstack modules can be found in the CloudStack Cloud Guide.

  • This module supports check mode.

Examples

- name: Create an user in domain 'CUSTOMERS'
  ngine_io.cloudstack.user:
    account: developers
    username: johndoe
    password: S3Cur3
    last_name: Doe
    first_name: John
    email: john.doe@example.com
    domain: CUSTOMERS

- name: Lock an existing user in domain 'CUSTOMERS'
  ngine_io.cloudstack.user:
    username: johndoe
    domain: CUSTOMERS
    state: locked

- name: Disable an existing user in domain 'CUSTOMERS'
  ngine_io.cloudstack.user:
    username: johndoe
    domain: CUSTOMERS
    state: disabled

- name: Enable/unlock an existing user in domain 'CUSTOMERS'
  ngine_io.cloudstack.user:
    username: johndoe
    domain: CUSTOMERS
    state: enabled

- name: Remove an user in domain 'CUSTOMERS'
  ngine_io.cloudstack.user:
    name: customer_xy
    domain: CUSTOMERS
    state: absent

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

account

string

Account name of the user.

Returned: success

Sample: "developers"

account_type

string

Type of the account.

Returned: success

Sample: "user"

created

string

Date the user was created.

Returned: success

Sample: "Doe"

domain

string

Domain the user is related.

Returned: success

Sample: "ROOT"

email

string

Emailof the user.

Returned: success

Sample: "john.doe@example.com"

fist_name

string

First name of the user.

Returned: success

Sample: "John"

id

string

UUID of the user.

Returned: success

Sample: "87b1e0ce-4e01-11e4-bb66-0050569e64b8"

last_name

string

Last name of the user.

Returned: success

Sample: "Doe"

state

string

State of the user.

Returned: success

Sample: "enabled"

timezone

string

Timezone of the user.

Returned: success

Sample: "enabled"

user_api_key

string

API key of the user.

Returned: success

Sample: "JLhcg8VWi8DoFqL2sSLZMXmGojcLnFrOBTipvBHJjySODcV4mCOo29W2duzPv5cALaZnXj5QxDx3xQfaQt3DKg"

user_api_secret

string

API secret of the user.

Returned: success

Sample: "FUELo3LB9fa1UopjTLPdqLv_6OXQMJZv9g9N4B_Ao3HFz8d6IGFCV9MbPFNM8mwz00wbMevja1DoUNDvI8C9-g"

username

string

Username of the user.

Returned: success

Sample: "johndoe"

Authors

  • René Moser (@resmo)