Add cloud creds support for terraform runner

app/models/manageiq/providers/embedded_terraform/automation_manager/amazon_credential.rb

@@ -0,0 +1,68 @@
+class ManageIQ::Providers::EmbeddedTerraform::AutomationManager::AmazonCredential < ManageIQ::Providers::EmbeddedTerraform::AutomationManager::CloudCredential
+  COMMON_ATTRIBUTES = [
+    {
+      :component  => 'text-field',
+      :label      => N_('Access Key'),
+      :helperText => N_('AWS Access Key for this credential'),
+      :name       => 'userid',
+      :id         => 'userid',
+      :isRequired => true,
+      :validate   => [{:type => 'required'}],
+    },
+    {
+      :component  => 'password-field',
+      :label      => N_('Secret Key'),
+      :helperText => N_('AWS Secret Key for this credential'),
+      :name       => 'password',
+      :id         => 'password',
+      :type       => 'password',
+      :isRequired => true,
+      :validate   => [{:type => 'required'}],
+    },
+  ].freeze
+
+  EXTRA_ATTRIBUTES = [
+    {
+      :component  => 'password-field',
+      :label      => N_('STS Token'),
+      :helperText => N_('Security Token Service(STS) Token for this credential'),
+      :name       => 'security_token',
+      :id         => 'security_token',
+      :type       => 'password',
+      :maxLength  => 1024
+    },
+    {
+      :component  => 'text-field',
+      :label      => N_('AWS Region'),
+      :helperText => N_('AWS Region where the provider will operate. The Region must be set.'),
+      :name       => 'region',
+      :id         => 'region',
+      :isRequired => true,
+      :maxLength  => 50,
+    },
+  ].freeze
+
+  API_ATTRIBUTES = (COMMON_ATTRIBUTES + EXTRA_ATTRIBUTES).freeze
+
+  API_OPTIONS = {
+    :type       => 'cloud',
+    :label      => N_('Amazon'),
+    :attributes => API_ATTRIBUTES
+  }.freeze
+
+  alias security_token auth_key
+
+  def self.display_name(number = 1)
+    n_('Credential (Amazon)', 'Credentials (Amazon)', number)
+  end
+
+  def self.params_to_attributes(params)
+    attrs = super.dup
+    attrs[:auth_key] = attrs.delete(:security_token) if attrs.key?(:security_token)
+    if %i[region].any? { |opt| attrs.key?(opt) }
+      attrs[:options] ||= {}
+      attrs[:options][:region] = attrs.delete(:region) if attrs.key?(:region)
+    end
+    attrs
+  end
+end

app/models/manageiq/providers/embedded_terraform/automation_manager/azure_credential.rb

@@ -0,0 +1,80 @@
+class ManageIQ::Providers::EmbeddedTerraform::AutomationManager::AzureCredential < ManageIQ::Providers::EmbeddedTerraform::AutomationManager::CloudCredential
+  COMMON_ATTRIBUTES = [].freeze
+
+  EXTRA_ATTRIBUTES = [
+    {
+      :component  => 'text-field',
+      :label      => N_('Subscription ID'),
+      :helperText => N_('The Subscription ID for the Microsoft Azure account'),
+      :name       => 'subscription',
+      :id         => 'subscription',
+      :isRequired => true,
+      :validate   => [{:type => 'required'}],
+    },
+    {
+      :component  => 'text-field',
+      :label      => N_('Tenant ID'),
+      :helperText => N_('The Tenant ID for the Microsoft Azure account'),
+      :name       => 'provider_tenant',
+      :id         => 'provider_tenant',
+      :maxLength  => 1024,
+    },
+    {
+      :component  => 'password-field',
+      :label      => N_('Client Secret'),
+      :helperText => N_('The Client Secret for the Microsoft Azure account'),
+      :name       => 'secret',
+      :id         => 'secret',
+      :type       => 'password',
+      :maxLength  => 1024,
+    },
+    {
+      :component  => 'text-field',
+      :label      => N_('Client ID'),
+      :helperText => N_('The Client ID for the Microsoft Azure account'),
+      :name       => 'client',
+      :id         => 'client',
+      :maxLength  => 128,
+    },
+  ].freeze
+
+  API_ATTRIBUTES = (COMMON_ATTRIBUTES + EXTRA_ATTRIBUTES).freeze
+
+  API_OPTIONS = {
+    :type       => 'cloud',
+    :label      => N_('Azure'),
+    :attributes => API_ATTRIBUTES
+  }.freeze
+
+  alias secret auth_key
+
+  def self.display_name(number = 1)
+    n_('Credential (Microsoft Azure)', 'Credentials (Microsoft Azure)', number)
+  end
+
+  def self.params_to_attributes(params)
+    attrs            = super.dup
+    attrs[:auth_key] = attrs.delete(:secret) if attrs.key?(:secret)
+
+    if %i[client provider_tenant subscription].any? { |opt| attrs.key?(opt) }
+      attrs[:options] ||= {}
+      attrs[:options][:client]          = attrs.delete(:client)          if attrs.key?(:client)
+      attrs[:options][:provider_tenant] = attrs.delete(:provider_tenant) if attrs.key?(:provider_tenant)
+      attrs[:options][:subscription]    = attrs.delete(:subscription)    if attrs.key?(:subscription)
+    end
+
+    attrs
+  end
+
+  def client
+    options && options[:client]
+  end
+
+  def provider_tenant
+    options && options[:provider_tenant]
+  end
+
+  def subscription
+    options && options[:subscription]
+  end
+end

app/models/manageiq/providers/embedded_terraform/automation_manager/cloud_credential.rb

@@ -0,0 +1,2 @@
+class ManageIQ::Providers::EmbeddedTerraform::AutomationManager::CloudCredential < ManageIQ::Providers::EmbeddedTerraform::AutomationManager::Credential
+end

app/models/manageiq/providers/embedded_terraform/automation_manager/credential.rb

@@ -2,4 +2,10 @@ class ManageIQ::Providers::EmbeddedTerraform::AutomationManager::Credential < Ma
   def self.credential_type
     "embedded_terraform_credential_types"
   end
+
+  FRIENDLY_NAME = "Embedded Terraform Credential".freeze
+
+  private_class_method def self.queue_role
+    "embedded_terraform"
+  end
 end

app/models/manageiq/providers/embedded_terraform/automation_manager/google_credential.rb

@@ -0,0 +1,71 @@
+class ManageIQ::Providers::EmbeddedTerraform::AutomationManager::GoogleCredential < ManageIQ::Providers::EmbeddedTerraform::AutomationManager::CloudCredential
+  COMMON_ATTRIBUTES = [
+    {
+      :component  => 'text-field',
+      :label      => N_('Service Account Email Address'),
+      :helperText => N_('The email address assigned to the Google Compute Engine service account'),
+      :name       => 'userid',
+      :id         => 'userid',
+      :type       => 'email',
+      :isRequired => true,
+      :validate   => [{:type => 'required'}],
+    },
+  ].freeze
+
+  EXTRA_ATTRIBUTES = [
+    {
+      :component      => 'password-field',
+      :label          => N_('RSA Private Key'),
+      :helperText     => N_('Contents of the PEM file associated with the service account email'),
+      :componentClass => 'textarea',
+      :name           => 'ssh_key_data',
+      :id             => 'ssh_key_data',
+      :type           => 'password',
+      :isRequired     => true,
+      :validate       => [{:type => 'required'}],
+    },
+    {
+      :component  => 'text-field',
+      :label      => N_('Project'),
+      :helperText => N_('The GCE assigned identification. It is constructed as two words followed by a three digit number, such as: squeamish-ossifrage-123'),
+      :name       => 'project',
+      :id         => 'project',
+      :maxLength  => 100,
+    },
+    {
+      :component  => 'text-field',
+      :label      => N_('Google Cloud Region'),
+      :helperText => N_('The default region for the resources. If another region is specified on the resource, it will take precedence.'),
+      :name       => 'region',
+      :id         => 'region',
+      :maxLength  => 50,
+    },
+  ].freeze
+
+  API_ATTRIBUTES = (COMMON_ATTRIBUTES + EXTRA_ATTRIBUTES).freeze
+
+  API_OPTIONS = {
+    :type       => 'cloud',
+    :label      => N_('Google Compute Engine'),
+    :attributes => API_ATTRIBUTES
+  }.freeze
+
+  alias ssh_key_data auth_key
+
+  def self.display_name(number = 1)
+    n_('Credential (Google)', 'Credentials (Google)', number)
+  end
+
+  def self.params_to_attributes(params)
+    attrs = super.dup
+
+    attrs[:auth_key] = attrs.delete(:ssh_key_data) if attrs.key?(:ssh_key_data)
+    attrs[:options]  = {:project => attrs.delete(:project)} if attrs[:project]
+    attrs[:options][:region] = attrs.delete(:region) if attrs.key?(:region)
+    attrs
+  end
+
+  def project
+    options && options[:project]
+  end
+end

app/models/manageiq/providers/embedded_terraform/automation_manager/ibm_cloud_credential.rb

@@ -0,0 +1,58 @@
+class ManageIQ::Providers::EmbeddedTerraform::AutomationManager::IbmCloudCredential < ManageIQ::Providers::EmbeddedTerraform::AutomationManager::CloudCredential
+  COMMON_ATTRIBUTES = [
+    {
+      :component  => 'password-field',
+      :label      => N_('IBM Cloud API Key'),
+      :helperText => N_('The API key for IBM Cloud. A value for this field is required if classic user name and classic API key are not provided. A valid connection must have value for IBM Cloud API Key or, IBM Cloud Classic Infrastructure User Name and IBM Cloud Classic Infrastructure API Key.'),
+      :name       => 'auth_key',
+      :id         => 'auth_key',
+      :type       => 'password',
+      :isRequired => true,
+      :validate   => [{:type => 'required'}],
+    },
+  ].freeze
+
+  EXTRA_ATTRIBUTES = [
+    {
+      :component  => 'text-field',
+      :label      => N_('IBM Cloud Classic Infrastructure User Name'),
+      :helperText => N_('The User Name for IBM Cloud Classic Infrastructure. A value for this field is required when using classic IBM Cloud resources. A valid connection must have value for IBM Cloud API Key or, IBM Cloud Classic Infrastructure User Name and IBM Cloud Classic Infrastructure API Key.'),
+      :name       => 'classic_user',
+      :id         => 'classic_user',
+      :maxLength  => 100,
+    },
+    {
+      :component  => 'password-field',
+      :label      => N_('IBM Cloud Classic Infrastructure API Key'),
+      :helperText => N_('The API key for IBM Cloud Classic Infrastructure A value for this field is required when using classic IBM Cloud resources. A valid connection must have value for IBM Cloud API Key or, IBM Cloud Classic Infrastructure User Name and IBM Cloud Classic Infrastructure API Key.'),
+      :name       => 'classic_key',
+      :id         => 'classic_key',
+      :type       => 'password',
+    },
+  ].freeze
+
+  API_ATTRIBUTES = (COMMON_ATTRIBUTES + EXTRA_ATTRIBUTES).freeze
+
+  API_OPTIONS = {
+    :type       => 'cloud',
+    :label      => N_('IBM Cloud'),
+    :attributes => API_ATTRIBUTES
+  }.freeze
+
+  def self.display_name(number = 1)
+    n_('Credential (IBM Cloud)', 'Credentials (IBM Cloud)', number)
+  end
+
+  def self.params_to_attributes(params)
+    attrs = super.dup
+
+    attrs[:auth_key] = attrs.delete(:auth_key) if attrs.key?(:auth_key)
+
+    if %i[classic_user classic_key].any? { |opt| attrs.key?(opt) }
+      attrs[:userid]   = attrs.delete(:classic_user) if attrs.key?(:classic_user)
+      attrs[:password] = attrs.delete(:classic_key)  if attrs.key?(:classic_key)
+    end
+
+    attrs
+  end
+end