Credential contents api call

internal/jimm/jimm.go

@@ -471,6 +471,14 @@ type API interface {
 	// AllModels allows controller administrators to get the list of all the
 	// models in the controller.
 	AllModels(ctx context.Context) (jujuparams.UserModelList, error)
+
+	// CredentialContents returns the specified cloud credentials,
+	// including the secrets if requested.
+	// If no specific credential name/cloud was passed in, all credentials for this user
+	// are returned.
+	// Only credential owner can see its contents as well as what models use it.
+	// Controller admin has no special superpowers here and is treated the same as all other users.
+	CredentialContents(ctx context.Context, args jujuparams.CloudCredentialArgs) (jujuparams.CredentialContentResults, error)
 }
 
 // forEachController runs a given function on multiple controllers

internal/jimmtest/api.go

@@ -169,6 +169,14 @@ type API struct {
 	ListStorageDetails_                func(ctx context.Context) ([]jujuparams.StorageDetails, error)
 	ListModelSummaries_                func(ctx context.Context, args *jujuparams.ModelSummariesRequest, out *jujuparams.ModelSummaryResults) error
 	AllModels_                         func(ctx context.Context) (jujuparams.UserModelList, error)
+	CredentialContents_                func(ctx context.Context, args jujuparams.CloudCredentialArgs) (jujuparams.CredentialContentResults, error)
+}
+
+func (a *API) CredentialContents(ctx context.Context, args jujuparams.CloudCredentialArgs) (jujuparams.CredentialContentResults, error) {
+	if a.AllModels_ == nil {
+		return jujuparams.CredentialContentResults{}, errors.E(errors.CodeNotImplemented)
+	}
+	return a.CredentialContents_(ctx, args)
 }
 
 func (a *API) AllModels(ctx context.Context) (jujuparams.UserModelList, error) {

internal/jujuclient/cloud.go

@@ -309,3 +309,27 @@ func (c Connection) UpdateCloud(ctx context.Context, tag names.CloudTag, cloud j
 	}
 	return nil
 }
+
+// CredentialContents returns the specified cloud credentials,
+// including the secrets if requested.
+// If no specific credential name/cloud was passed in, all credentials for this user
+// are returned.
+// Only credential owner can see its contents as well as what models use it.
+// Controller admin has no special superpowers here and is treated the same as all other users.
+func (c Connection) CredentialContents(ctx context.Context, args jujuparams.CloudCredentialArgs) (jujuparams.CredentialContentResults, error) {
+	const op = errors.Op("jujuclient.CredentialContents")
+
+	resp := jujuparams.CredentialContentResults{
+		Results: []jujuparams.CredentialContentResult{},
+	}
+
+	err := c.Call(ctx, "Cloud", 7, "", "CredentialContents", &args, &resp)
+	if err != nil {
+		return resp, errors.E(op, jujuerrors.Cause(err))
+	}
+	if resp.Results[0].Error != nil {
+		return resp, errors.E(op, resp.Results[0].Error)
+	}
+	return resp, nil
+
+}

internal/jujuclient/cloud_test.go

@@ -464,3 +464,11 @@ func (s *cloudSuite) TestUpdateCloud(c *gc.C) {
 	c.Assert(err, gc.Equals, nil)
 	c.Check(cloud2, jc.DeepEquals, cloud)
 }
+
+func (s *cloudSuite) TestCredentialContents(c *gc.C) {
+	ctx := context.Background()
+	args := jujuparams.CloudCredentialArgs{}
+	res, err := s.API.CredentialContents(ctx, args)
+	c.Assert(err, gc.Equals, nil)
+	c.Assert(res.Results, gc.HasLen, 1)
+}