Azure cloud method to get a url to the calculator

.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "^.secrets.baseline$|^.*pgsslrootcert.yml$",
     "lines": null
   },
-  "generated_at": "2020-02-12T18:51:01Z",
+  "generated_at": "2020-02-17T20:49:33Z",
   "plugins_used": [
     {
       "base64_limit": 4.5,
@@ -82,7 +82,7 @@
         "hashed_secret": "afc848c316af1a89d49826c5ae9d00ed769415f3",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 44,
+        "line_number": 48,
         "type": "Secret Keyword"
       }
     ],

README.md

@@ -219,6 +219,10 @@ To generate coverage reports for the Javascript tests:
 
 - `ASSETS_URL`: URL to host which serves static assets (such as a CDN).
 - `AZURE_ACCOUNT_NAME`: The name for the Azure blob storage account
+- `AZURE_CALC_CLIENT_ID`: The client id used to generate a token for the Azure pricing calculator
+- `AZURE_CALC_RESOURCE`: The resource URL used to generate a token for the Azure pricing calculator
+- `AZURE_CALC_SECRET`: The secret key used to generate a token for the Azure pricing calculator
+- `AZURE_CALC_URL`: The redirect URL for the Azure pricing calculator
 - `AZURE_LOGIN_URL`: The URL used to login for an Azure instance.
 - `AZURE_STORAGE_KEY`: A valid secret key for the Azure blob storage account
 - `AZURE_TO_BUCKET_NAME`: The Azure blob storage container name for task order uploads

atst/domain/csp/cloud/azure_cloud_provider.py

@@ -1738,7 +1738,6 @@ class AzureCloudProvider(CloudProviderInterface):
         cost_mgmt_url = (
             f"/providers/Microsoft.CostManagement/query?api-version=2019-11-01"
         )
-
         try:
             result = self.sdk.requests.post(
                 f"{self.sdk.cloud.endpoints.resource_manager}{payload.invoice_section_id}{cost_mgmt_url}",
@@ -1770,3 +1769,17 @@ class AzureCloudProvider(CloudProviderInterface):
                 result.status_code,
                 f"azure application error getting reporting data. {str(exc)}",
             )
+
+    def _get_calculator_creds(self):
+        authority = f"{self.sdk.cloud.endpoints.active_directory}/{self.tenant_id}"
+        context = self.sdk.adal.AuthenticationContext(authority=authority)
+        response = context.acquire_token_with_client_credentials(
+            self.config.get("AZURE_CALC_RESOURCE"),
+            self.config.get("AZURE_CALC_CLIENT_ID"),
+            self.config.get("AZURE_CALC_SECRET"),
+        )
+        return response.get("accessToken")
+
+    def get_calculator_url(self):
+        calc_access_token = self._get_calculator_creds()
+        return f"{self.config.get('AZURE_CALC_URL')}?access_token={calc_access_token}"

config/base.ini

@@ -3,6 +3,10 @@ ASSETS_URL
 AZURE_AADP_QTY=5
 AZURE_ACCOUNT_NAME
 AZURE_CLIENT_ID
+AZURE_CALC_CLIENT_ID
+AZURE_CALC_RESOURCE="http://azurecom.onmicrosoft.com/acom-prod/"
+AZURE_CALC_SECRET
+AZURE_CALC_URL="https://azure.microsoft.com/en-us/pricing/calculator/"
 AZURE_GRAPH_RESOURCE="https://graph.microsoft.com/"
 AZURE_LOGIN_URL="https://portal.azure.com/"
 AZURE_POLICY_LOCATION=policies

tests/domain/cloud/test_azure_csp.py

@@ -1523,3 +1523,23 @@ def test_update_tenant_creds(mock_azure: AzureCloudProvider):
         assert updated_secret == KeyVaultCredentials(
             **{**existing_secrets, **MOCK_CREDS}
         )
+
+
+def test_get_calculator_creds(mock_azure: AzureCloudProvider):
+    mock_azure.sdk.adal.AuthenticationContext.return_value.acquire_token_with_client_credentials.return_value = {
+        "accessToken": "TOKEN"
+    }
+    assert mock_azure._get_calculator_creds() == "TOKEN"
+
+
+def test_get_calculator_url(mock_azure: AzureCloudProvider):
+    with patch.object(
+        AzureCloudProvider,
+        "_get_calculator_creds",
+        wraps=mock_azure._get_calculator_creds,
+    ) as _get_calculator_creds:
+        _get_calculator_creds.return_value = "TOKEN"
+        assert (
+            mock_azure.get_calculator_url()
+            == f"{mock_azure.config.get('AZURE_CALC_URL')}?access_token=TOKEN"
+        )

tests/mock_azure.py

@@ -4,6 +4,9 @@ from unittest.mock import Mock
 from atst.domain.csp.cloud import AzureCloudProvider
 
 AZURE_CONFIG = {
+    "AZURE_CALC_CLIENT_ID": "MOCK",
+    "AZURE_CALC_SECRET": "MOCK",  # pragma: allowlist secret
+    "AZURE_CALC_RESOURCE": "http://calc",
     "AZURE_CLIENT_ID": "MOCK",
     "AZURE_SECRET_KEY": "MOCK",
     "AZURE_TENANT_ID": "MOCK",