Add "create_cdns_tld" command to nomulus

Automated g4 rollback of changelist 171011304.  Please see history below, the original CL was []  Rolling back and re-mailing
so I can get a readability review on it.

*** Reason for rollback ***

Re-opening for readability review.

*** Original change description ***

Automated g4 rollback of changelist 170906329.

*** Reason for rollback ***

Forgot to send this for readability review.

*** Original change description ***

Add "create_cdns_tld" command to nomulus

Add a command to allow us to create the managed zone for a new TLD in cloud
dns.

Note: this implementation is problematic, it's currently doing its own thing
as far as credentials and http transport, making it unusable with the []
channel and the credentials generated by login.  Unfortunately, fixing the plumbing to make it work right is difficult, and we have an immediate need for
this functionality.

***

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=171161371

java/google/registry/tools/BUILD

@@ -69,6 +69,7 @@ java_library(
         "@com_beust_jcommander",
         "@com_google_api_client",
         "@com_google_apis_google_api_services_bigquery",
+        "@com_google_apis_google_api_services_dns",
         "@com_google_appengine_api_1_0_sdk",
         "@com_google_appengine_remote_api",
         "@com_google_appengine_remote_api//:link",

java/google/registry/tools/CreateCdnsTld.java

@@ -0,0 +1,104 @@
+// Copyright 2017 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.tools;
+
+import com.beust.jcommander.Parameter;
+import com.beust.jcommander.Parameters;
+import com.google.api.client.googleapis.auth.oauth2.GoogleCredential;
+import com.google.api.client.googleapis.javanet.GoogleNetHttpTransport;
+import com.google.api.client.http.HttpTransport;
+import com.google.api.client.json.JsonFactory;
+import com.google.api.client.json.jackson2.JacksonFactory;
+import com.google.api.services.dns.Dns;
+import com.google.api.services.dns.model.ManagedZone;
+import com.google.common.annotations.VisibleForTesting;
+import google.registry.config.RegistryConfig.Config;
+import java.io.IOException;
+import java.security.GeneralSecurityException;
+import java.util.Arrays;
+import javax.annotation.Nullable;
+import javax.inject.Inject;
+
+@Parameters(separators = " =", commandDescription = "Create a Managed Zone for a TLD in Cloud DNS.")
+class CreateCdnsTld implements Command {
+
+  @Parameter(names = "--description", description = "Description of the new TLD.")
+  String description;
+
+  @Parameter(
+    names = "--dns_name",
+    description = "DNS name of the new tld, including trailing period, e.g.: search.",
+    required = true
+  )
+  String dnsName;
+
+  @Nullable
+  @Parameter(
+    names = "--name",
+    description = "Managed zone name.  If not specified, dns_name is used."
+  )
+  String name;
+
+  @Inject
+  @Config("projectId")
+  String projectId;
+
+  @Override
+  public void run() throws IOException, GeneralSecurityException {
+    ManagedZone requestBody = new ManagedZone();
+    requestBody.setDescription(description);
+    // TODO(b/67413698): allow parameterizing the nameserver set once it's safe to do so.
+    requestBody.setNameServerSet("cloud-dns-registry-test");
+    requestBody.setDnsName(dnsName);
+    requestBody.setName((name != null) ? name : dnsName);
+
+    Dns dnsService = createDnsService();
+    Dns.ManagedZones.Create request = dnsService.managedZones().create(projectId, requestBody);
+
+    ManagedZone response = request.execute();
+
+    System.err.println("Created managed zone: " + response);
+  }
+
+  @VisibleForTesting
+  Dns createDnsService() throws IOException, GeneralSecurityException {
+    // TODO(b/67367533): We should be obtaining the Dns instance from CloudDnsWriter module.  But
+    // to do this cleanly we need to refactor everything down to the credential object.  Having
+    // done that, this method will go away and this class will become final.
+    HttpTransport httpTransport = GoogleNetHttpTransport.newTrustedTransport();
+    JsonFactory jsonFactory = JacksonFactory.getDefaultInstance();
+
+    GoogleCredential credential = GoogleCredential.getApplicationDefault();
+    if (credential.createScopedRequired()) {
+      credential =
+          credential.createScoped(
+              Arrays.asList(
+                  "https://www.googleapis.com/auth/cloud-platform",
+                  "https://www.googleapis.com/auth/cloud-platform.read-only",
+                  "https://www.googleapis.com/auth/ndev.clouddns.readonly",
+                  "https://www.googleapis.com/auth/ndev.clouddns.readwrite"));
+    }
+
+    Dns.Builder builder =
+        new Dns.Builder(httpTransport, jsonFactory, credential).setApplicationName(projectId);
+    if (RegistryToolEnvironment.get() != RegistryToolEnvironment.PRODUCTION) {
+      builder
+          .setRootUrl("https://staging-www.sandbox.googleapis.com")
+          .setServicePath("dns/v2beta1_staging/projects/");
+    }
+
+    return builder.build();
+  }
+}

java/google/registry/tools/RegistryTool.java

@@ -36,6 +36,7 @@ public final class RegistryTool {
           .put("convert_idn", ConvertIdnCommand.class)
           .put("create_anchor_tenant", CreateAnchorTenantCommand.class)
           .put("create_auction_credits", CreateAuctionCreditsCommand.class)
+          .put("create_cdns_tld", CreateCdnsTld.class)
           .put("create_contact", CreateContactCommand.class)
           .put("create_credit", CreateCreditCommand.class)
           .put("create_credit_balance", CreateCreditBalanceCommand.class)

java/google/registry/tools/RegistryToolComponent.java

@@ -77,6 +77,7 @@ import javax.inject.Singleton;
 )
 interface RegistryToolComponent {
   void inject(CreateAnchorTenantCommand command);
+  void inject(CreateCdnsTld command);
   void inject(CreateContactCommand command);
   void inject(CreateDomainCommand command);
   void inject(CreateLrpTokensCommand command);

javatests/google/registry/tools/BUILD

@@ -39,6 +39,7 @@ java_library(
         "//third_party/java/objectify:objectify-v4_1",
         "@com_beust_jcommander",
         "@com_google_api_client",
+        "@com_google_apis_google_api_services_dns",
         "@com_google_appengine_api_1_0_sdk//:testonly",
         "@com_google_appengine_remote_api//:link",
         "@com_google_auto_value",

javatests/google/registry/tools/CreateCdnsTldTest.java

@@ -0,0 +1,77 @@
+// Copyright 2017 The Nomulus Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package google.registry.tools;
+
+import static com.google.common.truth.Truth.assertThat;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import com.google.api.services.dns.Dns;
+import com.google.api.services.dns.model.ManagedZone;
+import java.io.IOException;
+import java.security.GeneralSecurityException;
+import org.junit.Before;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.Captor;
+import org.mockito.Mock;
+import org.mockito.runners.MockitoJUnitRunner;
+
+@RunWith(MockitoJUnitRunner.class)
+public class CreateCdnsTldTest extends CommandTestCase<CreateCdnsTld> {
+
+  @Mock Dns dnsService;
+  @Mock Dns.ManagedZones managedZones;
+  @Mock Dns.ManagedZones.Create request;
+  @Captor ArgumentCaptor<String> projectId;
+  @Captor ArgumentCaptor<ManagedZone> requestBody;
+
+  @Before
+  public void setUp() throws Exception {
+    when(dnsService.managedZones()).thenReturn(managedZones);
+    when(managedZones.create(projectId.capture(), requestBody.capture())).thenReturn(request);
+    command = new CreateCdnsTldForTest();
+    command.projectId = "test-project";
+  }
+
+  /** Fake the command class so we can override createDnsService() */
+  class CreateCdnsTldForTest extends CreateCdnsTld {
+    @Override
+    Dns createDnsService() throws IOException, GeneralSecurityException {
+      return dnsService;
+    }
+  }
+
+  @Test
+  public void testBasicFunctionality() throws Exception {
+    runCommand("--dns_name=tld.", "--name=tld", "--description=test run");
+    verify(request).execute();
+    assertThat(projectId.getValue()).isEqualTo("test-project");
+    ManagedZone zone = requestBody.getValue();
+    assertThat(zone.getNameServerSet()).isEqualTo("cloud-dns-registry-test");
+    assertThat(zone.getDnsName()).isEqualTo("tld.");
+    assertThat(zone.getName()).isEqualTo("tld");
+  }
+
+  @Test
+  public void testNameDefault() throws Exception {
+    runCommand("--dns_name=tld.", "--description=test run");
+    ManagedZone zone = requestBody.getValue();
+    assertThat(zone.getNameServerSet()).isEqualTo("cloud-dns-registry-test");
+    assertThat(zone.getDnsName()).isEqualTo("tld.");
+    assertThat(zone.getName()).isEqualTo("tld.");
+  }
+}