]> review.fuel-infra Code Review - openstack-build/heat-build.git/commit
Add auth middleware for custom cloud backend
authorTomas Sedovic <tomas@sedovic.cz>
Wed, 2 Jan 2013 16:34:23 +0000 (17:34 +0100)
committerTomas Sedovic <tomas@sedovic.cz>
Mon, 14 Jan 2013 09:21:59 +0000 (10:21 +0100)
commit41a1c8d05f9c8a801a41002f4d8bb2b8670b12f7
treecf6b1983af8dde8b518c03d6c235d0eacf231941
parent714c3f9e7c2e1945e1b3a68a032d8e62b5f35cc4
Add auth middleware for custom cloud backend

Custom backends will want to provide their own authentication mechanisms
instead of using the Keystone token or EC2-like systems we have in
place.

This adds a new middleware and paste pipeline for the custom backend
that will skip the normal authentication and queries the backend's
`authenticated(context)` method instead.

Since the backend is connected to the Engine whereas the auth middleware
is run in the API service (which may sit on a separate box and have no
access to the engine config or the custom backend itself), we add a new
RPC call that lets API verify the passed credentials.

Change-Id: I2fc4a19564b1e410adb79bd9266f6b6da07dd6c9
Signed-off-by: Tomas Sedovic <tomas@sedovic.cz>
etc/heat/heat-api-paste.ini
etc/heat/heat-api.conf
heat/common/custom_backend_auth.py [new file with mode: 0644]
heat/engine/service.py
heat/rpc/client.py