[Feature request] enable support for keystone middleware plugin in charm
Bug #1856555 reported by
Boggy
This bug affects 8 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Charm Helpers |
In Progress
|
Wishlist
|
Arif Ali | ||
Gnocchi Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack Ceilometer Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack Cinder Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack Glance Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack Heat Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack Ironic API Charm |
New
|
Undecided
|
Unassigned | ||
OpenStack Keystone Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack Neutron API Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack Nova Cloud Controller Charm |
In Progress
|
Wishlist
|
Arif Ali | ||
OpenStack Swift Proxy Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack Trove Charm |
Triaged
|
Wishlist
|
Unassigned | ||
OpenStack panko charm |
Triaged
|
Wishlist
|
Unassigned |
Bug Description
One of our clients would like us to enable support for keystone middleware in charm.
Changed in charm-keystone: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-helpers: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-gnocchi: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-trove: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-ceilometer: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-cinder: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-glance: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-heat: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-neutron-api: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-nova-cloud-controller: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-panko: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-swift-proxy: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
Changed in charm-helpers: | |
assignee: | nobody → Arif Ali (arif-ali) |
status: | Triaged → In Progress |
Changed in charm-nova-cloud-controller: | |
assignee: | nobody → Arif Ali (arif-ali) |
status: | Triaged → In Progress |
To post a comment you must log in.
keystonemiddleware is automatically already installed and what the customer wants is the auditing side of what keystonemiddleware has. Primarily [1] describes what is required for the autid middleware to be configured. It could be as part of the code python- keystonemiddlew are or python3- keystonemiddlew are would need to be packaged up
In the attempt to get this started, and doing stuff on this, I can point to 2 repos that I worked on [2] is the charm, and [3] is the charmhelpers update. This is my rough idea on how we can go about it.
The key things coming out this piece of work is that we need 3 files changing or adding in each of the major project charms
1. /etc/<project> /<project> .conf /api-paste. ini /api_audit_ map.conf
2. /etc/<project>
3. /etc/<project>
The sense of these updates can be seen in both [2] and [3]
The api_audit_map.conf file can be taken from the repo in [4], I have not checked to see if they are identical for each of the projects, but this afaik is required for the audit middleware to work
The initial PR created for the charmhelpers also suggested that maybe the audit_middleware context may not be ideal in the IdentityService Context, and maybe a new AuditMiddleware Context may be required
There may be other variables that the doc [1] specifies that may be required in api-paste.ini, that may be required for extra functionality
[1] https:/ /docs.openstack .org/keystonemi ddleware/ latest/ audit.html /github. com/arif- ali/charm- nova-cloud- controller/ commit/ 3743f00384de56e fe8b0a4ee2ab2e4 0de68b5e7f# diff-bceb54a0fa 3aac4f53f131205 411c18f /github. com/arif- ali/charm- helpers/ commit/ 258cf87c83cca2f af601dd99285cd2 26e2e67b48 /github. com/openstack/ pycadf/ tree/master/ etc/pycadf
[2] https:/
[3] https:/
[4] https:/