summaryrefslogtreecommitdiff
path: root/openstackclient/identity
Commit message (Collapse)AuthorAgeFilesLines
* Followup for ec2 credentials command fixDean Troyer2014-12-051-0/+12
| | | | | | | | Add functional tests for 'ec2 credentials' commands. Also fix tenant_id in output for create and show. Change-Id: I6ba3249b67408571624709e17f8aa2ac6d80237d
* Fix ec2 credentials commands for new authDean Troyer2014-12-051-5/+5
| | | | | | | | These commands were not updated for the new authentication model. Closes-Bug: 1399757 Change-Id: I5d4beb9d1fa6914fef5e4c7b459cdd967e614b24
* Safely pop project parent idSteve Martinelli2014-12-042-3/+9
| | | | | | | | | Since we don't support multitenancy yet, we should just pop the parent id of a project. When keystoneclient supports mulittenancy we should bring everything in at once (CRUD), and these changes should be removed. Change-Id: I82c7c825502124a24ccdbadf09ecb2748887ca5d
* Add the ability to list projects based on a userSteve Martinelli2014-12-011-2/+22
| | | | | | | Essentially performing GET /users/{user_id}/projects Change-Id: Iae6ddfc86a856fa24fbe293ec4af52ea671390f8 Closes-Bug: #1394793
* Add support for domains when deleting identity v3 resourcesSteve Martinelli2014-12-013-9/+41
| | | | | | | | | | Currently, only deleting via IDs is possible for groups, projects and users. We should have an optional --domain argument that allows for a name to be specified for the resource. (Since these are all namespaced by domains). Change-Id: I18ace3db85a3969f0b97678d432d6f8368baa9cd
* Command object docs: project, role, userDean Troyer2014-12-016-139/+150
| | | | | | | | | project role user user role Change-Id: I445e09a3ffb69114912ae562a9285963a636bfd1
* Merge "Begin copying wiki command list here"Jenkins2014-12-011-1/+1
|\
| * Begin copying wiki command list hereDean Troyer2014-11-191-1/+1
| | | | | | | | | | | | | | | | | | | | * Sort by command objects * Drop the comparison to the project CLIs * Minor updates to command help to match docs Initially include the cross-API commands to establish the structure and format. Change-Id: I77a7b3c89e088b66aa62941e29ce0b65b532285b
* | Merge "Liberalize version matching a bit"Jenkins2014-11-211-4/+6
|\ \ | |/ |/|
| * Liberalize version matching a bitDean Troyer2014-11-161-4/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For class-loading purposes we can just use the major version, so accept that. Only Identity and Compute were affected; Compute is included just to be pedantically complete. For command groups we also just use the major version so fix Compute and the version option handling. Change the internal default for Identity to a simple '2' so it is also consistent with the rest of the world. Then comes microversioning... Closes-Bug: #1292638 Change-Id: Ibaf823b31caa288a83de38d2c258860b128b87d8
* | Merge "add keystone v3 region object"Jenkins2014-11-191-0/+205
|\ \
| * | add keystone v3 region objectwanghong2014-11-181-0/+205
| | | | | | | | | | | | | | | | | | | | | Co-Authored-By: Steve Martinelli <stevemar@ca.ibm.com> Change-Id: Ia6f607630dbf507681733c3ab3b9b7c55de30f49 Closes-Bug: #1387932
* | | Merge "Add --or-show support for v3 identity resources"Jenkins2014-11-185-27/+106
|\ \ \
| * | | Add --or-show support for v3 identity resourcesSteve Martinelli2014-11-185-27/+106
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add --or-show for the following: * v3 roles * v3 projects * v3 domains * v3 users * v3 groups Closes-Bug: #1390389 Change-Id: Id4ef043e5fda6be49a515eb3fe138c813c393ec9
* | | | Merge "Add additional support for --or-show"Jenkins2014-11-182-7/+38
|\ \ \ \ | |/ / / | | | / | |_|/ |/| |
| * | Add additional support for --or-showSteve Martinelli2014-11-142-7/+38
| | | | | | | | | | | | | | | | | | | | | | | | Add --or-show for the following: * v2 roles * v2 projects Change-Id: Ibbae19cda668575b9527fbd259f1298c48b8265b
* | | Remove links from oauth consumersSteve Martinelli2014-11-131-6/+4
| | | | | | | | | | | | | | | | | | | | | This should be the last of the v3 identity objects that return a links section upon create or show. Change-Id: I45a3b43c303bfed73950095bec8860cbea7a559c
* | | Remove links from federation related commands in identity v3Steve Martinelli2014-11-133-12/+11
|/ / | | | | | | | | | | | | | | | | | | | | We should remove the 'links' portion from the returned object for the following commands: * create/show federation protocol * create/show mapping * create/show identity provider Change-Id: I55654cce1f89de8e532f9acd8092257be33efd85
* | Add --or-show option to user createDean Troyer2014-11-071-7/+23
|/ | | | | | | | | | | | | | | | The --or-show option is added to create commands for the common case of needing to ensure an object exists and getting its properties if it does or creating a new one if it does not exist. Note that if the object exists, any additional options that would set values in a newly created object are ignored if the object exists. FakeResource needs the __name__ attribute to fall through utils.find_resource. Prove the concept on v2 user create then propogate once we're happy with it... Change-Id: I6268566514840c284e6a1d44b409a81d6699ef99
* Unscoped federated user-specific commandsMatthieu Huin2014-10-301-0/+79
| | | | | | | | | | | | A federated user can authenticate with the v3unscopedsaml plugin and list the domains and projects she is allowed to scope to. This patch introduces the new commands 'federation domain list' and 'federation project list'. Note that for these commands -and plugin- to be available, the lxml library must be installed. Change-Id: I2707b624befcfb0a01b40a094e12fd68a3ee7773 Co-Authored-By: Florent Flament <florent.flament-ext@cloudwatt.com>
* Fix token issue after auth changeupDean Troyer2014-10-201-3/+1
| | | | | | | | | | | IssueToken.take_action() was missed in updating the structure of the ClientManager. Also, TOKEN_WITH_TENANT_ID in v3 is just wrong... Closes-Bug: #1383396 Change-Id: If2dd82a26af1d743ee9df73e0c1aebce497bf22e
* Remove ClientManager._service_catalogDean Troyer2014-10-182-21/+6
| | | | | | | | | | Anything that needs a service catalog can get it directly from auth_ref.service_catalog, no need to carry the extra attribute. ClientManager.get_endpoint_for_service_type() reamins the proper method to get an endpoint for clients that still need one directly. Change-Id: I809091c9c71d08f29606d7fd8b500898ff2cb8ae
* Merge "Remove 'links' section from several v3 Identity objects"Jenkins2014-10-139-20/+23
|\
| * Remove 'links' section from several v3 Identity objectsSteve Martinelli2014-10-119-20/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The links field in the returned objects from the v3 Identity API aren't really useful, so let's remove them. Managed to remove most of them from the core API. I'll likely remove the extension/contribution (oauth/federation) related ones in another patch. Also in this patch the code for setting services and projects was changed. Though not incorrect, it was not needed to copy the entire returned object, we should just need to pass in the fields we want to update. Change-Id: I164ca9ad8b28fa10b291e9115ef40753e387c547
* | Merge "Mark identity v2 resources for translation"Jenkins2014-10-127-60/+64
|\ \
| * | Mark identity v2 resources for translationSteve Martinelli2014-10-097-60/+64
| | | | | | | | | | | | | | | | | | mark v2 catalog, ec2, endpoint, project, role, service and token Change-Id: I14a5852bfee4ca9e25130d001fdadd7778ad0996
* | | Merge "Add translation markers for user v2 actions"Jenkins2014-10-121-20/+21
|\ \ \
| * | | Add translation markers for user v2 actionsSteve Martinelli2014-10-091-20/+21
| |/ / | | | | | | | | | | | | | | | implements bp use_i18n Change-Id: I86508a232c9cf88695b7982dad0b9b02eaf8b3a1
* | | Merge "Fix issue token for v3"Jenkins2014-10-121-2/+2
|\ \ \ | |_|/ |/| |
| * | Fix issue token for v3Steve Martinelli2014-10-111-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Currently the code is broken as it references a part of keystoneclient that does not exist. Change-Id: I7fbc754537fbb4acffb166b5854840acfaef1fb8 Closes-Bug: #1379871
* | | Allow --domain to be used for identity commands without lookupNathan Kinder2014-10-093-27/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Performing create, list, or set operations for users, groups, and projects with the --domain option attempts to look up the domain for name to ID conversion. In the case of an environment using Keystone domains, it is desired to allow a domain admin to perform these operations for objects in their domain without allowing them to list or show domains. The current behavior prevents the domain admin from performing these operations since they will be forbidden to perform the underlying list_domains operation. This patch makes the domain lookup error a soft failure, and falls back to using the passed in domain argument directly as a domain ID in the request that it sends to Keystone. Change-Id: I5139097f8cedc53693f6f71297518917ac72e50a Closes-Bug: #1378565
* | | Add domain parameters to user show for Identity V3Steve Martinelli2014-10-093-18/+50
|/ / | | | | | | | | | | | | | | | | | | | | Update `user show` for Identity V3 to account for a domain argument, in doing so, also update `find resource` to be more flexible by allowing **kwargs. Also update `group show` and `project show` since they follow the same logic as a user within a group. Change-Id: Ib828e4dbeb0bd31164396069ce8a64c873179779 Closes-Bug: #1378165
* | Support for keystone auth pluginsMatthieu Huin2014-10-091-15/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch allows the user to choose which authentication plugin to use with the CLI. The arguments needed by the auth plugins are automatically added to the argument parser. Some examples with the currently available authentication plugins:: OS_USERNAME=admin OS_PROJECT_NAME=admin OS_AUTH_URL=http://keystone:5000/v2.0 \ OS_PASSWORD=admin openstack user list OS_USERNAME=admin OS_PROJECT_DOMAIN_NAME=default OS_USER_DOMAIN_NAME=default \ OS_PROJECT_NAME=admin OS_AUTH_URL=http://keystone:5000/v3 OS_PASSWORD=admin \ OS_IDENTITY_API_VERSION=3 OS_AUTH_PLUGIN=v3password openstack project list OS_TOKEN=1234 OS_URL=http://service_url:35357/v2.0 \ OS_IDENTITY_API_VERSION=2.0 openstack user list The --os-auth-plugin option can be omitted; if so the CLI will attempt to guess which plugin to use from the other options. Change-Id: I330c20ddb8d96b3a4287c68b57c36c4a0f869669 Co-Authored-By: Florent Flament <florent.flament-ext@cloudwatt.com>
* | Merge "CRUD operations for federated protocols"Jenkins2014-10-091-0/+182
|\ \
| * | CRUD operations for federated protocolsMarek Denis2014-10-081-0/+182
| | | | | | | | | | | | | | | | | | | | | | | | | | | Openstackclient needs to have a capability to manage federated protocols (like saml2, openid connect, abfab). This patch allows users to administrate such operations from the commandline. Change-Id: I59eef2acdda60c7ec795d1bfe31e8e960b4478a1 Implements: bp/add-openstackclient-federation-crud
* | | Merge "Pass in domain and project as positional args, not kwargs"Jenkins2014-10-091-2/+2
|\ \ \ | |/ / |/| |
| * | Pass in domain and project as positional args, not kwargsSteve Martinelli2014-10-021-2/+2
| |/ | | | | | | | | | | | | | | | | | | The signature for users.set in keystoneclient dictates that domain and project be sent in, not domainId and projectId, which are being incorrectly sent in as 'extra' data. Closes-Bug: #1376833 Change-Id: I44df3e492f61eab2241f3758dee622417bb6f399
* | Implement CRUD operations for Mapping objectsMarek Denis2014-10-081-0/+209
|/ | | | | Change-Id: I4b8f2e77e741cf74f50aba98ab975af7321b02c6 Implements: bp/add-openstackclient-federation-crud
* v3 credential set always needs --user optionwanghong2014-09-231-4/+5
| | | | | Change-Id: Ieca76bb6ee2f328f4e33010623c25eb9c18e6952 Closes-Bug: #1372744
* Fixing typo and improving docstring of find_domainVictor Silva2014-09-191-5/+5
| | | | | | | | | This should make it easier to understand the purpose of find_domain - I believe the reason for which find_resource wasn't enough was not quite clear. Change-Id: I6a1cdfa86f52401d95c6da2cd38d7c95a140b4a1
* Merge "Add service catalog commands"Jenkins2014-09-191-0/+98
|\
| * Add service catalog commandsDean Troyer2014-09-181-0/+98
| | | | | | | | | | | | | | | | 'catalog list' and 'catalog show' for Identity v2 Identity v2 only so far. Change-Id: I9df0dac3d5bb7c18f38a81bd7d29f8119462d3a5
* | Return current user/project for user/project show commandsDean Troyer2014-09-142-17/+53
|/ | | | | | | | If non-admin user attempts 'project show' or 'user show' on the currently authenticated project or user return the information that is already in the service catalog rather than throwing a Forbidden error. Change-Id: Ieeb6eacf71a471e410fbd3c09e7871740547e890
* Use Keystone client session.SessionDean Troyer2014-09-082-25/+14
| | | | | | | | | | | | | | This replaces the restapi requests wrapper with the one from Keystone client so we can take advantage of the auth plugins. As a first step only the v2 and v3 token and password plugins are supported. This maintainis no changes to the command options or environment variables. The next steps will include reworking the other API client interfaces to fully utilize the single auth session. Blueprint: ksc-session-auth Change-Id: I47ec63291e4c3cf36c8061299a4764f60b36ab89
* Merge "Add action 'user password set' for identiy v3"Jenkins2014-09-071-0/+29
|\
| * Add action 'user password set' for identiy v3Mouad Benchchaoui2014-09-071-0/+29
| | | | | | | | | | | | | | | | | | | | | | This new action will allow a user to change their own password by either providing the new password as an argument (--password) or by being prompted to enter the new password. In both cases user will be prompted to enter their current password as required by the v3 API. Closes-Bug: #1337245 Change-Id: I5e1e0fd2b46a4502318da57f7cce2b236fb2d93d
* | Merge "Change app.restapi to app.client_manager.session"Jenkins2014-09-061-0/+10
|\ \
| * | Change app.restapi to app.client_manager.sessionDean Troyer2014-08-251-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is step 1 toward using Keystone client's session.Session as the primary session/requests interface in OSC. * Move the session create into ClientManager and rename 'restapi' attribute to 'session' * Set up ClientManager and session loggers * Fix container and object command references to restapi/api Change-Id: I013d81520b336c7a6422cd22c05d1d65655e64f8
* | | Merge "add service/interface/region filter for endpoint v3"Jenkins2014-09-061-1/+27
|\ \ \
| * | | add service/interface/region filter for endpoint v3wanghong2014-08-181-1/+27
| | | | | | | | | | | | | | | | | | | | Change-Id: I7eac5b2ff5f5a6f3f08b22dd3a48a5ae7e2c056b Closes-Bug: #1281888
View Lorry Controller Status