Change in ovirt-engine[master]: packaging: configure auth of ovirt-provider-ovn
From Sandro Bonazzola <sbonazzo(a)redhat.com>:
Sandro Bonazzola has submitted this change and it was merged.
Change subject: packaging: configure auth of ovirt-provider-ovn
......................................................................
packaging: configure auth of ovirt-provider-ovn
Authentication requests to the ovirt-provider-ovn are
forwarded to engine's SSO. For this reason the host
name and certificate of the engine has to be configured
in the ovirt-provider-ovn.
For authorization the ovirt-provider-ovn requests session
information about the authorization token from the engine's
SSO. To do this, the ovirt-provider-ovn has to authorize
itself as an valid client to the engine's SSO. This is done
by including the combination of client_id and client_secret
in the request for information from the ovirt-provider-ovn
to engine's SSO.
engine-setup generates a new client_secret and registers
the pair of the encoded client_secret and a client_id into
engine's database and stores this pair in the configuration
of ovirt-provider-ovn, too.
Change-Id: Ide901a6dcf8fc5b2a65dceb1edb1d1f6ab11a7c1
Bug-Url: https://bugzilla.redhat.com/1436154
Signed-off-by: Dominik Holler <dholler(a)redhat.com>
Signed-off-by: Marcin Mirecki <mmirecki(a)redhat.com>
---
M packaging/setup/ovirt_engine_setup/engine/constants.py
M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/network/ovirtproviderovn.py
2 files changed, 118 insertions(+), 8 deletions(-)
Approvals:
Sandro Bonazzola: Looks good to me, approved
Dominik Holler: Verified
Jenkins CI: Passed CI tests
Yedidyah Bar David: Looks good to me, but someone else must approve
--
To view, visit https://gerrit.ovirt.org/76722
To unsubscribe, visit https://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ide901a6dcf8fc5b2a65dceb1edb1d1f6ab11a7c1
Gerrit-PatchSet: 14
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Marcin Mirecki <mmirecki(a)redhat.com>
Gerrit-Reviewer: Dan Kenigsberg <danken(a)redhat.com>
Gerrit-Reviewer: Dominik Holler <dholler(a)redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Marcin Mirecki <mmirecki(a)redhat.com>
Gerrit-Reviewer: Ravi Nori <rnori(a)redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <didi(a)redhat.com>
Gerrit-Reviewer: gerrit-hooks <automation(a)ovirt.org>