Change in ovirt-engine[master]: packaging: configure auth of ovirt-provider-ovn

Code Review gerrit at ovirt.org
Wed May 24 12:54:35 UTC 2017


>From Sandro Bonazzola <sbonazzo at redhat.com>:

Sandro Bonazzola has submitted this change and it was merged.

Change subject: packaging: configure auth of ovirt-provider-ovn
......................................................................


packaging: configure auth of ovirt-provider-ovn

Authentication requests to the  ovirt-provider-ovn are
forwarded to engine's SSO. For this reason the host
name and certificate of the engine has to be configured
in the ovirt-provider-ovn.
For authorization the ovirt-provider-ovn requests session
information about the authorization token from the engine's
SSO. To do this, the ovirt-provider-ovn has to authorize
itself as an valid client to the engine's SSO. This is done
by including the combination of client_id and client_secret
in the request for information from the ovirt-provider-ovn
to engine's SSO.
engine-setup generates a new client_secret and registers
the pair of the encoded client_secret and a client_id into
engine's database and stores this pair in the configuration
of ovirt-provider-ovn, too.

Change-Id: Ide901a6dcf8fc5b2a65dceb1edb1d1f6ab11a7c1
Bug-Url: https://bugzilla.redhat.com/1436154
Signed-off-by: Dominik Holler <dholler at redhat.com>
Signed-off-by: Marcin Mirecki <mmirecki at redhat.com>
---
M packaging/setup/ovirt_engine_setup/engine/constants.py
M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/network/ovirtproviderovn.py
2 files changed, 118 insertions(+), 8 deletions(-)

Approvals:
  Sandro Bonazzola: Looks good to me, approved
  Dominik Holler: Verified
  Jenkins CI: Passed CI tests
  Yedidyah Bar David: Looks good to me, but someone else must approve



-- 
To view, visit https://gerrit.ovirt.org/76722
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ide901a6dcf8fc5b2a65dceb1edb1d1f6ab11a7c1
Gerrit-PatchSet: 14
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Marcin Mirecki <mmirecki at redhat.com>
Gerrit-Reviewer: Dan Kenigsberg <danken at redhat.com>
Gerrit-Reviewer: Dominik Holler <dholler at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Marcin Mirecki <mmirecki at redhat.com>
Gerrit-Reviewer: Ravi Nori <rnori at redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo at redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <didi at redhat.com>
Gerrit-Reviewer: gerrit-hooks <automation at ovirt.org>


More information about the Engine-commits mailing list