Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenStack cross domain authentication #1117

Closed
auhlig opened this issue May 6, 2019 · 1 comment
Closed

OpenStack cross domain authentication #1117

auhlig opened this issue May 6, 2019 · 1 comment

Comments

@auhlig
Copy link
Contributor

auhlig commented May 6, 2019

The current OpenStack Swift configuration lacks OpenStack Identity V3 support:

  1. The term tenant is used in the deprecated OpenStack Identity v2. In Identity v3 it's called project.
  2. Cross-domain authentication is supported by Identity v3 but not possible via Thanos.
    (user being in another domain than the project (formerly tenant).

To fix them I propose:

  1. Introduce the new fields project_id, project_name and mark tenant.+ as deprecated.
  2. Add the field user_domain_id, user_domain_name and project_domain_id, project_domain_name to support cross domain authentication.

I'll follow up with a PR. What do you think?

@GiedriusS
Copy link
Member

#1118 was merged so this has been done. Thank you again! 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants