| 2019-04-30 13:48:31 |
Dmitrii Shcherbakov |
bug |
|
|
added bug |
| 2019-04-30 13:52:35 |
Dmitrii Shcherbakov |
description |
Application credentials are supported since Queens in Keystone.
https://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/application-credentials.html
As of Rocky there is also dashboard support (enabled by default without additional configuration, checked a lab):
https://blueprints.launchpad.net/horizon/+spec/application-credentials
Use-cases:
1) CLI auth method for users that use SAML for UI;
2) a way not to use username and password in resource files (SQL backend, ldap backend);
3) credentials for a subset of user roles;
4) credential expiry and rotation.
https://github.com/openstack/keystone/blob/stable/queens/keystone/auth/plugins/application_credential.py
METHOD_NAME = 'application_credential' |
Application credentials are supported since Queens in Keystone.
https://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/application-credentials.html
As of Rocky there is also dashboard support (enabled by default without additional configuration, checked a lab):
https://blueprints.launchpad.net/horizon/+spec/application-credentials
Showing a dashboard pane for a disabled auth method does not seem right.
Use-cases:
1) CLI auth method for users that use SAML for UI;
2) a way not to use username and password in resource files (SQL backend, ldap backend);
3) credentials for a subset of user roles;
4) credential expiry and rotation.
https://github.com/openstack/keystone/blob/stable/queens/keystone/auth/plugins/application_credential.py
METHOD_NAME = 'application_credential' |
|
| 2019-04-30 14:08:36 |
Dmitrii Shcherbakov |
charm-keystone: status |
New |
In Progress |
|
| 2019-04-30 14:09:10 |
Dmitrii Shcherbakov |
charm-keystone: assignee |
|
Dmitrii Shcherbakov (dmitriis) |
|
| 2019-04-30 14:54:07 |
Dmitrii Shcherbakov |
description |
Application credentials are supported since Queens in Keystone.
https://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/application-credentials.html
As of Rocky there is also dashboard support (enabled by default without additional configuration, checked a lab):
https://blueprints.launchpad.net/horizon/+spec/application-credentials
Showing a dashboard pane for a disabled auth method does not seem right.
Use-cases:
1) CLI auth method for users that use SAML for UI;
2) a way not to use username and password in resource files (SQL backend, ldap backend);
3) credentials for a subset of user roles;
4) credential expiry and rotation.
https://github.com/openstack/keystone/blob/stable/queens/keystone/auth/plugins/application_credential.py
METHOD_NAME = 'application_credential' |
Application credentials are supported since Queens in Keystone.
https://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/application-credentials.html
As of Rocky there is also dashboard support (enabled by default without additional configuration, checked in a lab):
https://blueprints.launchpad.net/horizon/+spec/application-credentials
Showing a dashboard pane for a disabled auth method does not seem right.
Use-cases:
1) CLI auth method for users that use SAML for UI;
2) a way not to use username and password in resource files (SQL backend, ldap backend);
3) credentials for a subset of user roles;
4) credential expiry and rotation.
https://github.com/openstack/keystone/blob/stable/queens/keystone/auth/plugins/application_credential.py
METHOD_NAME = 'application_credential' |
|
| 2019-04-30 15:02:10 |
Dmitrii Shcherbakov |
attachment added |
|
dashboard_cred_create.png https://bugs.launchpad.net/charm-keystone/+bug/1827058/+attachment/5260323/+files/dashboard_cred_create.png |
|
| 2019-04-30 15:02:46 |
Dmitrii Shcherbakov |
attachment added |
|
application_credentials_ta.png https://bugs.launchpad.net/charm-keystone/+bug/1827058/+attachment/5260324/+files/application_credentials_ta.png |
|
| 2019-04-30 18:52:01 |
Dmitrii Shcherbakov |
bug |
|
|
added subscriber Canonical Field Medium |
| 2019-05-02 19:53:49 |
OpenStack Infra |
charm-keystone: status |
In Progress |
Fix Committed |
|
| 2019-05-03 10:26:26 |
Dmitrii Shcherbakov |
charm-keystone: status |
Fix Committed |
Fix Released |
|
| 2019-05-03 10:26:36 |
Dmitrii Shcherbakov |
charm-keystone: milestone |
|
19.04 |
|
