[GitHub] rhtyd opened a new pull request #2284: [WIP] CLOUDSTACK-10103: Cloudian Connector for CloudStack

[gi...@git.apache.org]

rhtyd opened a new pull request #2284: [WIP] CLOUDSTACK-10103: Cloudian Connector for CloudStack
URL: https://github.com/apache/cloudstack/pull/2284
 
 
   Several organizations use Cloudian as S3 provider, this implements the
   Cloudian Management Console connector for CloudStack that can do the
   following:
   
   - Provide ease in connector configuration using CloudStack global
     settings
   - Perform SSO from CloudStack UI into Cloudian Management Console (CMC)
     when the connector is enabled
   - Automatic provisioning and de-provisioning of CloudStack accounts and
     domains as Cloudian users and groups respectively
   - During CloudStack UI logout, logout user from CMC
   - CloudStack account will be mapped to Cloudian Users, and CloudStack
     domain will be mapped to Cloudian Groups.
   - The CloudStack admin account is mapped to Cloudian admin (user name
     configurable).
   - The user/group provisioning will be from CloudStack to Cloudian only,
     i.e. user/group addition/removal/updation/deactivation in Cloudian
     portal (CMC) won't propagate the changes to CloudStack.
   
   FS: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Cloudian+Connector+for+CloudStack
   
   New APIs:
   - `cloudianIsEnabled`: API to check whether Cloudian Connector is enabled.
   - `cloudianSsoLogin`: Performs SSO for the logged-in, requesting user
                         and returns the URL that can be used to perform
                         SSO and log into CMC.
   
   New Global Settings:
   - cloudian.connector.enabled  (false)
   If set to true, this enables the Cloudian Connector for CloudStack.
   Restarting management server(s) is required.
   - cloudian.admin.host (s3-admin.cloudian.com)
   The host where Cloudian Admin services are accessible.
   - cloudian.admin.port (19443)
   The admin service port.
   - cloudian.admin.protocol (https)
   The admin service API scheme/protocol.
   - cloudian.validate.ssl (true)
    When set to true, this validates the certificate of the https-enabled
   admin API service.
   - cloudian.admin.user (sysadmin)
   The admin user's name when making (admin) API calls.
   - cloudian.admin.password (public)
   The admin password used when making (admin) API calls.
   - cloudian.api.request.timeout (5)
   The API request timeout in seconds used by the internal HTTP/s client.
   - cloudian.cmc.admin.user (admin)
   The CMC admin user's name.
   - cloudian.cmc.host (cmc.cloudian.com)
   The CMC host.
   - cloudian.cmc.port (8443)
   The CMC service port.
   - cloudian.cmc.protocol (https)
    The CMC service scheme/protocol.
   - cloudian.sso.key (ss0sh5r3dk3y)
   The Single-Sign-On shared key.
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services