def create_trust():
"""Creates trust via Keystone API v3 to use in plugins."""
client = keystone.ClimateKeystoneClient()
trustee_id = keystone.ClimateKeystoneClient(
username=CONF.os_admin_username,
password=CONF.os_admin_password,
tenant_name=CONF.os_admin_project_name).user_id
ctx = context.current()
trust = client.trusts.create(trustor_user=ctx.user_id,
trustee_user=trustee_id,
impersonation=False,
role_names=ctx.roles,
project=ctx.project_id)
return trust
def create_ctx_from_trust(trust_id):
"""Return context built from given trust."""
ctx = context.ClimateContext(
user_name=CONF.os_admin_username,
project_name=CONF.os_admin_project_name,
)
auth_url = "%s://%s:%s/v3" % (CONF.os_auth_protocol, CONF.os_auth_host,
CONF.os_auth_port)
client = keystone.ClimateKeystoneClient(
password=CONF.os_admin_password,
trust_id=trust_id,
auth_url=auth_url,
ctx=ctx,
)
# use 'with ctx' statement in the place you need context from trust
return context.ClimateContext(
ctx,
auth_token=client.auth_token,
service_catalog=client.service_catalog.catalog['catalog'],
project_id=client.tenant_id,
)
def delete_trust(lease):
"""Deletes trust for the specified lease."""
if lease.trust_id:
client = keystone.ClimateKeystoneClient(trust_id=lease.trust_id)
client.trusts.delete(lease.trust_id)