def designateclient(request):
token = request.user.token.id
if keystone.get_version() < 3:
tenant_id = request.user.tenant_id
logwrap_info("using keystone v2.")
# keystone auth object
auth = v2_plugin.Token(auth_url="https://%s:5000/v2.0" %
settings.OPENSTACK_HOST,
tenant_id=tenant_id,
token=token)
else:
project_id = request.user.project_id
project_domain_id = request.session.get('domain_context')
logwrap_info("using keystone v3.")
auth = v3_plugin.Token(auth_url="https://%s:5000/v3" %
settings.OPENSTACK_HOST,
token=token,
project_id=project_id,
project_domain_id=project_domain_id)
# create a session
ks_session = keystone_session.Session(auth=auth)
# spawn designate client object
dns_client = designate_client.Client(session=ks_session)
logwrap_info("Created a new DNSaaS API Client Object.")
return dns_client
def barbicanclient(request):
project_id = request.user.project_id
if keystone.get_version() < 3:
auth = auth_v2.Token(settings.OPENSTACK_KEYSTONE_URL,
request.user.token.id,
tenant_id=project_id)
else:
domain_id = request.session.get('domain_context')
auth = auth_v3.Token(settings.OPENSTACK_KEYSTONE_URL,
request.user.token.id,
project_id=project_id,
project_domain_id=domain_id)
return barbican_client.Client(session=session.Session(auth=auth))
def barbicanclient(request):
project_id = request.user.project_id
region = request.user.services_region
endpoint = base.url_for(request, 'key-manager')
if keystone.get_version() < 3:
auth = auth_v2.Token(settings.OPENSTACK_KEYSTONE_URL,
request.user.token.id,
tenant_id=project_id)
else:
domain_id = request.session.get('domain_context')
auth = auth_v3.Token(settings.OPENSTACK_KEYSTONE_URL,
request.user.token.id,
project_id=project_id,
project_domain_id=domain_id)
return barbican_client.Client(session=session.Session(auth=auth),
endpoint=endpoint,
region_name=region)
def keymanagerclient(request):
token = request.user.token.id
if keystone.get_version() < 3:
tenant_id = request.user.tenant_id
logwrap_info("using keystone v2")
ks_auth = v2.Token("https://%s:5000/v2.0" % settings.OPENSTACK_HOST,
token=token, tenant_id=tenant_id)
else:
project_id = request.user.project_id
domain_id = request.session.get('domain_context')
logwrap_info("using keystone v3")
ks_auth = v3.Token("https://%s:5000/v3" % settings.OPENSTACK_HOST,
token=token,
project_id=project_id,
project_domain_id=domain_id)
ks_session = session.Session(auth=ks_auth)
return client.Client(session=ks_session)
def barbicanclient(request):
project_id = request.user.project_id
region = request.user.services_region
endpoint = base.url_for(request, 'key-manager')
if keystone.get_version() < 3:
auth = auth_v2.Token(settings.OPENSTACK_KEYSTONE_URL,
request.user.token.id,
tenant_id=project_id)
else:
domain_id = request.session.get('domain_context')
auth = auth_v3.Token(settings.OPENSTACK_KEYSTONE_URL,
request.user.token.id,
project_id=project_id,
project_domain_id=domain_id)
insecure = getattr(settings, 'OPENSTACK_SSL_NO_VERIFY', False)
cacert = getattr(settings, 'OPENSTACK_SSL_CACERT', None)
# If 'insecure' is True, 'verify' is False in all cases; otherwise
# pass the cacert path if it is present, or True if no cacert.
verify = not insecure and (cacert or True)
return barbican_client.Client(session=session.Session(auth=auth,
verify=verify),
endpoint=endpoint,
region_name=region)
