63 lines
1.9 KiB
Python
63 lines
1.9 KiB
Python
# Copyright 2016 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
|
|
from keystoneauth1 import loading as ks_loading
|
|
from keystoneclient.v3 import client as ks_client_v3
|
|
from oslo_config import cfg
|
|
|
|
CFG_GROUP = "service_credentials"
|
|
|
|
_SESSION = None
|
|
_AUTH = None
|
|
|
|
|
|
def get_session():
|
|
"""Get a service credentials auth session."""
|
|
|
|
global _SESSION
|
|
global _AUTH
|
|
|
|
if not _AUTH:
|
|
_AUTH = ks_loading.load_auth_from_conf_options(cfg.CONF, CFG_GROUP)
|
|
if not _SESSION:
|
|
_SESSION = ks_loading.load_session_from_conf_options(
|
|
cfg.CONF, CFG_GROUP, auth=_AUTH, session=_SESSION
|
|
)
|
|
return _SESSION
|
|
|
|
|
|
def get_client(trust_id=None):
|
|
"""Return a client for keystone v3 endpoint, optionally using a trust."""
|
|
session = get_session()
|
|
return ks_client_v3.Client(session=session, trust_id=trust_id)
|
|
|
|
|
|
def get_service_catalog(client):
|
|
return client.session.auth.get_access(client.session).service_catalog
|
|
|
|
|
|
def get_auth_token(client):
|
|
return client.session.auth.get_access(client.session).auth_token
|
|
|
|
|
|
def register_keystoneauth_opts(conf):
|
|
ks_loading.register_auth_conf_options(conf, CFG_GROUP)
|
|
ks_loading.register_session_conf_options(
|
|
conf, CFG_GROUP,
|
|
deprecated_opts={'cacert': [
|
|
cfg.DeprecatedOpt('os-cacert', group=CFG_GROUP),
|
|
cfg.DeprecatedOpt('os-cacert', group="DEFAULT")]
|
|
})
|