openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #01139
Re: Entities in OpenStack Auth
-
To:
Justin Santa Barbara <justin@xxxxxxxxxxxx>
-
From:
Monsyne Dragon <mdragon@xxxxxxxxxxxxx>
-
Date:
Tue, 01 Mar 2011 18:46:21 -0600
-
Cc:
openstack@xxxxxxxxxxxxxxxxxxx
-
In-reply-to:
<AANLkTi=3F-XKDwe_K=sCO3gUkeyfM_gR+MScgWQfK8tt@mail.gmail.com>
-
User-agent:
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.13) Gecko/20101207 Lightning/1.0b2 Thunderbird/3.1.7
On 3/1/11 6:32 PM, Justin Santa Barbara wrote:
Won't putting this in the URL both:
1) Break CloudServers API compatibility (a total no-no)?
and
No. The value is added to the server management url that is reported
when you login. This is how the current Rackspace cloudservers API
handles this.
(i.e. when you auth and get a token back, the server management url
returned looks like: http://www.example.org/v1.0/<accountidentifier>/
the openstack api urls are defined as hanging off of that. )
2) Preclude us from having e.g. multi-project queries (show me all my
servers in projects A and B)?
It doesn't really preclude multi-account queries, if they are needed.
You would be 'logged in' under a given account, but queries could
potentially return info based on wider criteria, given user permissions.
Also, since the server management url is dynamic (see above) it's easy
to change that in the future if needed.
.
The options I see open to us are:
a) A cookie / header
b) A query parameter
c) Something in the request body
I like (c) because it's the least hacky and is not tied to HTTP.
Really it's not that hacky. it's basically just nested REST resources.
Justin
On Tue, Mar 1, 2011 at 4:23 PM, Monsyne Dragon <mdragon@xxxxxxxxxxxxx
<mailto:mdragon@xxxxxxxxxxxxx>> wrote:
On 3/1/11 6:11 PM, Eric Day wrote:
[ ... trimmed ... ]
For the OpenStack API, we need something a bit different from
what we
have today. We currently have no way of passing in a project name,
so I propose we add an "entity" element to the path name (just
like
Swift does). For example, instead of "/v1.0/servers/1", it
would be
"/v1.0/entity/servers/1", where entity can represent an
account (like
swift), project (like current nova), or even a user entity
(deployments
where projects or accounts are not used). Our window for OpenStack
API changes is still open as it's still under heavy development,
and I think this path addition will provide more functionality and
a consistent structure across services (glance and burrow will be
using an account or "entity" in the path as well).
FYI: the multitenant blueprint, which I will be proposing for
merge later today or early tomorrow, does just this to pass the
project name in.
--
--
-Monsyne Dragon
work: 210-312-4190
mobile 210-441-0965
google voice: 210-338-0336
Confidentiality Notice: This e-mail message (including any attached or
embedded documents) is intended for the exclusive and confidential
use of the
individual or entity to which this message is addressed, and
unless otherwise
expressly indicated, is confidential and privileged information of
Rackspace.
Any dissemination, distribution or copying of the enclosed
material is prohibited.
If you receive this transmission in error, please notify us
immediately by e-mail
at abuse@xxxxxxxxxxxxx <mailto:abuse@xxxxxxxxxxxxx>, and delete
the original message.
Your cooperation is appreciated.
_______________________________________________
Mailing list: https://launchpad.net/~openstack
<https://launchpad.net/%7Eopenstack>
Post to : openstack@xxxxxxxxxxxxxxxxxxx
<mailto:openstack@xxxxxxxxxxxxxxxxxxx>
Unsubscribe : https://launchpad.net/~openstack
<https://launchpad.net/%7Eopenstack>
More help : https://help.launchpad.net/ListHelp
--
--
-Monsyne Dragon
work: 210-312-4190
mobile 210-441-0965
google voice: 210-338-0336
Confidentiality Notice: This e-mail message (including any attached or
embedded documents) is intended for the exclusive and confidential use of the
individual or entity to which this message is addressed, and unless otherwise
expressly indicated, is confidential and privileged information of Rackspace.
Any dissemination, distribution or copying of the enclosed material is prohibited.
If you receive this transmission in error, please notify us immediately by e-mail
at abuse@xxxxxxxxxxxxx, and delete the original message.
Your cooperation is appreciated.
Follow ups
References