51 lines
7.4 KiB
Plaintext
51 lines
7.4 KiB
Plaintext
|
§
|
|||
|
|
Z_j¸ ã ó\ — d Z ddlmZ ddlZddlZddlZdZdd „Zdd „Zdd „Z dd„Z
|
|||
|
|
ddd„Z dS )an Keystone v3 password authentication via `requests`, replacing the
|
|||
|
|
`openstack token issue` subprocess call.
|
|||
|
|
|
|||
|
|
Mirrors the auth flow the `openstack` CLI itself performs when reading
|
|||
|
|
`OS_*` environment variables: POST a project-scoped password auth request
|
|||
|
|
to `{OS_AUTH_URL}/auth/tokens`, read the token back from the
|
|||
|
|
`X-Subject-Token` response header, and keep the returned service catalog
|
|||
|
|
around so the Neutron endpoint can be resolved from it (same as the CLI
|
|||
|
|
does) instead of being hardcoded.
|
|||
|
|
|
|||
|
|
No `clouds.yaml` support -- the only auth pattern actually in use here
|
|||
|
|
(`test_openrc.sh`) is password auth via `OS_*` env vars.
|
|||
|
|
é )Ú annotationsN)Ú OS_AUTH_URLÚ OS_USERNAMEÚ OS_PASSWORDÚnameÚstrÚreturnú
|
|||
|
|
str | Nonec óL — t j | ¦ « }|r|nd S )N)ÚosÚenvironÚget)r Úvalues ú4/root/vkcloud/vpnaas/ipsec_migrator/keystone_auth.pyÚ_envr s$ € Ý ŒJ�NŠN˜4Ñ Ô €EØÐ #ˆ5ˆ5˜tÐ#ó Údictc óR — t d¦ « x} rd| iS dt d¦ « pdiS )NÚOS_USER_DOMAIN_IDÚidr ÚOS_USER_DOMAIN_NAMEÚDefault©r )Ú domain_ids r Ú _user_domainr s< € ÝÐ,Ñ-Ô-Ð-€yð !Ø�iÐ Ð Ø •DÐ.Ñ/Ô/Ð<°9Ð =Ð=r c ó — t d¦ « x} rd| iS t d¦ « }|s/t dt j ¬¦ « t j d¦ « t d¦ « x}rd|i}ndt d ¦ « pd
|
|||
|
|
i}||d œS ) NÚ
|
|||
|
|
OS_PROJECT_IDr ÚOS_PROJECT_NAMEz8Error: neither OS_PROJECT_ID nor OS_PROJECT_NAME is set.©Úfileé ÚOS_PROJECT_DOMAIN_IDr ÚOS_PROJECT_DOMAIN_NAMEr )r Údomain)r ÚprintÚsysÚstderrÚexit)Ú
|
|||
|
|
project_idÚ project_nameÚproject_domain_idr$ s r Ú_project_scoper, # s± € ݘ/Ñ*Ô*Ð*€zð "Ø�jÐ!Ð!åÐ)Ñ*Ô*€LØ ð Ý
|
|||
|
|
Ø FÝ”ð
|
|||
|
|
ñ
|
|||
|
|
ô
|
|||
|
|
ð
|
|||
|
|
õ Œ�‰ Œ ˆ å Ð!7Ñ 8Ô 8Ð8Ðð GØÐ)Ð*ˆˆà�$Ð 7Ñ8Ô8ÐE¸IÐFˆà ¨FÐ 3Ð 3Ð3r útuple[str, list[dict]]c óV — d„ t D ¦ « } | rEt dd | ¦ « › �t j ¬¦ « t j d¦ « t
|
|||
|
|
d¦ « d¦ « }dd gd
|
|||
|
|
t
|
|||
|
|
d ¦ « t ¦ « t
|
|||
|
|
d ¦ « d
|
|||
|
|
œidœdt ¦ « idœi} t j |› d�|d¬¦ « }nS# t j j
|
|||
|
|
$ r<}t d|› �t j ¬¦ « t j d¦ « Y d}~nd}~ww xY wd|j cxk rdk s]n t d|j › d�t j ¬¦ « t d|j › �t j ¬¦ « t j d¦ « |j d¦ « }|s/t d t j ¬¦ « t j d¦ « | ¦ « d ¦ « pi d ¦ « pg }||fS ) z!Returns (token, service_catalog).c ó0 — g | ]}t |¦ « °|‘ŒS © r )Ú.0r s r ú
|
|||
|
|
<listcomp>z authenticate.<locals>.<listcomp>9 s# € Ð<Ð<Ð<˜µ°d±´Ð<ˆtÐ<Ð<Ð<r z1Error: required environment variable(s) not set: z, r r! r ú/ÚauthÚpasswordÚuserr r )r r$ r5 )Úmethodsr5 Úproject)ÚidentityÚscopez /auth/tokensg >@)ÚjsonÚtimeoutz/Error: Keystone authentication request failed: NéÈ i, z,Error: Keystone authentication failed (HTTP ú)z
|
|||
|
|
Response: zX-Subject-Tokenz9Error: Keystone response did not include X-Subject-Token.ÚtokenÚcatalog)Ú _REQUIREDr% Újoinr& r' r( r Úrstripr r, ÚrequestsÚpostÚ
|
|||
|
|
exceptionsÚRequestExceptionÚ status_codeÚtextÚheadersr r; )ÚmissingÚauth_urlÚbodyÚresponseÚexcr? r@ s r Ú authenticaterP 7 sK € à<Ð<¥ Ð<Ñ<Ô<€GØð Ý
|
|||
|
|
ÐVÀ$Ç)Â)ÈGÑBTÔBTÐVÐVÕ]`Ô]gÐhÑhÔhÐhÝ Œ�‰ Œ ˆ å�MÑ"Ô"×)Ò)¨#Ñ.Ô.€Hàà &˜<àÝ $ ]Ñ 3Ô 3Ý".¡.¤.Ý$(¨ Ñ$7Ô$7ð ð ð ð ð ð ¥ Ñ!1Ô!1Ð2ð
|
|||
|
|
ð
|
|||
|
|
ð €Dð Ý”= HÐ!:Ð!:Ð!:ÀÈtÐTÑTÔTˆˆøÝ Ô Ô /ð ð ð Ý
|
|||
|
|
ÐEÀÐEÐEÍCÌJÐWÑWÔWÐWÝ Œ�‰ Œ ˆ ˆ ˆ ˆ ˆ ˆ øøøøðøøøð �(Ô&Ð ,Ð ,Ò ,Ð ,¨Ò ,Ð ,Ð ,Ð ,Ý
|
|||
|
|
ÐT¸XÔ=QÐTÐTÐTÕ[^Ô[eÐfÑfÔfÐfÝ
|
|||
|
|
Ð*˜8œ=Ð*Ð*µ´Ð<Ñ<Ô<Ð<Ý Œ�‰ Œ ˆ à Ô × Ò Ð!2Ñ 3Ô 3€EØ ð Ý
|
|||
|
|
ÐIÕPSÔPZÐ[Ñ[Ô[Ð[Ý Œ�‰ Œ ˆ à�}Š}‰Œ×"Ò" 7Ñ+Ô+Ð1¨r×6Ò6°yÑAÔAÐGÀR€GØ �'ˆ>Ðs ÃC à D,Ã02D'Ä'D,Únetworkr@ ú
|
|||
|
|
list[dict]Ú service_typec óº ‡‡‡— t d¦ « pdŠt d¦ « Št ˆfd„| D ¦ « d ¦ « }|€3t d‰› d�t j ¬¦ « t j d¦ « ˆfd „| d
|
|||
|
|
g ¦ « D ¦ « }‰rˆfd „|D ¦ « }|r|}|sAt d ‰› d
|
|||
|
|
‰› d�‰rd‰› d�ndz t j ¬¦ « t j d¦ « |d d d¦ « }‰dk rF| d¦ « s| d¦ « r | dd¦ « d }|S )NÚ OS_INTERFACEÚpublicÚOS_REGION_NAMEc 3 óN •K — | ] }| d ¦ « ‰k ¯|V — Œ dS )ÚtypeN©r )r1 ÚentryrS s €r ú <genexpr>z#resolve_endpoint.<locals>.<genexpr>g s9 øè è € ÐTÐT˜e°%·)²)¸FÑ2CÔ2CÀ|Ò2SÐ2S�EÐ2SÐ2SÐ2SÐ2SÐTÐTr zError: service type 'z ' not found in Keystone catalog.r r! c óF •— g | ] }| d ¦ « ‰k ¯|‘Œ S )Ú interfacerZ )r1 Úepr^ s €r r2 z$resolve_endpoint.<locals>.<listcomp>l s0 ø€ Ð`Ð`Ð`˜¸r¿vºvÀkÑ?RÔ?RÐV_Ò?_Ð?_�"Ð?_Ð?_Ð?_r Ú endpointsc óF •— g | ] }| d ¦ « ‰k ¯|‘Œ S )ÚregionrZ )r1 r_ rb s €r r2 z$resolve_endpoint.<locals>.<listcomp>n s/ ø€ ÐPÐPÐP °R·V²V¸HÑ5EÔ5EÈÒ5OÐ5O˜"Ð5OÐ5OÐ5Or z Error: no 'z ' endpoint for service type 'z' in Keystone catalogz (region r> Ú r Úurlr3 rQ z/v2.0z/v2)
|
|||
|
|
r Únextr% r& r' r( r rC ÚendswithÚrsplit)r@ rS ÚserviceÚ
|
|||
|
|
candidatesÚregion_matchesrd r^ rb s ` @@r Úresolve_endpointrk c s£ øøø€ Ý�^Ñ$Ô$Ð0¨€IÝ
|
|||
|
|
Ð"Ñ
|
|||
|
|
#Ô
|
|||
|
|
#€FåÐTÐTÐTÐT wÐTÑTÔTÐVZÑ[Ô[€GØ€Ý
|
|||
|
|
ÐT lÐTÐTÐTÕ[^Ô[eÐfÑfÔfÐfÝ Œ�‰ Œ ˆ à`Ð`Ð`Ð`˜wŸ{š{¨;¸Ñ ;Ô ;Ð`Ñ`Ô`€JØ
|
|||
|
|
ð (ØPÐPÐPÐP zÐPÑPÔPˆØ ð (Ø'ˆJà ð Ý
|
|||
|
|
Ø e˜)Ð eÐ eÀ,Ð eÐ eÐ eØ(.Ð6Ð$˜6Ð$Ð$Ð$Ð$°Bñ
|