Commits on Jul 21, 2021

1. Add support to OpenID Connect Authentication flow …

   This pull request adds support for the OpenID Connect authentication
   flow in Keystone and enables both ID and access token authentication
   flows. The ID token configuration is designed to allow users to
   authenticate via Horizon using an identity federation; whereas the
   Access token is used to allow users to authenticate in the OpenStack CLI
   using a federated user.
   
   Without this PR, if one wants to configure OpenStack to use identity
   federation, he/she needs to do a lot of configurations in the keystone,
   Horizon, and register quite a good number of different parameters using
   the CLI such as mappings, identity providers, federated protocols, and
   so on. Therefore, with this PR, we propose a method for operators to
   introduce/present the IdP's metadata to Kolla-ansible, and based on the
   presented metadata, Kolla-ansible takes care of all of the
   configurations to prepare OpenStack to work in a federated environment.
   
   Implements: blueprint add-openid-support
   Co-Authored-By: Jason Anderson <[email protected]>
   Change-Id: I0203a3470d7f8f2a54d5e126d947f540d93b8210
   (cherry picked from commit f3fbe83)

   

   pedro-martins authored and jovial committed Jul 21, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for a6b3ee4
   • Browse repository at this point

   Copy the full SHA

   a6b3ee4 View commit details

   Browse the repository at this point in the history