Radoslaw Zarzynski
be9dabaf35
rgw: remove the parts of auth framework that aren't necessary anymore.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:42 +01:00
Radoslaw Zarzynski
95f2180204
rgw: move ACL Strategies to the newer auth framework.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:41 +01:00
Radoslaw Zarzynski
38e1af31f9
rgw: switch from req_state::auth_identity to req_state::auth::identity.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:41 +01:00
Radoslaw Zarzynski
0e79c29b1c
rgw: remove rgw/rgw_auth_decoimpl.h as it isn't necessary anymore.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
2017-03-24 16:55:32 +01:00
Radoslaw Zarzynski
8ce76ec6ca
rgw: add rgw::auth::s3::AWSv2AuthStrategy and switch the S3 auth to it.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:27 +01:00
Radoslaw Zarzynski
c7288bf24d
rgw: replace RGWDummyIdentityApplier with rgw::auth::DummyIdentityApplier.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:26 +01:00
Radoslaw Zarzynski
764ba0a49a
rgw: apply the new filters over appliers in the Swift's auth strategy.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:26 +01:00
Radoslaw Zarzynski
89d813a392
rgw: implement the rgw::auth::SysReqApplier over IdentityApplier.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:26 +01:00
Radoslaw Zarzynski
61aac9795f
rgw: implement rgw::auth::ThirdPartyAccountApplier.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:25 +01:00
Radoslaw Zarzynski
d912f9e0ae
rgw: add Control::FALLBACK mode to rgw::auth::AuthStrategy.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:25 +01:00
Radoslaw Zarzynski
aeb26c22c3
rgw: aggregate S3's external auth engine as the ExternalAuthStrategy.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:24 +01:00
Radoslaw Zarzynski
c777810e32
rgw: make rgw::keystone::TokenEnvelope::expired() to be const-correct.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:23 +01:00
Radoslaw Zarzynski
a16d301626
rgw: switch S3-specific auth engines to the new infra.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:23 +01:00
Radoslaw Zarzynski
c9b90ccf41
rgw: integrate the new EC2Engine with current S3 auth code.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:22 +01:00
Radoslaw Zarzynski
c7de0827d5
rgw: introduce basement for all S3 auth engines.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:22 +01:00
Radoslaw Zarzynski
0dadcbcdfb
rgw: fix indentation in RGWPostObj_ObjStore_S3::get_policy().
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:22 +01:00
Radoslaw Zarzynski
fa02054684
rgw: improve const-correctness and refactor S3 canonized string crafting.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:21 +01:00
Radoslaw Zarzynski
d9c723cf50
rgw: add rgw::auth::keystone::EC2Engine.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
2017-03-24 16:55:13 +01:00
Radoslaw Zarzynski
e4e7b576b2
rgw: the authorize() method of Swift's handler operates on auth strategy now.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:53 +01:00
Radoslaw Zarzynski
0134241b63
rgw: the Swift's auth strategy is instantiated and injected from rgw_main.cc.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
2017-03-24 16:54:39 +01:00
Radoslaw Zarzynski
da14fd9364
rgw: settle rgw::auth::{IdentityApplier,Completer} in req_state.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:34 +01:00
Radoslaw Zarzynski
58f0df7a17
rgw: port the TempURL auth engine to the new auth infrastructure.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:34 +01:00
Radoslaw Zarzynski
c5f8e8c8c0
rgw: port Swift's Signed and External auth engines.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:34 +01:00
Radoslaw Zarzynski
2fd0a50fa5
rgw: implement rgw::auth::DecoratedApplier.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:33 +01:00
Radoslaw Zarzynski
1f7a802ef1
rgw: implement rgw::auth::swift::DefaultStrategy.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:33 +01:00
Radoslaw Zarzynski
9aa6d17db0
rgw: implement rgw::auth::AnonymousEngine.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:33 +01:00
Radoslaw Zarzynski
d5945e1511
rgw: implement rgw::auth::LocalApplier.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:32 +01:00
Radoslaw Zarzynski
9651b4acbe
rgw: inject token cache as a dependency in rgw::auth::keystone::TokenEngine.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:32 +01:00
Radoslaw Zarzynski
2016d460de
rgw: implement the rgw::auth::KeystoneEngine.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:32 +01:00
Radoslaw Zarzynski
9ddb0494c5
rgw: Keystone implementation can support multiple instances now.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:32 +01:00
Radoslaw Zarzynski
f82af9ca95
rgw: only move Keystone-related things into rgw::keystone namespace.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
2017-03-24 16:54:05 +01:00
Tim Serong
7882b86a98
pybind/mgr/fsstatus: cope with missing 'ceph_version'
...
The fsstats module assumes ceph_version always exists in daemon
metadata, but it actually might not if run against older daemons
(see previous commit). As the version here is actually being
presented to the user, I've set it to "unknown" in the missing
case, rather than an empty string.
Signed-off-by: Tim Serong <tserong@suse.com>
2017-03-24 16:52:36 +01:00
Tim Serong
37e7029ac4
mgr: fix crash on missing 'ceph_version' in daemon metadata
...
Prior to 1a331234e8
, only OSDs had the Ceph version in their
metadata (MONs and MDSes didn't). This commit searches for
ceph_version, and if not present just returns an empty string.
Fixes: http://tracker.ceph.com/issues/18764
Signed-off-by: Tim Serong <tserong@suse.com>
2017-03-24 16:40:26 +01:00
Radoslaw Zarzynski
a22a7132ac
rgw: add the rgw::auth::TokenExtractor interface.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:31:43 +01:00
Radoslaw Zarzynski
41403c2092
rgw: introduce the rgw::auth::RemoteApplier interface.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:31:43 +01:00
Casey Bodley
543ba8b835
Merge pull request #14082 from idealguo/update-bucket-acl
...
rgw: enable to update acl of bucket created in slave zonegroup
Reviewed-by: Casey Bodley <cbodley@redhat.com>
2017-03-24 11:15:05 -04:00
Casey Bodley
433295ccf6
Merge pull request #14043 from zhangsw/fix-rgw-deletebucket
...
rgw: delete non-empty buckets in slave zonegroup works not well
Reviewed-by: Casey Bodley <cbodley@redhat.com>
2017-03-24 11:11:50 -04:00
Casey Bodley
c899d7ef8c
Merge pull request #13991 from Liuchang0812/wip-rgw-optimization
...
rgw: avoid listing user buckets for rgw_delete_user
Reviewed-by: Orit Wasserman <owasserm@redhat.com>
Reviewed-by: Casey Bodley <cbodley@redhat.com>
2017-03-24 11:10:28 -04:00
Casey Bodley
bfa315f1c2
Merge pull request #13504 from rzarzynski/wip-rgw-chunkingfilter-cleanup
...
rgw: clean up the unneeded rgw::io::ChunkingFilter::has_content_length.
Reviewed-by: Casey Bodley <cbodley@redhat.com>
2017-03-24 11:08:18 -04:00
Radoslaw Zarzynski
4d03f7b637
rgw: introduce the rgw::auth::Applier interface.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 15:57:25 +01:00
Radoslaw Zarzynski
f799efe02e
rgw: implement the rgw::auth::Strategy.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 15:57:24 +01:00
Radoslaw Zarzynski
b560d98431
rgw: introduce and document new interfaces to the auth subsystem.
...
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 15:57:24 +01:00
Kefu Chai
8fbf6d8f44
Merge pull request #13847 from wjwithagen/wip-wjw-ceph-disk-tests-2
...
ceph-disk/tests/test_main.py: FreeBSD does not do multipath
Reviewed-by: Kefu Chai <kchai@redhat.com>
2017-03-24 22:44:15 +08:00
Kefu Chai
21d8a97d19
Merge pull request #13974 from tchaikov/wip-vstart-start-mgr
...
vstart: do not start mgr if not start_all
Reviewed-by: Sage Weil <sage@redhat.com>
2017-03-24 21:44:56 +08:00
Kefu Chai
c52431b390
Merge pull request #13197 from asheplyakov/master-18740
...
systemd/ceph-disk: make it possible to customize timeout
Reviewed-by: Loic Dachary <ldachary@redhat.com>
Reviewed-by: Kefu Chai <kchai@redhat.com>
2017-03-24 15:53:17 +08:00
Kefu Chai
6a771d1ef5
Merge pull request #14103 from tchaikov/wip-https-github
...
script: ceph-release-notes: use https instead of http
Reviewed-by: Abhishek Lekshmanan <abhishek@suse.com>
2017-03-24 14:43:48 +08:00
Kefu Chai
aa597ae00f
include/denc: define value_type to avoid repeating the type
...
Signed-off-by: Kefu Chai <kchai@redhat.com>
2017-03-24 13:38:29 +08:00
Sage Weil
bb8f633f5d
Merge pull request #14085 from wjwithagen/wip-wjw-bluestore-fixture
...
test/objectstore/store_test_fixture.cc: Exclude bluestore code if required.
Reviewed-by: Kefu Chai <kchai@redhat.com>
2017-03-23 20:47:45 -05:00
Sage Weil
117a63277c
Merge pull request #13931 from wangzhengyong/extent
...
os/bluestore: fix bug for calc extent_avg in reshard function
Reviewed-by: xie xingguo <xie.xingguo@zte.com.cn>
Reviewed-by: Igor Fedotov <ifedotov@mirantis.com>
2017-03-23 20:47:12 -05:00
Sage Weil
8275fda6de
Merge pull request #14073 from liewegas/wip-bluestore-nullptr
...
os/bluestore: avoid nullptr in bluestore_extent_ref_map_t::bound_encode
Reviewed-by: Kefu Chai <kchai@redhat.com>
2017-03-23 20:44:59 -05:00