Commit Graph

70286 Commits

Author SHA1 Message Date
Radoslaw Zarzynski
95f2180204 rgw: move ACL Strategies to the newer auth framework.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:41 +01:00
Radoslaw Zarzynski
38e1af31f9 rgw: switch from req_state::auth_identity to req_state::auth::identity.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:41 +01:00
Radoslaw Zarzynski
0e79c29b1c rgw: remove rgw/rgw_auth_decoimpl.h as it isn't necessary anymore.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
2017-03-24 16:55:32 +01:00
Radoslaw Zarzynski
8ce76ec6ca rgw: add rgw::auth::s3::AWSv2AuthStrategy and switch the S3 auth to it.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:27 +01:00
Radoslaw Zarzynski
c7288bf24d rgw: replace RGWDummyIdentityApplier with rgw::auth::DummyIdentityApplier.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:26 +01:00
Radoslaw Zarzynski
764ba0a49a rgw: apply the new filters over appliers in the Swift's auth strategy.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:26 +01:00
Radoslaw Zarzynski
89d813a392 rgw: implement the rgw::auth::SysReqApplier over IdentityApplier.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:26 +01:00
Radoslaw Zarzynski
61aac9795f rgw: implement rgw::auth::ThirdPartyAccountApplier.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:25 +01:00
Radoslaw Zarzynski
d912f9e0ae rgw: add Control::FALLBACK mode to rgw::auth::AuthStrategy.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:25 +01:00
Radoslaw Zarzynski
aeb26c22c3 rgw: aggregate S3's external auth engine as the ExternalAuthStrategy.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:24 +01:00
Radoslaw Zarzynski
c777810e32 rgw: make rgw::keystone::TokenEnvelope::expired() to be const-correct.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:23 +01:00
Radoslaw Zarzynski
a16d301626 rgw: switch S3-specific auth engines to the new infra.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:23 +01:00
Radoslaw Zarzynski
c9b90ccf41 rgw: integrate the new EC2Engine with current S3 auth code.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:22 +01:00
Radoslaw Zarzynski
c7de0827d5 rgw: introduce basement for all S3 auth engines.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:22 +01:00
Radoslaw Zarzynski
0dadcbcdfb rgw: fix indentation in RGWPostObj_ObjStore_S3::get_policy().
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:22 +01:00
Radoslaw Zarzynski
fa02054684 rgw: improve const-correctness and refactor S3 canonized string crafting.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:55:21 +01:00
Radoslaw Zarzynski
d9c723cf50 rgw: add rgw::auth::keystone::EC2Engine.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
2017-03-24 16:55:13 +01:00
Radoslaw Zarzynski
e4e7b576b2 rgw: the authorize() method of Swift's handler operates on auth strategy now.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:53 +01:00
Radoslaw Zarzynski
0134241b63 rgw: the Swift's auth strategy is instantiated and injected from rgw_main.cc.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
2017-03-24 16:54:39 +01:00
Radoslaw Zarzynski
da14fd9364 rgw: settle rgw::auth::{IdentityApplier,Completer} in req_state.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:34 +01:00
Radoslaw Zarzynski
58f0df7a17 rgw: port the TempURL auth engine to the new auth infrastructure.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:34 +01:00
Radoslaw Zarzynski
c5f8e8c8c0 rgw: port Swift's Signed and External auth engines.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:34 +01:00
Radoslaw Zarzynski
2fd0a50fa5 rgw: implement rgw::auth::DecoratedApplier.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:33 +01:00
Radoslaw Zarzynski
1f7a802ef1 rgw: implement rgw::auth::swift::DefaultStrategy.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:33 +01:00
Radoslaw Zarzynski
9aa6d17db0 rgw: implement rgw::auth::AnonymousEngine.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:33 +01:00
Radoslaw Zarzynski
d5945e1511 rgw: implement rgw::auth::LocalApplier.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:32 +01:00
Radoslaw Zarzynski
9651b4acbe rgw: inject token cache as a dependency in rgw::auth::keystone::TokenEngine.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:32 +01:00
Radoslaw Zarzynski
2016d460de rgw: implement the rgw::auth::KeystoneEngine.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:32 +01:00
Radoslaw Zarzynski
9ddb0494c5 rgw: Keystone implementation can support multiple instances now.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:54:32 +01:00
Radoslaw Zarzynski
f82af9ca95 rgw: only move Keystone-related things into rgw::keystone namespace.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
2017-03-24 16:54:05 +01:00
Tim Serong
7882b86a98 pybind/mgr/fsstatus: cope with missing 'ceph_version'
The fsstats module assumes ceph_version always exists in daemon
metadata, but it actually might not if run against older daemons
(see previous commit).  As the version here is actually being
presented to the user, I've set it to "unknown" in the missing
case, rather than an empty string.

Signed-off-by: Tim Serong <tserong@suse.com>
2017-03-24 16:52:36 +01:00
Tim Serong
37e7029ac4 mgr: fix crash on missing 'ceph_version' in daemon metadata
Prior to 1a331234e8, only OSDs had the Ceph version in their
metadata (MONs and MDSes didn't).  This commit searches for
ceph_version, and if not present just returns an empty string.

Fixes: http://tracker.ceph.com/issues/18764
Signed-off-by: Tim Serong <tserong@suse.com>
2017-03-24 16:40:26 +01:00
Radoslaw Zarzynski
a22a7132ac rgw: add the rgw::auth::TokenExtractor interface.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:31:43 +01:00
Radoslaw Zarzynski
41403c2092 rgw: introduce the rgw::auth::RemoteApplier interface.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 16:31:43 +01:00
Casey Bodley
543ba8b835 Merge pull request #14082 from idealguo/update-bucket-acl
rgw: enable to update acl of bucket created in slave zonegroup

Reviewed-by: Casey Bodley <cbodley@redhat.com>
2017-03-24 11:15:05 -04:00
Casey Bodley
433295ccf6 Merge pull request #14043 from zhangsw/fix-rgw-deletebucket
rgw: delete non-empty buckets in slave zonegroup works not well

Reviewed-by: Casey Bodley <cbodley@redhat.com>
2017-03-24 11:11:50 -04:00
Casey Bodley
c899d7ef8c Merge pull request #13991 from Liuchang0812/wip-rgw-optimization
rgw: avoid listing user buckets for rgw_delete_user

Reviewed-by: Orit Wasserman <owasserm@redhat.com>
Reviewed-by: Casey Bodley <cbodley@redhat.com>
2017-03-24 11:10:28 -04:00
Casey Bodley
bfa315f1c2 Merge pull request #13504 from rzarzynski/wip-rgw-chunkingfilter-cleanup
rgw: clean up the unneeded rgw::io::ChunkingFilter::has_content_length.

Reviewed-by: Casey Bodley <cbodley@redhat.com>
2017-03-24 11:08:18 -04:00
Yehuda Sadeh
702904820c cls/user: cls_user_bucket backward compatibility
Fixes: http://tracker.ceph.com/issues/19367

Signed-off-by: Yehuda Sadeh <yehuda@redhat.com>
2017-03-24 08:07:30 -07:00
Radoslaw Zarzynski
4d03f7b637 rgw: introduce the rgw::auth::Applier interface.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 15:57:25 +01:00
Radoslaw Zarzynski
f799efe02e rgw: implement the rgw::auth::Strategy.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 15:57:24 +01:00
Radoslaw Zarzynski
b560d98431 rgw: introduce and document new interfaces to the auth subsystem.
Signed-off-by: Radoslaw Zarzynski <rzarzynski@mirantis.com>
2017-03-24 15:57:24 +01:00
Kefu Chai
8fbf6d8f44 Merge pull request #13847 from wjwithagen/wip-wjw-ceph-disk-tests-2
ceph-disk/tests/test_main.py: FreeBSD does not do multipath

Reviewed-by: Kefu Chai <kchai@redhat.com>
2017-03-24 22:44:15 +08:00
Kefu Chai
21d8a97d19 Merge pull request #13974 from tchaikov/wip-vstart-start-mgr
vstart: do not start mgr if not start_all

Reviewed-by: Sage Weil <sage@redhat.com>
2017-03-24 21:44:56 +08:00
Sven Seeberg
804134a2bf renamed hit_set_grade_search_last_n to hit_set_search_last_n
Signed-off-by: Sven Seeberg <sseebergelverfeldt@suse.com>
2017-03-24 10:25:06 +01:00
Kefu Chai
c52431b390 Merge pull request #13197 from asheplyakov/master-18740
systemd/ceph-disk: make it possible to customize timeout

Reviewed-by: Loic Dachary <ldachary@redhat.com>
Reviewed-by: Kefu Chai <kchai@redhat.com>
2017-03-24 15:53:17 +08:00
Kefu Chai
6a771d1ef5 Merge pull request #14103 from tchaikov/wip-https-github
script: ceph-release-notes: use https instead of http

Reviewed-by: Abhishek Lekshmanan <abhishek@suse.com>
2017-03-24 14:43:48 +08:00
Kefu Chai
aa597ae00f include/denc: define value_type to avoid repeating the type
Signed-off-by: Kefu Chai <kchai@redhat.com>
2017-03-24 13:38:29 +08:00
Sage Weil
bb8f633f5d Merge pull request #14085 from wjwithagen/wip-wjw-bluestore-fixture
test/objectstore/store_test_fixture.cc: Exclude bluestore code if required.

Reviewed-by: Kefu Chai <kchai@redhat.com>
2017-03-23 20:47:45 -05:00
Sage Weil
117a63277c Merge pull request #13931 from wangzhengyong/extent
os/bluestore: fix bug for calc extent_avg in reshard function

Reviewed-by: xie xingguo <xie.xingguo@zte.com.cn>
Reviewed-by: Igor Fedotov <ifedotov@mirantis.com>
2017-03-23 20:47:12 -05:00