Commit Graph

21769 Commits

Author SHA1 Message Date
Yehuda Sadeh
fc0d6d3453 docs: add keystone documentation
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:30 -08:00
Yehuda Sadeh
5fda39e6a3 rgw: change configurable
rgw keystone accepted roles

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:30 -08:00
Yehuda Sadeh
a99b0fac88 rgw: fix build
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:30 -08:00
Yehuda Sadeh
8fcd35185a rgw: use a different boost thread library
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
ff8c2380b3 rgw: keystone tokens revocation thread
Use a thread to invalidate revoked tokens.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
b69da4b8db json_spirit: thread safe
apparently the library is not thread safe by default.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
feb24afb63 rgw: decode pki tokens
If we can decode pki tokens then we don't need to send them to
the Keystone server for verification.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
02c2c32dcf rgw: invalidate revoked tokens
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
1f05b1af6e rgw: keep pki tokens by hash
and also fix the token parsing (needed after the json
parser fix).

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:29 -08:00
Yehuda Sadeh
8249d7b3fb rgw: decode revocation message
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-08 13:24:20 -08:00
Yehuda Sadeh
f7412fe37e crypto: add cms utility function
Taken from a libnss tool (cmsutil), stripped code so that we
only get the decode functionality that we need.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-11-02 13:13:38 -07:00
Yehuda Sadeh
29a03f0775 rgw: parse keystone token expiration
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-31 16:12:16 -07:00
Yehuda Sadeh
c62f3dd8c1 rgw: cache keystone tokens
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-31 14:49:12 -07:00
Yehuda Sadeh
f9443865ba rgw: map keystone tenant id to rgw user
Instead of mapping the tenant name. Keep the name as the display_name.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-31 11:23:28 -07:00
Yehuda Sadeh
88f482335d rgw: handle keystone roles
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 17:34:06 -07:00
Yehuda Sadeh
421c352e33 rgw: auto create rgw user for new keystone users
We now also read the user info when authenticating the keystone
user.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 16:38:54 -07:00
Yehuda Sadeh
845e862a71 rgw: handle keystone tokens
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 15:52:53 -07:00
Yehuda Sadeh
9df953cdd5 rgw: extend rgw json parser api
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 15:52:25 -07:00
Yehuda Sadeh
6d3cafcc50 rgw: refactor curl functionality
Move curl stuff into its own class, use it in swift token validation.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 13:12:23 -07:00
Yehuda Sadeh
44818eb0ba rgw: configurable swift auth url
This is relevant when using external swift v1 authentication. The
url was hard coded, now it's configurable.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-30 12:39:29 -07:00
Yehuda Sadeh
bfc49049e3 rgw: better error responses, logging for specific error cases
Also, adjusting return values

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:44:23 -07:00
Yehuda Sadeh
30d11f424d rgw: POST fixes, policy range, policy expiration
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:44:23 -07:00
caleb miles
7bb3504d3f rgw: handle expiration and content length policy conditions.
Signed-off-by: caleb miles <caleb.miles@inktank.com>
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:44:18 -07:00
Yehuda Sadeh
ca1e1776fc rgw: implement POST key can use ${filename}
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
d7b59429f2 rgw: return correct responses with POST
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
3faf6ab56d rgw: handle success_action_redirect
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
846bb34335 rgw: handle policy as case insensitive where required
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
391775b78e rgw: handle missing content length in POST
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
fc05b63472 rgw: handle x-ignore- in POST request
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
52b78d511b rgw: verify that request variables are in policy
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
86b06f12a9 json_spirit: update grammar
Support a more relaxed grammar, where last entity in an array
or an object can have a comma trailing.

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
ccd757f019 rgw: add policy decoding code
merge in changes from commit 57668c14 by caleb

Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
5b90d10bc2 rgw: basic policy functionality
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
81f257d583 rgw: add a test tool for json parser
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
c2b702fac7 rgw: adjustments for 100-continue
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
d6d3bf060e rgw: handle content_type, meta
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
Yehuda Sadeh
9f9bc77f34 rgw: helper functions to parse multipart form
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:43:09 -07:00
caleb miles
1bafe7cdbd rgw: Create JSON parser
Create JSON object and parser classes similar to the XMLObj and
RGWXMLParser based on JSON Spirit.

Signed-off-by: caleb miles <caleb.miles@inktank.com>
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:42:50 -07:00
caleb miles
256bd62d21 rgw: Implement POST object to publicly writeable buckets.
The S3 API supports object upload using POST requests, for browser based
uploads, the specification is described at:

http://docs.amazonwebservices.com/AmazonS3/latest/API/RESTObjectPOST.html

In response to feature request 771:

http://tracker.newdream.net/issues/771

Signed-off-by: caleb miles <caleb.miles@inktank.com>
Signed-off-by: Yehuda Sadeh <yehuda@inktank.com>
2012-10-23 10:42:40 -07:00
Dan Mick
0ec45201f5 rbd: don't issue usage on errors
Change bare calls to usage() to an informative targeted error message
Remove all calls to usage() except when requested with -h/--help
Regularize all errors to start with rbd:
Remove a few commented cerrs, wrap cerr calls at 80 cols

Signed-off-by: Dan Mick <dan.mick@inktank.com>
Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
2012-10-10 17:41:27 -07:00
John Wilkins
29bd476762 Merge branch 'master' of https://github.com/ceph/ceph 2012-10-10 15:16:17 -07:00
John Wilkins
7477a0812a doc: Added radosgw temp remove.
fixes: #3278

Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 15:15:32 -07:00
John Wilkins
041081caa8 doc: Minor clean-up.
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 15:14:05 -07:00
John Wilkins
94aec21f23 doc: minor clean-up.
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 15:13:41 -07:00
Noah Watkins
fc34f16af5 rgw: fix compilation
Signed-off-by: Noah Watkins <noahwatkins@gmail.com>
2012-10-10 15:00:03 -07:00
John Wilkins
c0f0317b77 Merge branch 'master' of https://github.com/ceph/ceph
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 14:38:50 -07:00
John Wilkins
8069aed993 Merge branch 'master' of https://github.com/ceph/ceph 2012-10-10 14:36:51 -07:00
John Wilkins
8f07729ad1 Merge branch 'wip-rbd-openstack-doc' 2012-10-10 14:36:13 -07:00
Sage Weil
15775f89c5 mon: drop command replies on paxos reset
If paxos resets, do not send the reply for the commit we were waiting for;
let the command be reprocessed and re-proposed.

Among other things, this could lead to nondeterministic results for
'ceph osd create <uuid>'.

Signed-off-by: Sage Weil <sage@inktank.com>
2012-10-10 14:19:58 -07:00
John Wilkins
06a8d9534d doc: Editing and cleanup.
Signed-off-by: John Wilkins <john.wilkins@inktank.com>
2012-10-10 13:22:47 -07:00