Bug Reference

Unable to render Jira issues macro, execution error.  

Functional Specification

Several organizations use Cloudian as S3 provider, the aim is to develop a Cloudian connector for CloudStack that can do the following:

  • Provide ease in connector configuration using CloudStack global settings
  • Perform SSO from CloudStack UI into Cloudian Management Console (CMC) when the connector is enabled
  • Auto provisioning and de-provisioning of CloudStack accounts and domains as Cloudian users and groups respectively
  • During CloudStack UI logout, logout user from CMC

CloudStack account will be mapped to Cloudian Users, and CloudStack domain will be mapped to Cloudian Groups.

The CloudStack admin account is mapped to Cloudian admin (user name configurable).

The user/group provisioning will be from CloudStack to Cloudian only, i.e. user/group addition/removal/updation/deactivation in Cloudian portal (CMC) won't propagate the changes to CloudStack.

UI

When enabled, a "Cloudian" tab appears in the UI which when clicked performs SSO and opens CMC in a new browser window/tab:

APIs

  • cloudianIsEnabled: API to check whether Cloudian Connector is enabled. This is primarily used by the UI plugin to show/hide the Cloudian UI tab and inject logout overrides.

  • cloudianSsoLogin: Performs SSO for the logged-in, requesting user and returns the URL that can be used to perform SSO and log into CMC.

Global Settings

Setting NameDefault ValueDescription
cloudian.connector.enabledfalse
If set to true, this enables the Cloudian Connector for CloudStack. Restarting management server(s) is required.
cloudian.admin.host
s3-admin.cloudian.com
The host where Cloudian Admin services are accessible.
cloudian.admin.port
19443
The admin service port.
cloudian.admin.protocol
httpsThe admin service API scheme/protocol.
cloudian.validate.ssl
trueWhen set to true, this validates the certificate of the https-enabled admin API service.
cloudian.admin.user
sysadminThe admin user's name when making (admin) API calls.
cloudian.admin.password
publicThe admin password used when making (admin) API calls.
cloudian.api.request.timeout
5The API request timeout used by the internal HTTP/s client.
cloudian.cmc.admin.user
adminThe CMC admin user's name.
cloudian.cmc.host
cmc.cloudian.com
The CMC host.
cloudian.cmc.port
8443
The CMC service port.
cloudian.cmc.protocol
httpsThe CMC service scheme/protocol.
cloudian.sso.key
ss0sh5r3dk3y
The Single-Sign-On shared key.
  • No labels