Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update docs for extra authenticators PR #176

Open
wants to merge 5 commits into
base: devel
Choose a base branch
from
Open
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 25 additions & 3 deletions docs/configuration/04-target-cloud.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,14 +27,36 @@ trustroots, TLS verification must be disabled:
```yaml title="environments/my-site/inventory/group_vars/all/variables.yml"
azimuth_openstack_verify_ssl: false
```
## Password authenticators

If you are using the password authenticator and use a domain other than `default`,
you will also need to tell Azimuth the name of the domain to use when authenticating:
If you are, for example, using further OpenStack password authenticators in addition to the ```Default```
domain, you can set any number of additional authenticators by configuring the
```azimuth_authenticators_extra``` variable in your Azimuth environment's ```variables.yml``` file.

The default OpenStack Keystone password authenticator configuration can be used as a template for
additional password authenticators. For example, to add an authenticator for the ```my-domain``` domain:

```yaml title="environments/my-site/inventory/group_vars/all/variables.yml"
azimuth_openstack_domain: my-domain
azimuth_authenticators_extra:
- hidden: false
label: "What shows up on login dropdown menu"
name: a_unique_name
MaxBed4d marked this conversation as resolved.
Show resolved Hide resolved
type: openstack-password
openstackPassword:
authUrl: https://keystone.openstack.example.com/v3
domain: my-domain
verifySsl: true
```

Note that at the moment there isn't a check implemented to make sure that all necessary fields have been provided.
Therefore if adding any extra authenticators you should include all fields listed above.

Due to the nature of ```azimuth_authenticators_extra``` it is possible to add any type of compatible authenticator,
just provide the necessary fields for the authenticator type you are adding.

To apply the changes, run ```ansible-playbook azimuth_cloud.azimuth_ops.provision``` from
your Azimuth config directory.
MaxBed4d marked this conversation as resolved.
Show resolved Hide resolved

## Cloud name

Azimuth presents the name of the current cloud in various places in the interface. To configure
Expand Down