Summary

This change brings support to use access tokens directly for authentication to the OpenStack projects. For every share, the accesstoken refresher will take the information available in the auth config of the share and just pass it to the OpenStack provider so it can be further used. It does not try to refresh or any other kind of magic, the token is assumed to be valid for the project.

Sample configuration:

compute:
  shares:
    vo-name:
      auth:
        project_id: "the project id"
        access_token: "<the access token>"

Using it from command line:

$ cloud-info-provider-service \
        --yaml-file openstack.yaml \
        --middleware openstack \
        --auth-refresher accesstoken \
        --os-auth-type v3oidcaccesstoken \
        --os-identitiy-provider egi.eu \
        --os-protocol openid \
        --format glue21

Related issue :

EGI-Federation / cloud-info-provider

Get ready for refreshing just with access tokens #247

Summary