mirror of
				https://github.com/apache/cloudstack.git
				synced 2025-11-04 00:02:37 +01:00 
			
		
		
		
	Several organizations use Cloudian as S3 provider, this implements the Cloudian Management Console connector for CloudStack that can do the following: - Provide ease in connector configuration using CloudStack global settings - Perform SSO from CloudStack UI into Cloudian Management Console (CMC) when the connector is enabled - Automatic provisioning and de-provisioning of CloudStack accounts and domains as Cloudian users and groups respectively - During CloudStack UI logout, logout user from CMC - CloudStack account will be mapped to Cloudian Users, and CloudStack domain will be mapped to Cloudian Groups. - The CloudStack admin account is mapped to Cloudian admin (user name configurable). - The user/group provisioning will be from CloudStack to Cloudian only, i.e. user/group addition/removal/updation/deactivation in Cloudian portal (CMC) won't propagate the changes to CloudStack. FS: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Cloudian+Connector+for+CloudStack New APIs: - `cloudianIsEnabled`: API to check whether Cloudian Connector is enabled. - `cloudianSsoLogin`: Performs SSO for the logged-in, requesting user and returns the URL that can be used to perform SSO and log into CMC. New Global Settings: - cloudian.connector.enabled (false) If set to true, this enables the Cloudian Connector for CloudStack. Restarting management server(s) is required. - cloudian.admin.host (s3-admin.cloudian.com) The host where Cloudian Admin services are accessible. - cloudian.admin.port (19443) The admin service port. - cloudian.admin.protocol (https) The admin service API scheme/protocol. - cloudian.validate.ssl (true) When set to true, this validates the certificate of the https-enabled admin API service. - cloudian.admin.user (sysadmin) The admin user's name when making (admin) API calls. - cloudian.admin.password (public) The admin password used when making (admin) API calls. - cloudian.api.request.timeout (5) The API request timeout in seconds used by the internal HTTP/s client. - cloudian.cmc.admin.user (admin) The CMC admin user's name. - cloudian.cmc.host (cmc.cloudian.com) The CMC host. - cloudian.cmc.port (8443) The CMC service port. - cloudian.cmc.protocol (https) The CMC service scheme/protocol. - cloudian.sso.key (ss0sh5r3dk3y) The Single-Sign-On shared key. Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
		
			
				
	
	
		
			67 lines
		
	
	
		
			2.6 KiB
		
	
	
	
		
			JavaScript
		
	
	
	
	
	
			
		
		
	
	
			67 lines
		
	
	
		
			2.6 KiB
		
	
	
	
		
			JavaScript
		
	
	
	
	
	
// Licensed to the Apache Software Foundation (ASF) under one
 | 
						|
// or more contributor license agreements.  See the NOTICE file
 | 
						|
// distributed with this work for additional information
 | 
						|
// regarding copyright ownership.  The ASF licenses this file
 | 
						|
// to you under the Apache License, Version 2.0 (the
 | 
						|
// "License"); you may not use this file except in compliance
 | 
						|
// with the License.  You may obtain a copy of the License at
 | 
						|
//
 | 
						|
//   http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
//
 | 
						|
// Unless required by applicable law or agreed to in writing,
 | 
						|
// software distributed under the License is distributed on an
 | 
						|
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 | 
						|
// KIND, either express or implied.  See the License for the
 | 
						|
// specific language governing permissions and limitations
 | 
						|
// under the License.
 | 
						|
 | 
						|
(function (cloudStack) {
 | 
						|
  cloudStack.plugins.cloudian = function(plugin) {
 | 
						|
 | 
						|
    plugin.ui.addSection({
 | 
						|
      id: 'cloudian',
 | 
						|
      title: 'Cloudian Storage',
 | 
						|
      showOnNavigation: true,
 | 
						|
      preFilter: function(args) {
 | 
						|
        var pluginEnabled = false;
 | 
						|
        $.ajax({
 | 
						|
            url: createURL('cloudianIsEnabled'),
 | 
						|
            async: false,
 | 
						|
            success: function(json) {
 | 
						|
                var response = json.cloudianisenabledresponse.cloudianisenabled;
 | 
						|
                pluginEnabled = response.enabled;
 | 
						|
                if (pluginEnabled) {
 | 
						|
                    var cloudianLogoutUrl = response.url + "logout.htm?";
 | 
						|
                    onLogoutCallback = function() {
 | 
						|
                        g_loginResponse = null;
 | 
						|
                        var csUrl = window.location.href;
 | 
						|
                        var redirect = "redirect=" + encodeURIComponent(csUrl);
 | 
						|
                        window.location.replace(cloudianLogoutUrl + redirect);
 | 
						|
                        return false;
 | 
						|
                    };
 | 
						|
                }
 | 
						|
            }
 | 
						|
        });
 | 
						|
        return pluginEnabled;
 | 
						|
      },
 | 
						|
 | 
						|
      show: function() {
 | 
						|
        var description = 'Cloudian Management Console should open in another window.';
 | 
						|
        $.ajax({
 | 
						|
            url: createURL('cloudianSsoLogin'),
 | 
						|
            async: false,
 | 
						|
            success: function(json) {
 | 
						|
                var response = json.cloudianssologinresponse.cloudianssologin;
 | 
						|
                var cmcWindow = window.open(response.url, "CMCWindow");
 | 
						|
                cmcWindow.focus();
 | 
						|
            },
 | 
						|
            error: function(data) {
 | 
						|
                description = 'Single-Sign-On failed for Cloudian Management Console. Please ask your administrator to fix integration issues.';
 | 
						|
            }
 | 
						|
        });
 | 
						|
        return $('<div style="margin: 20px;">').html(description);
 | 
						|
      }
 | 
						|
    });
 | 
						|
  };
 | 
						|
}(cloudStack));
 |