Authenticated alarm notifications

Registered by Thomas Herve on 2014-03-05

We'd like alarm actions to be able to be authentified. The scenario is using ceilometer to trigger autoscaling actions.

One idea is to have a ceilometer service user, and creating trusts for it when creating the alarm. The ceilometer user can then impersonate the user when talking back to heat.

We'd need specific URLs encoding the necessary information, which is one full URL and one user to trust:

trust+http://user@host/path/ would talk to "http://host/path" impersonating "user".

Blueprint information

Status:
Complete
Approver:
Eoghan Glynn
Priority:
Medium
Drafter:
Thomas Herve
Direction:
Approved
Assignee:
Thomas Herve
Definition:
Approved
Series goal:
Accepted for liberty
Implementation:
Implemented
Milestone target:
milestone icon 5.0.0
Started by
Thomas Herve on 2014-04-13
Completed by
gordon chung on 2015-07-10

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/trust-alarm-notifier,n,z

Addressed by: https://review.openstack.org/87110
    Add a alarm notification using trusts

Please mark this BP as Implementation complete as the above code has been merged.

Addressed by: https://review.openstack.org/185503
    Optional create trust for alarm actions

marking approved since half the work was already implemented a while ago -- gordc (17.6.15)

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.