
Using the cinderclient to fetch server versions will fail with error `OpenSSL.SSL.Error: [sslv3 alert handshake failure]` when the server requires client certificates to be passed with these requests. Added the optional parameter `cert` to both get_server_version get_highest_client_server_version and methods so that users can have the option to pass client certificates while fetching server versions. Also support passing mTLS certificate/key to HTTPClient Closes-Bug: #1915996 Change-Id: I57c665dd9d4b8c32e5f10994d891d1e0f5315548 Signed-off-by: sri harsha mekala <smekala@oath.com>
155 lines
6.3 KiB
Python
155 lines
6.3 KiB
Python
# Copyright (c) 2013 OpenStack Foundation
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from cinderclient import api_versions
|
|
from cinderclient import client
|
|
from cinderclient.v3 import attachments
|
|
from cinderclient.v3 import availability_zones
|
|
from cinderclient.v3 import capabilities
|
|
from cinderclient.v3 import cgsnapshots
|
|
from cinderclient.v3 import clusters
|
|
from cinderclient.v3 import consistencygroups
|
|
from cinderclient.v3 import default_types
|
|
from cinderclient.v3 import group_snapshots
|
|
from cinderclient.v3 import group_types
|
|
from cinderclient.v3 import groups
|
|
from cinderclient.v3 import limits
|
|
from cinderclient.v3 import messages
|
|
from cinderclient.v3 import pools
|
|
from cinderclient.v3 import qos_specs
|
|
from cinderclient.v3 import quota_classes
|
|
from cinderclient.v3 import quotas
|
|
from cinderclient.v3 import resource_filters
|
|
from cinderclient.v3 import services
|
|
from cinderclient.v3 import volume_backups
|
|
from cinderclient.v3 import volume_backups_restore
|
|
from cinderclient.v3 import volume_encryption_types
|
|
from cinderclient.v3 import volume_snapshots
|
|
from cinderclient.v3 import volume_transfers
|
|
from cinderclient.v3 import volume_type_access
|
|
from cinderclient.v3 import volume_types
|
|
from cinderclient.v3 import volumes
|
|
from cinderclient.v3 import workers
|
|
|
|
|
|
class Client(object):
|
|
"""Top-level object to access the OpenStack Volume API.
|
|
|
|
Create an instance with your creds::
|
|
|
|
>>> client = Client(USERNAME, PASSWORD, PROJECT_ID, AUTH_URL)
|
|
|
|
Then call methods on its managers::
|
|
|
|
>>> client.volumes.list()
|
|
...
|
|
"""
|
|
|
|
def __init__(self, username=None, api_key=None, project_id=None,
|
|
auth_url='', insecure=False, timeout=None, tenant_id=None,
|
|
proxy_tenant_id=None, proxy_token=None, region_name=None,
|
|
endpoint_type='publicURL', extensions=None,
|
|
service_type='volumev3', service_name=None,
|
|
volume_service_name=None, os_endpoint=None, retries=0,
|
|
http_log_debug=False, cacert=None, cert=None,
|
|
auth_system='keystone', auth_plugin=None, session=None,
|
|
api_version=None, logger=None, **kwargs):
|
|
# FIXME(comstud): Rename the api_key argument above when we
|
|
# know it's not being used as keyword argument
|
|
password = api_key
|
|
self.version = '3.0'
|
|
self.limits = limits.LimitsManager(self)
|
|
self.api_version = api_version or api_versions.APIVersion(self.version)
|
|
|
|
self.volumes = volumes.VolumeManager(self)
|
|
self.volume_snapshots = volume_snapshots.SnapshotManager(self)
|
|
self.volume_types = volume_types.VolumeTypeManager(self)
|
|
self.group_types = group_types.GroupTypeManager(self)
|
|
self.volume_type_access = \
|
|
volume_type_access.VolumeTypeAccessManager(self)
|
|
self.volume_encryption_types = \
|
|
volume_encryption_types.VolumeEncryptionTypeManager(self)
|
|
self.default_types = default_types.DefaultVolumeTypeManager(self)
|
|
self.qos_specs = qos_specs.QoSSpecsManager(self)
|
|
self.quota_classes = quota_classes.QuotaClassSetManager(self)
|
|
self.quotas = quotas.QuotaSetManager(self)
|
|
self.backups = volume_backups.VolumeBackupManager(self)
|
|
self.messages = messages.MessageManager(self)
|
|
self.resource_filters = resource_filters.ResourceFilterManager(self)
|
|
self.restores = volume_backups_restore.VolumeBackupRestoreManager(self)
|
|
self.transfers = volume_transfers.VolumeTransferManager(self)
|
|
self.services = services.ServiceManager(self)
|
|
self.clusters = clusters.ClusterManager(self)
|
|
self.workers = workers.WorkerManager(self)
|
|
self.consistencygroups = consistencygroups.\
|
|
ConsistencygroupManager(self)
|
|
self.groups = groups.GroupManager(self)
|
|
self.cgsnapshots = cgsnapshots.CgsnapshotManager(self)
|
|
self.group_snapshots = group_snapshots.GroupSnapshotManager(self)
|
|
self.availability_zones = \
|
|
availability_zones.AvailabilityZoneManager(self)
|
|
self.pools = pools.PoolManager(self)
|
|
self.capabilities = capabilities.CapabilitiesManager(self)
|
|
self.attachments = \
|
|
attachments.VolumeAttachmentManager(self)
|
|
|
|
# Add in any extensions...
|
|
if extensions:
|
|
for extension in extensions:
|
|
if extension.manager_class:
|
|
setattr(self, extension.name,
|
|
extension.manager_class(self))
|
|
|
|
self.client = client._construct_http_client(
|
|
username=username,
|
|
password=password,
|
|
project_id=project_id,
|
|
auth_url=auth_url,
|
|
insecure=insecure,
|
|
timeout=timeout,
|
|
tenant_id=tenant_id,
|
|
proxy_tenant_id=tenant_id,
|
|
proxy_token=proxy_token,
|
|
region_name=region_name,
|
|
endpoint_type=endpoint_type,
|
|
service_type=service_type,
|
|
service_name=service_name,
|
|
volume_service_name=volume_service_name,
|
|
os_endpoint=os_endpoint,
|
|
retries=retries,
|
|
http_log_debug=http_log_debug,
|
|
cacert=cacert,
|
|
cert=cert,
|
|
auth_system=auth_system,
|
|
auth_plugin=auth_plugin,
|
|
session=session,
|
|
api_version=self.api_version,
|
|
logger=logger,
|
|
**kwargs)
|
|
|
|
def authenticate(self):
|
|
"""Authenticate against the server.
|
|
|
|
Normally this is called automatically when you first access the API,
|
|
but you can call this method to force authentication right now.
|
|
|
|
Returns on success; raises :exc:`exceptions.Unauthorized` if the
|
|
credentials are wrong.
|
|
"""
|
|
self.client.authenticate()
|
|
|
|
def get_volume_api_version_from_endpoint(self):
|
|
return self.client.get_volume_api_version_from_endpoint()
|