OpenStack Projects and Domains discovery

Identification

Triggers

Pattern name	Trigger node	Attribute	Condition	Argument
InferProjects	DiscoveryAccess	provider	=	"openstack"

The pattern trigger on DiscoveryAccess nodes of the Discovery run, but will be executed only in case it is the first DiscoveryAccess of the DiscoveryRun.

This approach is used to not model Projects and Domains multiple times, but just once during the scan.

Endpoints in the REST API

REST API	Notes
OpenStack.Keystone.Domains.List	This API call is to be performed to get the list of domains
OpenStack.Keystone.Projects.List	This API call is to be performed to get the list of projects

Attributes

While iterating over OpenStack.Keystone.Domains.List results pattern will create CloudManagementGroup for each domain. All domains are linked to CloudProvider node.

Also pattern will use results from OpenStack.Keystone.Projects.List to model OpenStack projects. Each project either linked to related domain or parent project.

Each project will be linked to related CloudRegion as well. To make the model consistent with other Cloud Providers now CloudRegion is modeled for each Project.

Domain

Node type	Attribute	Default value
CloudManagementGroup	key	key
	name	"OpenStack Domain %result.name%"
	short_name	result.name
	type	"OpenStack Domain"
	description	result.description
	enabled	result.enabled
	id	result.id

Project

Node type	Attribute	Default value
CloudManagementGroup	key	key
	name	"OpenStack Project %result.name%"
	short_name	result.name
	type	"OpenStack Project"
	id	result.id
	enabled	result.enabled
	__provider	"openstack"
	cloud_id	result.id
	cloud	true
	domain_id	result.domain_id
	parent_id	result.parent_id

Information sources

For more information about the described product, see the following official documentation:

http://openstack.org