OpenStack Authentication Via GitLab

[s-newman]

OpenStack Authentication Via GitLab

GitLab will be used as an identity provider for keystone via OpenID Connect. This way, we don't have to manage another set of accounts. Also, it will vastly reduce the management load on us for accounts - GitLab already has self-service account setup and password reset that is based on a user's existing email address.

Depends on

This issue depends on the following issues

• Deploy OpenStack #8

Tasks

All of the following tasks must be complete before this issue can be closed. Be sure to reference this issue in the relevant issues/PRs in other repositories.

• Configure keystone to use GitLab as an OpenID Connect provider
• Update RITSEC's openstack-ansible to configure keystone properly
• Document how to set up OpenID Connect on GitLab, how it works with keystone, and why we chose to use it