identity definition

[rob-baron]

Identity should only be used in the mapping between an atmosphere user and a provider.

Currently for open stack, the project name is also related through the credential field. Unfortunately when a new login is done, a new identity is created (same default project).

So it would be cleaner to model this part as an inheritance hierarchy:

identity
    Key identity_id
    keystone unstopped token should be associated here.

provider_project
    key: identity_id, provider_project_id
    (keystone scoped token should be associated here)

instance
    key: identity_id, provider_project_id, instance_id

This way an identity has many projects, and a project has many instances

For now, I am removing the openstack project from the identity - this way there is not a separate identity for each project.

This simplifies the login process as we only need to store the current credentials at one identity (as opposed to n identities). Furthermore, it simplifies the login process and the switching between projects.