API Basic Authentication

[tzach]

Usage:

curl -u "username" https://server-ip/api/...

username and pass will be set on system load using cloud-init [1]
both are load-time configuration, and can not be update on run-time.
[1] cloudius-systems/osv#139

[rowlandwatkins]

It might be more beneficial to use TLS mutual auth rather than basic auth - machines are surely more likely to use the API than humans, imagine the equivalent of ~/.ssh/authorized_keys generated via cloud-init...