[openstack-dev] [puppet][keystone] Keystone resource naming with domain support - no '::domain' if 'Default'

Rich Megginson rmeggins at redhat.com
Tue Aug 25 20:30:52 UTC 2015


This concerns the support of the names of domain scoped Keystone 
resources (users, projects, etc.) in puppet.

At the puppet-openstack meeting today [1] we decided that 
puppet-openstack will support Keystone domain scoped resource names 
without a '::domain' in the name, only if the 'default_domain_id' 
parameter in Keystone has _not_ been set.  That is, if the default 
domain is 'Default'.  In addition:

* In the OpenStack L release, if 'default_domain_id' is set, puppet will 
issue a warning if a name is used without '::domain'.
* In the OpenStack M release, puppet will issue a warning if a name is 
used without '::domain', even if 'default_domain_id' is not set.
* In N (or possibly, O), resource names will be required to have '::domain'.

The current spec [2] and current code [3] try to support names without a 
'::domain' in the name, in non-default domains, provided the name is 
unique across _all_ domains.  This will have to be changed in the 
current code and spec.


[1] 
http://eavesdrop.openstack.org/meetings/puppet_openstack/2015/puppet_openstack.2015-08-25-15.01.html
[2] 
http://specs.openstack.org/openstack/puppet-openstack-specs/specs/kilo/api-v3-support.html
[3] 
https://github.com/openstack/puppet-keystone/blob/master/lib/puppet/provider/keystone_user/openstack.rb#L217




More information about the OpenStack-dev mailing list