[openstack-dev] [puppet][keystone] Keystone resource naming with domain support - no '::domain' if 'Default'

Gilles Dubreuil gilles at redhat.com
Thu Aug 27 06:59:18 UTC 2015



On 26/08/15 06:30, Rich Megginson wrote:
> This concerns the support of the names of domain scoped Keystone
> resources (users, projects, etc.) in puppet.
> 
> At the puppet-openstack meeting today [1] we decided that
> puppet-openstack will support Keystone domain scoped resource names
> without a '::domain' in the name, only if the 'default_domain_id'
> parameter in Keystone has _not_ been set.  That is, if the default
> domain is 'Default'.  In addition:
> 
> * In the OpenStack L release, if 'default_domain_id' is set, puppet will
> issue a warning if a name is used without '::domain'.
> * In the OpenStack M release, puppet will issue a warning if a name is
> used without '::domain', even if 'default_domain_id' is not set.
> * In N (or possibly, O), resource names will be required to have
> '::domain'.
> 

+1

> The current spec [2] and current code [3] try to support names without a
> '::domain' in the name, in non-default domains, provided the name is
> unique across _all_ domains.  This will have to be changed in the
> current code and spec.
> 

Ack

> 
> [1]
> http://eavesdrop.openstack.org/meetings/puppet_openstack/2015/puppet_openstack.2015-08-25-15.01.html
> 
> [2]
> http://specs.openstack.org/openstack/puppet-openstack-specs/specs/kilo/api-v3-support.html
> 
> [3]
> https://github.com/openstack/puppet-keystone/blob/master/lib/puppet/provider/keystone_user/openstack.rb#L217
> 
> 
> 
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



More information about the OpenStack-dev mailing list