[openstack-dev] [puppet][keystone] Keystone resource naming with domain support - no '::domain' if 'Default'

Gilles Dubreuil gilles at redhat.com
Thu Aug 27 12:40:38 UTC 2015



On 27/08/15 16:59, Gilles Dubreuil wrote:
> 
> 
> On 26/08/15 06:30, Rich Megginson wrote:
>> This concerns the support of the names of domain scoped Keystone
>> resources (users, projects, etc.) in puppet.
>>
>> At the puppet-openstack meeting today [1] we decided that
>> puppet-openstack will support Keystone domain scoped resource names
>> without a '::domain' in the name, only if the 'default_domain_id'
>> parameter in Keystone has _not_ been set.  That is, if the default
>> domain is 'Default'.  In addition:
>>
>> * In the OpenStack L release, if 'default_domain_id' is set, puppet will
>> issue a warning if a name is used without '::domain'.

The default domain is always set to 'default' unless overridden to
something else.

>> * In the OpenStack M release, puppet will issue a warning if a name is
>> used without '::domain', even if 'default_domain_id' is not set.

Therefore the 'default_domain_id' is never 'not set'.

>> * In N (or possibly, O), resource names will be required to have
>> '::domain'.
>>

I understand, from Openstack N release and ongoing, the domain would be
mandatory.

So I would like to revisit the list:

* In OpenStack L release:
  Puppet will issue a warning if a name is used without '::domain'.

* In OpenStack M release:
  Puppet will issue a warning if a name is used without '::domain'.

* From Openstack N release:
  A name must be used with '::domain'.


> 
> +1
> 
>> The current spec [2] and current code [3] try to support names without a
>> '::domain' in the name, in non-default domains, provided the name is
>> unique across _all_ domains.  This will have to be changed in the
>> current code and spec.
>>
> 
> Ack
> 
>>
>> [1]
>> http://eavesdrop.openstack.org/meetings/puppet_openstack/2015/puppet_openstack.2015-08-25-15.01.html
>>
>> [2]
>> http://specs.openstack.org/openstack/puppet-openstack-specs/specs/kilo/api-v3-support.html
>>
>> [3]
>> https://github.com/openstack/puppet-keystone/blob/master/lib/puppet/provider/keystone_user/openstack.rb#L217
>>
>>
>>
>> __________________________________________________________________________
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 



More information about the OpenStack-dev mailing list