[openstack-dev] correction: Re: [puppet][keystone] Keystone resource naming with domain support - no '::domain' if 'Default'

Gilles Dubreuil gilles at redhat.com
Fri Oct 30 05:06:24 UTC 2015



On 02/09/15 12:26, Rich Megginson wrote:
> Slight correction below:
> 
> On 09/01/2015 10:56 AM, Rich Megginson wrote:
>> To close this thread:
>> http://lists.openstack.org/pipermail/openstack-dev/2015-August/072878.html
>>
>>
>> puppet-openstack will support Keystone domain scoped resource names
>> without a '::domain' in the name, only if the 'default_domain_id'
>> parameter in Keystone has _not_ been set.
> 
> Or if the 'default_domain_id' parameter has been set to 'default'.
> 
>> That is, if the default domain is 'Default'.  This means that if the
>> user/operator doesn't care about domains at all, the operator doesn't
>> have to deal with them.  However, once the user/operator uses
>> `keystone_domain`, and uses `is_default => true`, this means the
>> user/operator _must_ use '::domain' with _all_ domain scoped Keystone
>> resource names.
> 
> Note that the domain named 'Default' with the UUID 'default' is created
> automatically by Keystone, so no need for puppet to create it or ensure
> that it exists.
> 
>>
>> In addition:
>>
>> * In the OpenStack L release:
>>    If 'default_domain_id' is set,
> or if 'default_domain_id' is not 'default',
>> puppet will issue a warning if a name is used without '::domain'. I
>> think this is a good thing to do, just in case someone sets the
>> default_domain_id by mistake.
>>
>> * In OpenStack M release:
>>    Puppet will issue a warning if a name is used without '::domain'.
>>
>> * From Openstack N release:
>>    A name must be used with '::domain'.
>>
>>

In the light of the composite namevar solution things have evolved a bit.

The rule has slightly changed but the depecration warnings should be put
in place.

For those interested, the discussion is now happening here
https://etherpad.openstack.org/p/keystone_no_domain

Thanks,
Gilles

>> __________________________________________________________________________
>>
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



More information about the OpenStack-dev mailing list