[openstack-dev] correction: Re: [puppet][keystone] Keystone resource naming with domain support - no '::domain' if 'Default'

Rich Megginson rmeggins at redhat.com
Wed Sep 2 02:26:11 UTC 2015


Slight correction below:

On 09/01/2015 10:56 AM, Rich Megginson wrote:
> To close this thread: 
> http://lists.openstack.org/pipermail/openstack-dev/2015-August/072878.html
>
> puppet-openstack will support Keystone domain scoped resource names 
> without a '::domain' in the name, only if the 'default_domain_id' 
> parameter in Keystone has _not_ been set.

Or if the 'default_domain_id' parameter has been set to 'default'.

> That is, if the default domain is 'Default'.  This means that if the 
> user/operator doesn't care about domains at all, the operator doesn't 
> have to deal with them.  However, once the user/operator uses 
> `keystone_domain`, and uses `is_default => true`, this means the 
> user/operator _must_ use '::domain' with _all_ domain scoped Keystone 
> resource names.

Note that the domain named 'Default' with the UUID 'default' is created 
automatically by Keystone, so no need for puppet to create it or ensure 
that it exists.

>
> In addition:
>
> * In the OpenStack L release:
>    If 'default_domain_id' is set,
or if 'default_domain_id' is not 'default',
> puppet will issue a warning if a name is used without '::domain'. I 
> think this is a good thing to do, just in case someone sets the 
> default_domain_id by mistake.
>
> * In OpenStack M release:
>    Puppet will issue a warning if a name is used without '::domain'.
>
> * From Openstack N release:
>    A name must be used with '::domain'.
>
>
> __________________________________________________________________________ 
>
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: 
> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




More information about the OpenStack-dev mailing list