<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 15, 2017 at 1:12 PM, Harry Rybacki <span dir="ltr"><<a href="mailto:hrybacki@redhat.com" target="_blank">hrybacki@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="gmail-">On Thu, Jun 15, 2017 at 1:57 PM, Brant Knudson <<a href="mailto:blk@acm.org">blk@acm.org</a>> wrote:<br>
><br>
><br>
> On Thu, Jun 15, 2017 at 5:14 AM, Mikhail Fedosin <<a href="mailto:mfedosin@gmail.com">mfedosin@gmail.com</a>> wrote:<br>
>><br>
>> Recently I decided to remove deprecated parameters from keystone_authtoken<br>
>> mistral config and replace them with recommended function of devstack [1].<br>
>> In doing so, I discovered a strange behavior of configuration mechanism, and<br>
>> specifically parameters auth_uri and auth_url.<br>
>><br>
>> 1. The parameter auth_url is not included in the list of the middleware<br>
>> parameters, there is auth_uri only [2]. Nevertheless, it must be present,<br>
>> because it's required by identity plugin [3]. Attempts to remove or replace<br>
>> it with the recommended auth_uri result with these stacktraces [4]<br>
>><br>
>> 2. Even if auth_url is set, it can't be used later, because it is not<br>
>> registered in oslo_config [5]<br>
>><br>
>> So I would like to get an advise from keystone team and understand what I<br>
>> should do in such cases. Official documentation doesn't add clarity on the<br>
>> matter because it recommends to use auth_uri in some cases and auth_url in<br>
>> others.<br>
><br>
><br>
> While to a human auth_uri and auth_url might look very similar they're<br>
> treated completely differently by auth_token / keystoneauth. One doesn't<br>
> replace the other in any way. So it shouldn't be surprising that<br>
> documentation would say to use auth_uri for one thing and auth_url for<br>
> something else.<br>
><br>
</span>In this case it's probably worth filing a docs bug against Keystone.<br>
If one person is confused by this, others likely are or will be.<br>
<span class="gmail-HOEnZb"><font color="#888888"><br>
- Harry<br>
</font></span><div class="gmail-HOEnZb"><div class="gmail-h5"><br></div></div></blockquote><div><br></div><div>I created a bug against keystonemiddleware: <a href="https://bugs.launchpad.net/keystonemiddleware/+bug/1698401">https://bugs.launchpad.net/keystonemiddleware/+bug/1698401</a> . HTH.</div><div><br></div><div>- Brant</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="gmail-HOEnZb"><div class="gmail-h5">
>  - Brant<br>
><br>
><br>
>><br>
>> My suggestion is to add auth_url in the list of keystone authtoken<br>
>> middleware config options, so that the parameter can be used by the others.<br>
>><br>
>> Best,<br>
>> Mike<br>
>><br>
>> [1] <a href="https://review.openstack.org/#/c/473796/" rel="noreferrer" target="_blank">https://review.openstack.org/#<wbr>/c/473796/</a><br>
>> [2]<br>
>> <a href="https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/_opts.py#L31" rel="noreferrer" target="_blank">https://github.com/openstack/<wbr>keystonemiddleware/blob/<wbr>master/keystonemiddleware/<wbr>auth_token/_opts.py#L31</a><br>
>> [3]<br>
>> <a href="https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/loading/identity.py#L37" rel="noreferrer" target="_blank">https://github.com/openstack/<wbr>keystoneauth/blob/master/<wbr>keystoneauth1/loading/<wbr>identity.py#L37</a><br>
>> [4] <a href="http://paste.openstack.org/show/612662/" rel="noreferrer" target="_blank">http://paste.openstack.org/<wbr>show/612662/</a><br>
>> [5] <a href="http://paste.openstack.org/show/612664/" rel="noreferrer" target="_blank">http://paste.openstack.org/<wbr>show/612664/</a><br>
>><br>
>> ______________________________<wbr>______________________________<wbr>______________<br>
>> OpenStack Development Mailing List (not for usage questions)<br>
>> Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
>><br>
><br>
><br>
> ______________________________<wbr>______________________________<wbr>______________<br>
> OpenStack Development Mailing List (not for usage questions)<br>
> Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
><br>
<br>
______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">- Brant<br></div></div>
</div></div>