[openstack-dev] [Neutron] - what integration with Keystone is allowed?

Nader Lahouti nader.lahouti at gmail.com
Mon Sep 22 05:57:24 UTC 2014


Thanks Kevin for bring it up in the ML, I was looking for a guideline or
any document to clarify issues on this subject.

I was told, even using keystone API in neutron is not permitted.

Thanks,
Nader.


On Sun, Sep 21, 2014 at 12:58 PM, Kevin Benton <blak111 at gmail.com> wrote:

> So based on those guidelines there would be a problem with the IBM patch
> because it's storing the tenant name in a backend controller, right?
> On Sep 21, 2014 12:18 PM, "Dolph Mathews" <dolph.mathews at gmail.com> wrote:
>
>> Querying keystone for tenant names is certainly fair game.
>>
>> Keystone should be considered the only source of truth for tenant names
>> though, as they are mutable and not globally unique on their own, so other
>> services should not stash any names from keystone into long term
>> persistence (users, projects, domains, groups, etc-- roles might be an odd
>> outlier worth a separate conversation if anyone is interested).
>>
>> Store IDs where necessary, and use IDs on the wire where possible though,
>> as they are immutable.
>>
>> On Sat, Sep 20, 2014 at 7:46 PM, Kevin Benton <blak111 at gmail.com> wrote:
>>
>>> Hello all,
>>>
>>> A patch has come up to query keystone for tenant names in the IBM
>>> plugin.[1] As I understand it, this was one of the reasons another
>>> mechanism driver was reverted.[2] Can we get some clarity on the level
>>> of integration with Keystone that is permitted?
>>>
>>> Thanks
>>>
>>> 1. https://review.openstack.org/#/c/122382
>>> 2. https://review.openstack.org/#/c/118456
>>>
>>> --
>>> Kevin Benton
>>>
>>> _______________________________________________
>>> OpenStack-dev mailing list
>>> OpenStack-dev at lists.openstack.org
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>
>>
>>
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140921/39c87c43/attachment.html>


More information about the OpenStack-dev mailing list