[openstack-dev] [puppet][keystone] Keystone resource naming with domain support - no '::domain' if 'Default'
Morgan Fainberg
morgan.fainberg at gmail.com
Wed Aug 26 14:32:45 UTC 2015
This seems quite reasonable. +1
Sent via mobile
> On Aug 25, 2015, at 13:30, Rich Megginson <rmeggins at redhat.com> wrote:
>
> This concerns the support of the names of domain scoped Keystone resources (users, projects, etc.) in puppet.
>
> At the puppet-openstack meeting today [1] we decided that puppet-openstack will support Keystone domain scoped resource names without a '::domain' in the name, only if the 'default_domain_id' parameter in Keystone has _not_ been set. That is, if the default domain is 'Default'. In addition:
>
> * In the OpenStack L release, if 'default_domain_id' is set, puppet will issue a warning if a name is used without '::domain'.
> * In the OpenStack M release, puppet will issue a warning if a name is used without '::domain', even if 'default_domain_id' is not set.
> * In N (or possibly, O), resource names will be required to have '::domain'.
>
> The current spec [2] and current code [3] try to support names without a '::domain' in the name, in non-default domains, provided the name is unique across _all_ domains. This will have to be changed in the current code and spec.
>
>
> [1] http://eavesdrop.openstack.org/meetings/puppet_openstack/2015/puppet_openstack.2015-08-25-15.01.html
> [2] http://specs.openstack.org/openstack/puppet-openstack-specs/specs/kilo/api-v3-support.html
> [3] https://github.com/openstack/puppet-keystone/blob/master/lib/puppet/provider/keystone_user/openstack.rb#L217
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
More information about the OpenStack-dev
mailing list