[openstack-dev] [puppet][keystone] Keystone resource naming with domain support - no '::domain' if 'Default'

Rich Megginson rmeggins at redhat.com
Tue Sep 1 16:56:48 UTC 2015


To close this thread: 
http://lists.openstack.org/pipermail/openstack-dev/2015-August/072878.html

puppet-openstack will support Keystone domain scoped resource names 
without a '::domain' in the name, only if the 'default_domain_id' 
parameter in Keystone has _not_ been set. That is, if the default domain 
is 'Default'.  This means that if the user/operator doesn't care about 
domains at all, the operator doesn't have to deal with them.  However, 
once the user/operator uses `keystone_domain`, and uses `is_default => 
true`, this means the user/operator _must_ use '::domain' with _all_ 
domain scoped Keystone resource names.

In addition:

* In the OpenStack L release:
    If 'default_domain_id' is set, puppet will issue a warning if a name 
is used without '::domain'. I think this is a good thing to do, just in 
case someone sets the default_domain_id by mistake.

* In OpenStack M release:
    Puppet will issue a warning if a name is used without '::domain'.

* From Openstack N release:
    A name must be used with '::domain'.




More information about the OpenStack-dev mailing list