[openstack-dev] correction: Re: [puppet][keystone] Keystone resource naming with domain support - no '::domain' if 'Default'
Rich Megginson
rmeggins at redhat.com
Wed Sep 2 02:26:11 UTC 2015
Slight correction below:
On 09/01/2015 10:56 AM, Rich Megginson wrote:
> To close this thread:
> http://lists.openstack.org/pipermail/openstack-dev/2015-August/072878.html
>
> puppet-openstack will support Keystone domain scoped resource names
> without a '::domain' in the name, only if the 'default_domain_id'
> parameter in Keystone has _not_ been set.
Or if the 'default_domain_id' parameter has been set to 'default'.
> That is, if the default domain is 'Default'. This means that if the
> user/operator doesn't care about domains at all, the operator doesn't
> have to deal with them. However, once the user/operator uses
> `keystone_domain`, and uses `is_default => true`, this means the
> user/operator _must_ use '::domain' with _all_ domain scoped Keystone
> resource names.
Note that the domain named 'Default' with the UUID 'default' is created
automatically by Keystone, so no need for puppet to create it or ensure
that it exists.
>
> In addition:
>
> * In the OpenStack L release:
> If 'default_domain_id' is set,
or if 'default_domain_id' is not 'default',
> puppet will issue a warning if a name is used without '::domain'. I
> think this is a good thing to do, just in case someone sets the
> default_domain_id by mistake.
>
> * In OpenStack M release:
> Puppet will issue a warning if a name is used without '::domain'.
>
> * From Openstack N release:
> A name must be used with '::domain'.
>
>
> __________________________________________________________________________
>
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe:
> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
More information about the OpenStack-dev
mailing list