[openstack-dev] [Keystone][Mistral][Devstack] Confusion between auth_url and auth_uri in keystone middleware

Mikhail Fedosin mfedosin at gmail.com
Thu Jun 15 10:14:53 UTC 2017


Recently I decided to remove deprecated parameters from keystone_authtoken
mistral config and replace them with recommended function of devstack [1].
In doing so, I discovered a strange behavior of configuration mechanism,
and specifically parameters auth_uri and auth_url.

1. The parameter auth_url is not included in the list of the middleware
parameters, there is auth_uri only [2]. Nevertheless, it must be present,
because it's required by identity plugin [3]. Attempts to remove or replace
it with the recommended auth_uri result with these stacktraces [4]

2. Even if auth_url is set, it can't be used later, because it is not
registered in oslo_config [5]

So I would like to get an advise from keystone team and understand what I
should do in such cases. Official documentation doesn't add clarity on the
matter because it recommends to use auth_uri in some cases and auth_url in
others.
My suggestion is to add auth_url in the list of keystone authtoken
middleware config options, so that the parameter can be used by the others.

Best,
Mike

[1] https://review.openstack.org/#/c/473796/
[2]
https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/_opts.py#L31
[3]
https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/loading/identity.py#L37
[4] http://paste.openstack.org/show/612662/
[5] http://paste.openstack.org/show/612664/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20170615/3fb81dc6/attachment.html>


More information about the OpenStack-dev mailing list