[openstack-dev] [keystoneauth] [osc] [ironic] Usage of none loader in the CLI
Dmitry Tantsur
dtantsur at redhat.com
Wed Oct 25 12:07:09 UTC 2017
Hi!
Thanks for raising this.
On 10/19/2017 01:11 PM, Vladyslav Drok wrote:
> Hi!
>
> I'd like to discuss the usage of the new noauth plugin to keystoneauth, which
> was introduced in [1]. The docstring of the loader says it is intended to be
> used during adapter initialization along with endpoint_override. But what about
> the CLI usage in the OpenStack client? I was trying to make the none loader work
> with baremetal plugin, as part of testing [2], and encountered some problems,
> which are hacked around in [3].
>
> So, here are some questions:
>
> 1. Was it intended to be used in CLI at all, or should we still use the
> token_endpoint?
> 2. If it was intended, should we:
> 2.1. do the hacks as in [3]?
I don't particularly like hardcoding an entrypoint name in the code here, to be
honest.
> 2.2. introduce endpoint as an option for the none loader, making it a bit
> similar to token_endpoint, with token hardcoded (and also get_endpoint method to
> the auth plugin I think)?
I think that's the way to go, we should fix the none loader in keystoneauth.
> 2.3. leave it as-is, allowing the usage of none loader only by specifying
> the parameters in the clouds.yaml, as in [4] for example?
That's not great. We're getting rid of the "ironic" command in favour of
"openstack baremetal", but inability to properly use a no-auth mode hurts quite
a few of our use cases (like Bifrost).
>
> [1] https://review.openstack.org/469863 <https://review.openstack.org/469863>
> [2] https://review.openstack.org/359061
> [3] https://review.openstack.org/512699
> [4]
> https://github.com/openstack/bifrost/blob/21ca45937a9cb36c6f04073182bf2edea8acbd5d/playbooks/roles/bifrost-keystone-client-config/templates/clouds.yaml.j2#L17-L19
>
> Thanks,
> Vlad
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
More information about the OpenStack-dev
mailing list