[Openstack] keystone Endpoint schema

Ziad Sawalha ziad.sawalha at rackspace.com
Mon Oct 31 21:42:40 UTC 2011


The list of URLs comes from what we have historically done at Rackspace and the conversations had in OpenStack about a management/admin API.

I agree that not all services need those three. And some may want to create additional ones. You mention "type" below. Not to be confused with the serviceType (like compute, identity, image-service, object-store, etc...). Are you proposing an EndpointType (maybe admin, public, private, etc..)?

That does seem like a more flexible approach.

It would help to have some well-known types, such as:
- public: Internet-accessible
- admin: private, with elevated-privilege calls available
- internal: provides a high bandwidth, low latency, unmetered endpoint

Thoughts?

Z



On Oct 31, 2011, at 2:17 PM, "Marcelo Martins" <btorch-os at zeroaccess.org<mailto:btorch-os at zeroaccess.org>> wrote:


It should require/accept the number of URLs that is required by the type of service one is adding. For example, swift only has public and localnet storage URLs. No admin URL.
So, regardless if one is using keystone-manage or not (not sure what else one can use, Rest calls maybe ? ),  it should only accept what the service type requires.


case type:

swift)
try
    endpointTemplate add [region] [service] [public_url] [internal_url] [enabled] [is_global]
except
"Failed with improper number of arguments"
show_some_help()

nova)
....

keystone)
...
another-service)
....

whatever_else)
...






Marcelo Martins
Openstack-swift
btorch-os at zeroaccess.org<mailto:btorch-os at zeroaccess.org>

“Knowledge is the wings on which our aspirations take flight and soar. When it comes to surfing and life if you know what to do you can do it. If you desire anything become educated about it and succeed. “




On Oct 31, 2011, at 1:52 PM, Joseph Heck wrote:

Can you provide an example?

I think you're asserting that you'd like the keystone-manage command to not require 3 different URLs when they don't exist separately, is that correct?

-joe

On Oct 31, 2011, at 11:45 AM, Marcelo Martins wrote:
Well, If you need to specify a "type" when adding an endpointTemplate, then keystone should be smart enough to identify the type given and only accept the number of  URLs needed for such type of service.

Marcelo Martins
Openstack-swift
btorch-os at zeroaccess.org<mailto:btorch-os at zeroaccess.org>

On Oct 31, 2011, at 1:40 PM, Joseph Heck wrote:
That's just what it sees today - the only one of the service endpoints that uses all three (right now anyway) is Keystone itself. Can you share a different pattern that you're interested in seeing supported?

-joe

On Oct 31, 2011, at 9:46 AM, Marcelo Martins wrote:
What makes keystone assume that all types of services will have " [public_url] [admin_url] [internal_url] "?


Marcelo Martins
Openstack-swift
btorch-os at zeroaccess.org<mailto:btorch-os at zeroaccess.org>




_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to     : openstack at lists.launchpad.net<mailto:openstack at lists.launchpad.net>
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20111031/3aca8518/attachment.html>


More information about the Openstack mailing list