openstack/keystonemiddleware
Code Issues Proposed changes

Document endpoint interface and region behavior

Browse Source 
After some debugging following [0] to figure out why ksm was
not connecting to the specified auth_url, found out that
ksm connects to the identity server on the 'admin' interface
[1] after authenticating with auth_url and fetching the catalog if
keystoneauth is being used. Otherwise it connects on identity_uri
and disregards the service catalog [2].  This behavior was not
documented.

[0]. http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2017-09-19.log.html#t2017-09-19T17:50:06
[1]. d1b7a1f092/keystonemiddleware/auth_token/__init__.py (L936-L938)
[2]. d1b7a1f092/keystonemiddleware/auth_token/_auth.py (L121-L130)

Change-Id: Ide40835de856012ac4dd71975beac9d32771f356
This commit is contained in:
Kristi Nikolla 2017-09-19 15:53:09 -04:00 committed by Kristi Nikolla
parent d1b7a1f092
commit 5fa536e6c5
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
doc/source/middlewarearchitecture.rst
View File

@ -177,6 +177,11 @@ when ``auth_plugin`` is set to ``password``.
auth_url = http://127.0.0.1:35357
# Any of the options that could be set in api-paste.ini can be set here.
If using an ``auth_plugin``, connection to the Identity service will be
established on the ``admin`` interface as registered in the service catalog.
In the case where you are using an ``auth_plugin`` and have multiple regions,
also specify the ``region_name`` option to fetch the correct endpoint.
If the service doesn't use the global oslo.config object (CONF), then the
oslo config project name can be set it in paste config and
keystonemiddleware will load the project configuration itself.