openstack/kolla-ansible
Code Issues Proposed changes

inspector: Prevent use of noauth in multi-region setup

Browse Source 
In a multi-region environment without a local keystone, we should still
use authentication.

Change-Id: I9df0ddf6e0d56f0817256b07ae0a0a7021209663
This commit is contained in:
Mark Goddard 2022-07-06 15:06:16 +01:00
parent c2261e5652
commit 3d65a160d9
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/roles/ironic/templates/ironic-inspector.conf.j2
View File

@ -2,7 +2,7 @@
debug = {{ ironic_logging_debug }} debug = {{ ironic_logging_debug }}
log_dir = /var/log/kolla/ironic-inspector log_dir = /var/log/kolla/ironic-inspector
{% if not enable_keystone | bool %} {% if not ironic_enable_keystone_integration | bool %}
auth_strategy = noauth auth_strategy = noauth
{% endif %} {% endif %}
listen_address = {{ api_interface_address }} listen_address = {{ api_interface_address }}

6
releasenotes/notes/fix-inspector-noauth-34fd5a2019591ce7.yaml Normal file
View File

@ -0,0 +1,6 @@
---
fixes:
- |
Fixes an issue where Ironic Inspector could be configured without
authentication in a multi-region environment in a region without a local
Keystone service.