3fe57abeb2
shara_api need auth_url arguments in keystone_authtoken group.
follow the configure document[0], the auth_url should under
trustee group. but the keystone use default "keystone_authtoken "
group to authenticate,if we wanna use trustee group to authenticate,
we need add "auth_section=trustee" under keystone_authtoken group
,when add this , the trustee group also need auth_type which sahara
have not register into oslo_config.when add to register,the username may
hardcode[1],so i think the best way to reslove this problem is to
add auth_url under keystone_authtoken
[0]https://docs.openstack.org/sahara/latest/configuration/descriptionconfig.html
[1]d60a3b152b/sahara/utils/openstack/keystone.py (L41)
Change-Id: I7e94cf56fa38f01e2b3d93303f8192cb66ba76ab
63 lines
2.1 KiB
Django/Jinja
63 lines
2.1 KiB
Django/Jinja
[DEFAULT]
|
|
debug = {{ sahara_logging_debug }}
|
|
log_dir = /var/log/kolla/sahara
|
|
port = {{ sahara_api_port }}
|
|
host = {{ api_interface_address }}
|
|
transport_url = {{ rpc_transport_url }}
|
|
|
|
api_workers = {{ openstack_service_workers }}
|
|
use_floating_ips = False
|
|
use_namespaces = True
|
|
use_rootwrap = True
|
|
|
|
[database]
|
|
connection = mysql+pymysql://{{ sahara_database_user }}:{{ sahara_database_password }}@{{ sahara_database_address }}/{{ sahara_database_name }}
|
|
|
|
[keystone_authtoken]
|
|
www_authenticate_uri = {{ internal_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_public_port }}
|
|
auth_url = {{ admin_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_admin_port }}
|
|
auth_type = password
|
|
admin_user = {{ sahara_keystone_user }}
|
|
admin_password = {{ sahara_keystone_password }}
|
|
admin_tenant_name = service
|
|
|
|
memcache_security_strategy = ENCRYPT
|
|
memcache_secret_key = {{ memcache_secret_key }}
|
|
memcached_servers = {% for host in groups['memcached'] %}{{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ memcached_port }}{% if not loop.last %},{% endif %}{% endfor %}
|
|
|
|
[service_credentials]
|
|
auth_url = {{ internal_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_public_port }}
|
|
region_name = {{ openstack_region_name }}
|
|
password = {{ sahara_keystone_password }}
|
|
username = {{ sahara_keystone_user }}
|
|
project_name = service
|
|
project_domain_id = {{ default_project_domain_id }}
|
|
user_domain_id = {{ default_user_domain_id }}
|
|
auth_type = password
|
|
|
|
[oslo_messaging_notifications]
|
|
transport_url = {{ notify_transport_url }}
|
|
{% if enable_ceilometer | bool %}
|
|
driver = messagingv2
|
|
topics = notifications
|
|
{% else %}
|
|
driver = noop
|
|
{% endif %}
|
|
|
|
{% if sahara_policy_file is defined %}
|
|
[oslo_policy]
|
|
policy_file = {{ sahara_policy_file }}
|
|
{% endif %}
|
|
|
|
|
|
[profiler]
|
|
enabled = False
|
|
|
|
[trustee]
|
|
project_domain_name = {{ default_project_domain_name }}
|
|
project_name = service
|
|
user_domain_name = {{ default_user_domain_name }}
|
|
username = {{ sahara_keystone_user }}
|
|
password = {{ sahara_keystone_password }}
|
|
auth_url = {{ admin_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_admin_port }}
|