
In Distributed Cloud, Keystone is now running on each Subcloud. Switching to Subcloud region now requires Openstack Auth to retrieve an Unscoped token from the switched Region and reinitialize the django session and cookie data with token data retrieved from the Subcloud. Since Subcloud's Keystone doesn't contain the Identity endpoint for the Central Region, there was no way to go back in Horizon from a subcloud region to the SystemController region. We achieve this by caching the SystemController endpoint in the Django Session at the time of login. Story: 2002842 Task: 22785 Change-Id: I274e8b0756e0f24321a108c6c1a0a5d6178e0c7a Signed-off-by: Jack Ding <jack.ding@windriver.com>
25 lines
890 B
Diff
25 lines
890 B
Diff
From 186e684a33b3db1c5a5fc010cdb63b459351fcb7 Mon Sep 17 00:00:00 2001
|
|
From: Kam Nasim <kam.nasim@windriver.com>
|
|
Date: Wed, 30 May 2018 11:28:49 -0400
|
|
Subject: [PATCH] meta patch for distributed keystone
|
|
|
|
---
|
|
SPECS/python-django-openstack-auth.spec | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
diff --git a/SPECS/python-django-openstack-auth.spec b/SPECS/python-django-openstack-auth.spec
|
|
index 21e4bde..f925d87 100644
|
|
--- a/SPECS/python-django-openstack-auth.spec
|
|
+++ b/SPECS/python-django-openstack-auth.spec
|
|
@@ -18,6 +18,7 @@ Source0: https://tarballs.openstack.org/django_openstack_auth/django_open
|
|
Patch0001: 0001-Pike-rebase-for-openstack-auth.patch
|
|
Patch0002: 0002-disable-token-validation-per-auth-request.patch
|
|
Patch0003: 0003-cache-authorized-tenants-in-cookie-to-improve-performance.patch
|
|
+Patch0004: 0004-Distributed-Keystone.patch
|
|
|
|
BuildArch: noarch
|
|
|
|
--
|
|
1.8.3.1
|
|
|