openstack/openstack-ansible-os_neutron
Code Issues Proposed changes

Use neutron credentials when connecting to other APIs

Browse Source 
When neutron is connecting to another service's API, ex. neutron,
it should use its own credentials to obtain an authtoken when
accessing the other service's API as a client. Only the other
service (eg. nova) should use its own service credentials
when obtaining auth tokens.

Change-Id: I10f350d40f9291c7688b336291f433ee3c4072d1
This commit is contained in:
Logan V 2019-07-01 15:49:03 -05:00
parent 3beb0e4a13
commit edcbdf4b53
1 changed files with 14 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
templates/neutron.conf.j2
View File

@ -110,15 +110,14 @@ send_events_interval = 2
# required by current dns integration implementation
url = {{ designate_service_adminurl }}
auth_type = {{ designate_keystone_auth_plugin }}
auth_uri = {{ keystone_service_adminuri }}
auth_type = password
username = {{ neutron_service_user_name }}
password = {{ neutron_service_password }}
project_name = {{ neutron_service_project_name }}
user_domain_id = {{ neutron_service_user_domain_id }}
project_domain_id = {{ neutron_service_project_domain_id }}
auth_url = {{ keystone_service_adminurl }}
region_name = {{ designate_service_region }}
project_domain_id = {{ designate_service_project_domain_id }}
user_domain_id = {{ designate_service_user_domain_id }}
project_name = {{ designate_service_project_name }}
username = {{ designate_service_user_name }}
password = {{ designate_service_password }}
insecure = {{ keystone_service_adminuri_insecure | bool }}
allow_reverse_dns_lookup = {{ neutron_allow_reverse_dns_lookup }}
ipv4_ptr_zone_prefix_size = {{ neutron_ipv4_ptr_zone_prefix_size }}
@ -126,16 +125,14 @@ ipv6_ptr_zone_prefix_size = {{ neutron_ipv6_ptr_zone_prefix_size }}
{% endif %}
[nova]
insecure = {{ keystone_service_adminuri_insecure | bool }}
auth_type = {{ nova_keystone_auth_plugin }}
auth_type = password
username = {{ neutron_service_user_name }}
password = {{ neutron_service_password }}
project_name = {{ neutron_service_project_name }}
user_domain_id = {{ neutron_service_user_domain_id }}
project_domain_id = {{ neutron_service_project_domain_id }}
auth_url = {{ keystone_service_adminurl }}
region_name = {{ nova_service_region }}
project_domain_id = {{ nova_service_project_domain_id }}
user_domain_id = {{ nova_service_user_domain_id }}
project_name = {{ nova_service_project_name }}
username = {{ nova_service_user_name }}
password = {{ nova_service_password }}
endpoint_type = internal
insecure = {{ keystone_service_adminuri_insecure | bool }}
# Quotas
[quotas]