Remove deprecated authentication parameters
This removes inspector_auth and ironic_auth_strategy which are redundant with enable_keystone and rely on deprecated ironic-inspector options. Change-Id: Ib76978f0406fac2c2c7b8396e1a03a87db9eeba5
This commit is contained in:
@@ -169,11 +169,6 @@ properties via a workflow.
|
|||||||
enable_inspector: Boolean value, default true. Set this value to false to
|
enable_inspector: Boolean value, default true. Set this value to false to
|
||||||
prevent installing ironic-inspector.
|
prevent installing ironic-inspector.
|
||||||
|
|
||||||
inspector_auth: Sets ironic-inspector's authentication method. Possible values
|
|
||||||
are `keystone` and `noauth`. `noauth` is recommended since
|
|
||||||
bifrost by default installs ironic as standalone without
|
|
||||||
keystone. The default value is `noauth`.
|
|
||||||
|
|
||||||
inspector_debug: Boolean value, default true. Enables debug level logging
|
inspector_debug: Boolean value, default true. Enables debug level logging
|
||||||
for inspector. Note that this default may change in
|
for inspector. Note that this default may change in
|
||||||
future.
|
future.
|
||||||
@@ -184,10 +179,6 @@ inspector_manage_firewall: Boolean value, default false. Controls whether
|
|||||||
adds the rule to permit the callback traffic,
|
adds the rule to permit the callback traffic,
|
||||||
so you shouldn't need to enable this.
|
so you shouldn't need to enable this.
|
||||||
|
|
||||||
ironic_auth_strategy: Sets the `auth_strategy` ironic-inspector should use
|
|
||||||
with ironic. Possible values are `noauth` and
|
|
||||||
`keystone`. The default value is `noauth`.
|
|
||||||
|
|
||||||
inspector_data_dir: Base path for ironic-inspector's temporary data and log
|
inspector_data_dir: Base path for ironic-inspector's temporary data and log
|
||||||
files. The default location is
|
files. The default location is
|
||||||
`/opt/stack/ironic-inspector/var`.
|
`/opt/stack/ironic-inspector/var`.
|
||||||
|
|||||||
@@ -158,16 +158,9 @@ inventory_dns: False
|
|||||||
|
|
||||||
# Settings to enable the use of inspector
|
# Settings to enable the use of inspector
|
||||||
enable_inspector: true
|
enable_inspector: true
|
||||||
inspector_auth: "noauth"
|
|
||||||
# Deprecated: inspector_auth will be removed in Pike, and is
|
|
||||||
# overridden when enable_keystone is set to true.
|
|
||||||
#inspector_auth: "noauth"
|
|
||||||
inspector_debug: true
|
inspector_debug: true
|
||||||
inspector_manage_firewall: false
|
inspector_manage_firewall: false
|
||||||
|
|
||||||
# Deprecated: ironic_auth_strategy will be removed in Pike.
|
|
||||||
ironic_auth_strategy: "noauth"
|
|
||||||
|
|
||||||
# Set ironic_log_dir to use a non-default log directory for ironic.
|
# Set ironic_log_dir to use a non-default log directory for ironic.
|
||||||
ironic_log_dir: /var/log/ironic
|
ironic_log_dir: /var/log/ironic
|
||||||
|
|
||||||
|
|||||||
@@ -4,7 +4,7 @@
|
|||||||
{% if enable_keystone is defined and enable_keystone | bool == true %}
|
{% if enable_keystone is defined and enable_keystone | bool == true %}
|
||||||
auth_strategy = keystone
|
auth_strategy = keystone
|
||||||
{% else %}
|
{% else %}
|
||||||
auth_strategy = {{ inspector_auth | default('noauth') }}
|
auth_strategy = noauth
|
||||||
{% endif %}
|
{% endif %}
|
||||||
debug = {{ inspector_debug | bool }}
|
debug = {{ inspector_debug | bool }}
|
||||||
|
|
||||||
@@ -36,12 +36,11 @@ username = {{ ironic_inspector.keystone.default_username }}
|
|||||||
password = {{ ironic_inspector.keystone.default_password }}
|
password = {{ ironic_inspector.keystone.default_password }}
|
||||||
auth_url = {{ ironic_inspector.service_catalog.auth_url }}
|
auth_url = {{ ironic_inspector.service_catalog.auth_url }}
|
||||||
auth_type = password
|
auth_type = password
|
||||||
auth_strategy = keystone
|
|
||||||
user_domain_id = default
|
user_domain_id = default
|
||||||
project_domain_id = default
|
project_domain_id = default
|
||||||
|
|
||||||
{% else %}
|
{% else %}
|
||||||
auth_strategy = {{ ironic_auth_strategy | default('noauth') }}
|
auth_type = none
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
{% if enable_keystone is defined and enable_keystone | bool == true %}
|
{% if enable_keystone is defined and enable_keystone | bool == true %}
|
||||||
|
|||||||
5
releasenotes/notes/auth-59e73f74a2dd507f.yaml
Normal file
5
releasenotes/notes/auth-59e73f74a2dd507f.yaml
Normal file
@@ -0,0 +1,5 @@
|
|||||||
|
---
|
||||||
|
upgrade:
|
||||||
|
- |
|
||||||
|
The deprecated parameters ``inspector_auth`` and ``ironic_auth_strategy``
|
||||||
|
have been removed. Their values are now detected from ``enable_keystone``.
|
||||||
Reference in New Issue
Block a user