Remove deprecated authentication parameters

This removes inspector_auth and ironic_auth_strategy which are redundant
with enable_keystone and rely on deprecated ironic-inspector options.

Change-Id: Ib76978f0406fac2c2c7b8396e1a03a87db9eeba5
This commit is contained in:
Dmitry Tantsur
2019-06-18 07:56:32 +02:00
parent 563dab994c
commit ee50d50ebe
4 changed files with 7 additions and 19 deletions

View File

@@ -169,11 +169,6 @@ properties via a workflow.
enable_inspector: Boolean value, default true. Set this value to false to enable_inspector: Boolean value, default true. Set this value to false to
prevent installing ironic-inspector. prevent installing ironic-inspector.
inspector_auth: Sets ironic-inspector's authentication method. Possible values
are `keystone` and `noauth`. `noauth` is recommended since
bifrost by default installs ironic as standalone without
keystone. The default value is `noauth`.
inspector_debug: Boolean value, default true. Enables debug level logging inspector_debug: Boolean value, default true. Enables debug level logging
for inspector. Note that this default may change in for inspector. Note that this default may change in
future. future.
@@ -184,10 +179,6 @@ inspector_manage_firewall: Boolean value, default false. Controls whether
adds the rule to permit the callback traffic, adds the rule to permit the callback traffic,
so you shouldn't need to enable this. so you shouldn't need to enable this.
ironic_auth_strategy: Sets the `auth_strategy` ironic-inspector should use
with ironic. Possible values are `noauth` and
`keystone`. The default value is `noauth`.
inspector_data_dir: Base path for ironic-inspector's temporary data and log inspector_data_dir: Base path for ironic-inspector's temporary data and log
files. The default location is files. The default location is
`/opt/stack/ironic-inspector/var`. `/opt/stack/ironic-inspector/var`.

View File

@@ -158,16 +158,9 @@ inventory_dns: False
# Settings to enable the use of inspector # Settings to enable the use of inspector
enable_inspector: true enable_inspector: true
inspector_auth: "noauth"
# Deprecated: inspector_auth will be removed in Pike, and is
# overridden when enable_keystone is set to true.
#inspector_auth: "noauth"
inspector_debug: true inspector_debug: true
inspector_manage_firewall: false inspector_manage_firewall: false
# Deprecated: ironic_auth_strategy will be removed in Pike.
ironic_auth_strategy: "noauth"
# Set ironic_log_dir to use a non-default log directory for ironic. # Set ironic_log_dir to use a non-default log directory for ironic.
ironic_log_dir: /var/log/ironic ironic_log_dir: /var/log/ironic

View File

@@ -4,7 +4,7 @@
{% if enable_keystone is defined and enable_keystone | bool == true %} {% if enable_keystone is defined and enable_keystone | bool == true %}
auth_strategy = keystone auth_strategy = keystone
{% else %} {% else %}
auth_strategy = {{ inspector_auth | default('noauth') }} auth_strategy = noauth
{% endif %} {% endif %}
debug = {{ inspector_debug | bool }} debug = {{ inspector_debug | bool }}
@@ -36,12 +36,11 @@ username = {{ ironic_inspector.keystone.default_username }}
password = {{ ironic_inspector.keystone.default_password }} password = {{ ironic_inspector.keystone.default_password }}
auth_url = {{ ironic_inspector.service_catalog.auth_url }} auth_url = {{ ironic_inspector.service_catalog.auth_url }}
auth_type = password auth_type = password
auth_strategy = keystone
user_domain_id = default user_domain_id = default
project_domain_id = default project_domain_id = default
{% else %} {% else %}
auth_strategy = {{ ironic_auth_strategy | default('noauth') }} auth_type = none
{% endif %} {% endif %}
{% if enable_keystone is defined and enable_keystone | bool == true %} {% if enable_keystone is defined and enable_keystone | bool == true %}

View File

@@ -0,0 +1,5 @@
---
upgrade:
- |
The deprecated parameters ``inspector_auth`` and ``ironic_auth_strategy``
have been removed. Their values are now detected from ``enable_keystone``.