Reservation Service for OpenStack
81b85a11af
Blazar authenticates Nova requests with trust-scoped tokens. Sometime during the Ocata cycle these requests started failing (possibly due to stricter validation in Keystone) with the error: BadRequest: Invalid input for field 'identity/password/user/password': None is not of type 'string' (HTTP 400) This commit changes how the Nova client is configured to use the token_endpoint authentication plugin combined with endpoint_override, which allows to communicate with the Nova endpoint without extra requests to Keystone. This is necessary between trust-scoped tokens cannot re-authenticate with Keystone, which happens with other authentication plugins. Change-Id: Ibb6782140f41aea5e539e11f2618b3af2628fc4c Closes-Bug: #1660564 |
||
---|---|---|
blazar | ||
climate | ||
contrib/tempest | ||
devstack | ||
doc/source | ||
etc | ||
tools/config | ||
.gitignore | ||
.gitreview | ||
.testr.conf | ||
babel.cfg | ||
HACKING.rst | ||
LICENSE | ||
MANIFEST.in | ||
openstack-common.conf | ||
pylintrc | ||
README.rst | ||
requirements.txt | ||
setup.cfg | ||
setup.py | ||
test-requirements.txt | ||
tox.ini |
Blazar
Overview
OpenStack Reservation Service
Prerequisites
- Keystone v3 API endpoint
- Dedicated account for write operations on behalf of the admin
-
climate_username
- Service account
Configuration
Create identityv3 endpoint
For adding new endpoint for Keystone V3, use the following instructions: 1) keystone service-create --name keystonev3 --type identytiv3 --description "Keystone Identity Service v3" 2) keystone endpoint-create --region <region> --service keystonev3 --publicurl "<auth_protocol>://<auth_host>:5000/v3" --adminurl "<auth_protocol>://<auth_host>:35357/v3" --internalurl "<auth_protocol>://<auth_host>:5000/v3"