openstack
/
charm-layer-openstack
Code Issues Proposed changes

Add region_name to keystone auth section 

In a multi-region shared keystone deployment, we must set the
region_name config option in the various sections of the config file
where openstack services need to talk to other services.

Without the region_name, services have a high chance of attempting to
connect to the api endpoints in regions different from the one the
service in question is actually in. This leads to errors.

Change-Id: Ieb7b39e291fd2c45a77bd90d2703b8c9bc40c33a
Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
This commit is contained in:
Gabriel Adrian Samfira 2023-11-07 12:40:33 +02:00
parent 1c9e662d78
commit 93a6df24e4
No known key found for this signature in database
GPG Key ID: 7D073DCC2C074CB5
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
templates/parts/section-keystone-authtoken
View File

@ -3,6 +3,9 @@
auth_uri = {{ identity_service.service_protocol }}://{{ identity_service.service_host }}:{{ identity_service.service_port }}
auth_url = {{ identity_service.auth_protocol }}://{{ identity_service.auth_host }}:{{ identity_service.auth_port }}
auth_type = password
{% if options.region -%}
region_name = {{ options.region }}
{% endif -%}
{% if identity_service.service_domain -%}
project_domain_name = {{ identity_service.service_domain }}
user_domain_name = {{ identity_service.service_domain }}