openstack
/
charm-nova-cloud-controller
Code Issues Proposed changes

Add support for using service tokens 

This patch configures nova-cloud-controller to send a service token
along with the received user token on requests sent to other services.
This allows those other services to accept the request even if the user
token has been invalidated since received by the nova services running
in nova-cloud-controller units, the same applies for incoming requests
from other services. Service tokens exist since Openstack Queens.

Change-Id: I95021600da8af12cb75ef5681fb5af8780ade4f8
Closes-Bug: #1992840
This commit is contained in:
Felipe Reyes 2023-05-18 22:24:12 -04:00
parent 9adc198f74
commit fd810f9afd
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
templates/pike/nova.conf
View File

@ -154,6 +154,8 @@ api_servers = {{ glance_api_servers }}
{% include "section-keystone-authtoken-mitaka" %}
{% include "section-service-user" %}
{% include "parts/section-cinder" %}
[osapi_v3]

2
templates/rocky/nova.conf
View File

@ -154,6 +154,8 @@ api_servers = {{ glance_api_servers }}
{% include "section-keystone-authtoken-mitaka" %}
{% include "section-service-user" %}
{% include "parts/section-cinder" %}
[osapi_v3]

2
templates/train/nova.conf
View File

@ -158,6 +158,8 @@ api_servers = {{ glance_api_servers }}
{% include "section-keystone-authtoken-mitaka" %}
{% include "section-service-user" %}
{% include "parts/section-cinder" %}
[osapi_v3]