openstack/charm-nova-cloud-controller
Code Issues Proposed changes

Add support for using service tokens

Browse Source 
This patch configures nova-cloud-controller to send a service token
along with the received user token on requests sent to other services.
This allows those other services to accept the request even if the user
token has been invalidated since received by the nova services running
in nova-cloud-controller units, the same applies for incoming requests
from other services. Service tokens exist since Openstack Queens.

Change-Id: I95021600da8af12cb75ef5681fb5af8780ade4f8
Closes-Bug: #1992840
(cherry picked from commit fd810f9afd)
(cherry picked from commit 98b637d8e9)
This commit is contained in:
Felipe Reyes
2023-05-18 22:24:12 -04:00
committed by Corey Bryant
parent b81ab8a900
commit fdfb8331d2
3 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
templates/pike/nova.conf
View File

@@ -150,6 +150,8 @@ api_servers = {{ glance_api_servers }}
{% include "section-keystone-authtoken-mitaka" %}
{% include "section-service-user" %}
{% include "parts/section-cinder" %}
[osapi_v3]

2
templates/rocky/nova.conf
View File

@@ -150,6 +150,8 @@ api_servers = {{ glance_api_servers }}
{% include "section-keystone-authtoken-mitaka" %}
{% include "section-service-user" %}
{% include "parts/section-cinder" %}
[osapi_v3]

2
templates/train/nova.conf
View File

@@ -154,6 +154,8 @@ api_servers = {{ glance_api_servers }}
{% include "section-keystone-authtoken-mitaka" %}
{% include "section-service-user" %}
{% include "parts/section-cinder" %}
[osapi_v3]