From 779d8670287952b8865a1d506ba2d68406139430 Mon Sep 17 00:00:00 2001
From: Joe D'Andrea <jdandrea@research.att.com>
Date: Mon, 30 Nov 2015 15:35:13 +0000
Subject: [PATCH] Force heat deferred_auth_method to password in standalone
 mode

Heat does not support Keystone Trusts when deployed in standalone
mode. This change forces an error when HEAT_DEFERRED_AUTH is set
to anything other than "password" if HEAT_STANDALONE is True and
advises of the acceptable setting.

Change-Id: Ib4ee9d9af396093137a2a0f99f1b18ae153ccdb3
Closes-Bug: #1463837
---
 lib/heat | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lib/heat b/lib/heat
index 54666a5212..fdcf5bcaad 100644
--- a/lib/heat
+++ b/lib/heat
@@ -65,6 +65,12 @@ if [[ "$HEAT_STANDALONE" = "True" ]]; then
     # for standalone, use defaults which require no service user
     HEAT_STACK_DOMAIN=$(trueorfalse False HEAT_STACK_DOMAIN)
     HEAT_DEFERRED_AUTH=${HEAT_DEFERRED_AUTH:-password}
+    if [[ ${HEAT_DEFERRED_AUTH} != "password" ]]; then
+        # Heat does not support keystone trusts when deployed in
+        # standalone mode
+        die $LINENO \
+            'HEAT_DEFERRED_AUTH can only be set to "password" when HEAT_STANDALONE is True.'
+    fi
 else
     HEAT_STACK_DOMAIN=$(trueorfalse True HEAT_STACK_DOMAIN)
     HEAT_DEFERRED_AUTH=${HEAT_DEFERRED_AUTH:-trusts}