With directly provide auth string(with contain a json formate
with auth_type and auth info), we can release context to specific
auth_type and give user the ability to provide other Keystone
(or their own) authentication method (like using
`v3applicationcredential` or others).
The format for `auth` and `auth_type` follows exactly Keystone
plugins like in clouds.yaml file [1].
[1] https://docs.openstack.org/keystoneauth/latest/
plugin-options.html#additional-loaders
Change-Id: Ic4dc2292a82860b9bb54ecb9e3b1a4dc806dab2c
Story: #2002126
Task: #26904
Rename the client routines used for SFC resources to a generic
name so that other plugins/extensions can reusee those routines
Change-Id: Iaddec21014ff8c70fa11f17d52f53e5d7d4e3578
Zones are a concept of the Designate v2 API. Since v1 is still the
default, we need to explicitly use v2 when doing anything to do with
Zones. We were doing this when looking up a zone directly, but not when
falling back to listing all zones and going through them by name. This
meant that designate.zone constraint validation would fail (including on
the 'zone' property of OS::Designate::RecordSet) when the zone was
specified by name rather than UUID.
Change-Id: Id4194a74398488813f901b255f312f7ac962a426
Task: #29162
Allow global admin users to operate the software configs from
other projects.
Change-Id: I9135da38c2f58f29b351bb1f5336e72a2f78d5fc
Partial-Bug: #1649759
Allow global admin users to operate the software deployments from
other projects.
Change-Id: I3eb2a7e24df68dec0ca638307ecf5a476e96f06a
Closes-Bug: #1649759
This adds a new resource to support import of glance web-download. It
replaces the old image source using glance v1.
Story: #2004772
Task: #28891
Change-Id: Iae66aa82d6b90738e4f32ee254b9f0c8275a8c87
While fetching remote templates, if there is network issue while
reading data chunks socket.timeout is raised.
Change-Id: I4ebb495706ea3c505a92254b1f03e326b0fa34b6
Story: #2004686
Task: 28694
Devstack bumped[1] the cirros image version. Changes
to source the old openrc file for grenade before configuring
tempest.
[1] https://review.openstack.org/#/c/624716/
Change-Id: I9481bbcb03609db6d2224998a4f83d3a8790e96c
Return the instructions to using the "service" project as it was before
5ecee29572, and as it is in other manual
installation instructions.
Add a note that describes the circumstances in which you need to use
"services" as the project name.
Change-Id: I76de8960ac640b9e8037879af85b84ce39b4cdcb
Co-Authored-By: Zane Bitter <zbitter@redhat.com>
Task: 28520
Story: 2003872
Use a single write to the database to convert each resource. Add a
method to the versioned object class that encapsulates the DB-specific
information, and get rid of the Resource.set_requires() classmethod that
just calls a method on the versioned object instance that's passed to
it.
Change-Id: Ieca7e0f0642c38c44fb8d7729333a0ccd93c9cb4
currently Heat fails to create a stack requiring deferred auth with
trusts when user happens to have a role assigned for which a different
but similar named role exist in another Keystone domain.
This patch makes Heat to attempt extract role IDs from the
auth_token_info first and pass those to Keystone trust if found.
Change-Id: Ic9207e3f027f9c56c14d548d404ecc0c2427f326
Story: 2002613
Task: 22237
ricolin