keystone/releasenotes/notes/improve-driver-donfiguration-ecedaf6ad0c3f9d2.yaml
Artem Goncharov 41ab96ba8e Improve configuration of out-of-tree identity drivers
Official recommendation for operators is to develop out-of-tree drivers
for the missing functionality. While this is easily possible there are
hurdles for configuring such drivers. Configuring them using FS requires
restart of Keystone when i.e. adding new domains to be processed with
the custom driver. Using database is a much better and dynamical
approach, but it currently is not allowing drivers to have specific
configuration. This change improves this flaws and contains of 3
individual parts that are submitted together to make testing easier.

- Allowing driver to register supported configuration option before
  loading the driver (invoke DriverManager without calling the driver
  and search for specific method present).
- Allow changing driver specific configuration through API (add 2 more
  configuration options enabling listed options in the API)
- Documentation changes.

Change-Id: I99fa798ef60cdb7a488fe55de76cd931c6db3e89
2024-06-05 17:16:58 +02:00

9 lines
386 B
YAML

---
features:
- |
Improve configuration management for the out-of-tree identity drivers. When
driver implements a special method it is being invoked before instantiating
the driver when reading configuration from the database. Also 2 new
`domain_config` section configuration options are added to allow such
driver specific parameters to be managed using the API.