Browse Source

Document endpoint interface and region behavior

After some debugging following [0] to figure out why ksm was
not connecting to the specified auth_url, found out that
ksm connects to the identity server on the 'admin' interface
[1] after authenticating with auth_url and fetching the catalog if
keystoneauth is being used. Otherwise it connects on identity_uri
and disregards the service catalog [2].  This behavior was not
documented.

[0]. http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2017-09-19.log.html#t2017-09-19T17:50:06
[1]. d1b7a1f092/keystonemiddleware/auth_token/__init__.py (L936-L938)
[2]. d1b7a1f092/keystonemiddleware/auth_token/_auth.py (L121-L130)

Change-Id: Ide40835de856012ac4dd71975beac9d32771f356
Kristi Nikolla 1 year ago
parent
commit
5fa536e6c5
1 changed files with 5 additions and 0 deletions
  1. 5
    0
      doc/source/middlewarearchitecture.rst

+ 5
- 0
doc/source/middlewarearchitecture.rst View File

@@ -177,6 +177,11 @@ when ``auth_plugin`` is set to ``password``.
177 177
     auth_url = http://127.0.0.1:35357
178 178
     # Any of the options that could be set in api-paste.ini can be set here.
179 179
 
180
+If using an ``auth_plugin``, connection to the Identity service will be
181
+established on the ``admin`` interface as registered in the service catalog.
182
+In the case where you are using an ``auth_plugin`` and have multiple regions,
183
+also specify the ``region_name`` option to fetch the correct endpoint.
184
+
180 185
 If the service doesn't use the global oslo.config object (CONF), then the
181 186
 oslo config project name can be set it in paste config and
182 187
 keystonemiddleware will load the project configuration itself.

Loading…
Cancel
Save