openstack/kuryr-kubernetes
Code Issues Proposed changes

Remove admin rights need from verify_keystone_connection

Browse Source 
This patch sets changes the call perform to verify keystone
connectivity from project list to region list, as the former
needs admin rights by default. In addion, usually the number of
regions is low, so it should be a non expensive call to keystone.

Closes-Bug: 1772005

Change-Id: Iabca253a86dc89b567a9a68b09cef015c9a482b0
This commit is contained in:
Luis Tomas Bolivar 2018-05-18 13:39:47 +02:00
parent 7eaa24e7ed
commit a5926489e5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
kuryr_kubernetes/controller/managers/health.py
View File

@ -127,7 +127,7 @@ class HealthServer(object):
endpoint_type = getattr(getattr(cfg.CONF, conf_group), 'endpoint_type') endpoint_type = getattr(getattr(cfg.CONF, conf_group), 'endpoint_type')
ks = keystone_client.Client(session=sess, auth=auth_plugin, ks = keystone_client.Client(session=sess, auth=auth_plugin,
endpoint_type=endpoint_type) endpoint_type=endpoint_type)
ks.projects.list() ks.regions.list()
def verify_neutron_connection(self): def verify_neutron_connection(self):
neutron = utils.get_neutron_client() neutron = utils.get_neutron_client()