3 Commits

Author SHA1 Message Date
Johannes Grassler
f895b2bd09 Fix global stack list in periodic task
The periodic task unneccessarily lists Heat stacks in the
global tenant (across all tenants) which the Magnum service
user may lack permission for. Also, the most restrictive way
to let it use global stack-list is chose a Keystone role and
open that operation to any user in any project holding that
role.

This commit substitutes a direct lookup of all bays' stack_id
attributes for this global stack list. This direct lookup will
yield the same net result. In order to get the neccessary
permissions it will use each bay's stored Keystone trust to
act on behalf of the bay's creating user.

Co-Authored-By: Jiri Suchomel <jiri.suchomel@suse.com>
Closes-Bug: #1589955
Change-Id: I67b176c137c463e37e037970cc4e468d51db30c9
2016-07-27 10:11:51 +02:00
Spyros Trigazis
f64551489e [install] Refactor configuration in IG
* move common prerequisities and configure in the common directory
* remove lock_path from common configuration, only rdo packages need
  it -- debian, obs and ubuntu packages configure it by default
* use trust_domain_name and trust_domain_admin_name instead of id
* update finalize message in obs and rdo IGs
* fix bullet-list in filanize services
* add x509keypair configuration option

Partially-Implements: blueprint projectspecificinstallguides
Partially-Implements: blueprint magnum-installation-guide
Change-Id: I67376938f1a118c2b1f1f7326c14158178ab71ea
2016-07-19 20:15:39 +02:00
Spyros Trigazis
936dd11a16 [install] Add install guide from template for rdo
This guide is based on the installguide-cookiecutter template
and will be published automatically to docs.openstack.org.

[2] is a similar patch and [3] is WIP.

A change to add magnum to the install-guide job will follow.

This is a follow-up of [4].

[1] http://docs.openstack.org/contributor-guide/project-install-guide.html
[2] https://review.openstack.org/#/c/325389
[3] https://review.openstack.org/#/c/317152
[4] https://review.openstack.org/#/c/332161

Change-Id: I145fd30f575dab45b4c947bc4609287b1e300025
Partially-Implements: blueprint magnum-installation-guide
2016-06-22 16:20:05 +02:00