From 4a3e8ecf3876377d60f364d8cee6d7124c9899b4 Mon Sep 17 00:00:00 2001 From: melanie witt Date: Tue, 8 Aug 2017 20:31:02 +0000 Subject: [PATCH] Document service layout for consoles with cells This adds information about where the consoleauth service and console proxies should run with multiple cells in Cells v2. Change-Id: Ib817581dfe0c32d3888c242166e3daa7b954320a --- doc/source/user/cellsv2_layout.rst | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/doc/source/user/cellsv2_layout.rst b/doc/source/user/cellsv2_layout.rst index 9ce950077a0d..5cc24be45ea7 100644 --- a/doc/source/user/cellsv2_layout.rst +++ b/doc/source/user/cellsv2_layout.rst @@ -292,6 +292,19 @@ The Neutron metadata API proxy should be global across all cells, and thus be configured as an API-level service with access to the ``[api_database]/connection`` information. +Consoleauth service and console proxies +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +The consoleauth service should be global across all cells and thus be +configured as an API-level service with access to the +``[api_database]/connection`` information. The various console proxies +should also be global across all cells but they don't need access to the +API database. + +Future work will deprecate the consoleauth service, store token +authorizations in the cell databases, and require console proxies running +per cell instead of globally. + Operations Requiring upcalls ~~~~~~~~~~~~~~~~~~~~~~~~~~~~