nova/releasenotes/notes/deprecate-api-auth_strategy-noauth2-ed29c499a68b08ce.yaml
Eric Fried 18de63deaa Deprecate [api]auth_strategy and noauth2
[api]auth_strategy defaults to `keystone`. The only other choice is
`noauth2`, which activates noauth paste pipelines, which go through
NoAuthMiddleware, which is crusty and bogus. It is used in our
functional tests to avoid having to fixture out keystone, but should not
be used in real deployments, ever. Deprecate the option for removal, and
add a deprecation warning in the paste pipeline if it is used.

When we remove the option, we could just hardcode to `keystone`. At that
time, we also need to move the middleware under the nova.tests package
-- or find a way to get rid of it entirely by instead stubbing out
keystone in tests if that's relatively easy.

Change-Id: I9e2be5423cc0821a628db7a68ad52bbd91264acd
2019-10-09 15:16:07 -05:00

8 lines
276 B
YAML

---
deprecations:
- |
The ``[api]auth_strategy`` conf option and the corresponding test-only
``noauth2`` pipeline in ``api-paste.ini`` are deprecated and will be
removed in a future release. The only supported ``auth_strategy`` is
``keystone``, the default.