nova/releasenotes/notes/add_keystone_option-138dff5efb9a53aa.yaml
jichenjc 905d31dd97 Enable custom certificates for keystone communication
Nova creates a session back to keystone to verify project ids for
quota and flavor access APIs. The session that was being created was
not based on conf options, so it only worked in simple default
scenarios. This updates the session by using the newly added keystone
section to utilize keystoneauth1 to manage the session creation, which
allows for specifying custom site certificates to secure the link
between Nova and Keystone.

Change-Id: Ice4b226fdabdfb66e60b61de05ac8f3b37610661
Closes-Bug: 1704798
2017-09-19 08:18:23 -04:00

8 lines
244 B
YAML

---
upgrade:
- |
A new ``keystone`` config section is added so that you can
set session link attributes for communicating with keystone. This
allows the use of custom certificates to secure the link between
Nova and Keystone.