openstack/openstack-ansible-os_keystone
Code Issues Proposed changes

Add application credentials as a default authentication method

Browse Source 
Change-Id: I3fd50b45ad0f7cb0f7ee0d9eb70053c04e5d721f
This commit is contained in:
Jonathan Rosser 2019-10-01 21:28:48 +01:00
parent 83d22bbfcf
commit 254811b184
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -60,7 +60,7 @@ keystone_system_comment: keystone system user
keystone_system_user_home: "/var/lib/{{ keystone_system_user_name }}" keystone_system_user_home: "/var/lib/{{ keystone_system_user_name }}"
## Drivers ## Drivers
keystone_auth_methods: "password,token" keystone_auth_methods: "password,token,application_credential"
keystone_identity_driver: sql keystone_identity_driver: sql
keystone_token_provider: fernet keystone_token_provider: fernet
keystone_token_expiration: 43200 keystone_token_expiration: 43200

7
releasenotes/notes/app-credentials-709e7ae0573b4955.yaml Normal file
View File

@ -0,0 +1,7 @@
---
upgrade:
- |
Application credentials are now enabled by default as a keystone
authentication method. If deployments do not wish to enable
application credentials then the existing keystone_auth_methods variable
can be overidden with the required set of authentication methods.