Update keystone middleware in nova for Kilo

Update keystone authentication middleware in nova to
support the v3 API in Kilo.

Partially implements: blueprint master-kilofication

Change-Id: I2f38ed9a5ad82d98596835a59f6852f1bd3d8ffc

playbooks/inventory/group_vars/all.yml

@@ -82,7 +82,9 @@ memcached_servers: "{% for host in groups['memcached'] %}{{ hostvars[host]['cont
 nova_service_port: 8774
 nova_service_proto: http
 nova_service_user_name: nova
-nova_service_tenant_name: service
+nova_service_project_name: service
+nova_service_project_domain_id: default
+nova_service_user_domain_id: default
 nova_service_adminuri: "{{ nova_service_proto }}://{{ internal_lb_vip_address }}:{{ nova_service_port }}"
 nova_service_adminurl: "{{ nova_service_adminuri }}/v2/%(tenant_id)s"
 nova_service_region: RegionOne

playbooks/roles/os_nova/defaults/main.yml

@@ -40,10 +40,15 @@ nova_virt_type: kvm
 
 ## Nova Auth
 nova_service_region: RegionOne
-nova_service_tenant_name: "service"
+nova_service_project_name: "service"
+nova_service_project_domain_id: default
+nova_service_user_domain_id: default
 nova_service_user_name: "nova"
 nova_service_role_name: "admin"
 
+## Keystone authentication middleware
+nova_keystone_auth_plugin: password
+
 ## Nova enabled apis
 nova_enabled_apis: "osapi_compute,metadata"
 

playbooks/roles/os_nova/tasks/nova_service_setup.yml

@@ -16,7 +16,7 @@
 - include: nova_service_add.yml
   vars:
     service_user_name: "{{ nova_service_user_name }}"
-    service_tenant_name: "{{ nova_service_tenant_name }}"
+    service_tenant_name: "{{ nova_service_project_name }}"
     service_name: "{{ nova_service_name }}"
     service_type: "{{ nova_service_type }}"
     service_region: "{{ nova_service_region }}"
@@ -34,7 +34,7 @@
 - include: nova_service_add.yml
   vars:
     service_user_name: "{{ nova_service_user_name }}"
-    service_tenant_name: "{{ nova_service_tenant_name }}"
+    service_tenant_name: "{{ nova_service_project_name }}"
     service_name: "{{ nova_v21_service_name }}"
     service_type: "{{ nova_v21_service_type }}"
     service_region: "{{ nova_service_region }}"
@@ -51,7 +51,7 @@
 - include: nova_service_add.yml
   vars:
     service_user_name: "{{ nova_service_user_name }}"
-    service_tenant_name: "{{ nova_service_tenant_name }}"
+    service_tenant_name: "{{ nova_service_project_name }}"
     service_name: "{{ nova_v3_service_name }}"
     service_type: "{{ nova_v3_service_type }}"
     service_region: "{{ nova_service_region }}"
@@ -70,7 +70,7 @@
 - include: nova_service_add.yml
   vars:
     service_user_name: "{{ nova_service_user_name }}"
-    service_tenant_name: "{{ nova_service_tenant_name }}"
+    service_tenant_name: "{{ nova_service_project_name }}"
     service_name: "{{ nova_s3_service_name }}"
     service_type: "{{ nova_s3_service_type }}"
     service_region: "{{ nova_service_region }}"
@@ -89,7 +89,7 @@
 - include: nova_service_add.yml
   vars:
     service_user_name: "{{ nova_service_user_name }}"
-    service_tenant_name: "{{ nova_service_tenant_name }}"
+    service_tenant_name: "{{ nova_service_project_name }}"
     service_name: "{{ nova_ec2_service_name }}"
     service_type: "{{ nova_ec2_service_type }}"
     service_region: "{{ nova_service_region }}"

playbooks/roles/os_nova/templates/nova.conf.j2

@@ -146,12 +146,15 @@ enabled = False
 
 
 [keystone_authtoken]
+auth_plugin = {{ nova_keystone_auth_plugin }}
 signing_dir = {{ nova_system_home_folder }}/cache/api
-identity_uri = {{ keystone_service_adminuri }}
-auth_uri = {{ keystone_service_internalurl }}
-admin_tenant_name = {{ nova_service_tenant_name }}
-admin_user = {{ nova_service_user_name }}
-admin_password = {{ nova_service_password }}
+auth_url = {{ keystone_service_adminuri }}
+auth_uri = {{ keystone_service_internaluri }}
+project_domain_id = {{ nova_service_project_domain_id }}
+user_domain_id = {{ nova_service_user_domain_id }}
+project_name = {{ nova_service_project_name }}
+username = {{ nova_service_user_name }}
+password = {{ nova_service_password }}
 
 memcached_servers = {{ memcached_servers }}