openstack/openstack-helm
Code Issues Proposed changes

Keystone: Use service domain for service users

Browse Source 
This PS moves to use a service domain for openstack service accounts
and users.

Change-Id: Ibe7c5f83a9fc9960fb85e53f9745d24f2192a94a
Signed-off-by: Pete Birley <pete@port.direct>
This commit is contained in:
Pete Birley 2018-07-25 21:22:23 -05:00
parent 71439d1b67
commit 95c5b4942d
16 changed files with 64 additions and 61 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
barbican/values.yaml
View File

@ -538,8 +538,8 @@ endpoints:
username: barbican
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

8
ceilometer/values.yaml
View File

@ -1690,16 +1690,16 @@ endpoints:
username: ceilometer
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
test:
role: admin
region_name: RegionOne
username: test
password: password
project_name: test
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

6
ceph-client/values.yaml
View File

@ -274,7 +274,7 @@ conf:
config:
rgw_keystone_api_version: 3
rgw_keystone_accepted_roles: "admin, member"
rgw_keystone_implicit_tenants: false
rgw_keystone_implicit_tenants: true
rgw_keystone_make_new_tenants: true
rgw_s3_auth_use_keystone: true
rgw_swift_account_in_url: true
@ -442,8 +442,8 @@ endpoints:
username: swift
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

8
cinder/values.yaml
View File

@ -1054,16 +1054,16 @@ endpoints:
username: cinder
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
test:
role: admin
region_name: RegionOne
username: test
password: password
project_name: test
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

4
congress/values.yaml
View File

@ -236,8 +236,8 @@ endpoints:
username: congress
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

11
glance/values.yaml
View File

@ -359,6 +359,9 @@ conf:
user_domain_name = {{ .Values.endpoints.identity.auth.glance.user_domain_name }}
project_domain_name = {{ .Values.endpoints.identity.auth.glance.project_domain_name }}
auth_version = 3
# NOTE(portdirect): https://bugs.launchpad.net/glance-store/+bug/1620999
project_domain_id = ""
user_domain_id = ""
{{- end -}}
rabbitmq:
#NOTE(rk760n): adding rmq policy to mirror messages from notification queues and set expiration time for the ones
@ -554,16 +557,16 @@ endpoints:
username: glance
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
test:
role: admin
region_name: RegionOne
username: test
password: password
project_name: test
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

4
gnocchi/values.yaml
View File

@ -471,14 +471,14 @@ endpoints:
os_tenant_name: "admin"
gnocchi:
username: "gnocchi"
user_domain_name: "default"
role: "admin"
password: "password"
project_name: "service"
project_domain_name: "default"
region_name: "RegionOne"
os_auth_type: "password"
os_tenant_name: "service"
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

12
heat/values.yaml
View File

@ -782,16 +782,16 @@ endpoints:
username: heat
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
heat_trustee:
role: admin
region_name: RegionOne
username: heat-trust
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
heat_stack_user:
role: admin
region_name: RegionOne
@ -804,8 +804,8 @@ endpoints:
username: test
password: password
project_name: test
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

8
ironic/values.yaml
View File

@ -384,16 +384,16 @@ endpoints:
username: glance
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
ironic:
role: admin
region_name: RegionOne
username: ironic
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

4
magnum/values.yaml
View File

@ -344,8 +344,8 @@ endpoints:
username: magnum
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
magnum_stack_user:
role: admin
region_name: RegionOne

8
mistral/values.yaml
View File

@ -225,16 +225,16 @@ endpoints:
username: mistral
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
test:
role: admin
region_name: RegionOne
username: test
password: password
project_name: test
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

12
neutron/values.yaml
View File

@ -1753,23 +1753,23 @@ endpoints:
username: neutron
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
nova:
region_name: RegionOne
project_domain_name: default
project_name: service
user_domain_name: default
username: nova
password: password
user_domain_name: service
project_domain_name: service
test:
role: admin
region_name: RegionOne
username: test
password: password
project_name: test
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

20
nova/values.yaml
View File

@ -1349,15 +1349,15 @@ endpoints:
username: nova
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
# NOTE(portdirect): the neutron user is not managed by the nova chart
# these values should match those set in the neutron chart.
neutron:
region_name: RegionOne
project_name: service
project_domain_name: default
user_domain_name: default
user_domain_name: service
project_domain_name: service
username: neutron
password: password
# NOTE(portdirect): the ironic user is not managed by the nova chart
@ -1367,8 +1367,8 @@ endpoints:
auth_version: v3
region_name: RegionOne
project_name: service
project_domain_name: default
user_domain_name: default
user_domain_name: service
project_domain_name: service
username: ironic
password: password
placement:
@ -1377,16 +1377,16 @@ endpoints:
username: placement
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
test:
role: admin
region_name: RegionOne
username: test
password: password
project_name: test
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

4
rally/values.yaml
View File

@ -246,8 +246,8 @@ endpoints:
username: rally
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

8
senlin/values.yaml
View File

@ -391,16 +391,16 @@ endpoints:
username: senlin
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
test:
role: admin
region_name: RegionOne
username: test
password: password
project_name: test
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone

4
tempest/values.yaml
View File

@ -241,8 +241,8 @@ endpoints:
username: tempest
password: password
project_name: service
user_domain_name: default
project_domain_name: default
user_domain_name: service
project_domain_name: service
hosts:
default: keystone-api
public: keystone