openstack
/
openstack-manuals
Code Issues Proposed changes

[admin-guide] add keystone eventlet removal notification 

Eventlet support on keystone will be removed in Newton.

Change-Id: I3a7acfa0e9ebb382e7560d07740e0baa7ed075dd
Partial-Bug: #1578935
This commit is contained in:
KATO Tomoyuki 2016-06-07 15:40:26 +09:00
parent 49143fd388
commit bd4b3f2e75
2 changed files with 11 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
doc/admin-guide/source/identity_concepts.rst
View File

@ -295,7 +295,8 @@ services. It consists of:
* keystone-all
Starts both the service and administrative APIs in a single process.
Using federation with keystone-all is not supported. keystone-all is
deprecated in favor of the WSGI service.
deprecated in favor of the WSGI service. Also, this will be removed
in Newton.
The Identity service also maintains a user that corresponds to each
service, such as, a user named ``nova`` for the Compute service, and a

14
doc/admin-guide/source/keystone_configure_with_SSL.rst
View File

@ -34,6 +34,15 @@ ssl\_key.pem
Client authentication with keystone-all
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.. note::
When running the Identity service as a WSGI service in a web server
such as Apache HTTP Server, this configuration is done in the web server
instead. In this case, the options in the ``[eventlet_server_ssl]``
section are ignored.
The eventlet support will be removed in Newton.
When running ``keystone-all``, the server can be configured to enable SSL
with client authentication using the following instructions. Modify the
``[eventlet_server_ssl]`` section in the ``/etc/keystone/keystone.conf``
@ -67,8 +76,3 @@ certificates:
- ``cert_required``
Requires client certificate. Default is ``False``.
When running the Identity service as a WSGI service in a web server such
as Apache httpd, this configuration is done in the web server instead.
In this case the options in the ``[eventlet_server_ssl]`` section are
ignored.