puppet-heat/releasenotes/notes/change_clients_keystone_auth_uri_default-72ba554b846f2193.yaml
Pierre Riteau 564b1a7234 Change clients_keystone/auth_uri default to public Keystone URL
By default, the ::heat class configures clients_keystone/auth_uri to the
value of ::heat::keystone::authtoken::auth_url, which is generally the
admin endpoint on port 35357.

However, since this URI can be used by non-admin clients running inside
instances, such as os-collect-config, a better default value would be to
use either the public or internal Keystone endpoint, depending on the
deployment. This commit changes the default to the public Keystone
endpoint defined in ::heat::keystone::authtoken::www_authenticate_uri.

It is still possible to provide a custom value using the
heat_clients_keystone_uri parameter.

Change-Id: Idb0f408776ef27f16a522e4443531fd97276669b
Closes-Bug: #1763700
2018-04-14 16:30:55 +01:00

8 lines
314 B
YAML

---
upgrade:
- |
The default for the clients_keystone/auth_uri configuration parameter has
been updated to use the public Keystone endpoint rather than the admin
endpoint, as expected by Heat. To continue using the admin endpoint, use
the heat_clients_keystone_uri parameter of the ::heat class.