Commit Graph

22 Commits

Author SHA1 Message Date
Takashi Kajinami 11599ba429 Remove support for glance-registry service
This patch removes support for glance-registry service, because it has
been removed from glance [1].
 [1] https://review.opendev.org/#/c/738671/

Change-Id: Id05f736dbbddaff2cb90aa6678c777b9a0318e40
2020-07-28 19:41:10 +09:00
Takashi Kajinami 0b973b4648 Add support for the interface parameter in authtoken middleware
This patch adds support for [keystone_authtoken] interface parameter,
so that operators can define which endpoint should be used by authtoken
middleware.

Change-Id: I380868884abe92b35e93c3bf22d877838d0eac55
2020-07-08 11:19:04 +09:00
Tobias Urdin ed9298e996 Convert all class usage to relative names
Change-Id: I9ff8d888e367a46ab89e3668bf4ba76c4c7c127c
2019-12-08 23:06:03 +01:00
Takashi Kajinami df5ad970cd Add support to configure service_token_roles in authtoken middleware
Change-Id: Ia198c96c30226e1ddaa5b68919d471014d5edfd0
2019-09-21 10:21:02 +09:00
ZhongShengping e82d93c1c0 Remove deprecated pki related options
The deprecated pki related options check_revocations_for_cached and
hash_algorithms option has been removed.

Change-Id: Ib692f55fa267e9fbe17d94c5116f244be02b2107
2019-08-15 11:51:36 +08:00
ZhongShengping ec00aca117 Service_token_roles_required missing in the server config file
Service_token_roles_required missing in the server config file which
allows backwards compatibility to ensure that the service tokens are
compared against a list of possible roles for validity.

Change-Id: I49828052bdf33391edcd962fc6c4208c715e377a
Closes-Bug: 1778198
2019-02-15 10:03:02 +08:00
ZhongShengping f8692c4d7c Deprecate pki related options
check_revocations_for_cached and hash_algorithms are deprecated for
removel because of PKI token format is no longer supported.
Update warning message and add a release note.

Change-Id: Ic25814ff5d8a3134de59876c38da2c245c50d7ca
Closes-Bug: #1804562
Closes-Bug: #1804720
2018-12-06 08:35:28 +08:00
Tobias Urdin 779162c884 Remove auth_uri
Change-Id: Id89177db73608736f5cea0e8146ed4dd12c199b3
2018-11-29 00:12:07 +01:00
qiaomin 774a89ce0c Replace port 35357 with 5000
Now that the v2.0 API has been removed, we don't have a reason to
include deployment instructions for two separate applications on
different ports.

Change-Id: Ieb132483803085c0e97a3572fc035af3817467af
2018-05-13 00:35:56 +08:00
zhubingbing a4325bd80f neat: missing : in $::os_service_default
Change-Id: I795fe98d9b0c1eaa92d53a127cbddacc7d86e48b
2018-05-11 14:02:39 +08:00
ZhongShengping 6b0c3d4855 Deprecate auth_uri option
Option auth_uri from group keystone_authtoken is deprecated[1].
Use option www_authenticate_uri from group keystone_authtoken.

[1]https://review.openstack.org/#/c/508522/

Change-Id: I081c6f8c791ef7d4dc1d5bf8dfc2676c73e66734
Depends-On: I4c82a63baabd6b9304b302c97cd751a0103d8316
Closes-Bug: #1759098
2018-04-05 10:09:05 +08:00
ZhongShengping f7771d8ff6 Remove deprecated keystone authtoken revocation_cache_time option
Change-Id: I9ddf7c50051e24283656107a70ad596765e15e5c
2018-03-27 10:33:25 +08:00
Harry Rybacki 384891ba49 Configure *_domain_name to Default by default
Keystone v2.0 API was removed so we have no choice but configuring
user_domain_name and project_domain_name otherwise it fallbacks to
Keystone v2.0 and it fails. This patch sets the default value so we make
sure Keystone v3 will be used out of the box for our users.

Change-Id: If0a614520c4737e489147e18b1e9028e1f671f88
2017-10-06 09:57:30 -04:00
Jenkins 860c2f9815 Merge "Deprecate revocation_cache_time option" 2017-09-21 00:03:25 +00:00
Benedikt Trefzer 5712faf7f3 fix comment about registry configuration
Change-Id: I11ba7eb9225e02ca34e0912de6b77a10972aa28c
2017-09-20 16:15:00 +02:00
ZhongShengping 9ce30c3f55 Deprecate revocation_cache_time option
The revocation_cache_time is deprecated for removel because of PKI
token format is no longer supported.
Update warning message and add a release note.

Change-Id: Ia607af51a784113541ac576b9293700dbafba31d
Closes-Bug: #1717144
2017-09-14 11:25:40 +08:00
ZhongShengping 0adfc3d495 Remove deprecated keystone authtoken signing_dir option
Change-Id: I6e6cca651a8b157491cb1c2bde063c56e7c72dcd
2017-07-07 10:08:12 +08:00
Matthew J. Black a964f9f925 Allow python-memcache install from authtoken class
The python-memcache package is required if using memcached. By
default the package is not installed and the define has it set to
false. This change allows managing the python-memcache package
install from the authtoken class.

Change-Id: I7de3338061bad949f26ed0d84782124c7b61eb70
2017-01-11 11:44:55 -05:00
ZhongShengping e6a6df773b Deprecate signing_dir option
The signing_dir is deprecated for removel because of PKI token format
is no longer supported.
Update warning message and release note.

Change-Id: Ifaad2dffab360df2790dac8d9ad8c9a87f719f6b
Closes-Bug: #1652700
2016-12-28 09:03:30 +08:00
ZhongShengping 54f6ba25f7 Add deps to authtoken
The authtoken class needs to include the ::glance::deps class.

Change-Id: I554f17cd2c5ef47eeb72df8e9a116493389e11e3
2016-11-24 11:58:21 +08:00
Iury Gregory Melo Ferreira ddfd2150b9 Remove old authtoken options
Since we are in ocata lets remove all old parameters in api
to configure the keystone_authtoken section

Change-Id: I4dc0bd544f91fd52ad437b4c3ebbd16a43895726
2016-11-15 23:40:36 -03:00
Denis Egorenko 1e09e553ed Move Glance to new authtoken scheme
Use glance::<service>::authtoken to configure keystone_authtoken
section in glance configs, with all parameters required
to configure keystonemiddleware.

Also changed auth_type to auth_strategy, because auth_type is
related to keystone authentication.

Change-Id: I722a1e41b2cee0b3040c37f07adfd13c33edaa5c
Closes-bug: #1604463
2016-08-05 13:46:22 +03:00