openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Remove external from KeystoneAuthMethods 

External is not compatable with federated authentication

Change-Id: If72ee0c1615efa7107a334e44ddd19d638178ce7
This commit is contained in:
Dave Wilde 2022-11-17 19:47:27 -06:00 committed by David Wilde
parent 1c7b14cadd
commit 67f47c0d79
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
environments/enable-federation-openidc.yaml
View File

@ -12,7 +12,7 @@
parameter_defaults:
# A list of methods used for authentication.
# Type: comma_delimited_list
KeystoneAuthMethods: external,password,token,oauth1,mapped,application_credential,openid
KeystoneAuthMethods: password,token,oauth1,mapped,application_credential,openid
# The client ID to use when handshaking with your OpenID Connect provider
# Type: string

2
sample-env-generator/openidc.yaml
View File

@ -29,7 +29,7 @@ environments:
KeystoneOpenIdcEnable: True
KeystoneOpenIdcEnableOAuth: True
WebSSOEnable: True
KeystoneAuthMethods: external,password,token,oauth1,mapped,application_credential,openid
KeystoneAuthMethods: password,token,oauth1,mapped,application_credential,openid
KeystoneTrustedDashboards: 'https://dashboard.example.test/dashboard/auth/websso/'
KeystoneOpenIdcIdpName: 'myidp'
KeystoneOpenIdcProviderMetadataUrl: 'https://myidp.example.test/auth/realms/openstack/.well-known/openid-configuration'