Add application credentials as a default authentication method

Change-Id: I3fd50b45ad0f7cb0f7ee0d9eb70053c04e5d721f
This commit is contained in:
Jonathan Rosser 2019-10-01 21:28:48 +01:00
parent 83d22bbfcf
commit 254811b184
2 changed files with 8 additions and 1 deletions

View File

@ -60,7 +60,7 @@ keystone_system_comment: keystone system user
keystone_system_user_home: "/var/lib/{{ keystone_system_user_name }}" keystone_system_user_home: "/var/lib/{{ keystone_system_user_name }}"
## Drivers ## Drivers
keystone_auth_methods: "password,token" keystone_auth_methods: "password,token,application_credential"
keystone_identity_driver: sql keystone_identity_driver: sql
keystone_token_provider: fernet keystone_token_provider: fernet
keystone_token_expiration: 43200 keystone_token_expiration: 43200

View File

@ -0,0 +1,7 @@
---
upgrade:
- |
Application credentials are now enabled by default as a keystone
authentication method. If deployments do not wish to enable
application credentials then the existing keystone_auth_methods variable
can be overidden with the required set of authentication methods.