Trustee sections should support auth_type option
Bug #1554533 reported by
Matt Kassawara
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Heat |
Fix Released
|
High
|
Rabi Mishra |
Bug Description
The [trustee] section(s) in the heat.conf file should support the auth_type option instead of the auth_plugin option, similar to other services.
Changed in heat: | |
status: | New → Confirmed |
Changed in heat: | |
milestone: | none → mitaka-rc1 |
importance: | Undecided → High |
Changed in heat: | |
milestone: | mitaka-rc1 → mitaka-rc2 |
tags: | added: mitaka-backport-potential |
Changed in heat: | |
milestone: | mitaka-rc2 → newton-1 |
To post a comment you must log in.
Hi Matt, so this appears to be a follow-on from our previous work ref https:/ /review. openstack. org/#/c/ 254145/ 4/heat/ common/ context. py right?
I'm not quite clear what there is to do here, because we pass the entire trustee section into auth.load_ from_conf_ options, we don't explicitly do anything related to auth_type, can you provide any pointers to what other projects are doing in this regard?
The only thing I did was hard-code our requirement for the v3password plugin via the list_opts, beause as far as I'm aware no other plugin will currently work in the context of our trustee auth requirements (we have to be able to do non-expiring, e.g password based auth, and it must support delegation via trusts)
If you can provide a bit more detail here I'll be happy to take a look, thanks!