Deprecate usage of authtoken parameters in providers
When SRBAC is completely implemented according to the current spec, each service user no longer has full admin privilege but has access limited to the actual requirement. This means that we are no longer able to use service users to create resources. This change is a prep-work to get rid of usage of the service user, currently loaded from authtoken parameters in the .conf file. Now each providers loads clouds.yaml file placed in /etc/openstack/puppet. Depends-on: https://review.opendev.org/806474 Depends-on: https://review.opendev.org/828025 Change-Id: I80ea9fc1da31696cafa77ff12febfd4054f435bc
This commit is contained in:
parent
9123ac7270
commit
596a77483b
@ -29,6 +29,7 @@ class Puppet::Provider::Cinder < Puppet::Provider::Openstack
|
||||
end
|
||||
|
||||
def self.cinder_request(service, action, error, properties=nil)
|
||||
warning('Usage of keystone_authtoken parameters is deprecated.')
|
||||
properties ||= []
|
||||
@credentials.username = cinder_credentials['username']
|
||||
@credentials.password = cinder_credentials['password']
|
||||
|
@ -0,0 +1,12 @@
|
||||
---
|
||||
deprecations:
|
||||
- |
|
||||
The following resource types have been using the credential written in
|
||||
the ``[keystone_authtoken]`` section of ``cinder.conf``. However this
|
||||
behavior has been deprecated and now these resource types first look for
|
||||
the yaml files in ``/etc/openstack/puppet``. Make sure one of
|
||||
``clouds.yaml`` or ``admin-clouds.yaml`` (which is created by
|
||||
puppet-keystone) is created in that directory.
|
||||
|
||||
- ``cinder_type``
|
||||
- ``cinder_qos``
|
Loading…
x
Reference in New Issue
Block a user