Allow using auth plugins to talk to nova

Bug #1403686 reported by Jamie Lennox
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Medium
Jamie Lennox

Bug Description

When neutron communicates with nova it authenticates using the options:

# URL for connection to nova (Only supports one nova region currently).
# nova_url = http://127.0.0.1:8774/v2

# Name of nova region to use. Useful if keystone manages more than one region
# nova_region_name =

# Username for connection to nova in admin context
# nova_admin_username =

# The uuid of the admin nova tenant
# nova_admin_tenant_id =

# The name of the admin nova tenant. If the uuid of the admin nova tenant
# is set, this is optional. Useful for cases where the uuid of the admin
# nova tenant is not available when configuration is being done.
# nova_admin_tenant_name =

# Password for connection to nova in admin context.
# nova_admin_password =

# Authorization URL for connection to nova in admin context.
# nova_admin_auth_url =

This is restricted to only keystone v2 auth and means it can only be used with user and password authentication.

Keystoneclient provides a generic way to handle loading authentication from a config file that will support abritrary future authentication mechanisms. Neutron should use that.

Changed in neutron:
assignee: nobody → Jamie Lennox (jamielennox)
status: New → In Progress
Kyle Mestery (mestery)
Changed in neutron:
milestone: none → kilo-3
importance: Undecided → Medium
Revision history for this message
Akihiro Motoki (amotoki) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/142366
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=13427a40768f1a4646520c6b7e3e8c988ce6e18c
Submitter: Jenkins
Branch: master

commit 13427a40768f1a4646520c6b7e3e8c988ce6e18c
Author: Jamie Lennox <email address hidden>
Date: Wed Dec 17 13:57:35 2014 +1000

    Make nova notifier work with sessions

    This allows a variety of additional authentication methods and gives us
    keystone V3 auth for free.

    DocImpact: Deprecates the nova_admin_* config options in favour of
    putting nova config options in the [nova] section.

    Closes-Bug: #1403686
    Change-Id: Ia9941cd3e85f21cbd4db9eb3cef8b200131af9ce

Changed in neutron:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in neutron:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in neutron:
milestone: kilo-3 → 2015.1.0
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to neutron (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/238696

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to neutron (master)

Reviewed: https://review.openstack.org/238696
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=26f008296bc11e927a58fe7bfe9b3ac6d1bb5365
Submitter: Jenkins
Branch: master

commit 26f008296bc11e927a58fe7bfe9b3ac6d1bb5365
Author: Cedric Brandily <email address hidden>
Date: Thu Oct 22 23:15:18 2015 +0200

    Remove deprecated nova_* options

    Neutron nova_* options have been deprecated in Kilo in favour of options
    in [nova] section.

    This change removes these options in order to simplify code, clarify
    configuration and avoid a warning in unittests.

    DocImpact
    UpgradeImpact
    Closes-Bug: #1509092
    Related-Bug: #1403686
    Change-Id: I950f72ad7d7d41cfa006f8c7105934301cd56faa

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.