Heat should use trust-based auth by default

Bug #1428700 reported by Pavlo Shchelokovskyy
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mirantis OpenStack
Fix Released
High
Igor Yozhikov
6.0.x
Invalid
High
MOS Maintenance
6.1.x
Fix Released
High
Igor Yozhikov

Bug Description

Using Keystone v3 trusts for deferred auth in Heat is a stable and mature feature. The lack of it severely limits the number of users being able to use the full power of Heat to admins only.

Revision history for this message
OSCI Robot (oscirobot) wrote :

DEB package heat has been built for project openstack/heat
Package version == 2014.2.1, package release == fuel6.1~mira1+git.8303f3b.3236707

Changeset: https://review.fuel-infra.org/4391
project: openstack-build/heat-build
branch: openstack-ci/fuel-6.1/2014.2
author: Igor Yozhikov
committer: Igor Yozhikov
subject: Add missed heat-keystone-setup-domain
status: patchset-created

Files placed on repository:
heat-api-cfn_2014.2.1-fuel6.1~mira1+git.8303f3b.3236707_all.deb
heat-api-cloudwatch_2014.2.1-fuel6.1~mira1+git.8303f3b.3236707_all.deb
heat-api_2014.2.1-fuel6.1~mira1+git.8303f3b.3236707_all.deb
heat-common_2014.2.1-fuel6.1~mira1+git.8303f3b.3236707_all.deb
heat-docker_2014.2.1-fuel6.1~mira1+git.8303f3b.3236707_all.deb
heat-engine_2014.2.1-fuel6.1~mira1+git.8303f3b.3236707_all.deb
python-heat_2014.2.1-fuel6.1~mira1+git.8303f3b.3236707_all.deb

NOTE: Changeset is not merged, created temporary package repository.
DEB repository URL: http://obs-1.mirantis.com:82/trusty-fuel-6.1-stable-4391/ubuntu

Revision history for this message
OSCI Robot (oscirobot) wrote :

DEB package heat has been built for project openstack/heat
Package version == 2014.2.1, package release == fuel6.1~mira1

Changeset: https://review.fuel-infra.org/4391
project: openstack-build/heat-build
branch: openstack-ci/fuel-6.1/2014.2
author: Igor Yozhikov
committer: Igor Yozhikov
subject: Add missed heat-keystone-setup-domain
status: change-merged

Files placed on repository:
heat-api-cfn_2014.2.1-fuel6.1~mira1_all.deb
heat-api-cloudwatch_2014.2.1-fuel6.1~mira1_all.deb
heat-api_2014.2.1-fuel6.1~mira1_all.deb
heat-common_2014.2.1-fuel6.1~mira1_all.deb
heat-docker_2014.2.1-fuel6.1~mira1_all.deb
heat-engine_2014.2.1-fuel6.1~mira1_all.deb
python-heat_2014.2.1-fuel6.1~mira1_all.deb

Changeset merged. Package placed on primary repository
DEB repository URL: http://obs-1.mirantis.com:82/trusty-fuel-6.1-stable/ubuntu

Revision history for this message
Bogdan Dobrelya (bogdando) wrote :
Changed in fuel:
assignee: nobody → Dmitry Ilyin (idv1985)
milestone: none → 6.1
status: New → In Progress
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/161807
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=c635bd751a4636cd7ef691c2d5cc72e33b752e82
Submitter: Jenkins
Branch: master

commit c635bd751a4636cd7ef691c2d5cc72e33b752e82
Author: Dmitry Ilyin <email address hidden>
Date: Thu Mar 5 20:46:29 2015 +0300

    Add Heat domain support

    * Add Heat domain related options to the Heat config
    * Add a native type to set Heat domain id from Keystone to Heat config
    * Create a new Heat domain for heat_admin user

    Closes-Bug: 1100145
    Closes-Bug: 1428700
    Change-Id: I1c6b1bd3c34710e3c5cc4d4da6521ae11b8c973e

Changed in fuel:
status: In Progress → Fix Committed
no longer affects: fuel
Changed in mos:
milestone: none → 6.1
Revision history for this message
Yaroslav Lobankov (ylobankov) wrote :

Verified on

VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "6.1"
  api: "1.0"
  build_number: "234"
  build_id: "2015-03-26_22-54-44"
  nailgun_sha: "b163f6fc77d6639aaffd9dd992e1ad96951c3bbf"
  python-fuelclient_sha: "e5e8389d8d481561a4d7107a99daae07c6ec5177"
  astute_sha: "3f1ece0318e5e93eaf48802fefabf512ca1dce40"
  fuellib_sha: "9c7716bc2ce6075065d7d9dcf96f4c94662c0b56"
  ostf_sha: "a4cf5f218c6aea98105b10c97a4aed8115c15867"
  fuelmain_sha: "320b5f46fc1b2798f9e86ed7df51d3bda1686c10"

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.