Deprecation message when using default keystone-paste.ini

[Brant Knudson]

When configured using the default keystone-paste.ini and the admin token is used, keystone prints a warning:

2016-02-24 10:29:04.810 WARNING keystone.middleware.auth [req-b55760b6-94fd-4ae6-8373-951a33bbd7b1 ] Deprecated: Auth context checking for the admin token is deprecated as of the Mitaka release and will be removed in the O release. Update keystone-paste.ini so that admin_token_auth is before build_auth_context in the paste pipelines.

The default keystone-paste.ini should be corrected so that this warning isn't printed.

[Brant Knudson (blk-u)]

https://review.openstack.org/#/c/281372/ is the proposed fix.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/281372
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=ee2e3272ac01d79133ffb735aac1ed125a88955d
Submitter: Jenkins
Branch: master

commit ee2e3272ac01d79133ffb735aac1ed125a88955d
Author: Brant Knudson <email address hidden>
Date: Wed Feb 17 10:03:38 2016 -0600

    Move admin_token_auth before build_auth_context in sample paste.ini

    It's deprecated to have admin_token_auth after build_auth_context,
    so move admin_token_auth before build_auth_context.

    Also, for safety in the code handling the deprecated configuration,
    only do the admin_token check if admin_token is not the default.

    Closes-Bug: 1549371
    Change-Id: I2607e718ecd50eb605a1e4bbfb3862e3968b6484

[Thierry Carrez (ttx)]

This issue was fixed in the openstack/keystone 9.0.0.0b3 development milestone.