clients_keystone/auth_uri should not default to admin URL

[Pierre Riteau]

By default, the ::heat class configures clients_keystone/auth_uri to the value of ::heat::keystone::authtoken::auth_url, which is generally the admin endpoint on port 35357.

However, since this URI can be used by non-admin clients running inside instances, such as os-collect-config, a better default value would be to use the public Keystone endpoint, as expected by Heat.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/561227

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/561227
Committed: https://git.openstack.org/cgit/openstack/puppet-heat/commit/?id=564b1a7234d32dcb0c31656b67069a3e0b9a6c87
Submitter: Zuul
Branch: master

commit 564b1a7234d32dcb0c31656b67069a3e0b9a6c87
Author: Pierre Riteau <email address hidden>
Date: Fri Apr 13 14:33:12 2018 +0100

    Change clients_keystone/auth_uri default to public Keystone URL

    By default, the ::heat class configures clients_keystone/auth_uri to the
    value of ::heat::keystone::authtoken::auth_url, which is generally the
    admin endpoint on port 35357.

    However, since this URI can be used by non-admin clients running inside
    instances, such as os-collect-config, a better default value would be to
    use either the public or internal Keystone endpoint, depending on the
    deployment. This commit changes the default to the public Keystone
    endpoint defined in ::heat::keystone::authtoken::www_authenticate_uri.

    It is still possible to provide a custom value using the
    heat_clients_keystone_uri parameter.

    Change-Id: Idb0f408776ef27f16a522e4443531fd97276669b
    Closes-Bug: #1763700

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/puppet-heat 13.0.0 release.