Federation extension is absent in keystone-paste.ini
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mirantis OpenStack |
Confirmed
|
Wishlist
|
MOS Keystone |
Bug Description
Subj: Federation extension is absent in keystone-paste.ini
To be able using Keystone federation functionality we should have federation extension enabled in /etc/keystone/
By default MOS7/8/9 does not include it in keystone configuration.
/etc/keystone/
```
# Keystone PasteDeploy configuration file.
[filter:debug]
use = egg:oslo.
[filter:request_id]
use = egg:oslo.
[filter:
use = egg:keystone#
[filter:token_auth]
use = egg:keystone#
[filter:
# This is deprecated in the M release and will be removed in the O release.
# Use `keystone-manage bootstrap` and remove this from the pipelines below.
use = egg:keystone#
[filter:json_body]
use = egg:keystone#
[filter:cors]
use = egg:oslo.
oslo_config_project = keystone
[filter:
use = egg:keystone#
[filter:
use = egg:keystone#
[filter:
use = egg:keystone#
[filter:
use = egg:keystone#
[filter:
use = egg:keystone#
[filter:sizelimit]
use = egg:oslo.
[app:public_
use = egg:keystone#
[app:service_v3]
use = egg:keystone#
[app:admin_service]
use = egg:keystone#
[pipeline:
# The last item in this pipeline must be public_service or an equivalent
# application. It cannot be a filter.
pipeline = cors sizelimit url_normalize request_id admin_token_auth build_auth_context token_auth json_body ec2_extension public_service
[pipeline:
# The last item in this pipeline must be admin_service or an equivalent
# application. It cannot be a filter.
pipeline = cors sizelimit url_normalize request_id admin_token_auth build_auth_context token_auth json_body ec2_extension s3_extension admin_service
[pipeline:api_v3]
# The last item in this pipeline must be service_v3 or an equivalent
# application. It cannot be a filter.
#pipeline = cors sizelimit url_normalize request_id admin_token_auth build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3
pipeline = cors sizelimit url_normalize request_id admin_token_auth build_auth_context token_auth json_body ec2_extension_v3 s3_extension federation_
#pipeline = sizelimit url_normalize build_auth_context token_auth admin_token_auth json_body ec2_extension_v3 s3_extension simple_
[app:public_
use = egg:keystone#
[app:admin_
use = egg:keystone#
[pipeline:
pipeline = cors sizelimit url_normalize public_
[pipeline:
pipeline = cors sizelimit url_normalize admin_version_
[composite:main]
use = egg:Paste#urlmap
/v2.0 = public_api
/v3 = api_v3
/ = public_version_api
[composite:admin]
use = egg:Paste#urlmap
/v2.0 = admin_api
/v3 = api_v3
/ = admin_version_api
```
After that run:
keystone-manage db_sync --extension federation
Changed in mos: | |
assignee: | nobody → MOS Keystone (mos-keystone) |
Changed in mos: | |
importance: | Undecided → Wishlist |
status: | New → Confirmed |
milestone: | none → 9.2 |
tags: | added: area-puppet |