Comment 5 for bug 1716344

Revision history for this message
Matt Riedemann (mriedem) wrote :

The original description of this bug says it makes instance create fail, which would be incorrect. As stated, keystone is only used for project_id verification when updating quota or changing flavor access. There was a conscious decision to hard-code the public endpoint as the interface when this change was made, but we changed that hard-coding for nova talking to the placement endpoint so I don't see why we wouldn't also allow different endpoints for talking to keystone. And actually, the KSA adapter stuff that Eric Fried is working on in Queens all defaults to using the internal interface I think.