Use the session loader in keystoneauth1 for designate

[OpenStack Infra]

https://review.openstack.org/416048
Dear bug triager. This bug was created since a commit was marked with DOCIMPACT.
Your project "openstack/neutron" is set up so that we directly report the documentation bugs against it. If this needs changing, the docimpact-group option needs to be added for the project. You can ask the OpenStack infra team (#openstack-infra on freenode) for help if you need to.

commit b38f1cb1f737dede90f3df74f3515d63c357fa30
Author: Gyorgy Szombathelyi <email address hidden>
Date: Mon Dec 19 13:58:10 2016 +0100

    Use the session loader in keystoneauth1 for designate

    Using the session loader has the benefit of compatibility with
    settings in other sections (like keystone_authtoken), and the
    ability to use client certs and setting the timeout. This changes
    the designate.ca_cert setting to designate.cafile, but the former
    is added as a deprecated option, so existing config files will work.

    DocImpact
    ca_cert in [designate] is deprecated, use cafile instead.

    Change-Id: I9f2173b02af5c3929a96ef8c773d587e9b673d62

[Boden R (boden)]

This doc impact bug affects the designate DNS driver configuration reference.

[Alexandra Settle (alexandra-settle)]

Hi Boden,

Designate is not currently documented in the configuration reference guide: http://docs.openstack.org/newton/config-reference/

All designate documentation is in the developer documentation: http://docs.openstack.org/developer/designate/configuration.html

The singular reference for ca_certs are here:

1. http://docs.openstack.org/admin-guide/identity-certificates-for-pki.html (keystone)
2. http://docs.openstack.org/newton/config-reference/application-catalog/config-options.html (Murano and neutron)

Or in other individual developer documentation. Could you please be more specific about where this impacts?

Thanks,

Alex

[Alexandra Settle (alexandra-settle)]

http://docs.openstack.org/draft/networking-guide/config-dns-int.html ??

[Gauvain Pocentek (gpocentek)]

Since we don't have designate documentation in the appropriate guides I believe this should be fixed in the designate developer doc.

Let us know if you need help though!

[Graham Hayes (grahamhayes)]

This is about docs for neutron talking to designate, so it belongs either in the neutron docs, or openstack manuals.

[Alexandra Settle (alexandra-settle)]

Graham,

In that case, could you potentially help with my questions/suggestions above? :)

Thanks,

Alex

[John Davidge (john-davidge)]

This bug is valid, and needs to be fixed here:

https://docs.openstack.org/ocata/networking-guide/config-dns-int.html#configuring-openstack-networking-for-integration-with-an-external-dns-service

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/439696

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/439696
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=0ec1783475a316ef0043d50370966d95e49ddf64
Submitter: Jenkins
Branch: master

commit 0ec1783475a316ef0043d50370966d95e49ddf64
Author: chenxing <[e-mail]>
Date: Wed Mar 1 11:25:58 2017 -0500

    [networking] Update a deprecated option

    ca_cert in [designate] is deprecated, use cafile instead.

    Change-Id: Iaff11e9be4dad743804a142dfea95b964f63c7aa
    Closes-Bug: #1655785

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-manuals 15.0.0 release.