Change clients_keystone/auth_uri default to public Keystone URL
By default, the ::heat class configures clients_keystone/auth_uri to the
value of ::heat::keystone::authtoken::auth_url, which is generally the
admin endpoint on port 35357.
However, since this URI can be used by non-admin clients running inside
instances, such as os-collect-config, a better default value would be to
use either the public or internal Keystone endpoint, depending on the
deployment. This commit changes the default to the public Keystone
endpoint defined in ::heat::keystone::authtoken::www_authenticate_uri.
It is still possible to provide a custom value using the
heat_clients_keystone_uri parameter.
Reviewed: https:/ /review. openstack. org/561227 /git.openstack. org/cgit/ openstack/ puppet- heat/commit/ ?id=564b1a7234d 32dcb0c31656b67 069a3e0b9a6c87
Committed: https:/
Submitter: Zuul
Branch: master
commit 564b1a7234d32dc b0c31656b67069a 3e0b9a6c87
Author: Pierre Riteau <email address hidden>
Date: Fri Apr 13 14:33:12 2018 +0100
Change clients_ keystone/ auth_uri default to public Keystone URL
By default, the ::heat class configures clients_ keystone/ auth_uri to the :keystone: :authtoken: :auth_url, which is generally the
value of ::heat:
admin endpoint on port 35357.
However, since this URI can be used by non-admin clients running inside :keystone: :authtoken: :www_authentica te_uri.
instances, such as os-collect-config, a better default value would be to
use either the public or internal Keystone endpoint, depending on the
deployment. This commit changes the default to the public Keystone
endpoint defined in ::heat:
It is still possible to provide a custom value using the clients_ keystone_ uri parameter.
heat_
Change-Id: Idb0f408776ef27 f16a522e4443531 fd97276669b
Closes-Bug: #1763700