Comment 7 for bug 1485508
Revision history for this message
| OpenStack Infra (hudson-openstack) wrote Fix merged to puppet-keystone (master) | #7 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
Reviewed: https:/
Committed: https:/
Submitter: Jenkins
Branch: master
commit 64100bb284dbfb7
Author: Sofer Athlan-Guyot <email address hidden>
Date: Wed Mar 30 13:00:58 2016 +0200
Remove user/role prefetch to support multi-domain.
In keystone when the multi-domain configuration is enable, listing all
the user is no longer supported. You have to specify the domain. The
rational is that some domain will have LDAP backend (possibly AD) with
tons of users. Listing them all would not be reliable.
The prefetch feature in puppet needs to know all users and create an
associated object. This is not a good idea when the number of user is
too high. Thus the removal of this is necessary. The rational for
using prefetch is that checking all items in one go "cost" less than
fetching individual information. As the number of user defined in the
catalog is likely to be less than the number of user in the keystone db,
this seems dubious that this would be case here, hence the removal.
As a consequence the keystone_user_role needs prefetch removal as well.
It actually greatly simplify the code. A cache is made for user and
project id to minimize the number of requests to the minimum.
Closes-Bug: 1554555
Closes-Bug: 1485508
Depends-On: I5b334e3ffd26df
Change-Id: I8e117a9ddbd2ed