If no interface is set, the default is the admin interface.
In a normal deployment both openstack-keystone admin and internal
endpoints are exposed on the same URL.
In case of Distributed Cloud openstack-keystone URL for admin is
overriden to something different than internal URL.
Due to lack of interface, the default `admin` is used, yet the URL is
set to the interal one. The config doesn't point to a valid Keystone
service. Thus Cinder, Nova and Nova-api-proxy cannot validate tokens.
Modify configs for services to point to the internal keystone service.
Closes-Bug: 1875914
Change-Id: I19385f1fe27cf8f20f5ee7b43abf86b220c9d8d6
Signed-off-by: Dan Voiculeasa <email address hidden>
Reviewed: https:/ /review. opendev. org/735088 /git.openstack. org/cgit/ starlingx/ openstack- armada- app/commit/ ?id=ce81e5bceae aba230a0ab0822a 5e9cd2bc8a8a31
Committed: https:/
Submitter: Zuul
Branch: master
commit ce81e5bceaeaba2 30a0ab0822a5e9c d2bc8a8a31
Author: Dan Voiculeasa <email address hidden>
Date: Thu Jun 11 12:09:13 2020 +0300
Change stx-openstack services token validation endpoint
If no interface is set, the default is the admin interface.
In a normal deployment both openstack-keystone admin and internal
endpoints are exposed on the same URL.
In case of Distributed Cloud openstack-keystone URL for admin is
overriden to something different than internal URL.
Due to lack of interface, the default `admin` is used, yet the URL is
set to the interal one. The config doesn't point to a valid Keystone
service. Thus Cinder, Nova and Nova-api-proxy cannot validate tokens.
Modify configs for services to point to the internal keystone service.
Closes-Bug: 1875914 f20f5ee7b43abf8 6b220c9d8d6
Change-Id: I19385f1fe27cf8
Signed-off-by: Dan Voiculeasa <email address hidden>