summaryrefslogtreecommitdiffstats
path: root/releasenotes/notes/keystone_internal-53cc7b24ebdd9df4.yaml
blob: 1f41073bca1929faee4eef1a2f846bc7370b9c14 (plain)
1
2
3
4
5
6
7
8
9
---
other:
  - |
    Use Keystone internal endpoint instead of admin for services.
    The admin endpoint is listening on the ctlplane network by default;
    services should ideally be using the internal api network for this kind
    of traffic, as the ctlplane network is mostly for provisioning. On the
    other hand, the admin endpoint shouldn't be as relevant with services
    switching to keystone v3.
: string InternalApiNetValueSpecs: default: {'provider:physical_network': 'internal_api', 'provider:network_type': 'flat'} description: Value specs for the internal API network. type: json InternalApiNetAdminStateUp: default: false description: This admin state of the network. type: boolean InternalApiNetEnableDHCP: default: false description: Whether to enable DHCP on the associated subnet. type: boolean InternalApiNetShared: default: false description: Whether this network is shared across all tenants. type: boolean InternalApiNetName: default: internal_api description: The name of the internal API network. type: string InternalApiSubnetName: default: internal_api_subnet description: The name of the internal API subnet in Neutron. type: string InternalApiAllocationPools: default: [{'start': '172.16.2.4', 'end': '172.16.2.250'}] description: Ip allocation pool range for the internal API network. type: json resources: InternalApiNetwork: type: OS::Neutron::Net properties: admin_state_up: {get_param: InternalApiNetAdminStateUp} name: {get_param: InternalApiNetName} shared: {get_param: InternalApiNetShared} value_specs: {get_param: InternalApiNetValueSpecs} InternalApiSubnet: type: OS::Neutron::Subnet properties: cidr: {get_param: InternalApiNetCidr} enable_dhcp: {get_param: InternalApiNetEnableDHCP} name: {get_param: InternalApiSubnetName} network: {get_resource: InternalApiNetwork} allocation_pools: {get_param: InternalApiAllocationPools} gateway_ip: null outputs: OS::stack_id: description: Neutron internal network value: {get_resource: InternalApiNetwork}