summaryrefslogtreecommitdiffstats
path: root/deploy/adapters/ansible/openstack_newton_xenial/roles/keystone/tasks/keystone_config.yml
AgeCommit message (Collapse)AuthorFilesLines
2016-12-05Fix keystone token flushliyuenan1-6/+1
JIRA: COMPASS-491 Change-Id: I5986f8152f88ac7a77dd8bf2bbbcb92faf208aa2 Signed-off-by: liyuenan <liyuenan@huawei.com>
2016-11-25Fix the wait_for modulesliyuenan1-1/+1
After restart the service, service's port should be polled rather than haproxy. JIRA: COMPASS-491 Change-Id: I52165e9673b997883109fbf93a93b360a25dabba Signed-off-by: liyuenan <liyuenan@huawei.com>
2016-11-09Update the API version for Openstack Newtonliyuenan1-0/+101
Use the "keystone-manage bootstrap" command to instead of admin_token. Because the admin_token is treated as a "shared secret" that can be used to bootstrap Keystone through the API. This "token" does not represent a user (it has no identity), and carries no explicit authorization (it effectively bypasses most authorization checks). Use the API v3 to instead of API v2.0. Identity API v3 was established to introduce namespacing for users and projects by using "domains" as a higher-level container for more flexible identity management and fixed a security issue in the v2.0 API (bearer tokens appearing in URLs). JIRA: COMPASS-491 Change-Id: I56182c14b761728c3492b9dd2b05c3b57aa5f35f Signed-off-by: liyuenan <liyuenan@huawei.com>