Browse code

Setup service user configuration in nova.conf

In Nova, service token will be passed along with user token to communicate
with services when dealing with long running tasks like live migration.

This change addresses adding service user configuration for nova in
devstack.

Part of Nova blueprint use-service-tokens

Depends-On: I51eb0a8937fa39a2e5dafb1ad915e7113ea61f72

Co-Authored-By: Sarafraj Singh <sarafraj.singh@intel.com>

Change-Id: I2d7348c4a72af96c0ed2ef6c0ab75d16e9aec8fc

Pushkar Umaranikar authored on 2016/12/10 05:20:42
Showing 1 changed files
... ...
@@ -161,6 +161,14 @@ NOVA_ALLOW_MOVE_TO_SAME_HOST=$(trueorfalse True NOVA_ALLOW_MOVE_TO_SAME_HOST)
161 161
 TEST_FLOATING_POOL=${TEST_FLOATING_POOL:-test}
162 162
 TEST_FLOATING_RANGE=${TEST_FLOATING_RANGE:-192.168.253.0/29}
163 163
 
164
+# Other Nova configurations
165
+# ----------------------------
166
+
167
+# ``NOVA_USE_SERVICE_TOKEN`` is a mode where service token is passed along with
168
+# user token while communicating to external RESP API's like Neutron, Cinder
169
+# and Glance.
170
+NOVA_USE_SERVICE_TOKEN=$(trueorfalse False NOVA_USE_SERVICE_TOKEN)
171
+
164 172
 # Functions
165 173
 # ---------
166 174
 
... ...
@@ -619,6 +627,22 @@ function create_nova_conf {
619 619
     fi
620 620
 
621 621
     iniset $NOVA_CONF DEFAULT dhcpbridge_flagfile "$NOVA_CONF_DIR/nova-dhcpbridge.conf"
622
+
623
+    if [ "$NOVA_USE_SERVICE_TOKEN" == "True" ]; then
624
+        init_nova_service_user_conf
625
+    fi
626
+}
627
+
628
+function init_nova_service_user_conf {
629
+    iniset $NOVA_CONF service_user send_service_user_token True
630
+    iniset $NOVA_CONF service_user auth_type password
631
+    iniset $NOVA_CONF service_user auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT"
632
+    iniset $NOVA_CONF service_user username nova
633
+    iniset $NOVA_CONF service_user password "$SERVICE_PASSWORD"
634
+    iniset $NOVA_CONF service_user user_domain_name "$SERVICE_DOMAIN_NAME"
635
+    iniset $NOVA_CONF service_user project_name "$SERVICE_PROJECT_NAME"
636
+    iniset $NOVA_CONF service_user project_domain_name "$SERVICE_DOMAIN_NAME"
637
+    iniset $NOVA_CONF service_user auth_strategy keystone
622 638
 }
623 639
 
624 640
 function init_nova_cells {