[openstack-dev] [keystone] [puppet] [neutron] Deprecating nova_admin_ options in puppet-neutron

2015-10-14 Thread Sergey Kolekonov
Hi folks, Currently puppet-neutron module sets nova_admin_* options in neutron.conf which are deprecated since Kilo release. I propose to replace them, but we need to discuss how to do it better. I raised this question at puppet-openstack weekly meeting yesterday [0]. So the main concern here is

Re: [openstack-dev] [keystone] [puppet] [neutron] Deprecating nova_admin_ options in puppet-neutron

2015-10-14 Thread Jamie Lennox
On re-reading the original email i've been thinking of auth_token middleware rather than nova_admin_* options (i haven't done much neutron config). I think everything still applies though and hopefully this can be a mechanism that's reused across modules. On 15 October 2015 at 10:37, Jamie Lennox

Re: [openstack-dev] [keystone] [puppet] [neutron] Deprecating nova_admin_ options in puppet-neutron

2015-10-14 Thread Jamie Lennox
TL;DR: you can fairly easily convert existing puppet params into auth plugin format for now, but we're going to need the hash based config soon. I think as a first step it is a good idea to replace the deprecated options and use the password, v2password or v3password plugins* because you will