Re: [openstack-dev] [keystone] removing domain configuration upload via keystone-manage

I proposed a patch to remove the deprecation [0]. [0] https://review.openstack.org/492694 On 06/28/2017 09:33 PM, Lance Bragstad wrote: > Cool - I'm glad this is generating discussion. I personally don't see > a whole lot of maintenance costs with `keystone-manage > domain_config_upload`. I was

Re: [openstack-dev] [keystone] removing domain configuration upload via keystone-manage

Cool - I'm glad this is generating discussion. I personally don't see a whole lot of maintenance costs with `keystone-manage domain_config_upload`. I was parsing deprecation warnings in the code base and noticed it was staged for removal, but it wasn't clear when or why. It also wasn't very clear

Re: [openstack-dev] [keystone] removing domain configuration upload via keystone-manage

++ to what colleen said. I've always preferred using the file-backed approach. I think we deprecated it for completeness and to only have a single tool for configuring LDAP-backed domains. If it's tested well enough and not much effort to support then we should keep it around as an alternative

Re: [openstack-dev] [keystone] removing domain configuration upload via keystone-manage

> > On Wed, Jun 28, 2017 at 2:00 AM, Lance Bragstad > wrote: > >> Hi all, >> >> Keystone has deprecated the domain configuration upload capability >> provided through `keystone-manage`. We discussed it's removal in today's >> meeting [0] and wanted to send a quick note to the

Re: [openstack-dev] [keystone] removing domain configuration upload via keystone-manage

That sounds like reason enough to bump the removal of it to Queens or later. This was also discussed in IRC today [0]. We've decided to move forward with the following steps: - Deprecate the ability to have file-backed domain configuration since removing the ability to upload domains via

Re: [openstack-dev] [keystone] removing domain configuration upload via keystone-manage

On the TripleO side we use the file based approach. Using the API would have been easier to orchestrate (no need for reloads/restarts) but it's not available yet in puppet-keystone. On Wed, Jun 28, 2017 at 2:00 AM, Lance Bragstad wrote: > Hi all, > > Keystone has deprecated

[openstack-dev] [keystone] removing domain configuration upload via keystone-manage

Hi all, Keystone has deprecated the domain configuration upload capability provided through `keystone-manage`. We discussed it's removal in today's meeting [0] and wanted to send a quick note to the operator list. The ability to upload a domain config into keystone was done as a stop-gap until