Use keystoneclient.middleware.auth_token instead of heat.common.auth_token

Registered by Steve Baker

heat.common.auth_token is an ancient fork with some heat-specific customisations.

This should be replaced with keystoneclient.middleware.auth_token, which is actively maintained by the keystone developers. As part of this work, the authtoken config can be moved from the *-paste.ini file to the *.conf file.

*-paste.ini files shouldn't be considered user-editable configuration files, so we need to move out any config that needs customization on each site. This includes authtoken and ec2authtoken

Blueprint information

Status:
Complete
Approver:
Steven Hardy
Priority:
High
Drafter:
Steve Baker
Direction:
Approved
Assignee:
Steve Baker
Definition:
Approved
Series goal:
Accepted for havana
Implementation:
Implemented
Milestone target:
milestone icon 2013.2
Started by
Steven Hardy
Completed by
Steve Baker

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/keystone-middleware,n,z

Addressed by: https://review.openstack.org/26182
    Move heat-api auth_token conf from paste.ini

Addressed by: https://review.openstack.org/26181
    Replace old auth_token with keystone middleware

Addressed by: https://review.openstack.org/26186
    Set a default signing_dir for pki key signing

Addressed by: https://review.openstack.org/26187
    Remove unused and deprecated auth-context filter

Addressed by: https://review.openstack.org/26188
    Remove paste config for non-existant cache filters

Addressed by: https://review.openstack.org/26347
    Delete unused ContextMiddleware

Addressed by: https://review.openstack.org/26348
    Remove unused and deprecated auth-context filter

Addressed by: https://review.openstack.org/26349
    Remove paste config for non-existant cache filters

Addressed by: https://review.openstack.org/26350
    Subclass keystone middleware to set headers

Addressed by: https://review.openstack.org/26351
    Move heat-api auth_token conf from paste.ini

Addressed by: https://review.openstack.org/26352
    Remove service _user, _password, _tenant from context

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.