Actions
Bug #5374
closedAvoid relying on keystone's admin token
% Done:
0%
Source:
other
Tags:
Backport:
Regression:
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
The current Keystone integration requires knowledge of the keystone admin token. The keystone admin token is for Keystone's own use and for administrative use to create the initial, genuine Keystone users.
The correct way to integrate with Keystone is to create a user for Ceph to allow it to authenticate tokens. When starting up, the username/tenant/password is used to get a token from Keystone. This token is the used instead of the admin token.
Actions