Fix keystone to manage the OSM users/projects 94/14794/3
authorvegall <lvega@whitestack.com>
Tue, 2 Jul 2024 15:30:30 +0000 (15:30 +0000)
committergarciadeblas <gerardo.garciadeblas@telefonica.com>
Wed, 19 Mar 2025 15:39:07 +0000 (16:39 +0100)
commit4ea03cf223854ed964f4f8e2713379b10a6d3962
treefaab42b865af90f5004c7a13de4cc6d4e7197f35
parent2f8ef7c7b96ffcea56a66070e827fb82e6b00d07
Fix keystone to manage the OSM users/projects

Keystone was not used by default by OSM NBI. Instead, internal
authentication is used.

When NBI is configured to use Keystone as auth backend, we found that it
didn't bootstrap properly because there were no data in the MySQL DB
used by Keystone. The initilization of DB was supposed to be done by the
Keystone containers in keystone-deployment. However, those container
were not able to initialize the DB because they were running as regular
users instead of root users.

Keystone is thought as an infra solution, not as an application
solution. The community behind Keystone development agreed on that
behaviour.

Based on that, Keystone containers were adapted to run as root.

In addition, we decided to disable Keystone and MySQL as part of the
default values for OSM helm chart.

Change-Id: I0e7078b809abe858a69323d6e3e493e862d6e6ab
Signed-off-by: vegall <lvega@whitestack.com>
Signed-off-by: garciadeblas <gerardo.garciadeblas@telefonica.com>
.gitignore
docker/Keystone/Dockerfile
docker/Keystone/scripts/start.sh
installers/helm/osm/templates/keystone/keystone-configmap.yaml
installers/helm/osm/templates/keystone/keystone-deployment.yaml
installers/helm/osm/templates/keystone/keystone-service.yaml
installers/helm/osm/templates/nbi/nbi-configmap.yaml
installers/helm/osm/values.yaml