Enable keystone authentication in Ironic
Currently Ironic installation script leaves authenticaiton
strategy in its default value which is noauth. This is not
relevant for the most of development and testing environments.
This patch sets authentication strategy for Ironic to keystone
and specifies the path to the policy file.
Closes-bug: #1233612
Change-Id: Idacbda05663e7ef949cbce0dbdf28eaa36b6a1a9
diff --git a/lib/ironic b/lib/ironic
index f3b4a72..8c1f52b 100644
--- a/lib/ironic
+++ b/lib/ironic
@@ -79,6 +79,8 @@
# configure_ironic_api() - Is used by configure_ironic(). Performs
# API specific configuration.
function configure_ironic_api() {
+ iniset $IRONIC_CONF_FILE DEFAULT auth_strategy keystone
+ iniset $IRONIC_CONF_FILE DEFAULT policy_file $IRONIC_POLICY_JSON
iniset $IRONIC_CONF_FILE keystone_authtoken auth_host $KEYSTONE_AUTH_HOST
iniset $IRONIC_CONF_FILE keystone_authtoken auth_port $KEYSTONE_AUTH_PORT
iniset $IRONIC_CONF_FILE keystone_authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL