tree 9e2bb6770e0f89fc8c6d8b95ade53c1a2d17fc4e
parent 5e06667c3c7030059255889868a3d14e18da181b
author Oleksandr Bryndzii <obryndzii@mirantis.com> 1550670675 +0200
committer obryndzii <obryndzii@mirantis.com> 1550827864 +0000

Configure nova to use service user tokens

Long-running operations such as live migration or snapshot can
sometimes overrun the expiry of the user token.
In such cases, post operations such as cleaning up after a live
migration can fail when the nova-compute service needs to cleanup
resources in other services, such as in the block-storage (cinder)
or networking (neutron) services.

This patch enables nova to use service user tokens to supplement
the regular user token used to initiate the operation.
The identity service (keystone) will then authenticate a request
using the service user token if the user token has already expired.

Change-Id: I203f2dfc97bdc65dd424e1085ce2e20a5e9dbf40
Related-Prod: PROD-27591