Updated openstack/openstack
Project: openstack/heat  7fdd8da444c91e2a2f6ad50ac10368e66a1d5353
null
Modify stack_user_domain config option to take domain ID

It turns out that having the heat service user manipulate (get/create)
domains directly isn't a great idea, because although it works with
the default keystone policy.json, it won't work with the v3cloudsample
policy, which causes some of our tests to fail in the gate when migrating
the User/Access key resources.  Also not allowing the heat user to
create domains is probably more aligned with real deployment policy
expectations.

Note this requires the following devstack change, which will create the
required domain and update heat.conf appropriately:

https://review.openstack.org/#/c/73324/

Or for non-devstack deployments, the domain should be created via
python-openstackclient (which is the only CLI interface to the v3
keystone API, the keystoneclient shell is v2.0 only), e.g:

openstack --os-token <atoken> --os-url=http://<KS_IP>:5000/v3 \
    --os-identity-api-version=3 domain create heat

Change-Id: I2b058fd1b6361b04764111635f7ef7424cb73d7b
blueprint: instance-users
Updated openstack/openstack
Project: openstack/heat  a3fe043a714bc0f5cf79b39c8495dec22e98aa41
null
Move HOT version checking to HOTemplate class

This is HOT-specific code and does not belong in the Template class.

Change-Id: I95c5f1d57a8ad4f9f4b721742f2d45826b51e9aa
Updated openstack/openstack
Project: openstack/heat  a25b6e7c6b72935ff2424cdac2fc10d585557333
null
Add config options to specify stack domain admin

Adds config options to specify a username and password who can
administer the projects & users in the stack domain.  Note this
user must be a domain admin (have admin role in the domain)

Note this requires the following devstack patch:

https://review.openstack.org/#/c/76036/

Or for non-devstack deployments, the domain should be created via
python-openstackclient and heat.conf updated with the username and
password:

openstack --os-token <atoken> --os-url=http://<KS_IP>:5000/v3 \
    --os-identity-api-version=3 user create heat_domain_admin \
    --password <password> --domain <stack_user_domain id>

openstack --os-token <atoken> --os-url=http://<KS_IP>:5000/v3 \
    --os-identity-api-version=3 role add --user heat_domain_admin \
    --password <password> --domain <stack_user_domain id> \
    --domain <stack_user_domain id> admin

blueprint: instance-users
Change-Id: I8c5242d336e3fabafcd1930271408670af09fa0e