<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Feb 23, 2016 at 1:48 AM, Ptacek, MichalX <span dir="ltr"><<a href="mailto:michalx.ptacek@intel.com" target="_blank">michalx.ptacek@intel.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Hello again,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">In last days I realized that rpm/deb packages from supported platforms are too old (OSC, python-PROJECTclient,….)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">so I suppose that I should install newer versions not via deb/rpm packages but as pip packages.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">This kind of dependency on system packages when trying to install v7 openstack puppet modules is probably natural for more experienced puppet guys,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">but I think it should be covered somewhere in doc.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> </span></p></div></div></blockquote><div><br></div><div>So for our testing we're using the RDO or UCA package sets for the releases. Unfortunately you need to have a matching set of packages and puppet modules for everything to work. What you're running into is trying to use distro provide packages (probably for kilo or older) with manifests that were written for something much newer like Liberty or Mitaka. We do have a module[0] that can help pull in these newer repos when you're setting up your system. You shouldn't pip install anything but rather leverage the matching package set for the version of OpenStack you are trying to deploy.</div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">I suppose I should install openstack clients as pip packages instead …<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Like. pip install python-openstackclient==2.0.0, pip install python-keystoneclient, …<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">by installing them in this way, manifest deployment finished smoothly, but I realized that “missing rpm/deb packages” are also installed (even when pip version
is present),<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">which might lead to some inconsistency …<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">like currently I am fighting with some issue on glance:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">ERROR glance.common.config [-] Unable to load glance-api-keystone from configuration file /etc/glance/glance-api-paste.ini.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Got: ImportError(‘No module named middleware.auth_token’),<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">(I think it’s asking for this file<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">/usr/lib/python2.7/dist-packages/keystoneclient/middleware<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Which is present on the system)
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">so my small and general question would be …<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">What is the procedure if one would like to work with liberty openstack on old/supported platform ?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">(currently I am using Ubuntu 14.04 LTS)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> </span></p></div></div></blockquote><div><br></div><div>For this configuration you'd want ot use the Liberty UCA package set[1] with 14.04 and it should work.</div><div><br></div><div>Thanks,</div><div>-Alex</div><div><br></div><div>[0] <a href="http://git.openstack.org/cgit/openstack/puppet-openstack_extras">http://git.openstack.org/cgit/openstack/puppet-openstack_extras</a><br></div><div>[1] <a href="https://wiki.ubuntu.com/ServerTeam/CloudArchive">https://wiki.ubuntu.com/ServerTeam/CloudArchive</a> <br></div><div><br></div><div><br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Thanks,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Michal<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<div>
<div style="border-style:solid none none;border-top-color:rgb(225,225,225);border-top-width:1pt;padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> Ptacek, MichalX [mailto:<a href="mailto:michalx.ptacek@intel.com" target="_blank">michalx.ptacek@intel.com</a>]
<br>
<b>Sent:</b> Monday, February 22, 2016 9:50 AM</span></p><div><div class="h5"><br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions) <<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a>><br>
<b>Subject:</b> Re: [openstack-dev] [puppet] is puppet-keystone using v3 credentials correctly ?<u></u><u></u></div></div><p></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Hi Matt,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">thanks for good hint !<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Issue disappeared with newer python-openstackclient-1.0.3-3.fc23.noarch<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">python-openstackclient-1.0.1-1.fc22.noarch is too old,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">it’s interesting, as supported platforms for puppet-openstack is fedora21,22 and I get it running just with fc23
</span><span style="font-size:11pt;font-family:Wingdings;color:rgb(31,73,125)">J</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">best regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Michal<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> Matt Fischer [<a href="mailto:matt@mattfischer.com" target="_blank">mailto:matt@mattfischer.com</a>]
<br>
<b>Sent:</b> Friday, February 19, 2016 4:27 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions) <<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a>><br>
<b>Subject:</b> Re: [openstack-dev] [puppet] is puppet-keystone using v3 credentials correctly ?<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">You shouldn't have to do any of that, it should just work. I have OSC 2.0.0 in my environment though (Ubuntu). I'm just guessing but perhaps that client is too old? Maybe a Fedora user could recommend a version.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Fri, Feb 19, 2016 at 7:38 AM, Matthew Mosesohn <<a href="mailto:mmosesohn@mirantis.com" target="_blank">mmosesohn@mirantis.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border-style:none none none solid;border-left-color:rgb(204,204,204);border-left-width:1pt;padding:0in 0in 0in 6pt;margin:5pt 0in 5pt 4.8pt">
<p class="MsoNormal">Hi Michal,<br>
<br>
Just add --os-identity-api-version=3 to your command it will work. The<br>
provider uses v3 openstackclient via env var<br>
OS_IDENTITY_API_VERSION=3. The default is still 2.<br>
<br>
Best Regards,<br>
Matthew Mosesohn<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><br>
On Fri, Feb 19, 2016 at 5:25 PM, Matt Fischer <<a href="mailto:matt@mattfischer.com" target="_blank">matt@mattfischer.com</a>> wrote:<br>
> What version of openstack client do you have? What version of the module are<br>
> you using?<br>
><br>
> On Feb 19, 2016 7:20 AM, "Ptacek, MichalX" <<a href="mailto:michalx.ptacek@intel.com" target="_blank">michalx.ptacek@intel.com</a>> wrote:<br>
>><br>
>> Hi all,<br>
>><br>
>><br>
>><br>
>> I was playing some time with puppet-keystone deployments,<br>
>><br>
>> and also reported one issue related to this:<br>
>><br>
>> <a href="https://bugs.launchpad.net/puppet-keystone/+bug/1547394" target="_blank">
https://bugs.launchpad.net/puppet-keystone/+bug/1547394</a><br>
>><br>
>> but in general my observations are that keystone_service is using v3<br>
>> credentials with openstack cli commands that are not compatible<br>
>><br>
>><br>
>><br>
>> e.g.<br>
>><br>
>> Error: Failed to apply catalog: Execution of '/bin/openstack service list<br>
>> --quiet --format csv --long' returned 2: usage: openstack service list [-h]<br>
>> [-f {csv,table}] [-c COLUMN]<br>
>> [--max-width <integer>]<br>
>> [--quote {all,minimal,none,nonnumeric}]<br>
>> openstack service list: error: unrecognized arguments: --long<br>
>><br>
>><br>
>><br>
>><br>
>><br>
>> It can’t be bug, because whole module will not work due to this J<br>
>><br>
>> I think I miss something important somewhere …<br>
>><br>
>><br>
>><br>
>> My latest manifest file is :<br>
>><br>
>><br>
>><br>
>> Exec { logoutput => 'on_failure' }<br>
>><br>
>> package { 'curl': ensure => present }<br>
>><br>
>><br>
>><br>
>> node keystone {<br>
>><br>
>><br>
>><br>
>> class { '::mysql::server': }<br>
>><br>
>> class { '::keystone::db::mysql':<br>
>><br>
>> password => 'keystone',<br>
>><br>
>> }<br>
>><br>
>><br>
>><br>
>> class { '::keystone':<br>
>><br>
>> verbose => true,<br>
>><br>
>> debug => true,<br>
>><br>
>> database_connection => 'mysql://<a href="http://keystone:keystone@127.0.0.1/keystone" target="_blank">keystone:keystone@127.0.0.1/keystone</a>',<br>
>><br>
>> catalog_type => 'sql',<br>
>><br>
>> admin_token => 'admin_token',<br>
>><br>
>> }<br>
>><br>
>><br>
>><br>
>> class { '::keystone::roles::admin':<br>
>><br>
>> email => '<a href="mailto:example@abc.com" target="_blank">example@abc.com</a>',<br>
>><br>
>> password => 'ChangeMe',<br>
>><br>
>> }<br>
>><br>
>><br>
>><br>
>> class { '::keystone::endpoint':<br>
>><br>
>> public_url => "<a href="http://$%7b::fqdn%7d:5000/v2.0" target="_blank">http://${::fqdn}:5000/v2.0</a>",<br>
>><br>
>> admin_url => "<a href="http://$%7b::fqdn%7d:35357/v2.0" target="_blank">http://${::fqdn}:35357/v2.0</a>",<br>
>><br>
>> }<br>
>><br>
>> }<br>
>><br>
>><br>
>><br>
>> Env variables looks as follows(before service list is called with --long)<br>
>><br>
>> {"OS_IDENTITY_API_VERSION"=>"3", "OS_TOKEN"=>"admin_token",<br>
>> "OS_URL"=>"<a href="http://127.0.0.1:35357/v3" target="_blank">http://127.0.0.1:35357/v3</a>"}<br>
>><br>
>> Debug: Executing: '/bin/openstack service list --quiet --format csv<br>
>> --long'<br>
>><br>
>><br>
>><br>
>> Thanks for any hint,<br>
>><br>
>> Michal<br>
>><br>
>> --------------------------------------------------------------<br>
>> Intel Research and Development Ireland Limited<br>
>> Registered in Ireland<br>
>> Registered Office: Collinstown Industrial Park, Leixlip, County Kildare<br>
>> Registered Number: 308263<br>
>><br>
>> This e-mail and any attachments may contain confidential material for the<br>
>> sole use of the intended recipient(s). Any review or distribution by others<br>
>> is strictly prohibited. If you are not the intended recipient, please<br>
>> contact the sender and delete all copies.<br>
>><br>
>><br>
>> __________________________________________________________________________<br>
>> OpenStack Development Mailing List (not for usage questions)<br>
>> Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
>><br>
><br>
> __________________________________________________________________________<br>
> OpenStack Development Mailing List (not for usage questions)<br>
> Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><u></u><u></u></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p>--------------------------------------------------------------<br>
Intel Research and Development Ireland Limited<br>
Registered in Ireland<br>
Registered Office: Collinstown Industrial Park, Leixlip, County Kildare<br>
Registered Number: 308263<u></u><u></u></p>
<p>This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all
copies.<u></u><u></u></p>
</div></div></div><div><div class="h5">
<p>--------------------------------------------------------------<br>
Intel Research and Development Ireland Limited<br>
Registered in Ireland<br>
Registered Office: Collinstown Industrial Park, Leixlip, County Kildare<br>
Registered Number: 308263</p>
<p>This e-mail and any attachments may contain confidential material for the
sole use of the intended recipient(s). Any review or distribution by others is
strictly prohibited. If you are not the intended recipient, please contact the
sender and delete all copies.</p>
<p></p>
</div></div></div>
<br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div></div>