[Openstack-operators] [puppet][keystone] Creating Keystone users with a password in the puppet module (Kilo) throws error at second puppetrun

Emilien Macchi emilien at redhat.com
Thu Jul 23 14:06:22 UTC 2015



On 07/21/2015 05:07 AM, Van Leeuwen, Robert wrote:
> Hi,
> 
> I am using the Kilo puppet recipes to setup Kilo on Ubuntu 14.04 to test
> the latest Puppet recipes with Vagrant.
> I am creating an keystone admin user from within the puppet recipe.
> Creating the keystone user works fine but the second puppetrun gives an
> error whenever you set a password for the user you want to create.
> Error: /Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could
> not evaluate: Execution of '/usr/bin/openstack token issue --format
> value' returned 1: ERROR: openstack The resource could not be found.
> 
> * When you do not pass the password in the keystone_user native type it
> does not throw an error.
> * The first run will create the user successfully and set the password
> * After sourcing the credentials file and running manually
>  "/usr/bin/openstack token issue --format value” also does not give an
> error. 
> ( I could not immediately find where puppet decides this command is run
> and with which credentials. )
> 
> Anyone hitting the same issue or knows what could be going wrong?

Could you share your whole manifest, so we can reproduce it and quickly
spot an eventual bug or error in configuration?

Thanks,

> Example puppet keystone user config which breaks after the second run:
>   keystone_user { 'admin':
>     password => $::openstack::config::keystone_admin_password,  
>  #Removing this line fixes the issue
>     email    => 'admin at openstack',
>     ensure   => present,
>     enabled  => True,
>  }
> 
> Thx,
> Robert van Leeuwen
> 
> 
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
> 

-- 
Emilien Macchi

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20150723/e12bd393/attachment.pgp>


More information about the OpenStack-operators mailing list