[Openstack-operators] Visibility issues using puppet keystone v3

Ptacek, MichalX michalx.ptacek at intel.com
Fri Feb 19 11:01:09 UTC 2016


Hi again,

according to http://docs.openstack.org/developer/keystoneauth/api/keystoneauth1.exceptions.html<http://redir.netcentrum.cz/?noaudit&url=http%3A%2F%2Fdocs%2Eopenstack%2Eorg%2Fdeveloper%2Fkeystoneauth%2Fapi%2Fkeystoneauth1%2Eexceptions%2Ehtml>
Error is caused by not found endpoint

endpoints were not created during puppet-keystone deployment because of following error:


Notice: /Stage[main]/Keystone::Roles::Admin/Keystone_user_role[admin at admin]/ensure: created
Debug: /Stage[main]/Keystone::Roles::Admin/Keystone_user_role[admin at admin]: The container Class[Keystone::Roles::Admin] will propagate my refresh event
Debug: Class[Keystone::Roles::Admin]: The container Stage[main] will propagate my refresh event
Debug: Prefetching openstack resources for keystone_service
Debug: Executing: '/bin/openstack service list --quiet --format csv --long'
Debug: Storing state
Info: Creating state file /var/lib/puppet/state/state.yaml
Debug: Stored state in 0.39 seconds
Error: Failed to apply catalog: Execution of '/bin/openstack service list --quiet --format csv --long' returned 2: usage: openstack service list [-h] [-f {csv,table}] [-c COLUMN]
                              [--max-width <integer>]
                              [--quote {all,minimal,none,nonnumeric}]
openstack service list: error: unrecognized arguments: --long
Debug: Finishing transaction 28151500

Is it a bug in puppet-keystone or I am calling it from some wrong context or have wrong version of python-openstackclient (1.0.1-1.fc22.noarch) ?
(relevant part of my manifest is from keystone/examples/v3_basic.pp)

Thanks,
Michal

From: Ptacek, MichalX [mailto:michalx.ptacek at intel.com]
Sent: Friday, February 19, 2016 11:44 AM
To: openstack-operators at lists.openstack.org
Subject: [Openstack-operators] Visibility issues using puppet keystone v3

Hi,

I have some issues on keystone (v3) installed from puppet module,
some records from keystone db are not visible through openstack cli, like admin user below created by:
/bin/openstack user create --format shell admin --enable --password a_big_secret --email test at example.tld<mailto:test at example.tld> --domain Default

I can see it in keystone db directly or via curl,

[root at charon ~]# curl -si -H"X-Auth-Token:$TOKEN" -H "Content-type: application/json" http://localhost:35357/v3/users<http://redir.netcentrum.cz/?noaudit&url=http%3A%2F%2Flocalhost%3A35357%2Fv3%2Fusers>
HTTP/1.1 200 OK
Vary: X-Auth-Token
Content-Type: application/json
Content-Length: 315
Date: Fri, 19 Feb 2016 10:36:32 GMT

{"users": [{"name": "admin", "links": {"self": "http://localhost:35357/v3/users/598652ccea444b99bbe2133204fa1fb4<http://redir.netcentrum.cz/?noaudit&url=http%3A%2F%2Flocalhost%3A35357%2Fv3%2Fusers%2F598652ccea444b99bbe2133204fa1fb4>"}, "domain_id": "default", "enabled": true, "email": "test at example.tld<mailto:test at example.tld>", "id": "598652ccea444b99bbe2133204fa1fb4"}], "links": {"self": "http://localhost:35357/v3/users<http://redir.netcentrum.cz/?noaudit&url=http%3A%2F%2Flocalhost%3A35357%2Fv3%2Fusers>", "previous": null, "next": null}}

but for some reason I can't see it from python-openstackclient

export OS_IDENTITY_API_VERSION=3
export OS_AUTH_URL=http://127.0.0.1:35357/v3<http://redir.netcentrum.cz/?noaudit&url=http%3A%2F%2F127%2E0%2E0%2E1%3A35357%2Fv3>
export OS_DEFAULT_DOMAIN=default
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_DOMAIN_NAME=default
export OS_USERNAME=admin
export OS_PASSWORD=a_big_secret
export OS_PROJECT_NAME=admin


root at charon ~]# openstack user list --debug
...........................................
INFO: openstackclient.common.clientmanager Using auth plugin: v3password
INFO: openstackclient.shell command: openstackclient.identity.v3.user.ListUser
DEBUG: openstackclient.identity.v3.user.ListUser take_action(Namespace(columns=[], domain=None, formatter='table', group=None, long=False, max_width=0, quote_mode='nonnumeric'))
DEBUG: openstackclient.identity.client Instantiating identity client: <class 'keystoneclient.v3.client.Client'>
DEBUG: openstackclient.identity.client Using auth plugin: None
DEBUG: keystoneclient.auth.identity.v3 Making authentication request to http://127.0.0.1:35357/v3/auth/tokens<http://redir.netcentrum.cz/?noaudit&url=http%3A%2F%2F127%2E0%2E0%2E1%3A35357%2Fv3%2Fauth%2Ftokens>
INFO: requests.packages.urllib3.connectionpool Starting new HTTP connection (1): 127.0.0.1
DEBUG: requests.packages.urllib3.connectionpool "POST /v3/auth/tokens HTTP/1.1" 201 504
ERROR: openstack The service catalog is empty.


can someone please suggest what am I doing wrong ?

Thanks,
Michal

--------------------------------------------------------------
Intel Research and Development Ireland Limited
Registered in Ireland
Registered Office: Collinstown Industrial Park, Leixlip, County Kildare
Registered Number: 308263

This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.
--------------------------------------------------------------
Intel Research and Development Ireland Limited
Registered in Ireland
Registered Office: Collinstown Industrial Park, Leixlip, County Kildare
Registered Number: 308263


This e-mail and any attachments may contain confidential material for the sole
use of the intended recipient(s). Any review or distribution by others is
strictly prohibited. If you are not the intended recipient, please contact the
sender and delete all copies.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160219/af1748ac/attachment.html>


More information about the OpenStack-operators mailing list