<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 01/04/2016 02:06 PM, Russell Cecala
wrote:<br>
</div>
<blockquote
cite="mid:CAHu+3OwbFGGzP5sdJ_gQr6mo88AS8e6fYHdw=P=OjvabT5-YgQ@mail.gmail.com"
type="cite">
<div dir="ltr">Hi Emilien,
<div><br>
</div>
<div><br>
</div>
<div>I am trying to use <a moz-do-not-send="true"
href="https://github.com/openstack/puppet-keystone">https://github.com/openstack/puppet-keystone</a>
to set up a Kilo keystone node.</div>
</div>
</blockquote>
<br>
I'm assuming you're using the kilo branch there?<br>
<br>
<blockquote
cite="mid:CAHu+3OwbFGGzP5sdJ_gQr6mo88AS8e6fYHdw=P=OjvabT5-YgQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>I was hoping to could help me out so I can get my team to
adopt puppet for setting up OpenStack.</div>
<div><br>
</div>
<div>On my keystone node I am running centos7 with selinux
disabled ...</div>
</div>
</blockquote>
<br>
What version of openstackclient are you using?<br>
<br>
Do you have a $HOME/openrc or /root/openrc, or are you otherwise
defining OS_* environment variables in the environment before
running puppet?<br>
<br>
<blockquote
cite="mid:CAHu+3OwbFGGzP5sdJ_gQr6mo88AS8e6fYHdw=P=OjvabT5-YgQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>
<p class="">[root@svl-ost-mgmt-centos-001 ~]# sestatus </p>
<p class="">SELinux status: disabled</p>
<p class="">... and I have flushed my iptables ...</p>
<p class=""><br>
</p>
<p class="">[root@svl-ost-mgmt-centos-001 ~]# iptables -L</p>
<p class="">Chain INPUT (policy ACCEPT)</p>
<p class="">target prot opt source
destination </p>
<p class=""><br>
</p>
<p class="">Chain FORWARD (policy ACCEPT)</p>
<p class="">target prot opt source
destination </p>
<p class=""><br>
</p>
<p class="">Chain OUTPUT (policy ACCEPT)</p>
<p class="">
</p>
<p class="">target prot opt source
destination </p>
<p class=""><br>
</p>
<p class="">Yet when I run "puppet agent -t" I get these
errors:</p>
<p class=""><br>
</p>
<p class="">[root@ost-mgmt-centos-001 ~]# puppet agent -t</p>
<p class="">Info: Retrieving pluginfacts</p>
<p class="">Info: Retrieving plugin</p>
<p class="">Info: Loading facts</p>
<p class="">Error: NetworkManager is not running.</p>
<p class="">Info: Caching catalog for <a
moz-do-not-send="true"
href="http://ost-mgmt-centos-001.example.com">ost-mgmt-centos-001.example.com</a></p>
<p class=""><b>Warning: The tenant parameter is deprecated and
will be removed in the future. Please use
keystone_user_role to assign a user to a project.</b></p>
<p class=""><b>Warning: The ignore_default_tenant parameter is
deprecated and will be removed in the future.</b></p>
<p class="">Info: Applying configuration version '1451940682'</p>
<p class=""><b>Error:
/Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]:
Could not evaluate: Execution of '/usr/bin/openstack token
issue --format value' returned 1: ERROR: openstack The
resource could not be found. (HTTP 404) (Request-ID:
req-ca2a6dd1-fdb6-48f4-94fe-8f736fcc01dd)</b></p>
<p class="">Notice:
/Stage[main]/Keystone::Roles::Admin/Keystone_user_role[admin@openstack]:
Dependency Keystone_user[admin] has failures: true</p>
<p class=""><b>Warning:
/Stage[main]/Keystone::Roles::Admin/Keystone_user_role[admin@openstack]:
Skipping because of failed dependencies</b></p>
<p class="">
</p>
<p class="">Notice: Finished catalog run in 12.38 seconds</p>
<p class="">Here's code I am using on my puppet master ...</p>
<p class=""><span class="">class</span><span class=""> </span>wrapcontroller<span
class="">(</span></p>
<p class="">
</p>
<p class="">... big list of parameters I am not using until I
can get keystone going ...</p>
<p class="">) {</p>
<p class=""><br>
</p>
<p class=""><span class=""> </span><span class="">exec</span><span
class=""> { </span>'/bin/yum -y install <a
moz-do-not-send="true"
href="http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm"><a class="moz-txt-link-freetext" href="http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm">http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm</a></a>'<span
class="">: </span><span class="">unless</span><span
class=""> => </span>'/bin/rpm -q epel-release'<span
class="">, }</span></p>
<p class=""><span class=""> </span><span class="">exec</span><span
class=""> { </span>'/bin/yum -y install <a
moz-do-not-send="true"
href="http://rdo.fedorapeople.org/openstack-kilo/rdo-release-kilo.rpm"><a class="moz-txt-link-freetext" href="http://rdo.fedorapeople.org/openstack-kilo/rdo-release-kilo.rpm">http://rdo.fedorapeople.org/openstack-kilo/rdo-release-kilo.rpm</a></a>'<span
class="">: </span><span class="">unless</span><span
class=""> => </span>'/bin/rpm -q rdo-release'<span
class="">, }</span></p>
<p class=""><br>
</p>
<p class=""> <span class="">package</span> { <span
class="">'mariadb'</span>: <span class="">ensure</span>
=> <span class="">present</span>, }</p>
<p class=""><span class=""> </span><span class="">exec</span><span
class=""> { </span>'keystone_database_init'<span class="">:</span></p>
<p class=""><span class=""> </span><span class="">command</span><span
class=""> => </span>'/usr/bin/keystone-manage db_sync'<span
class="">,</span></p>
<p class=""> <span class="">onlyif</span> => [</p>
<p class=""><span class=""> </span><span class="">"/usr/bin/mysql
-u</span>$keystone_db_user<span class=""> -p</span>$keystone_db_pass<span
class=""> -h</span>$db_host<span class=""> -P</span>$db_port<span
class=""> </span>$keystone_db_name<span class=""> -e
'show tables'"</span><span class="">,</span></p>
<p class=""><span class=""> </span>"/usr/bin/test
-z \"`/usr/bin/mysql -u<span class="">$keystone_db_user</span>
-p<span class="">$keystone_db_pass</span> -h<span class="">$db_host</span>
-P<span class="">$db_port</span> <span class="">$keystone_db_name</span>
-e 'show tables'`\""</p>
<p class=""> ],</p>
<p class=""> <span class="">require</span> => <span
class="">Package</span>[<span class="">'mariadb'</span>],</p>
<p class=""> }</p>
<p class=""><br>
</p>
<p class=""><span class=""> </span><span class="">class</span><span
class=""> {</span>'::keystone'<span class="">:</span></p>
<p class=""><span class=""> </span>admin_token<span
class=""> => </span>$keystone_auth_token<span
class="">,</span></p>
<p class=""><span class=""> </span>database_connection<span
class=""> => </span><span class="">"mysql://</span>${keystone_db_user}<span
class="">:</span>${keystone_db_pass}<span class="">@</span>${db_host}<span
class="">:</span>${db_port}<span class="">/</span>${keystone_db_name}<span
class="">"</span><span class="">,</span></p>
<p class=""> <span class="">debug</span>
=> <span class="">$debug</span>,</p>
<p class=""> <span class="">enabled</span>
=> <span class="">true</span>,</p>
<p class=""> <span class="">enable_ssl</span>
=> <span class="">false</span>,</p>
<p class=""> <span class="">service_name</span>
=> <span class="">'httpd'</span>,<span class="">
# this is a kilo thing</span></p>
<p class=""> <span class="">verbose</span>
=> <span class="">$debug</span>,</p>
<p class=""> }</p>
<p class=""><br>
</p>
<p class=""> <span class="">include</span> ::apache</p>
<p class=""><span class=""> </span><span class="">class</span><span
class=""> { </span>'::keystone::wsgi::apache'<span
class="">: </span><span class="">ssl</span><span class="">
=> </span><span class="">false</span><span class="">,
}</span></p>
<p class=""><span class=""> </span><span class="">class</span><span
class=""> { </span>'::keystone::roles::admin'<span
class="">:</span></p>
<p class=""><span class=""> </span>email<span class="">
=> </span>$keystone_admin_email<span class="">,</span></p>
<p class=""><span class=""> </span>password<span
class=""> => </span>$keystone_admin_password<span
class="">,</span></p>
<p class=""> }</p>
<p class=""><span class=""> </span><span class="">class</span><span
class=""> { </span>'::keystone::endpoint'<span class="">:</span></p>
<p class=""><span class=""> </span><span class="">public_url</span><span
class=""> => </span>"<a moz-do-not-send="true"
href="http://127.0.0.1:5000">http://127.0.0.1:5000</a>"<span
class="">,</span></p>
<p class=""><span class=""> </span><span class="">admin_url</span><span
class=""> => </span>"<a moz-do-not-send="true"
href="http://127.0.0.1:35357">http://127.0.0.1:35357</a>"<span
class="">,</span></p>
<p class=""><span class=""> </span>default_domain<span
class=""> => </span><span class="">'admin'</span><span
class="">,</span></p>
<p class=""> }</p>
<p class="">
</p>
<p class="">}</p>
</div>
<div>Thanks! And Happy New Year to you :)</div>
<div>Red</div>
<div><br>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Nov 24, 2015 at 2:38 PM,
Emilien Macchi <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:emilien@redhat.com" target="_blank">emilien@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex"><span
class=""><br>
<br>
On 11/24/2015 11:21 PM, Russell Cecala wrote:<br>
> I am trying to use the OpenStack community puppet
modules. Here's the<br>
> keystone module I am using: <a
moz-do-not-send="true"
href="https://github.com/openstack/puppet-keystone"
rel="noreferrer" target="_blank"><a class="moz-txt-link-freetext" href="https://github.com/openstack/puppet-keystone">https://github.com/openstack/puppet-keystone</a></a><br>
> I am using the stable juno branch. I have in my
puppet manifest for my<br>
> controller nodes this resource definition:<br>
><br>
> class { '::keystone::roles::admin':<br>
> admin => $keystone_admin_user,<br>
> email => $keystone_admin_email,<br>
> password => $keystone_admin_password,<br>
> } -><br>
><br>
> And when puppet runs that code I get this error:<br>
><br>
> Error:<br>
>
/Stage[main]/Keystone::Roles::Admin/Keystone_user_role[keystone_admin_user@openstack]:<br>
> Could not evaluate: Execution of '/usr/bin/openstack
domain show<br>
> --format shell' returned 2: usage: openstack domain
show [-h] [-f<br>
> {shell,table,value}] [-c COLUMN]<br>
> [--max-width
<integer>] [--prefix PREFIX]<br>
> <domain><br>
> openstack domain show: error: too few arguments<br>
<br>
</span>Sounds like an issue with your version of
openstackclient, can you<br>
provide it?<br>
<span class=""><br>
><br>
> Can anyone help me? Are these Puppet modules still
being supported?<br>
<br>
</span>Yes :-)<br>
<span class=""><br>
> Does anyone use them? Thanks!<br>
<br>
</span>Double yes.<br>
<span class="HOEnZb"><font color="#888888">--<br>
Emilien Macchi<br>
<br>
</font></span></blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
OpenStack-operators mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a>
</pre>
</blockquote>
<br>
</body>
</html>