<div dir="ltr"><div><div class="gmail_signature"><div>Hi,</div><div><br></div><div><br></div><div>I was looking at this class in the keystone module:</div><div><br></div><div>keystone::disable_admin_token_auth<br></div><div><br></div><div>..which suggests:</div><div><br></div></div></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><div class="gmail_signature"><div><div># After this class is run,</div></div></div></div><div><div class="gmail_signature"><div><div># future puppet runs must have an openrc file with valid keystone v3</div></div></div></div><div><div class="gmail_signature"><div><div># admin credentials in /root/openrc available</div></div></div></div></blockquote><div><div class="gmail_signature"><div><br></div><div><br></div><div>So when I change the openrc file from the v2 to v3 keystone endpoint, puppet runs then fail with various openstack provider errors.</div><div><br></div><div>e.g.</div><div><br></div></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div><div class="gmail_signature"><div><div>Error: Could not prefetch keystone_service provider 'openstack': Execution of '/usr/bin/openstack service list --quiet --format csv --long' returned 2: openstack: 'service' is not an openstack command. See 'openstack --help'.</div></div></div></div><div><div class="gmail_signature"><div><div>Did you mean one of these?</div></div></div></div><div><div class="gmail_signature"><div><div> resource member create</div></div></div></div><div><div class="gmail_signature"><div><div> resource member delete</div></div></div></div><div><div class="gmail_signature"><div><div> resource member list</div></div></div></div><div><div class="gmail_signature"><div><div> resource member show</div></div></div></div><div><div class="gmail_signature"><div><div> resource member update</div></div></div></div><div><div class="gmail_signature"><div><div> server add security group</div></div></div></div><div><div class="gmail_signature"><div><div> server add volume</div></div></div></div><div><div class="gmail_signature"><div><div> server create</div></div></div></div><div><div class="gmail_signature"><div><div> server delete</div></div></div></div><div><div class="gmail_signature"><div><div> server dump create</div></div></div></div><div><div class="gmail_signature"><div><div> server image create</div></div></div></div><div><div class="gmail_signature"><div><div> server list</div></div></div></div><div><div class="gmail_signature"><div><div> server lock</div></div></div></div><div><div class="gmail_signature"><div><div> server migrate</div></div></div></div><div><div class="gmail_signature"><div><div> server pause</div></div></div></div><div><div class="gmail_signature"><div><div> server reboot</div></div></div></div><div><div class="gmail_signature"><div><div> server rebuild</div></div></div></div><div><div class="gmail_signature"><div><div> server remove security group</div></div></div></div><div><div class="gmail_signature"><div><div> server remove volume</div></div></div></div><div><div class="gmail_signature"><div><div> server rescue</div></div></div></div><div><div class="gmail_signature"><div><div> server resize</div></div></div></div><div><div class="gmail_signature"><div><div> server resume</div></div></div></div><div><div class="gmail_signature"><div><div> server set</div></div></div></div><div><div class="gmail_signature"><div><div> server shelve</div></div></div></div><div><div class="gmail_signature"><div><div> server show</div></div></div></div><div><div class="gmail_signature"><div><div> server ssh</div></div></div></div><div><div class="gmail_signature"><div><div> server start</div></div></div></div><div><div class="gmail_signature"><div><div> server stop</div></div></div></div><div><div class="gmail_signature"><div><div> server suspend</div></div></div></div><div><div class="gmail_signature"><div><div> server unlock</div></div></div></div><div><div class="gmail_signature"><div><div> server unpause</div></div></div></div><div><div class="gmail_signature"><div><div> server unrescue</div></div></div></div><div><div class="gmail_signature"><div><div> server unset</div></div></div></div><div><div class="gmail_signature"><div><div> server unshelve (tried 44, for a total of 170 seconds)</div></div></div></div></blockquote><div><div class="gmail_signature"><div><br></div><div>..and..</div><div><br></div></div></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div><div class="gmail_signature"><div><div>Error: /Stage[main]/Neutron::Keystone::Auth/Keystone::Resource::Service_identity[neutron]/Keystone_user[neutron]: Could not evaluate: Execution of '/usr/bin/openstack domain list --quiet --format csv' returned 2: openstack: 'domain' is not an openstack command. See 'openstack --help'.</div></div></div></div><div><div class="gmail_signature"><div><div>Did you mean one of these?</div></div></div></div><div><div class="gmail_signature"><div><div> command list</div></div></div></div><div><div class="gmail_signature"><div><div> container create</div></div></div></div><div><div class="gmail_signature"><div><div> container delete</div></div></div></div><div><div class="gmail_signature"><div><div> container list</div></div></div></div><div><div class="gmail_signature"><div><div> container save</div></div></div></div><div><div class="gmail_signature"><div><div> container set</div></div></div></div><div><div class="gmail_signature"><div><div> container show</div></div></div></div><div><div class="gmail_signature"><div><div> container unset (tried 44, for a total of 170 seconds)</div></div></div></div></blockquote><div><div class="gmail_signature"><div><br></div><div><br></div><div>The v3 openrc file I have in place, works fine when just using the openstack cli, which makes the situation all the more strange :) Here it is for reference:</div><div><br></div></div></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><div class="gmail_signature"><div><div>#!/bin/sh</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_NO_CACHE='true'</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_TENANT_NAME='admin'</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_USERNAME='admin'</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_PASSWORD='supersecret'</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_AUTH_URL='<a href="http://1.2.3.4:5000/v3/">http://1.2.3.4:5000/v3/</a>'</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_AUTH_STRATEGY='keystone'</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_IDENTITY_API_VERSION="3"</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_REGION_NAME='openstack'</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_USER_DOMAIN_NAME='default'</div></div></div></div><div><div class="gmail_signature"><div><div>export OS_PROJECT_DOMAIN_NAME='default'</div></div></div></div><div><div class="gmail_signature"><div><div>export CINDER_ENDPOINT_TYPE='publicURL'</div></div></div></div><div><div class="gmail_signature"><div><div>export GLANCE_ENDPOINT_TYPE='publicURL'</div></div></div></div><div><div class="gmail_signature"><div><div>export KEYSTONE_ENDPOINT_TYPE='publicURL'</div></div></div></div><div><div class="gmail_signature"><div><div>export NOVA_ENDPOINT_TYPE='publicURL'</div></div></div></div><div><div class="gmail_signature"><div><div>export NEUTRON_ENDPOINT_TYPE='publicURL'</div></div></div></div></blockquote><div><div class="gmail_signature"><div><div><br></div></div><div><br></div><div>Can anyone advise how the openrc file should be formatted ?<br></div><div><br></div><div>Thanks!</div><div><br></div><div><br></div><div><br></div><div><br></div>Cheers,<div>Just</div></div></div>
</div>
<br>
<p style="margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px">Notice: This email is confidential and may contain copyright material of members of the Ocado Group. Opinions and views expressed in this message may not necessarily reflect the opinions and views of the members of the Ocado Group. </span></font></p><p style="margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px"> </span></font></p><p style="margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px">If you are not the intended recipient, please notify us immediately and delete all copies of this message. Please note that it is your responsibility to scan this message for viruses. </span></font></p><p style="margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px"> </span></font></p><p style="margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px">Fetch and Sizzle are trading names of Speciality Stores Limited and Fabled is a trading name of Marie Claire Beauty Limited, both members of the Ocado Group.</span></font></p><p style="margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px"> </span></font></p><p style="margin:0px;background-color:rgb(255,255,255)"><font color="#aeaaaa" face="Calibri, sans-serif"><span style="font-size:14.6667px">References to the “Ocado Group” are to Ocado Group plc (registered in England and Wales with number 7098618) and its subsidiary undertakings (as that expression is defined in the Companies Act 2006) from time to time. The registered office of Ocado Group plc is Titan Court, 3 Bishops Square, Hatfield Business Park, Hatfield, Herts. AL10 9NE.</span></font></p>