For anyone following along, this is now being tracked in <a href="https://bugs.launchpad.net/keystone/+bug/962600">https://bugs.launchpad.net/keystone/+bug/962600</a><br><br><div class="gmail_quote">On Thu, Mar 22, 2012 at 5:21 PM, Joshua Harlow <span dir="ltr"><<a href="mailto:harlowja@yahoo-inc.com">harlowja@yahoo-inc.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<font face="Calibri, Verdana, Helvetica, Arial"><span style="font-size:11pt">I’m still confused.<br>
<br>
Is there a bug in the keystone client that is causing these attributes to not exist?<br>
<br>
I am assuming yes, since <a href="http://devstack.org" target="_blank">devstack.org</a> is doing the same calls.<br>
<br>
<a href="https://github.com/openstack-dev/devstack/blob/master/eucarc#L22" target="_blank">https://github.com/openstack-dev/devstack/blob/master/eucarc#L22</a><br>
<br>
Which should blow up in the same place.<br>
<br>
Thx for the explanation though.<div><div class="h5"><br>
<br>
On 3/22/12 3:16 PM, "Jesse Andrews" <<a href="http://anotherjesse@gmail.com" target="_blank">anotherjesse@gmail.com</a>> wrote:<br>
<br>
</div></div></span></font><div><div class="h5"><blockquote><font face="Calibri, Verdana, Helvetica, Arial"><span style="font-size:11pt">With *all* services, if you know the endpoint you can query them<br>
directly with the auth mechanism (either token or ec2 access/secret).<br>
<br>
OpenStack has an identity service (keystone) that returns a catalog of<br>
services (for discovery)<br>
<br>
You don't need to look at the catalog if you know the endpoints.<br>
<br>
Just set the AWS endpoint how you would normally.<br>
<br>
That said: horizon can build a eucarc that has an access/secret & ec2<br>
endpoint for you. It does so by doing the same thing devstack does:<br>
<br>
* looks in the catalog for the ec2 endpoint, and writes it the file<br>
* requests an access/secret for a user from keystone.<br>
<br>
If you have all that, you can skip ahead to go :) and use your tools.<br>
<br>
The assumption is a user of an openstack cloud would need to determine<br>
those things, and we expose them in keystone (discovery and<br>
tokens/access/secrets)<br>
<br>
Jesse<br>
<br>
On Thu, Mar 22, 2012 at 1:39 PM, Joshua Harlow <<a href="http://harlowja@yahoo-inc.com" target="_blank">harlowja@yahoo-inc.com</a>> wrote:<br>
> I’m confused.<br>
><br>
> So this means ec2 won’t work because it can’t have a service catalog?<br>
><br>
> All of those variables should of been set:<br>
><br>
> export OS_AUTH_URL=<a href="http://172.21.102.236:5000/v2.0" target="_blank">http://172.21.102.236:5000/v2.0</a><br>
> export OS_PASSWORD=ac31bec851146d3c7f00<br>
> export OS_TENANT_NAME=demo<br>
> export OS_USERNAME=demo<br>
><br>
><br>
> On 3/22/12 1:39 PM, "Dolph Mathews" <<a href="http://dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>> wrote:<br>
><br>
> Accidentally hit send...<br>
><br>
> Anyway... which does not necessarily correspond to a normal user with a<br>
> service catalog.<br>
><br>
> The error message should explain this and direct you to use an OS_USERNAME,<br>
> OS_PASSWORD, OS_TENANT_* and OS_AUTH_URL instead (which can have a service<br>
> catalog).<br>
><br>
> -Dolph Mathews<br>
><br>
> On Mar 22, 2012, at 1:42 PM, Joshua Harlow <<a href="http://harlowja@yahoo-inc.com" target="_blank">harlowja@yahoo-inc.com</a>> wrote:<br>
><br>
> Keystone client broken?? Hi all,<br>
><br>
><br>
> When trying to use eucarc<br>
> (<a href="https://github.com/openstack-dev/devstack/blob/master/eucarc" target="_blank">https://github.com/openstack-dev/devstack/blob/master/eucarc</a>) or the<br>
> devstackPY copy called euca.sh (<br>
> <a href="https://github.com/yahoo/Openstack-DevstackPy/blob/master/euca.sh" target="_blank">https://github.com/yahoo/Openstack-DevstackPy/blob/master/euca.sh</a> )<br>
><br>
> I am getting the following:<br>
><br>
> ++ keystone catalog --service ec2<br>
> ++ awk '/ publicURL / { print $4 }'<br>
> 'Client' object has no attribute 'service_catalog'<br>
> + export EC2_URL=<br>
> + EC2_URL=<br>
> ++ keystone ec2-credentials-create<br>
> 'Client' object has no attribute 'auth_tenant_id'<br>
> + CREDS=<br>
> ++ echo ''<br>
> ++ awk '/ access / { print $4 }'<br>
> + export EC2_ACCESS_KEY=<br>
> + EC2_ACCESS_KEY=<br>
> ++ echo ''<br>
> ++ awk '/ secret / { print $4 }'<br>
> + export EC2_SECRET_KEY=<br>
> + EC2_SECRET_KEY=<br>
> + NOVA_KEY_DIR=<br>
> ++ keystone catalog --service s3<br>
> ++ awk '/ publicURL / { print $4 }'<br>
> 'Client' object has no attribute 'service_catalog'<br>
><br>
> Has there been some changes that are causing this??<br>
><br>
> Seems like maybe the keystone client is not working anymore?<br>
><br>
> -Josh<br>
><br>
> _______________________________________________<br>
> Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
> Post to : <a href="http://openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
> Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
> More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
><br>
><br>
><br>
> _______________________________________________<br>
> Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
> Post to : <a href="http://openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
> Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
> More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
><br>
<br>
</span></font></blockquote>
</div></div></div>
</blockquote></div><br>