[Openstack-operators] How to force Heat to use v2.0 Keystone

Chris Buccella chris.buccella at antallagon.com
Tue Feb 17 18:46:04 UTC 2015


For Icehouse and Juno, you'll want to use the Keystone v2 plugin for heat:

https://git.openstack.org/cgit/openstack/heat/tree/contrib/heat_keystoneclient_v2


-Chris

On Tue, Feb 17, 2015 at 10:51 AM, Alvise Dorigo <alvise.dorigo at pd.infn.it>
wrote:

> Hi Christian; here the info you've requested:
>
> [root at controller-01 ~]# grep auth_uri /etc/heat/heat.conf
> /etc/glance/glance-api.conf
> /etc/heat/heat.conf:# Allowed keystone endpoints for auth_uri when
> multi_cloud is
> /etc/heat/heat.conf:#allowed_auth_uris=
> /etc/heat/heat.conf:auth_uri = https://cloud-areapd-test.pd.
> infn.it:5000/v2.0
> /etc/heat/heat.conf:#auth_uri=http://127.0.0.1:5000/v2.0
> /etc/heat/heat.conf:# Allowed keystone endpoints for auth_uri when
> multi_cloud is
> /etc/heat/heat.conf:#allowed_auth_uris=
> /etc/heat/heat.conf:auth_uri = https://cloud-areapd-test.pd.
> infn.it:5000/v2.0
> /etc/heat/heat.conf:#auth_uri=<None>
> /etc/glance/glance-api.conf:auth_uri = https://cloud-areapd-test.pd.
> infn.it:35357/v2.0
>
> is the problem in the TCP port mismatch ?
>
>     A.
>
>
> On 02/17/2015 04:38 PM, Christian Berendt wrote:
>
>> On 02/17/2015 04:11 PM, Alvise Dorigo wrote:
>>
>>> [dorigoa at lxadorigo ~]$ heat  -k stack-create -f test-stack.yml   -P
>>> "ImageID=cirros;NetID=$NET_ID" testStac
>>> ERROR: Property error : server1: image Authorization failed: SSL
>>> exception connecting to
>>> https://cloud-areapd-test.pd.infn.it:5000/v3/auth/tokens
>>>
>> What value do you have for the auth_uri parameter in the
>> /etc/heat/heat.conf file? Same for the /etc/glance/glance-api.conf file.
>>
>> Christian.
>>
>> _______________________________________________
>> OpenStack-operators mailing list
>> OpenStack-operators at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>
>
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20150217/6ff2c4fc/attachment.html>


More information about the OpenStack-operators mailing list