[Openstack] Missing(?) keystone service catalog

Nick Lothian nick.lothian at gmail.com
Fri May 4 00:13:05 UTC 2012


/etc/keystone/default_catalog.templates looks like
https://github.com/openstack-dev/devstack/blob/master/files/default_catalog.templates
, with http://192.168.1.50 substituted for  %SERVICE_HOST%

My curl call uses the username & password, since it is to the /tokens URL:

curl -k -X 'POST' -v http://192.168.1.50:5000/v2.0/tokens -d
'{"auth":{"passwordCredentials":{"username": "admin",
"password":"password"}}}' -H 'Content-type: application/json'

Returns:

{"access": {"token": {"expires": "2012-05-05T00:11:03Z", "id":
"97d202e9c7af47dea4b0bc4dce02480e"}, "serviceCatalog": {}, "user":
{"username": "admin", "roles_links": [], "id":
"1a452182bec24b7f8ada531bdd2dc7f7", "roles": [], "name": "admin"}}}

(note the empty serviceCatalog entry)
Nick

On Fri, May 4, 2012 at 1:29 AM, Joseph Heck <heckj at me.com> wrote:
>
> The service-list should give you a list of the services in the catalog, driven by the template. What's in your catalog file at /etc/keystone/default_catalog.templates? It sounds like it's empty - that's what it's reading to report on services. You won't be able to use any of the add/remove CRUD operations unless you switch to the SQL based back-end, but service-list should do what you want.
>
> When you did the curl, I assume you used the token retrieved from the admin user with the /tokens/{token_id}/endpoints call?
>
> -joe
>
> On May 3, 2012, at 2:54 AM, Nick Lothian wrote:
>
> My /etc/keystone/keystone.conf says:
>
> [catalog]
> template_file = /etc/keystone/default_catalog.templates
> # dynamic, sql-based backend (supports API/CLI-based management commands)
> driver = keystone.catalog.backends.templated.TemplatedCatalog
>
> (This is the default from devstack).
>
> I did look at that, but made the mistake of assuming the comment was correct and referred to the next line, especially since the next, commented out entry said it was the file-based one. My mistake I guess - I'll try the SQL one.
>
> Shouldn't the API give a read-only view of the service catalog if CRUD operations are unavailable?
>
> On Thu, May 3, 2012 at 4:32 PM, Rafael Durán Castañeda <rafadurancastaneda at gmail.com> wrote:
>>
>> On 05/03/2012 06:38 AM, Nick Lothian wrote:
>>
>> I'm having some trouble using the Keystone API.
>>
>> When I run
>>
>> keystone --os_username=admin --os_password=password --os_auth_url=http://192.168.1.50:5000/v2.0/ service-list
>>
>> I get the following:
>>
>> No handlers could be found for logger "keystoneclient.v2_0.client"
>> Unable to communicate with identity service: 404 Not Found
>>
>> The resource could not be found.
>>
>>    . (HTTP 404)
>>
>>
>> The keystone log shows the following:
>>
>> (eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write 192.168.1.50 - - [03/May/2012 14:03:12] "GET /v2.0/OS-KSADM/services HTTP/1.1" 404 176 0.008028
>>
>>
>> Additionally, if I use curl to call the keystone API directly (as documented at http://keystone.openstack.org/api_curl_examples.html#id4) my whole serviceCatalog section is empty ("serviceCatalog": {})
>>
>> I am using a default devstack installation.
>>
>> What am I missing?
>>
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to     : openstack at lists.launchpad.net
>> Unsubscribe : https://launchpad.net/~openstack
>> More help   : https://help.launchpad.net/ListHelp
>>
>> I think DevStack is using TemplatedCatalog as catalog backend and it doesn't support CRUD. If you need CRUD operations you can use SQL backend.
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to     : openstack at lists.launchpad.net
>> Unsubscribe : https://launchpad.net/~openstack
>> More help   : https://help.launchpad.net/ListHelp
>>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
>




More information about the Openstack mailing list