Hi Matt, thanks for good hint ! Issue disappeared with newer python-openstackclient-1.0.3-3.fc23.noarch python-openstackclient-1.0.1-1.fc22.noarch is too old,
it’s interesting, as supported platforms for puppet-openstack is fedora21,22 and I get it running just with fc23 ☺ best regards, Michal From: Matt Fischer [mailto:m...@mattfischer.com] Sent: Friday, February 19, 2016 4:27 PM To: OpenStack Development Mailing List (not for usage questions) <openstack-dev@lists.openstack.org> Subject: Re: [openstack-dev] [puppet] is puppet-keystone using v3 credentials correctly ? You shouldn't have to do any of that, it should just work. I have OSC 2.0.0 in my environment though (Ubuntu). I'm just guessing but perhaps that client is too old? Maybe a Fedora user could recommend a version. On Fri, Feb 19, 2016 at 7:38 AM, Matthew Mosesohn <mmoses...@mirantis.com<mailto:mmoses...@mirantis.com>> wrote: Hi Michal, Just add --os-identity-api-version=3 to your command it will work. The provider uses v3 openstackclient via env var OS_IDENTITY_API_VERSION=3. The default is still 2. Best Regards, Matthew Mosesohn On Fri, Feb 19, 2016 at 5:25 PM, Matt Fischer <m...@mattfischer.com<mailto:m...@mattfischer.com>> wrote: > What version of openstack client do you have? What version of the module are > you using? > > On Feb 19, 2016 7:20 AM, "Ptacek, MichalX" > <michalx.pta...@intel.com<mailto:michalx.pta...@intel.com>> wrote: >> >> Hi all, >> >> >> >> I was playing some time with puppet-keystone deployments, >> >> and also reported one issue related to this: >> >> https://bugs.launchpad.net/puppet-keystone/+bug/1547394 >> >> but in general my observations are that keystone_service is using v3 >> credentials with openstack cli commands that are not compatible >> >> >> >> e.g. >> >> Error: Failed to apply catalog: Execution of '/bin/openstack service list >> --quiet --format csv --long' returned 2: usage: openstack service list [-h] >> [-f {csv,table}] [-c COLUMN] >> [--max-width <integer>] >> [--quote {all,minimal,none,nonnumeric}] >> openstack service list: error: unrecognized arguments: --long >> >> >> >> >> >> It can’t be bug, because whole module will not work due to this J >> >> I think I miss something important somewhere … >> >> >> >> My latest manifest file is : >> >> >> >> Exec { logoutput => 'on_failure' } >> >> package { 'curl': ensure => present } >> >> >> >> node keystone { >> >> >> >> class { '::mysql::server': } >> >> class { '::keystone::db::mysql': >> >> password => 'keystone', >> >> } >> >> >> >> class { '::keystone': >> >> verbose => true, >> >> debug => true, >> >> database_connection => >> 'mysql://keystone:keystone@127.0.0.1/keystone<http://keystone:keystone@127.0.0.1/keystone>', >> >> catalog_type => 'sql', >> >> admin_token => 'admin_token', >> >> } >> >> >> >> class { '::keystone::roles::admin': >> >> email => 'exam...@abc.com<mailto:exam...@abc.com>', >> >> password => 'ChangeMe', >> >> } >> >> >> >> class { '::keystone::endpoint': >> >> public_url => >> "http://${::fqdn}:5000/v2.0<http://$%7b::fqdn%7d:5000/v2.0>", >> >> admin_url => >> "http://${::fqdn}:35357/v2.0<http://$%7b::fqdn%7d:35357/v2.0>", >> >> } >> >> } >> >> >> >> Env variables looks as follows(before service list is called with --long) >> >> {"OS_IDENTITY_API_VERSION"=>"3", "OS_TOKEN"=>"admin_token", >> "OS_URL"=>"http://127.0.0.1:35357/v3"} >> >> Debug: Executing: '/bin/openstack service list --quiet --format csv >> --long' >> >> >> >> Thanks for any hint, >> >> Michal >> >> -------------------------------------------------------------- >> Intel Research and Development Ireland Limited >> Registered in Ireland >> Registered Office: Collinstown Industrial Park, Leixlip, County Kildare >> Registered Number: 308263 >> >> This e-mail and any attachments may contain confidential material for the >> sole use of the intended recipient(s). Any review or distribution by others >> is strictly prohibited. If you are not the intended recipient, please >> contact the sender and delete all copies. >> >> >> __________________________________________________________________________ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe> >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: > openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -------------------------------------------------------------- Intel Research and Development Ireland Limited Registered in Ireland Registered Office: Collinstown Industrial Park, Leixlip, County Kildare Registered Number: 308263 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
