[Openstack-operators] OpenStack Puppet module Keystone Juno

2015-11-24 Thread Russell Cecala
I am trying to use the OpenStack community puppet modules. Here's the keystone module I am using: https://github.com/openstack/puppet-keystone I am using the stable juno branch. I have in my puppet manifest for my controller nodes this resource definition: class { '::keystone::roles::admin'

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2015-11-24 Thread Emilien Macchi
On 11/24/2015 11:21 PM, Russell Cecala wrote: > I am trying to use the OpenStack community puppet modules. Here's the > keystone module I am using: https://github.com/openstack/puppet-keystone > I am using the stable juno branch. I have in my puppet manifest for my > controller nodes this reso

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2015-11-24 Thread Cristina Aiftimiei
Maybe this could be the "answer": https://bugs.launchpad.net/cloud-archive/+bug/1486947 Cris On Tue, Nov 24, 2015 at 11:38 PM, Emilien Macchi wrote: > > > On 11/24/2015 11:21 PM, Russell Cecala wrote: > > I am trying to use the OpenStack community puppet modules. Here's the > > keystone module

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2015-11-24 Thread Russell Cecala
Wonderful Emilien. I was feeling pretty along there ;) I believe this is the openstack client RPM's I am using: [root@mgmt-centos-001 ~]# rpm -qa | grep openstack *openstack*-keystone-2014.2.2-1.el7.noarch python-*openstack*client-1.0.1-1.el7.centos.noarch On Tue, Nov 24, 2015 at 2:38 PM, Emi

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2015-11-24 Thread Emilien Macchi
On 11/25/2015 12:00 AM, Russell Cecala wrote: > Wonderful Emilien. I was feeling pretty along there ;) > > I believe this is the openstack client RPM's I am using: > > [root@mgmt-centos-001 ~]# rpm -qa | grep openstack > > *openstack*-keystone-2014.2.2-1.el7.noarch > > python-*openstack*clie

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2015-11-24 Thread Russell Cecala
I am pretty sure I am using the right puppet-keystone branch for stable juno ... [root@puppet-centos-001 keystone]# pwd /etc/puppetlabs/puppet/environments/production/modules/keystone [root@puppet-centos-001 keystone]# git status # On branch stable/juno # Changes not staged for commit: # (u

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2015-11-25 Thread Emilien Macchi
I did the following: http://paste.openstack.org/show/22eIJep6zMn1RCEvbmYh/ I don't see any reference to 'openstack domain' CLI in our provider in stable/juno. Now in Kilo: http://paste.openstack.org/show/FU4Sz8QarxYKc5vuQAd9/ You can see the domain has been implemented in Kilo. Moreover, it's w

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2015-11-25 Thread Russell Cecala
Ah. Yes I had another version/release of puppet-keystone on to my puppet master and I thought I could get rid of by doing ... # pwd /etc/puppetlabs/puppet/environments/production/modules # mv keystone keystone-incorrect ... and then copying the correct (stable/Juno) release to /etc/puppetlabs/p

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2015-12-03 Thread Russell Cecala
Hi Emilien, I decided I'd give up on Juno. So I am trying to set up a Kilo cloud now. I am still having trouble getting keystone to work. I have a detailed question on ask.openstack.com here: https://ask.openstack.org/en/question/85593/why-cant-i-install-keystone-with-openstackkeystone-puppet-mo

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-04 Thread Russell Cecala
Hi Emilien, I am trying to use https://github.com/openstack/puppet-keystone to set up a Kilo keystone node. I was hoping to could help me out so I can get my team to adopt puppet for setting up OpenStack. On my keystone node I am running centos7 with selinux disabled ... [root@svl-ost-mgmt-cen

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-04 Thread Rich Megginson
On 01/04/2016 02:06 PM, Russell Cecala wrote: Hi Emilien, I am trying to use https://github.com/openstack/puppet-keystone to set up a Kilo keystone node. I'm assuming you're using the kilo branch there? I was hoping to could help me out so I can get my team to adopt puppet for setting up O

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-04 Thread Russell Cecala
Thank you for the reply Rich, Here are the versions of my puppet modules: [root@ost-puppet-centos-001 keystone]# puppet module list /etc/puppetlabs/puppet/environments/production/modules ├── nanliu-staging (v1.0.3) ├── openstack-keystone (v6.1.0) ├── openstack-openstacklib (v6.1.0) ├── puppe

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-04 Thread Rich Megginson
On 01/04/2016 03:07 PM, Russell Cecala wrote: Thank you for the reply Rich, Here are the versions of my puppet modules: [root@ost-puppet-centos-001 keystone]# puppet module list /etc/puppetlabs/puppet/environments/production/modules ├── nanliu-staging (v1.0.3) ├── openstack-keystone (v6.1.0)

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-08 Thread Russell Cecala
Hi Rich, Thanks for all your help so far. I am getting clean puppet runs (I still get depreciation warnings) but "puppet agent -t" is running without error now: [root@ost-mgmt-centos-001 ~]# puppet agent -t Info: Retrieving pluginfacts Info: Retrieving plugin Info: Loading facts Error: Networ

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-08 Thread Russell Cecala
oops. I figured it out ... MariaDB [keystone_db_name]> select * from project; +--+---+---+---+-+---+---+ | id | name | extra | description | ena

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-14 Thread Russell Cecala
Thanks for helping out. I hope that I am not being too much of a pest, but I really want my group to adopt the Openstack community's puppet modules for deploying Openstack. Now that I have keystone working on one node I want to expand on that. I have an HAProxy cluster and I have a signed certif

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-14 Thread Richard Raseley
If you’re terminating SSL at HAproxy, look into the ‘SECURE_PROXY_SSL_HEADER’ and related parameters. > On Jan 14, 2016, at 9:50 AM, Russell Cecala > wrote: > > Thanks for helping out. I hope that I am not being too much of a pest, but I > really want my group to adopt the Openstack communit

Re: [Openstack-operators] OpenStack Puppet module Keystone Juno

2016-01-14 Thread Russell Cecala
Thanks Richard, I am not sure where to look ... # pwd /etc/puppetlabs/puppet/environments/production/modules # ls apache apt concat firewall inifile keystone mysql openstacklib postgresql rabbitmq staging stdlib # find . -type f -exec grep -i SECURE_PROXY_SSL_HEADER {} \; no output