Thanks for the quick analysis here Ben. Looking at newton and future releases, if you are using the "keystone-manage bootstrap" option to setup keystone, then the domain ID won't be "default" it'll be some UUID. Your best bet going forward is to use the domain name only, it'll always be "Default" (capital D).
Marking this as Invalid for keystone. ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1631319 Title: Can't deploy overcloud of Mitaka on CentOS Status in OpenStack Identity (keystone): Invalid Status in tripleo: Triaged Bug description: CentOS 7.2 Undercloud deployed normally by tripleo instructions. keystone - Version : 9.2.1 Release : 0.20161007011449.012bc3d.el7.centos heat-api - Version : 6.0.1 Release : 0.20160829124409.ed46562.el7.centos These numbers tell us that undercloud installed from Mitaka repository But overcloud deploy fails with error - [stack@myhost ~]$ openstack overcloud deploy --templates --neutron-tunnel-types vxlan --neutron-network-type vxlan --ntp-server pool.ntp.org --control-scale 1 --compute-scale 1 --block-storage-scale 3 --control-flavor control --compute-flavor compute --block-storage-flavor block-storage -e overcloud/scaleio-env.yaml Deploying templates in the directory /usr/share/openstack-tripleo-heat-templates ERROR: Authorization failed. keystone logs contains error: domain Default can not be found workaround - change domain from 'Default' to 'default' in heat-api.conf and then overcloud deploy can be started... To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1631319/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp