Inconsistencies in Install and deploy doc - glance, keystone, endpoints

Bug #984034 reported by Anne Gentle
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
openstack-manuals
Fix Released
High
Anne Gentle

Bug Description

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

1.http://docs.openstack.org/trunk/openstack-compute/install/content/keystone-service-endpoint-create.html

The doubt pertains to defining the "volume service":

In the given example, "Nova Volume Service" is created with id 1ff4ece13c3e48d8a6461faebd9cd38f

However in the endpoint creation, the service_id provided is 15c11a23667e427e91bc31335b45f4bd instead of 1ff4ece13c3e48d8a6461faebd9cd38f

This is in contradiction to the description of the keystone endpoint-create is http://docs.openstack.org/trunk/openstack-compute/install/content/elements-of-keystone-service-catalog-entry.html

-> "--service_id: The ID field returned by the keystone service-create"

2. There are also inconsistencies between the steps listed in Chapter 3 & Appendix A (Configuration file examples)

   On page : http://docs.openstack.org/trunk/openstack-compute/install/content/configure-glance-files.html

  ---------------------------------------------------------------------------------------------------------------------------------------------------------

  Update /etc/glance/glance-api-paste.ini, configure the admin_* values under [filter:authtoken].

   [filter:authtoken]

         admin_tenant_name = service

         admin_user = glance

         admin_password = glance (Should this be the password associated with the glance database instead or the admin token 012345SECRET99TOKEN012345?)

  ---------------------------------------------------------------------------------------------------------------------------------------------------------

3. On page : http://docs.openstack.org/trunk/openstack-compute/install/content/configure-glance-files.html

  ---------------------------------------------------------------------------------------------------------------------------------------------------------

  Add this to the end of /etc/glance/glance-api.conf.

  [paste_deploy]

           flavor = keystone

  ---------------------------------------------------------------------------------------------------------------------------------------------------------
 The example on http://docs.openstack.org/trunk/openstack-compute/install/content/glance-api-conf-file.html does not have this & the text preceeding the example says

 "You need to change this file to look like this example after installing from packages."

4. On page : http://docs.openstack.org/trunk/openstack-compute/install/content/configure-glance-files.html

  ---------------------------------------------------------------------------------------------------------------------------------------------------------

 Update /etc/glance/glance-registry-paste.ini, configure the admin_* vaules under [filter:authtoken]:

 [filter:authtoken]

           admin_tenant_name = service

           admin_user = glance

           admin_password = glance (Should this be the password associated with the glance database instead or the admin token 012345SECRET99TOKEN012345?)

  ---------------------------------------------------------------------------------------------------------------------------------------------------------
           admin_tenant_name = service
           admin_user = glance
           admin_password = 012345SECRET99TOKEN012345

  ---------------------------------------------------------------------------------------------------------------------------------------------------------

5. There are inconsistencies between the Configuration file examples

      On page: http://docs.openstack.org/trunk/openstack-compute/install/content/glance-registry-paste-file.html

  ---------------------------------------------------------------------------------------------------------------------------------------------------------

      [filter:authtoken]

            paste.filter_factory = keystone.middleware.auth_token:filter_factory

            auth_host = 192.168.206.130

            auth_port = 35357

            auth_protocol = http

            auth_uri = http://192.168.206.130:5000/

            admin_tenant_name = service

           admin_user = glance

           admin_password = 012345SECRET99TOKEN012345

  ---------------------------------------------------------------------------------------------------------------------------------------------------------

       [filter:authtoken]
            paste.filter_factory = keystone.middleware.auth_token:filter_factory
            service_protocol = http
            service_host = 127.0.0.1
            service_port = 5000
            auth_host = 127.0.0.1
            auth_port = 35357
            auth_protocol = http
            auth_uri = http://127.0.0.1:5000/
            admin_tenant_name = %SERVICE_TENANT_NAME%
           admin_user = %SERVICE_USER%
           admin_password = %SERVICE_PASSWORD%

 --------------------------------------------------------------------------------------------------------------------------------------------------------------

Revision history for this message
Anne Gentle (annegentle) wrote :

Yes, I believe all these should use "012345SECRET99TOKEN012345" for the admin_password. Fixing with patch
https://review.openstack.org/#/c/6615/

Thanks for reporting!

Changed in openstack-manuals:
assignee: nobody → Anne Gentle (annegentle)
importance: Undecided → High
status: New → Confirmed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-manuals (master)

Reviewed: https://review.openstack.org/6615
Committed: http://github.com/openstack/openstack-manuals/commit/09484e2f6dabe9661265621cef4c49fff3620306
Submitter: Jenkins
Branch: master

commit 09484e2f6dabe9661265621cef4c49fff3620306
Author: annegentle <email address hidden>
Date: Mon Apr 16 15:46:49 2012 -0700

    Fix bug 983417, bug 984106, bug 984034

      * Update dashboard locations of config files
      * Remove duplicated dashboard info and move into common directory
      * Ensure consistency between glance configuration files

    Change-Id: I2b2b335e8f0e8e8ead01b9aa641d80db6e723717

Changed in openstack-manuals:
status: Confirmed → Fix Committed
Anne Gentle (annegentle)
Changed in openstack-manuals:
status: Fix Committed → Fix Released
Revision history for this message
gabriel staicu (gabriel-staicu) wrote :

Hi,

Please can you verify once more. I tried with admin_password set to 012345SECRET99TOKEN012345 but it does not work. From what I understood in documentaion there are 2 ways to make the authorization:
a) service authentication
admin_tenant_name = %SERVICE_TENANT_NAME%
admin_user = %SERVICE_USER% -> keystone
admin_password = %SERVICE_PASSWORD% -> keystonepass
and in this case the values should be those specified with "keystone user-create --name keystone --pass keystonepass --enabled true"
b) token authentication
In this case admin_user and admin_password are replaced by auth_token and this one has the value of the token.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.