PKI tokens in Keystone suffered from many things, most essentially the trials due to the various forms of revocation. I never wanted revocation in the first place. What could we have done differently? It just (I mean moments ago) came to me.
Continue reading
Category Archives: Software
Bypassing Version Discovery in Keystoneauth1
I’ve been a happy Dreamhost customer for many years. So I was thrilled when I heard that they had upgrade Dreamcompute to Mitaka. So, like the good Keystoner that I am, I went to test it out. Of course, I tried to use the V3 API.  And it failed.
What? Dreamhost wouldn’t let me down, would they?
No. V3 works fine, it is discovery that is misconfigured.
Continue reading
Merging FreeIPA and Tripleo Undercloud Apache installs
My Experiment yesterday left me with a broken IPA install. I aim to fix that.
Continue reading
De-conflicting Swift-Proxy with FreeIPA
Port 8080 is a popular port. Tomcat uses it as the default port for unencrypted traffic. FreeIA, installs Dogtag which runs in Tomcat. Swift proxy also chose that port number for its traffic. This means that if one is run on that port, the other cannot. Of the two, it is easier to change FreeIPA, as the port is only used for internal traffic, where as Swift’s port is in the service catalog and the documentation.
Continue reading
Launching a Centos VM in Tripleo Overcloud
My Overcloud deploy does not have any VM images associates with it. I want to test launching a VM.
Continue reading
Clearing the Keystone Environment
If you spend a lot of time switching between different cloud, different users, or even different projects for the same user when working with openstack, you’ve come across the problem where one environment variable from an old sourceing pollutes the current environment. I’ve been hit by that enough times that I wrote a small script to clear the environment.
I call it clear_os_env
Continue reading
Keystone Auth Entry Points
OpenStack libraries now use Authenication plugins from the keystoneauth1 library. One othe the plugins has disappered? Kerbersop. This used to be in the python-keystoneclient-kerberos package, but that is not shipped with Mitaka. What happened?
Continue reading
The difference between auth_uri and auth_url in auth_token
Dramatis Personae:
Adam Young, Jamie Lennox: Keystone core.
Scene: #openstack-keystone chat room.
Learning about the Overcloud Deploy Process
The process of deploying the overcloud goes through several technologies. Here’s what I’ve learned about tracing it.
Continue reading
Custom Overcloud Deploys
I’ve been using Tripleo Quickstart. I need custom deploys. Start with modifying the heat templates. I’m doing a mitaka deploy