Keystone Puppet Module Token Failure

[Daneyon Hansen]

The Keystone provider and type does not handle token based keystone client authentication properly. As you can see below, the token-get command does not include the --os-username --os-password auth flags. These flags are not needed when using keystone client username/password based authnetication, but are required when SERVICE_TOKEN and SERVICE_ENDPOINT are set in the OS auth file. When SERVICE_TOKEN and SERVICE_ENDPOINT are set in the auth file, the keystone client prefers them (token auth) over username/password authentication.

debug: Puppet::Type::Keystone_user::ProviderKeystone: Executing '/usr/bin/keystone --os-auth-url http://192.168.220.41:35357/v2.0/ token-get'
err: /Stage[main]/Nova::Keystone::Auth/Keystone_user[nova]: Could not evaluate: Execution of '/usr/bin/keystone --os-auth-url http://192.168.220.41:35357/v2.0/ token-get' returned 1: Configuration error: Client configured to run without a service catalog. Run the client using --os-auth-url or OS_AUTH_URL, instead of --os-endpoint or OS_SERVICE_ENDPOINT, for example.
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).

keystone --os-tenant-name=admin --os-username=admin --os-password=Cisco123 --os-auth-url=http://192.168.220.41:35357/v2.0/ token-get
+-----------+----------------------------------+
| Property | Value |
+-----------+----------------------------------+
| expires | 2013-08-01T17:05:02Z |
| id | 7bf6602da8664096b0d013ac3c949f6b |
| tenant_id | 9ec0f9e262d54ddca9baa5e91e687bf6 |
| user_id | b70d506bb4cc4ea5965fbf4de4618951 |
+-----------+----------------------------------+

[Mark T. Voelker (mvoelker)]

I think this got resolved upstream, didn't it? Perhaps:
https://review.openstack.org/#/c/37415/

[Mark T. Voelker (mvoelker)]

Whoops, bad paste. I meant:
https://review.openstack.org/#/c/39566/

[Daneyon Hansen (danehans)]

Yes, this bug is now resolved.