OpenStack Heat

heat-keystone-setup-domain can't support cacert as a parameter

Bug #1387063 reported by Ethan Lynn
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Heat
Fix Released
Medium
Ethan Lynn
OpenStack Heat 2015.1.0 "kilo"
Juno
Fix Released
Undecided
Unassigned
OpenStack Heat 2014.2.1

Bug Description

If my environment enable ssl for keystone, there is no way to sepcify --insecure or cacert file as parameters.

That will lead heat domain user creation failed.

I know that we can use python-openstackclient for instead and a better way, but recently cookbook from chef still using this tool
to setup heat domain user.

So for temporary, I need enhance this file a bit, and in the future, maybe we should modify cookbook from chef to using python-openstackclient.

Ethan Lynn (ethanlynn)
Changed in heat:
assignee: nobody → Ethan Lynn (ethanlynn)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (master)

Fix proposed to branch: master
Review: https://review.openstack.org/131698

Steven Hardy (shardy)
Changed in heat:
status: New → Triaged
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (master)

Reviewed: https://review.openstack.org/131698
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=8d4e7acb83add56b2105b9da2b5d263cec1d7cdd
Submitter: Jenkins
Branch: master

commit 8d4e7acb83add56b2105b9da2b5d263cec1d7cdd
Author: Ethan Lynn <email address hidden>
Date: Wed Oct 29 18:38:52 2014 +0800

    Add CERT file support in heat-keystone-setup-domain

    Add below options to support ssl connection.
    --insecure
    --os-cacert
    --os-cert
    --os-key

    Change-Id: I9d1fd07df783d7410ac3f51b5d4e8434d57182a4
    Close-bug: #1387063

Revision history for this message
Steven Hardy (shardy) wrote :

Oops, missed the s/Close/Closes above in the review, so moving to fix committed manually.

Changed in heat:
status: Triaged → Fix Committed
milestone: none → kilo-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (stable/juno)

Reviewed: https://review.openstack.org/132980
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=16215ddf38854db701f937883d95db223e48311d
Submitter: Jenkins
Branch: stable/juno

commit 16215ddf38854db701f937883d95db223e48311d
Author: Ethan Lynn <email address hidden>
Date: Wed Oct 29 18:38:52 2014 +0800

    Add CERT file support in heat-keystone-setup-domain

    Add below options to support ssl connection.
    --insecure
    --os-cacert
    --os-cert
    --os-key

    Change-Id: I9d1fd07df783d7410ac3f51b5d4e8434d57182a4
    Close-bug: #1387063
    (cherry picked from commit 8d4e7acb83add56b2105b9da2b5d263cec1d7cdd)

tags: added: in-stable-juno
Thierry Carrez (ttx)
Changed in heat:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in heat:
milestone: kilo-1 → 2015.1.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.