keystone-manage bootstrap should create an identity endpoint

Bug #1550057 reported by Jamie Lennox
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
High
Jamie Lennox

Bug Description

I want to use keystone-manage bootstrap so that i never have to enable admin_token in my environment (rather than turn it on, restart kestone, do setup, turn it off, restart keystone).

Whilst bootstrap creates me an admin user in an admin project, i can't then use this login to do things like create projects because you need the identity service in the catalog to operate on. I can get around this by getting a scoped token and then using that to communicate directly to an endpoint but this is not the flow that bootstrap was supposed to provide.

Bootstrap should create this endpoint so that i can immediately use that admin user to create users and projects without having to hack around catalog issues.

Changed in keystone:
assignee: nobody → Jamie Lennox (jamielennox)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/285102

Changed in keystone:
status: New → In Progress
Revision history for this message
Morgan Fainberg (mdrnstm) wrote : Re: keystone-manage bootstrap should create and identity endpoint

This would be fantastic to land in RC!

Changed in keystone:
importance: Undecided → Medium
milestone: none → mitaka-rc1
Revision history for this message
Adam Young (ayoung) wrote :

We cannot use Bootstrap without this.

summary: - keystone-manage bootstrap should create and identity endpoint
+ keystone-manage bootstrap should create an identity endpoint
Changed in keystone:
importance: Medium → Critical
Revision history for this message
Steve Martinelli (stevemar) wrote :

we *do* use bootstrap without this, just look at the way devstack uses it: https://github.com/openstack-dev/devstack/blob/b01a3c3bafba743a80cc9288fff807dd7f15ed4e/lib/keystone#L621-L666

it would be nice to have in RC.

Changed in keystone:
importance: Critical → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/285102
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=64c94e74c905a93d12193d333b697856a3567a72
Submitter: Jenkins
Branch: master

commit 64c94e74c905a93d12193d333b697856a3567a72
Author: Jamie Lennox <email address hidden>
Date: Fri Feb 26 12:24:47 2016 +1100

    Add identity endpoint creation to bootstrap

    To enable the bootstrapped admin user to perform identity operations we
    must also bootstrap the identity endpoint.

    Allow specifying service name, endpoint urls and region information to
    the bootstrap command.

    Change-Id: Ie78c61ecf1e5f787dd2528b887c1642fd8d457ff
    Closes-Bug: #1550057

Changed in keystone:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to keystone (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/290226

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to keystone (master)

Reviewed: https://review.openstack.org/290226
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=258d09a5ac0ee8ed98e8cf6c06319ab7760cf00f
Submitter: Jenkins
Branch: master

commit 258d09a5ac0ee8ed98e8cf6c06319ab7760cf00f
Author: Jamie Lennox <email address hidden>
Date: Wed Mar 9 12:53:45 2016 +1100

    Add docs for additional bootstrap endpoint parameters

    The patch to add the endpoint parameters to the bootstrap command didn't
    update the documentation to show how to use these commands. Add this
    information now.

    Original Patch: Ie78c61ecf1e5f787dd2528b887c1642fd8d457ff
    Related-Bug: #1550057
    DocImpact

    Change-Id: I5a1cb38b05ebcb8c44c9cf90a490c849f44dbc32

Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/keystone 9.0.0.0rc1

This issue was fixed in the openstack/keystone 9.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.