keystone gets defined with the 2.0 api which makes horizon to break

[Zoltan Langi]

Description:
When you install the openstack ocata or newton with fuel 11, the keystone in the endpoint list gets defined with the version 2.0 api which is causing the horizon to not to function properly. (for example, you can't get the flavours or manage the users for a project)

In the /var/log/horizon/horizon.log you see these lines: WARNING horizon.exceptions Recoverable error: Cannot use v2 authentication with domain scope

Steps to reproduce:
Install a default install

Expected results:
Endpoint list shouldn't be defined with the v2.0 API.

Workaround:
To fix the problem:
openstack endpoint create --region=RegionOne keystone admin http://internal.ip:35357
openstack endpoint create --region=RegionOne keystone public http://external.ip:5000
openstack endpoint create --region=RegionOne keystone internal http://internal.ip:5000
openstack endpoint list | grep -E "(Service|keystone)" | grep v2.0 | awk '{print $2}' | xargs -i openstack endpoint delete {}

These commands will define a new endpoints without the v2.0 api specified and remove the wrong definition from the endpoint list.

Impact:
Horizon doesn't function fully.

Description:
Fuel 11 stable release, Ubuntu 16.04 UCA Ocata and Newton release

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/453124

[OpenStack Infra (hudson-openstack)]

Change abandoned by Fuel DevOps Robot (<email address hidden>) on branch: master
Review: https://review.openstack.org/453124
Reason: This review is > 4 weeks without comment, and failed Jenkins the last time it was checked. We are abandoning this for now. Feel free to reactivate the review by pressing the restore button and leaving a 'recheck' comment to get fresh test results.

[Derek Leuridan (leuridan)]

Is there any known workaround for getting a Fuel deployed cluster with working Horizon? I have been wrestling with this issue for days. Changing the keystone endpoints to be versionless does not remediate.

[Luca Cervigni (cervigni)]

Derek,

It should work, the bug does not affect horizon, but the whole openstack environment. Feel free to send me an email (in launchpad profile) and your logs and I will try to help.

[Alex Mwotil (mwotila)]

I deleted the endpoints as per:

openstack endpoint list | grep -E "(Service|keystone)" | grep v2.0 | awk '{print $2}' | xargs -i openstack endpoint delete {}

I then recreated them based on https://docs.openstack.org/newton/install-guide-rdo/keystone-install.html

The focus is on the section:

Install and configure components¶

# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

# keystone-manage bootstrap --bootstrap-password ADMIN_PASS \
  --bootstrap-admin-url http://controller:35357/v3/ \
  --bootstrap-internal-url http://controller:35357/v3/ \
  --bootstrap-public-url http://controller:5000/v3/ \
  --bootstrap-region-id RegionOne