domain users config should be backwards compatible

Bug #1287980 reported by Steven Hardy
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Heat
Fix Released
Critical
Steven Hardy

Bug Description

As evidenced by tripleo's reaction to the instance-users patches landing, we need a way for heat to transparently fall-back to the previous (non domain) behavior in the event the deployer can't or won't set the three new config options.

Also we should provide a simple tools/ script which can be used to simply create the domain, user and role assignment, so deployers who don't have python-openstackclient can use it and/or those who don't want to think about running the commands can have a helper script.

Steven Hardy (shardy)
Changed in heat:
status: New → In Progress
importance: Undecided → Critical
assignee: nobody → Steven Hardy (shardy)
milestone: none → icehouse-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (master)

Fix proposed to branch: master
Review: https://review.openstack.org/78048

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Fix proposed to branch: master
Review: https://review.openstack.org/78310

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (master)

Reviewed: https://review.openstack.org/78048
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=c05dc06f0b437460627180312cbb949bf6e3a0b4
Submitter: Jenkins
Branch: master

commit c05dc06f0b437460627180312cbb949bf6e3a0b4
Author: Steven Hardy <email address hidden>
Date: Wed Mar 5 00:09:02 2014 +0000

    Add tools/create_heat_domain helper script

    For users who don't yet have python-openstackclient, or who require
    a more automated way of creating the heat domain and domain-admin
    user, provide a simple wrapper for the keystoneclient python API
    which will create the domain and user, then print a helpful cut/paste
    message to allow heat.conf to be easily updated.

    It requires a cloud-admin users credentials to be sourced in the
    environment, OS_USERNAME/OS_PASSWORD/OS_AUTH_URL and also a script
    specific variable HEAT_DOMAIN_PASSWORD which specifies the password
    for the domain-admin user. Other values may be overridden by the
    environment but default to sane values.

    Change-Id: I5731ba72491dcf515c5d230b55056d9263341c54
    Partial-Bug: #1287980

Thierry Carrez (ttx)
Changed in heat:
milestone: icehouse-3 → icehouse-rc1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Reviewed: https://review.openstack.org/78310
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=252faed5f567880f30066ecd27a62c88f66bfa67
Submitter: Jenkins
Branch: master

commit 252faed5f567880f30066ecd27a62c88f66bfa67
Author: Steven Hardy <email address hidden>
Date: Wed Mar 5 16:38:54 2014 +0000

    heat_keystoneclient add legacy fallback path

    If users fail to observe the reccomendations in the commit messages
    and/or release notes and use a heat.conf from a previous version of
    heat currently some functionality will fail due to the missing
    domain configuration in heat.conf. Instead degrade gracefully with
    warnings, calling the non-domain functions which are maintained
    (for now) for backwards compatibility.

    Hopefully we won't have to maintain this huge pile of legacy stuff
    for too long :(

    Change-Id: Ia029d585dfdb2563609725589c41083819a11a3b
    Closes-Bug: #1287980

Changed in heat:
status: In Progress → Fix Committed
Revision history for this message
Thierry Carrez (ttx) wrote :

Trying to include this one in the I3 cut

Changed in heat:
milestone: icehouse-rc1 → icehouse-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (milestone-proposed)

Fix proposed to branch: milestone-proposed
Review: https://review.openstack.org/78670

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (milestone-proposed)

Reviewed: https://review.openstack.org/78670
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=7953ce1fecd51b26d213c0d80a3d1bce1295c14e
Submitter: Jenkins
Branch: milestone-proposed

commit 7953ce1fecd51b26d213c0d80a3d1bce1295c14e
Author: Steven Hardy <email address hidden>
Date: Wed Mar 5 16:38:54 2014 +0000

    heat_keystoneclient add legacy fallback path

    If users fail to observe the reccomendations in the commit messages
    and/or release notes and use a heat.conf from a previous version of
    heat currently some functionality will fail due to the missing
    domain configuration in heat.conf. Instead degrade gracefully with
    warnings, calling the non-domain functions which are maintained
    (for now) for backwards compatibility.

    Hopefully we won't have to maintain this huge pile of legacy stuff
    for too long :(

    Change-Id: Ia029d585dfdb2563609725589c41083819a11a3b
    Closes-Bug: #1287980

Changed in heat:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in heat:
milestone: icehouse-3 → 2014.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.