bundle readmes need to be updated for latest openstack client commands

Bug #1736795 reported by Ryan Beisner on 2017-12-06
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Bundles
Medium
David Ames

Bug Description

Moved issue from GH to LP, needs to be tracked here. Essentially, the README.md for openstack-base and openstack-telemetry needs to be updated to reflect the openstack client latest commands and syntax.

https://github.com/openstack-charmers/openstack-bundles/issues/43
https://github.com/openstack-charmers/openstack-bundles/issues/42
https://github.com/openstack-charmers/openstack-bundles/issues/41

Ryan Beisner (1chb1n) wrote :

Following along this guide:
https://jujucharms.com/openstack-base/50

I received the following error when trying to ssh into my test guest:
```
$ ssh -i ~/.ssh/id_rsa_cloud ubuntu@10.228.68.21
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/home/ubuntu/.ssh/id_rsa_cloud' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/home/ubuntu/.ssh/id_rsa_cloud": bad permissions
Permission denied (publickey).
```
Perhaps the "nova keypair-add" command should be proceeded with:
```
$ mkdir -p ~/.ssh
$ touch ~/.ssh/id_rsa_cloud
$ chmod 600 ~/.ssh/id_rsa_cloud
```
(or some sort of umaskery)

Ryan Beisner (1chb1n) wrote :

Following along this guide:
  https://jujucharms.com/openstack-base/50
I hit errors in the "Accesing your instance" section.

```
$ neutron security-group-rule-create --protocol icmp \
> --direction ingress default
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Multiple security_group matches found for name 'default', use an ID to be more specific.
$ neutron security-group-rule-create --protocol tcp \
> --port-range-min 22 --port-range-max 22 \
> --direction ingress default
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Multiple security_group matches found for name 'default', use an ID to be more specific.
```
I (lazily) redeployed OpenStack again in case I'd screwed something up, but got the same error again. Turns out I had 3 "default" security groups defined:
```
$ neutron security-group-list
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+---------+----------------------------------------------------------------------+
| id | name | security_group_rules |
+--------------------------------------+---------+----------------------------------------------------------------------+
| 54683020-28af-4105-93f4-6be0313af94a | default | egress, IPv4 |
| | | egress, IPv6 |
| | | ingress, IPv4, remote_group_id: 54683020-28af-4105-93f4-6be0313af94a |
| | | ingress, IPv6, remote_group_id: 54683020-28af-4105-93f4-6be0313af94a |
| 89561bb6-bdf0-43da-bc7d-25a127542003 | default | egress, IPv4 |
| | | egress, IPv6 |
| | | ingress, IPv4, remote_group_id: 89561bb6-bdf0-43da-bc7d-25a127542003 |
| | | ingress, IPv6, remote_group_id: 89561bb6-bdf0-43da-bc7d-25a127542003 |
| 8ab6440a-d00e-4a20-a5a5-e3d64ffc93ef | default | egress, IPv4 |
| | | egress, IPv6 |
| | | ingress, IPv4, remote_group_id: 8ab6440a-d00e-4a20-a5a5-e3d64ffc93ef |
| | | ingress, IPv6, remote_group_id: 8ab6440a-d00e-4a20-a5a5-e3d64ffc93ef |
+--------------------------------------+---------+----------------------------------------------------------------------+
```
I re-ran those commands, using the UUID of the first security group in the list, and they then succeeded and DTRT.

Ryan Beisner (1chb1n) wrote :

I was following along with the "Ensure it's working" steps here:
  https://jujucharms.com/openstack-base/50

```
$ nova floating-ip-create
usage: nova [--version] [--debug] [--os-cache] [--timings]
            [--os-region-name <region-name>] [--service-type <service-type>]
            [--service-name <service-name>]
            [--os-endpoint-type <endpoint-type>]
            [--os-compute-api-version <compute-api-ver>]
            [--endpoint-override <bypass-url>] [--insecure]
            [--os-cacert <ca-certificate>] [--os-cert <certificate>]
            [--os-key <key>] [--timeout <seconds>] [--os-auth-type <name>]
            [--os-auth-url OS_AUTH_URL] [--os-domain-id OS_DOMAIN_ID]
            [--os-domain-name OS_DOMAIN_NAME] [--os-project-id OS_PROJECT_ID]
            [--os-project-name OS_PROJECT_NAME]
            [--os-project-domain-id OS_PROJECT_DOMAIN_ID]
            [--os-project-domain-name OS_PROJECT_DOMAIN_NAME]
            [--os-trust-id OS_TRUST_ID]
            [--os-default-domain-id OS_DEFAULT_DOMAIN_ID]
            [--os-default-domain-name OS_DEFAULT_DOMAIN_NAME]
            [--os-user-id OS_USER_ID] [--os-username OS_USERNAME]
            [--os-user-domain-id OS_USER_DOMAIN_ID]
            [--os-user-domain-name OS_USER_DOMAIN_NAME]
            [--os-password OS_PASSWORD]
            <subcommand> ...
error: argument <subcommand>: invalid choice: u'floating-ip-create'
Try 'nova help ' for more information.
```

Should that instead be:
```
$ openstack floating ip create ext_net
$ openstack server add floating ip xenial-test <ip>
```

Changed in openstack-bundles:
assignee: nobody → David Ames (thedac)
importance: Undecided → Medium
James Page (james-page) on 2018-01-04
Changed in openstack-bundles:
status: New → Triaged
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers