In openstack-identity-cookbook server-apache.rb some options at the "keystone bootstrap" command are removed.
I can't see any reason for this. At my environment this command only work with the bootstrap-username, bootstrap-project-name, bootstrap-role-name and bootstrap-service-name options.
Before removing options the command was in recipe registration.rb
'execute 'bootstrap_keystone' do
command "keystone-manage bootstrap \\
--bootstrap-password #{admin_pass} \\
--bootstrap-username #{admin_user} \\
--bootstrap-project-name #{admin_project} \\
--bootstrap-role-name #{admin_role} \\
--bootstrap-service-name keystone \\
--bootstrap-region-id #{region} \\
--bootstrap-admin-url #{identity_admin_endpoint} \\
--bootstrap-public-url #{identity_public_endpoint} \\
--bootstrap-internal-url #{identity_internal_endpoint}"
end'
now it is at server-apache.rb
'execute 'keystone bootstrap' do
user 'root'
command "keystone-manage bootstrap --bootstrap-password \"#{admin_pass}\" --bootstrap-region-id \"#{region}\" --bootstrap-admin-url #{identity_admin_endpoint} --bootstrap-public-url #{identity_public_endpoint} --bootstrap-internal-url #{identity_internal_endpoint}"
end'
At the attributes there is default['openstack']['identity']['admin_user'] to define the user with is created at bootstrap. It takes variableness if the options are removed.
Thanks for reporting this! I've gone back through my notes and can find no good reason for removing the additional flags.
This execute block did need to go in server-apache, but didn't need such simplification. I'm currently running tests with the original invocation in the correct place.