"openstack token issue" from keystone_user fails with missing required parameter

[David Moreau Simard]

On Mitaka current for RDO (master, up-to-date with upstream) we are seeing failures on heat keystone_user configuration:

http://logs.openstack.org/24/269124/1/check/gate-puppet-openstack-integration-scenario002-tempest-dsvm-centos7/4942c05/console.html#_2016-01-18_15_48_43_081

2016-01-18 15:48:43.081 | Error: /Stage[main]/Heat::Keystone::Domain/Keystone_user[heat_admin::heat]: Could not evaluate: Execution of '/usr/bin/openstack token issue --format value' returned 1: Missing parameter(s):
2016-01-18 15:48:43.081 | Set a scope, such as a project or domain, set a project scope with --os-project-name, OS_PROJECT_NAME or auth.project_name, set a domain scope with --os-domain-name, OS_DOMAIN_NAME or auth.domain_name
2016-01-18 15:48:43.081 | Notice: /Stage[main]/Heat::Keystone::Domain/Keystone_user_role[heat_admin::heat@::heat]: Dependency Keystone_user[heat_admin::heat] has failures: true
2016-01-18 15:48:43.081 | Warning: /Stage[main]/Heat::Keystone::Domain/Keystone_user_role[heat_admin::heat@::heat]: Skipping because of failed dependencies

This seems to have begun when this commit merged in os-client-config: https://github.com/openstack/os-client-config/commit/a8532f6c8d221628b697ddb0d134e2a000ef61d6

[David Moreau Simard (dmsimard)]

openstack project list --user <heat_admin> exits with an index out of range error: https://bugs.launchpad.net/python-openstackclient/+bug/1535449

[David Moreau Simard (dmsimard)]

It looks like the heat_admin user did not have a proper role on the services tenant ?

Raw format for better readability: http://paste.openstack.org/raw/484208/

[root@n27 ~]# openstack role assignment list
+----------------------------------+----------------------------------+-------+----------------------------------+----------------------------------+-----------+
| Role | User | Group | Project | Domain | Inherited |
+----------------------------------+----------------------------------+-------+----------------------------------+----------------------------------+-----------+
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | 0f5fb3b47da14e19b8a39dad20dff35d | | a6542148bace42c1bb442cda9dada65a | | False |
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | 145d78112da945df82ab6eef473d33bf | | a6542148bace42c1bb442cda9dada65a | | False |
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | 14a9ae9b039749dd83d7091bdfd80795 | | a6542148bace42c1bb442cda9dada65a | | False |
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | 464f3b67e6d54491ac296a6ceff6db31 | | a6542148bace42c1bb442cda9dada65a | | False |
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | 5df280cbec3f4852b94a054bf2a9ace8 | | a6542148bace42c1bb442cda9dada65a | | False |
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | 670bb7d8c2614f009993e817591cbdef | | a6542148bace42c1bb442cda9dada65a | | False |
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | cf75ce9ce1ff4b3abfea45677be5c971 | | a6542148bace42c1bb442cda9dada65a | | False |
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | f91a4e9af4004763aeee740bc2506c1e | | a779793672254183bba23dabdd6f9bcd | | False |
| 8cb02ff4fcc1486fa758caba1b1ee9b8 | 3d3d5aee81654d29b43caa330ebf2378 | | | 7310aa5ea8424fa08be53ca227186fb4 | False |
+----------------------------------+----------------------------------+-------+----------------------------------+----------------------------------+-----------+

[root@n27 ~]# openstack role show 8cb02ff4fcc1486fa758caba1b1ee9b8
+-------+----------------------------------+
| Field | Value |
+-------+----------------------------------+
| id | 8cb02ff4fcc1486fa758caba1b1ee9b8 |
| name | admin |
+-------+----------------------------------+

[root@n27 ~]# openstack project show a6542148bace42c1bb442cda9dada65a
+-------------+-----------------------------------+
| Field | Value |
+-------------+-----------------------------------+
| description | Tenant for the openstack services |
| domain_id | default |
| enabled | True |
| id | a6542148bace42c1bb442cda9dada65a |
| is_domain | False |
| name | services |
| parent_i...

[Javier Peña (jpena-c)]

This doesn't look like a Puppet bug to me. I've done some research and opened a bug in os-client-config -> https://bugs.launchpad.net/python-openstackclient/+bug/1535676

[OpenStack Infra (hudson-openstack)]

Change abandoned by David Moreau Simard (<email address hidden>) on branch: master
Review: https://review.openstack.org/269361
Reason: This wasn't the problem. See: https://bugs.launchpad.net/os-client-config/+bug/1535676