Using openstackclient for keystone config doesn't work on Ubuntu 14.04

[Arnoud de Jonge]

The keystone module is now using the openstackclient to configure keystone. This does break things on Ubuntu 14.04. For instance to retreive a token it calls 'openstack token issue'. This command is unavailable on the version that is in Ubuntu 14.04. The latest openstackclient version for Ubuntu 14.04 in cloudarchive is 0.3.0, which does not know the 'token issue' command.

The error I get is:

Error: /Stage[main]/Keystone::Roles::Admin/Keystone_user[admin]: Could not evaluate: Execution of '/usr/bin/openstack token issue --os-username admin --os-password oops --os-tenant-name openstack --os-auth-url https://example.com:5000/v2.0' returned 2: ERROR: openstack Unknown command ['token', 'issue']

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/145986

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/145986
Committed: https://git.openstack.org/cgit/stackforge/puppet-keystone/commit/?id=079a99692eacbd4fe6e28a48ff2d5b73c4e9146d
Submitter: Jenkins
Branch: master

commit 079a99692eacbd4fe6e28a48ff2d5b73c4e9146d
Author: Colleen Murphy <email address hidden>
Date: Thu Jan 8 15:57:27 2015 -0800

    Test keystone_user password with Net::HTTP

    Openstackclient 0.3.0 does not have the `token issue` command. If the
    user is not an admin then there are no other keystone-related actions
    the user can perform with the openstack command in order to verify
    their password. This patch changes the password verification step to
    make an HTTP request directly against the API. Since there is no
    session state that needs to be managed, and because this is a special
    type of request, we do not need to go through the
    Puppet::Provider::Openstack request methods in order to accomplish this
    verification.

    Closes-bug: 1408754

    Change-Id: I45f364efb585e09412de4398cc3f65615ebc5bb7

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/juno
Review: https://review.openstack.org/146503

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/146503
Committed: https://git.openstack.org/cgit/stackforge/puppet-keystone/commit/?id=b65ddba19f5d89fe13bd0264e988ef702ba2b5c9
Submitter: Jenkins
Branch: stable/juno

commit b65ddba19f5d89fe13bd0264e988ef702ba2b5c9
Author: Colleen Murphy <email address hidden>
Date: Thu Jan 8 15:57:27 2015 -0800

    Test keystone_user password with Net::HTTP

    Openstackclient 0.3.0 does not have the `token issue` command. If the
    user is not an admin then there are no other keystone-related actions
    the user can perform with the openstack command in order to verify
    their password. This patch changes the password verification step to
    make an HTTP request directly against the API. Since there is no
    session state that needs to be managed, and because this is a special
    type of request, we do not need to go through the
    Puppet::Provider::Openstack request methods in order to accomplish this
    verification.

    Closes-bug: 1408754

    Change-Id: I45f364efb585e09412de4398cc3f65615ebc5bb7
    (cherry picked from commit 079a99692eacbd4fe6e28a48ff2d5b73c4e9146d)