Comment 0 for bug 1867305

Revision history for this message
Sean Shuping (dvnt) wrote :

In anticipation to switch to SSL on keystone it's necessary to set at least the os-public-hostname value on the keystone charm.
In doing so, an additional Region Option appears on the Openstack Dashboard with 2 Duplicate entries in the Drop down.

A closer look in /etc/openstack-dashboard/local_settings.py on the Dashboard lxd machine shows the offending entry.

# For multiple regions uncomment this configuration, and add (endpoint, title).
#AVAILABLE_REGIONS = [
# ('http://cluster1.example.com:5000/v2.0', 'cluster1'),
# ('http://cluster2.example.com:5000/v2.0', 'cluster2'),
#]
AVAILABLE_REGIONS = [
('http://192.168.124.13:5000/v2.0', 'RegionOne'),
('http://keystone.example.com:5000/v2.0', 'RegionOne'),
]
OPENSTACK_HOST = "keystone.example.com"
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "Member"
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
OPENSTACK_API_VERSIONS = { "identity": 3, }
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "c311f3b170474d7a8e3ccb095ef38807"
# Enables keystone web single-sign-on if set to True.
#WEBSSO_ENABLED = False

Steps to reproduce :

juju config os-public-hostname="keystone.example.com" os-admin-hostname="keystone.example.com" os-internal-hostname="keystone.example.com"

After the model settles, Dashboard Users are unable to login using Horizon.
Openstack operations via CLI are unaffected.

Charm Version : 310
Ubuntu 18:04
Openstack Release : Stein/Train