In anticipation to switch to SSL on keystone it's necessary to set at least the os-public-hostname value on the keystone charm.
In doing so, an additional Region Option appears on the Openstack Dashboard with 2 Duplicate entries in the Drop down.
A closer look in /etc/openstack-dashboard/local_settings.py on the Dashboard lxd machine shows the offending entry.
# For multiple regions uncomment this configuration, and add (endpoint, title).
#AVAILABLE_REGIONS = [
# ('http://cluster1.example.com:5000/v2.0', 'cluster1'),
# ('http://cluster2.example.com:5000/v2.0', 'cluster2'),
#]
AVAILABLE_REGIONS = [
('http://192.168.124.13:5000/v2.0', 'RegionOne'),
('http://keystone.example.com:5000/v2.0', 'RegionOne'),
]
OPENSTACK_HOST = "keystone.example.com"
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "Member"
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
OPENSTACK_API_VERSIONS = { "identity": 3, }
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "c311f3b170474d7a8e3ccb095ef38807"
# Enables keystone web single-sign-on if set to True.
#WEBSSO_ENABLED = False
In anticipation to switch to SSL on keystone it's necessary to set at least the os-public-hostname value on the keystone charm.
In doing so, an additional Region Option appears on the Openstack Dashboard with 2 Duplicate entries in the Drop down.
A closer look in /etc/openstack- dashboard/ local_settings. py on the Dashboard lxd machine shows the offending entry.
# For multiple regions uncomment this configuration, and add (endpoint, title). cluster1. example. com:5000/ v2.0', 'cluster1'), cluster2. example. com:5000/ v2.0', 'cluster2'), 192.168. 124.13: 5000/v2. 0', 'RegionOne'), keystone. example. com:5000/ v2.0', 'RegionOne'), example. com" KEYSTONE_ DEFAULT_ ROLE = "Member" KEYSTONE_ URL = "http:// %s:5000/ v3" % OPENSTACK_HOST API_VERSIONS = { "identity": 3, } KEYSTONE_ MULTIDOMAIN_ SUPPORT = True KEYSTONE_ DEFAULT_ DOMAIN = "c311f3b170474d 7a8e3ccb095ef38 807"
#AVAILABLE_REGIONS = [
# ('http://
# ('http://
#]
AVAILABLE_REGIONS = [
('http://
('http://
]
OPENSTACK_HOST = "keystone.
OPENSTACK_
OPENSTACK_
OPENSTACK_
OPENSTACK_
OPENSTACK_
# Enables keystone web single-sign-on if set to True.
#WEBSSO_ENABLED = False
Steps to reproduce :
juju config os-public- hostname= "keystone. example. com" os-admin- hostname= "keystone. example. com" os-internal- hostname= "keystone. example. com"
After the model settles, Dashboard Users are unable to login using Horizon.
Openstack operations via CLI are unaffected.
Charm Version : 310
Ubuntu 18:04
Openstack Release : Stein/Train