Glance

install guide: [keystone_authtoken] values for *_domain_name are inconsistent with other instructions

Series queens
Bug #1747181

Bug #1747181 reported by Egor Panfilov on 2018-02-03

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	Glance	Fix Released	Medium	Brian Rosmaita	Glance rocky-1 "17.0.0.0b1"
	Queens	Fix Committed	Medium	Brian Rosmaita	Glance queens-stable-1 "16.0.1"

Bug Description

This bug tracker is for errors with the documentation, use the following as a template and remove or add fields as you see fit. Convert [ ] into [x] to check boxes:

- [x] This doc is inaccurate in this way:

I'm newbie in OpenStack and trying to install minimal deployment.

When editing both glance .conf files (api.conf and registry.conf), guide advise to fill [keystone_authtoken] section with project_domain_name and user_domain_name equal "default" domain (first letter lowercase). In previous steps of guide (when configuring keystone) we created scripts and tokens for admin and demo users with domain name "Default" (first letter uppercase). As a result, when we try to create image (as described here - https://docs.openstack.org/glance/pike/install/verify.html) we get error

503 Service Unavailable: The server is currently unavailable. Please try again at a later time.

with messages in /var/log/glance/api.log like

CRITICAL keystonemiddleware.auth_token [-] Unable to validate token...

So, I was advised to do one of the following:
1) change values project_domain_name and user_domain_name on "Default", or
2) change name of project_domain_name and user_domain_name on *_domain_id

and everything works fine with first option.

glance version: 1:15.0.0-2.el7

-----------------------------------
Release: 15.0.1.dev2 on 'Tue Sep 19 08:50:14 2017, commit 06af2eb'
SHA: 06af2eb5abe0332f7035a7d7c2fbfd19fbc4dae7
Source: https://git.openstack.org/cgit/openstack/glance/tree/doc/source/install/install-rdo.rst
URL: https://docs.openstack.org/glance/pike/install/install-rdo.html

Tags:

Brian Rosmaita (brian-rosmaita) on 2018-03-19

tags:

added: documentation

Revision history for this message

Brian Rosmaita (brian-rosmaita) wrote on 2018-03-20:

I guess the advantage of using *_domain_id is that they'd be UUIDs and not case-sensitive (not sure about that, though -- I thought the domain_name was case insensitive).

summary:

- Install and configure (Red Hat) in glance
+ install guide: [keystone_authtoken] values for *_domain_name are
+ inconsistent with other instructions

Revision history for this message

Brian Rosmaita (brian-rosmaita) wrote on 2018-04-06:

Domain names in keystone are *supposed to be* case sensitive (though for a while they weren't *actually* case sensitive in v3). See this keystone bug report for details and date of the fix:
https://bugs.launchpad.net/keystone/+bug/1229093

In any case, the key issue is that Egor is entirely correct, our install docs need to be consistent with the keystone docs on this.

Changed in glance:
status:	New → Triaged

Revision history for this message

Brian Rosmaita (brian-rosmaita) wrote on 2018-04-06:

May want to backport this to stable/queens and stable/pike

Changed in glance:
importance:	Undecided → Medium

Revision history for this message

Brian Rosmaita (brian-rosmaita) wrote on 2018-04-07:

Change proposed to master: https://review.openstack.org/#/c/559505/

Changed in glance:
assignee:	nobody → Brian Rosmaita (brian-rosmaita)
status:	Triaged → In Progress
milestone:	none → rocky-1

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2018-04-08: Fix merged to glance (master)

Reviewed: https://review.openstack.org/559505
Committed: https://git.openstack.org/cgit/openstack/glance/commit/?id=57310ad88f64214869ab1962184e74583e0845b6
Submitter: Zuul
Branch: master

commit 57310ad88f64214869ab1962184e74583e0845b6
Author: Brian Rosmaita <email address hidden>
Date: Sat Apr 7 18:02:25 2018 -0400

Use 'Default' as sample install domain name

    The Glance install guide suggests using 'default' as the
    user_domain_name and project_domain_name, whereas the Keystone
    install guide, which people would be consulting earlier, instructs
    the installer to use 'Default'. Since the name is case-sensitive,
    this is causing problems for first-time installers of OpenStack.

Change-Id: Iade47bcd69b7a2a99b990885a0270c962de282a1
Closes-bug: #1747181

Changed in glance:
status:	In Progress → Fix Released

Revision history for this message

Brian Rosmaita (brian-rosmaita) wrote on 2018-04-09:

Cherry-pick to stable/queens: https://review.openstack.org/#/c/559752/

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2018-04-09: Fix merged to glance (stable/queens)

Reviewed: https://review.openstack.org/559752
Committed: https://git.openstack.org/cgit/openstack/glance/commit/?id=5326f644439f5b7c81a8da12189af52dec6f33b1
Submitter: Zuul
Branch: stable/queens

commit 5326f644439f5b7c81a8da12189af52dec6f33b1
Author: Brian Rosmaita <email address hidden>
Date: Sat Apr 7 18:02:25 2018 -0400

Use 'Default' as sample install domain name

    Change-Id: Iade47bcd69b7a2a99b990885a0270c962de282a1
    Closes-bug: #1747181
    (cherry picked from commit 57310ad88f64214869ab1962184e74583e0845b6)