yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1361424] [NEW] When using Keystone API v3, catalog won't be returned

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: David Hill <1361424@xxxxxxxxxxxxxxxxxx>
Date: Mon, 25 Aug 2014 23:10:05 -0000
Reply-to: Bug 1361424 <1361424@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
Public bug reported:

Warning:  I don't know if that should be working or not, but heat
2014.1.2 doesn't seem to get a catalog where as heat 2013.2.3 seems to
be getting along pretty well.  I downgraded the packages, read
everything that had to be read, patched the code and the verdict is
always the same.  It appears that keystone v3 doesn't return the catalog
and heat depends on it (well it's complaining about it so I guess it
needs it)


Hi guys,

                It appears that in Icehouse (well in my setup and probably the setup of some other guys too) the catalog won’t be returned when the keystone v3 api is being used….
What am I missing?

[root@labctrl ~]# keystone catalog
'NoneType' object has no attribute 'has_service_catalog'


Catalog:
catalog.RegionOne.identity.publicURL = http://IP:$(public_port)s/v3
catalog.RegionOne.identity.adminURL = http://IP:$(admin_port)s/v3
catalog.RegionOne.identity.internalURL = http://IP:$(public_port)s/v3
catalog.RegionOne.identity.name = Identity Service


Keystone-paste.ini
[pipeline:api_v3]
pipeline = sizelimit url_normalize build_auth_context token_auth admin_token_auth xml_body_v3 json_body ec2_extension_v3 s3_extension simple_cert_extension service_v3

Thanks,

Dave


From: David Hill 
Sent: 25-Aug-14 4:11 PM
To: openstack
Subject: Re: [Openstack] Heat: 2014.1.2-0 vs Keystone

Hi guys,

This is what heat-engine gets back :
RESP BODY: {"token": {"methods": ["token"], "roles": [{"id": "59bd5c58fe344eeab3bc3443b82155a0", "name": "Member"}, {"id": "9fe2ff9ee4384b1894a90878d3e92bab", "name": "_member_"}, {"id": "c119300b61bb4bfeafdf9ccc8ea3efae", "name": "Admin"}, {"id": "e80ca12406714be799fc9066d5978dbb", "name": "Owner"}], "expires_at": "2014-08-26T20:07:11.000000Z", "project": {"domain": {"id": "default", "name": "Default"}, "id": "85bcc32e66b54c8bb52f28cb58319758", "name": "monitoring"}, "catalog": {}, "extras": {}, "user": {"domain": {"id": "default", "name": "Default"}, "id": "ccba454033204a7ba96b67ddaaacf00a", "name": "monitoring"}, "issued_at": "2014-08-25T20:07:12.589937Z"}}
_send_request /usr/lib/python2.6/site-packages/keystoneclient/session.py:297

Notice the catalog”: {} ?  I’m not sure but… shouldn’t contain the
actual catalog?

Dave

From: David Hill 
Sent: 25-Aug-14 4:41 AM
To: 'openstack'
Subject: Heat: 2014.1.2-0 vs Keystone

Hi guys,

      I’m trying to get Heat to work … but everytime I try to create a stack, the engine will fail at getting the catalog.
Since everything is working fine (ceilometer,nova,cinder,glance), am I forgetting something?

StackValidationFailed_Remote: Property error : WikiDatabase: ImageId The
service catalog is empty.


Here is the catalog:
catalog.RegionOne.identity.publicURL = http://IP:$(public_port)s/v2.0
catalog.RegionOne.identity.adminURL = http://IP:$(admin_port)s/v2.0
catalog.RegionOne.identity.internalURL = http://IP:$(public_port)s/v2.0
catalog.RegionOne.identity.name = Identity Service
catalog.RegionOne.compute.publicURL = http://IP:8774/v2/$(tenant_id)s
catalog.RegionOne.compute.adminURL = http://IP:8774/v2/$(tenant_id)s
catalog.RegionOne.compute.internalURL = http://IP:8774/v2/$(tenant_id)s
catalog.RegionOne.compute.name = Compute Service
catalog.RegionOne.volume.publicURL = http://IP:8776/v1/$(tenant_id)s
catalog.RegionOne.volume.adminURL = http://IP:8776/v1/$(tenant_id)s
catalog.RegionOne.volume.internalURL = http://IP:8776/v1/$(tenant_id)s
catalog.RegionOne.volume.name = Volume Service
catalog.RegionOne.ec2.publicURL = http://IP:8773/services/Cloud
catalog.RegionOne.ec2.adminURL = http://IP:8773/services/Admin
catalog.RegionOne.ec2.internalURL = http://IP:8773/services/Cloud
catalog.RegionOne.ec2.name = EC2 Service
catalog.RegionOne.image.publicURL = http://IP:9292/
catalog.RegionOne.image.adminURL = http://IP:9292/
catalog.RegionOne.image.internalURL = http://IP:9292/
catalog.RegionOne.image.name = Image Service
catalog.RegionOne.object_store.publicURL = http://IP:8080/v1/AUTH_$(tenant_id)s
catalog.RegionOne.object_store.adminURL = http://IP:8080/
catalog.RegionOne.object_store.internalURL = http://IP:8080/v1/AUTH_$(tenant_id)s
catalog.RegionOne.object_store.name = Swift Service
catalog.RegionOne.cloudformation.publicURL = http://IP:8000/v1
catalog.RegionOne.cloudformation.adminURL = http://IP:8000/v1
catalog.RegionOne.cloudformation.internalURL = http://IP:8000/v1
catalog.RegionOne.cloudformation.name = Heat CloudFormation API
catalog.RegionOne.heat.publicURL = http://IP:8004/v1/$(tenant_id)s
catalog.RegionOne.heat.adminURL = http://IP:8004/v1/$(tenant_id)s
catalog.RegionOne.heat.internalURL = http://IP:8004/v1/$(tenant_id)s
catalog.RegionOne.heat.name = Heat API
catalog.RegionOne.orchestration.publicURL = http://IP:8004/v1/$(tenant_id)s
catalog.RegionOne.orchestration.adminURL = http://IP:8004/v1/$(tenant_id)s
catalog.RegionOne.orchestration.internalURL = http://IP:8004/v1/$(tenant_id)s
catalog.RegionOne.orchestration.name = Heat API
catalog.RegionOne.ceilometer.publicURL = http://IP:8777/
catalog.RegionOne.ceilometer.adminURL = http://IP:8777/
catalog.RegionOne.ceilometer.internalURL = http://IP:8777/
catalog.RegionOne.ceilometer.name = Ceilometer Metering
catalog.RegionOne.metering.publicURL = http://IP:8777/
catalog.RegionOne.metering.adminURL = http://IP:8777/
catalog.RegionOne.metering.internalURL = http://IP:8777/
catalog.RegionOne.metering.name = Ceilometer Metering


/etc/heat/heat.conf


[DEFAULT]
verbose = True
debug = True
use_stderr = False
log_file = /var/log/heat/engine.log
use_syslog = False
heat_stack_user_role = heat_stack_user
instance_connection_is_secure = 0
instance_connection_https_validate_certificates = 1
bind_host = 0.0.0.0
bind_port = 8001
heat_metadata_server_url = http://IP:8000
heat_waitcondition_server_url = http://IP:8000/v1/waitcondition
heat_watch_server_url = http://IP:8003
sql_connection = mysql://USER:PASSWORD@IP/heat
db_backend=heat.db.sqlalchemy.api
rpc_backend=heat.openstack.common.rpc.impl_kombu
auth_encryption_key=AUTH_KEY
rabbit_host=localhost
rabbit_port=5672

[keystone_authtoken]
admin_tenant_name = TENANT
admin_user = USER
admin_password = PASSWORD
auth_host = IP
auth_port = 35357
auth_protocol = http
auth_uri = http://IP:5000/v2.0
admin_token = TOKEN

[ec2authtoken]
auth_uri http://IP:5000/v2.0

[paste_deploy]
api_paste_config=api-paste.ini
flavor = keystone


api-paste.ini

[pipeline:heat-api]
pipeline = versionnegotiation authurl authtoken context apiv1app
[pipeline:heat-api-keystone]
pipeline = versionnegotiation authurl authtoken context apiv1app
[pipeline:heat-api-cfn]
pipeline = cfnversionnegotiation ec2authtoken authtoken context apicfnv1app
[pipeline:heat-api-cfn-standalone]
pipeline = cfnversionnegotiation ec2authtoken context apicfnv1app
[app:apicwapp]
paste.app_factory = heat.common.wsgi:app_factory
heat.app_factory = heat.api.cloudwatch:API
[app:apicfnv1app]
paste.app_factory = heat.common.wsgi:app_factory
heat.app_factory = heat.api.cfn.v1:API
[filter:cfnversionnegotiation]
paste.filter_factory = heat.common.wsgi:filter_factory
heat.filter_factory = heat.api.cfn:version_negotiation_filter
[filter:ec2authtoken]
paste.filter_factory = heat.api.aws.ec2token:EC2Token_filter_factory
[pipeline:heat-api-cloudwatch]
pipeline = versionnegotiation ec2authtoken authtoken context apicwapp
[pipeline:heat-api-cloudwatch-standalone]
pipeline = versionnegotiation ec2authtoken context apicwapp
[pipeline:heat-api-cfn-keystone]
pipeline = versionnegotiation authurl authtoken context apiv1app
[pipeline:heat-api-cloudwatch-keystone]
pipeline = versionnegotiation authurl authtoken context apiv1app
[pipeline:heat-api-custombackend]
pipeline = versionnegotiation context custombackendauth apiv1app
[pipeline:heat-api-caching]
pipeline = versionnegotiation authurl authtoken context cache apiv1app
[pipeline:heat-api-keystone+caching]
pipeline = versionnegotiation authurl authtoken context cache apiv1app
[pipeline:heat-api-cachemanagement]
pipeline = versionnegotiation authurl authtoken context cache cachemanage apiv1app
[pipeline:heat-api-keystone+cachemanagement]
pipeline = versionnegotiation auth-context cache cachemanage apiv1app
[app:apiv1app]
paste.app_factory = heat.common.wsgi:app_factory
heat.app_factory = heat.api.openstack.v1:API
[filter:versionnegotiation]
paste.filter_factory = heat.common.wsgi:filter_factory
heat.filter_factory = heat.api.openstack:version_negotiation_filter
[filter:cache]
paste.filter_factory = heat.common.wsgi:filter_factory
heat.filter_factory = heat.api.middleware.cache:CacheFilter
[filter:cachemanage]
paste.filter_factory = heat.common.wsgi:filter_factory
heat.filter_factory = heat.api.middleware.cache_manage:CacheManageFilter
[filter:context]
paste.filter_factory = heat.common.context:ContextMiddleware_filter_factory
[filter:authurl]
paste.filter_factory = heat.common.auth_url:filter_factory
[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
[filter:auth-context]
paste.filter_factory = heat.common.wsgi:filter_factory
heat.filter_factory = keystone.middleware.heat_auth_token:KeystoneContextMiddleware
[filter:custombackendauth]
paste.filter_factory = heat.common.custom_backend_auth:filter_factory

** Affects: keystone
     Importance: Undecided
         Status: New


** Tags: api bug catalog hava icehouse v3

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1361424

Title:
  When using Keystone API v3, catalog won't be returned

Status in OpenStack Identity (Keystone):
  New

Bug description:
  Warning:  I don't know if that should be working or not, but heat
  2014.1.2 doesn't seem to get a catalog where as heat 2013.2.3 seems to
  be getting along pretty well.  I downgraded the packages, read
  everything that had to be read, patched the code and the verdict is
  always the same.  It appears that keystone v3 doesn't return the
  catalog and heat depends on it (well it's complaining about it so I
  guess it needs it)

  
  Hi guys,

                  It appears that in Icehouse (well in my setup and probably the setup of some other guys too) the catalog won’t be returned when the keystone v3 api is being used….
  What am I missing?

  [root@labctrl ~]# keystone catalog
  'NoneType' object has no attribute 'has_service_catalog'

  
  Catalog:
  catalog.RegionOne.identity.publicURL = http://IP:$(public_port)s/v3
  catalog.RegionOne.identity.adminURL = http://IP:$(admin_port)s/v3
  catalog.RegionOne.identity.internalURL = http://IP:$(public_port)s/v3
  catalog.RegionOne.identity.name = Identity Service

  
  Keystone-paste.ini
  [pipeline:api_v3]
  pipeline = sizelimit url_normalize build_auth_context token_auth admin_token_auth xml_body_v3 json_body ec2_extension_v3 s3_extension simple_cert_extension service_v3

  Thanks,

  Dave

  
  From: David Hill 
  Sent: 25-Aug-14 4:11 PM
  To: openstack
  Subject: Re: [Openstack] Heat: 2014.1.2-0 vs Keystone

  Hi guys,

  This is what heat-engine gets back :
  RESP BODY: {"token": {"methods": ["token"], "roles": [{"id": "59bd5c58fe344eeab3bc3443b82155a0", "name": "Member"}, {"id": "9fe2ff9ee4384b1894a90878d3e92bab", "name": "_member_"}, {"id": "c119300b61bb4bfeafdf9ccc8ea3efae", "name": "Admin"}, {"id": "e80ca12406714be799fc9066d5978dbb", "name": "Owner"}], "expires_at": "2014-08-26T20:07:11.000000Z", "project": {"domain": {"id": "default", "name": "Default"}, "id": "85bcc32e66b54c8bb52f28cb58319758", "name": "monitoring"}, "catalog": {}, "extras": {}, "user": {"domain": {"id": "default", "name": "Default"}, "id": "ccba454033204a7ba96b67ddaaacf00a", "name": "monitoring"}, "issued_at": "2014-08-25T20:07:12.589937Z"}}
  _send_request /usr/lib/python2.6/site-packages/keystoneclient/session.py:297

  Notice the catalog”: {} ?  I’m not sure but… shouldn’t contain the
  actual catalog?

  Dave

  From: David Hill 
  Sent: 25-Aug-14 4:41 AM
  To: 'openstack'
  Subject: Heat: 2014.1.2-0 vs Keystone

  Hi guys,

        I’m trying to get Heat to work … but everytime I try to create a stack, the engine will fail at getting the catalog.
  Since everything is working fine (ceilometer,nova,cinder,glance), am I forgetting something?

  StackValidationFailed_Remote: Property error : WikiDatabase: ImageId
  The service catalog is empty.

  
  Here is the catalog:
  catalog.RegionOne.identity.publicURL = http://IP:$(public_port)s/v2.0
  catalog.RegionOne.identity.adminURL = http://IP:$(admin_port)s/v2.0
  catalog.RegionOne.identity.internalURL = http://IP:$(public_port)s/v2.0
  catalog.RegionOne.identity.name = Identity Service
  catalog.RegionOne.compute.publicURL = http://IP:8774/v2/$(tenant_id)s
  catalog.RegionOne.compute.adminURL = http://IP:8774/v2/$(tenant_id)s
  catalog.RegionOne.compute.internalURL = http://IP:8774/v2/$(tenant_id)s
  catalog.RegionOne.compute.name = Compute Service
  catalog.RegionOne.volume.publicURL = http://IP:8776/v1/$(tenant_id)s
  catalog.RegionOne.volume.adminURL = http://IP:8776/v1/$(tenant_id)s
  catalog.RegionOne.volume.internalURL = http://IP:8776/v1/$(tenant_id)s
  catalog.RegionOne.volume.name = Volume Service
  catalog.RegionOne.ec2.publicURL = http://IP:8773/services/Cloud
  catalog.RegionOne.ec2.adminURL = http://IP:8773/services/Admin
  catalog.RegionOne.ec2.internalURL = http://IP:8773/services/Cloud
  catalog.RegionOne.ec2.name = EC2 Service
  catalog.RegionOne.image.publicURL = http://IP:9292/
  catalog.RegionOne.image.adminURL = http://IP:9292/
  catalog.RegionOne.image.internalURL = http://IP:9292/
  catalog.RegionOne.image.name = Image Service
  catalog.RegionOne.object_store.publicURL = http://IP:8080/v1/AUTH_$(tenant_id)s
  catalog.RegionOne.object_store.adminURL = http://IP:8080/
  catalog.RegionOne.object_store.internalURL = http://IP:8080/v1/AUTH_$(tenant_id)s
  catalog.RegionOne.object_store.name = Swift Service
  catalog.RegionOne.cloudformation.publicURL = http://IP:8000/v1
  catalog.RegionOne.cloudformation.adminURL = http://IP:8000/v1
  catalog.RegionOne.cloudformation.internalURL = http://IP:8000/v1
  catalog.RegionOne.cloudformation.name = Heat CloudFormation API
  catalog.RegionOne.heat.publicURL = http://IP:8004/v1/$(tenant_id)s
  catalog.RegionOne.heat.adminURL = http://IP:8004/v1/$(tenant_id)s
  catalog.RegionOne.heat.internalURL = http://IP:8004/v1/$(tenant_id)s
  catalog.RegionOne.heat.name = Heat API
  catalog.RegionOne.orchestration.publicURL = http://IP:8004/v1/$(tenant_id)s
  catalog.RegionOne.orchestration.adminURL = http://IP:8004/v1/$(tenant_id)s
  catalog.RegionOne.orchestration.internalURL = http://IP:8004/v1/$(tenant_id)s
  catalog.RegionOne.orchestration.name = Heat API
  catalog.RegionOne.ceilometer.publicURL = http://IP:8777/
  catalog.RegionOne.ceilometer.adminURL = http://IP:8777/
  catalog.RegionOne.ceilometer.internalURL = http://IP:8777/
  catalog.RegionOne.ceilometer.name = Ceilometer Metering
  catalog.RegionOne.metering.publicURL = http://IP:8777/
  catalog.RegionOne.metering.adminURL = http://IP:8777/
  catalog.RegionOne.metering.internalURL = http://IP:8777/
  catalog.RegionOne.metering.name = Ceilometer Metering


  /etc/heat/heat.conf

  
  [DEFAULT]
  verbose = True
  debug = True
  use_stderr = False
  log_file = /var/log/heat/engine.log
  use_syslog = False
  heat_stack_user_role = heat_stack_user
  instance_connection_is_secure = 0
  instance_connection_https_validate_certificates = 1
  bind_host = 0.0.0.0
  bind_port = 8001
  heat_metadata_server_url = http://IP:8000
  heat_waitcondition_server_url = http://IP:8000/v1/waitcondition
  heat_watch_server_url = http://IP:8003
  sql_connection = mysql://USER:PASSWORD@IP/heat
  db_backend=heat.db.sqlalchemy.api
  rpc_backend=heat.openstack.common.rpc.impl_kombu
  auth_encryption_key=AUTH_KEY
  rabbit_host=localhost
  rabbit_port=5672

  [keystone_authtoken]
  admin_tenant_name = TENANT
  admin_user = USER
  admin_password = PASSWORD
  auth_host = IP
  auth_port = 35357
  auth_protocol = http
  auth_uri = http://IP:5000/v2.0
  admin_token = TOKEN

  [ec2authtoken]
  auth_uri http://IP:5000/v2.0

  [paste_deploy]
  api_paste_config=api-paste.ini
  flavor = keystone


  api-paste.ini

  [pipeline:heat-api]
  pipeline = versionnegotiation authurl authtoken context apiv1app
  [pipeline:heat-api-keystone]
  pipeline = versionnegotiation authurl authtoken context apiv1app
  [pipeline:heat-api-cfn]
  pipeline = cfnversionnegotiation ec2authtoken authtoken context apicfnv1app
  [pipeline:heat-api-cfn-standalone]
  pipeline = cfnversionnegotiation ec2authtoken context apicfnv1app
  [app:apicwapp]
  paste.app_factory = heat.common.wsgi:app_factory
  heat.app_factory = heat.api.cloudwatch:API
  [app:apicfnv1app]
  paste.app_factory = heat.common.wsgi:app_factory
  heat.app_factory = heat.api.cfn.v1:API
  [filter:cfnversionnegotiation]
  paste.filter_factory = heat.common.wsgi:filter_factory
  heat.filter_factory = heat.api.cfn:version_negotiation_filter
  [filter:ec2authtoken]
  paste.filter_factory = heat.api.aws.ec2token:EC2Token_filter_factory
  [pipeline:heat-api-cloudwatch]
  pipeline = versionnegotiation ec2authtoken authtoken context apicwapp
  [pipeline:heat-api-cloudwatch-standalone]
  pipeline = versionnegotiation ec2authtoken context apicwapp
  [pipeline:heat-api-cfn-keystone]
  pipeline = versionnegotiation authurl authtoken context apiv1app
  [pipeline:heat-api-cloudwatch-keystone]
  pipeline = versionnegotiation authurl authtoken context apiv1app
  [pipeline:heat-api-custombackend]
  pipeline = versionnegotiation context custombackendauth apiv1app
  [pipeline:heat-api-caching]
  pipeline = versionnegotiation authurl authtoken context cache apiv1app
  [pipeline:heat-api-keystone+caching]
  pipeline = versionnegotiation authurl authtoken context cache apiv1app
  [pipeline:heat-api-cachemanagement]
  pipeline = versionnegotiation authurl authtoken context cache cachemanage apiv1app
  [pipeline:heat-api-keystone+cachemanagement]
  pipeline = versionnegotiation auth-context cache cachemanage apiv1app
  [app:apiv1app]
  paste.app_factory = heat.common.wsgi:app_factory
  heat.app_factory = heat.api.openstack.v1:API
  [filter:versionnegotiation]
  paste.filter_factory = heat.common.wsgi:filter_factory
  heat.filter_factory = heat.api.openstack:version_negotiation_filter
  [filter:cache]
  paste.filter_factory = heat.common.wsgi:filter_factory
  heat.filter_factory = heat.api.middleware.cache:CacheFilter
  [filter:cachemanage]
  paste.filter_factory = heat.common.wsgi:filter_factory
  heat.filter_factory = heat.api.middleware.cache_manage:CacheManageFilter
  [filter:context]
  paste.filter_factory = heat.common.context:ContextMiddleware_filter_factory
  [filter:authurl]
  paste.filter_factory = heat.common.auth_url:filter_factory
  [filter:authtoken]
  paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
  [filter:auth-context]
  paste.filter_factory = heat.common.wsgi:filter_factory
  heat.filter_factory = keystone.middleware.heat_auth_token:KeystoneContextMiddleware
  [filter:custombackendauth]
  paste.filter_factory = heat.common.custom_backend_auth:filter_factory

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1361424/+subscriptions
Follow ups

[Bug 1361424] [NEW] When using Keystone API v3, catalog won't be returned
From: David Hill, 2014-08-25
References

[Bug 1361424] [NEW] When using Keystone API v3, catalog won't be returned
From: David Hill, 2014-08-25