linux/meta-cloud-services.git/meta-openstack/recipes-devtools/python/python-keystone, branch morty

init: no need to close (non-existing) ps file descriptors

2015-11-16T20:11:44+00:00

Attempting to get the status of various daemons which are part of the compute image results in an error: ps: write error: Bad file descriptor Switch to using the more standard io redirection techniques to avoid this error. Signed-off-by: Mark Asselstine Signed-off-by: Bruce Ashfield

keystone: the 'sql' section is deprecated

2015-08-14T03:41:54+00:00

Attempting to use commands such as 'glance image-list' or 'keystone tenant-list' was resulting in various errors including 'error 500'. Examining the logs it was found that keystone was throwing the following warning: WARNING oslo_config.cfg [-] Option "connection" from group "sql" is deprecated. Use option "connection" from group "database". Examining the database I found that the keystone database existed but was empty. This indicates that some of the install scripts were failing, possibly due to issues connecting to the database due to a bad configuration. So taking the WARNING to heed I swapped the 'sql' section header for 'database' and now the database is properly created and keystone commands can be successfully executed. Signed-off-by: Mark Asselstine Signed-off-by: Bruce Ashfield

core: update to juno 2014.2 + dependencies

2014-11-17T22:59:10+00:00

syncing the core components to the latest juno hashes. We also introduce new packages and update others to meet the juno requirements. Signed-off-by: Bruce Ashfield

keystone: update for Juno rc1

2014-10-21T14:14:48+00:00

We have three changes in a single commit: - A runtime substition fix controller IP values - When the substitions were moved for chef integration, the chef disabled path wasn't tested. This meant that %CONTROLLER_IP% remained in the final config files, and broke keystone startup. - The addition of oathlib to keystone depedencies - oauthlib is a juno dependency - A temporary patch to the apache httpd front end modules - At times keystone would fail to load via apache due to the inability to load localcontext from oslo. To work around these sporadic failures, an explicit import was added to the http front end module. This will be removed in the future. Signed-off-by: Bruce Ashfield

python-keystone: Add apache vhost server.

2014-09-22T15:46:42+00:00

This patch set configures an apache vhost server on port 8081 which will serve as the main authentication method and documents the change in README.keystone. Signed-off-by: Liam R. Howlett

python-keystone: Remove openrc file and bb references.

2014-07-31T20:06:20+00:00

This patch removes the openrc file from the keystone package and references to openrc in the python-kystone_git.bb file. Signed-off-by: Liam R. Howlett

Keystone: implement incremental/programatic user additions

2014-07-30T04:50:59+00:00

Instead of creating tenant/user/role and service/endpoint for all openstack services in keystone postinstall, now each of the services creates keystone identities by itself in its own postinstall. The existing identity.sh has been re-written to be a utility that takes parameters, and the service postinstall calls identity.sh to create its own keystone identities. The identity.sh can also be used as a tool to manually create keystone identities at run time. Signed-off-by: Andy Ning

keystone: Add script to change backend to hybrid

2014-07-30T04:50:59+00:00

Adding /etc/keystone/hybrid-backend-setup and convert_keystone_backend.py to set the backend for keystone to hybrid and starts openldap and restarts keystone. Signed-off-by: Amy Fong

openstack initscript: add reset

2014-07-25T19:45:30+00:00

Some of the openstack data is associated with external resources (ie glance may have external files), we explicitly invoke the delete commands on those in additional to dropping and recreating the databases. Signed-off-by: Amy Fong

keystone: uprev to juno

2014-07-18T17:05:34+00:00

Updating keystone to the juno release candidate. Also adding new dependencies. Note: also ensure that the new keystoneclient and keystonemiddleware are used. Signed-off-by: Bruce Ashfield