55 Commits

Author SHA1 Message Date
Steve Baker
bb421bed58 Configure and launch Heat REST API.
This is a REST API in the same style as other OpenStack APIs.

This also creates a new endpoint for the REST API which uses the
serivce type 'orchestration'. The old endpoint now has the service
type 'cloudformation'.

This matches the pattern where the native openstack API gets a
generic service type while the emulated EC2 API gets a specific
type (eg, object-store, s3).

There will be breakage for the time period where only one of this
change and https://review.openstack.org/#/c/14263/ are approved,
since keystone will have the incorrect service type for that period.

Change-Id: I6a0d51a63da8017d375b4c065c4c9079dfca8fe3
2012-10-10 13:32:16 +13:00
Steve Baker
36cf7ee141 Fix the variable used for the service_id of the heat endpoint
Change-Id: I0c8190713722e3bcef19e94629d4f0d4fbfaa8fa
2012-09-18 08:26:23 +12:00
Angus Salkeld
e279021010 heat had it's api split into two binaries (cfn & cloudwatch)
- Rename heat-api to heat-api-cfn
- Add heat-api-cloudwatch
- Also removed unused heat-engine-paste.ini file.
- Fix the path to the conf dir (etc/heat not etc/)

Change-Id: I9b2c7c5cd7052d5eb6d730833c65812c2f8a0ee1
Signed-off-by: Angus Salkeld <asalkeld@redhat.com>
2012-09-11 11:24:09 +10:00
Steve Baker
8d6c9bcabb Fix keystone_data.sh to match default_catalog.templates
Endpoint creating in keystone_data.sh tends to drift because
KEYSTONE_CATALOG_BACKEND=sql is not the default.

This patch should bring them closer together, and fix a problem I was having
with keystone auth

Change-Id: Ifac57b8e69234975d1ff65ace72d46d3a5808119
2012-09-11 10:07:26 +12:00
Steve Baker
bfdad75eda Add support to optionally launch the heat service.
This allows the heat service to be started as a devstack service.

Heat is disabled by default, and can be enabled with this in your localrc:
ENABLED_SERVICES+=,heat

There is now a repo of heat-enabled images here:
https://github.com/heat-api/prebuilt-jeos-images/downloads

These can be added to the IMAGE_URLS in your localrc.

After devstack is launched, a template can be invoked with:
nova keypair-add --pub_key $HOME/.ssh/id_rsa.pub heat_key
heat -d create wordpress \
--template-file=../heat/templates/WordPress_Single_Instance.template \
--parameters="InstanceType=m1.tiny;DBUsername=wpuser;DBPassword=wppassword;\
KeyName=heat_key;LinuxDistribution=F16"

Change-Id: I07591295eb2b9eb7868b1577dd3c24b19812a689
2012-08-22 17:02:21 +12:00
Chmouel Boudjnah
d55509d46e Use c-api for service when creating cinder user.
- cinder is not a service but c-api is.

Change-Id: I580fe91216d3fa066120dc774811bfe08119ca02
2012-07-20 15:00:02 +00:00
Anthony Young
1cdf5fa4b5 Register cinder when using sql keystone catalog.
* Fixes bug #1020735

Change-Id: Ibd954cdda3c855800ae1080950c62dd71b094a01
2012-07-03 13:57:39 -07:00
Jenkins
6b93f829c1 Merge "Support sql service catalog backend" 2012-06-27 19:34:33 +00:00
Dean Troyer
67787e6b4c Add cinder support
* using the new functional pattern: cinder_XXX functions are in
  lib/cinder
* enable with 'c-api,c-sch,c-vol' in ENABLED_SERVICES, n-vol is still the default
* exercises/volumes.sh runs for cinder and n-vol
* move config to /etc/cinder
* change volume_group to stack-volumes; this also renames the backing file
  to /opt/stack/data/stack-volumes-backing-file.
* removes osapi_volume from nova.conf enabled_apis
* integrates cinder + keystone
* launches c-sch
* tweaks for multi node
* move enabled_apis substitution to init_cinder

18Jun2010
* restored & rebased
* update setup.py to use setup_develop() in lib/cinder

Change-Id: I1e1aa4387031c56e4fa239eb73bea2af8cef0e38
2012-06-20 14:11:19 -06:00
Dean Troyer
3f7c06f5aa Support sql service catalog backend
* Add KEYSTONE_CATALOG_BACKEND to select 'sql' or 'template'
  'template' is the default
* Add service creation to keystone_data.sh

Rebased and re-submitted

Fixes bug 966457

Change-Id: Id24fbdeba3de11537559e24b72571ec92ab44750
2012-06-19 14:25:05 +00:00
Jenkins
218a4fa532 Merge "Changed --user to --user_id and --role to --role_id in the keystone client for consistency. Need to update keystone calls here." 2012-05-16 18:35:43 +00:00
Jay Pipes
b297d2d0a8 Fixes LP #996571 - Alternate Tempest user
Adds an alternate user to Keystone for Tempest

Tempest has a number of tests that are skipped if
the compute.alt_username is the same as compute.username
or None. Here, we modify files/keystone_data.sh to add
an additional regular user called alt_demo if Tempest
is enabled in stackrc. We also make corresponding changes
to the tools/configure_tempest.sh script to make use
of this alternate user credential

Change-Id: I551f3b378f843c62fffcf6effa916056708d54d3
2012-05-10 11:25:39 -04:00
Everett Toews
a143e73caf Changed --user to --user_id and --role to --role_id in the keystone client for consistency. Need to update keystone calls here.
This change should be applied after [bug/994744 b7fe11c] in python-keystoneclient.

Fixes bug 994744.

Change-Id: I13e643f8552d86ed0bf92799271899f777bde9b2
2012-05-08 22:13:08 +00:00
Chmouel Boudjnah
77b0e1d8ff Converts bundle exercise to use swift/s3
- Fix keystone s3token configuration (in admin api not public api).
- Set s3 service in keystone to swift if installed.
- Fixes a bug in bundle.sh
- Adds config options for nova to use swift as s3 store

Change-Id: Ic2fca5aba06a25c0b3a74f1e97d062390a8e2ab1
2012-03-15 20:59:45 +00:00
Anthony Young
ae604985e7 Remove references to deprecated ec2 authorizor.
* remove replace_pipeline
 * removes references to sysadmin and netadmin roles
 * removes references to admin ec2 api
 * fixes bug 953744
 * related fix in nova: https://review.openstack.org/#change,5024

Change-Id: I8792dae0157b8596a5f946670742411781fe47c0
2012-03-13 16:10:56 -07:00
Jenkins
edf59ca443 Merge "Remove calls to service-create in devstack for now." 2012-03-10 11:13:39 +00:00
Dean Troyer
0bd2410d46 Move all EC2 cred creation to eucarc
* Remove credential creation from files/keystone_data.sh
* Remove EC2 cert setup from openrc
* Remove sourcing of ec2rc from stackrc
* Collect the above in eucarc
* Allow rc files to be sourced from other directories; based on Chmouel's
  4881 proposal but is simpler and doesn't actually change the directory
* Create S3 endpoint
* Get EC2 and S3 endpoints from Keystone service catalog
* Add EC2 credential checks to exercises/client-env.sh
* exercises/bundle.sh and exercises/euca.sh use eucarc

Updates:
* remove readlink -f to stay bash 3 compatible
* use service catalog
* create S3 endpoint

Fixes bug 949528

Change-Id: I58caea8cecbbd10661779bc2d150d241f4a5822e
2012-03-09 21:41:00 -06:00
Anthony Young
e2d139b8c8 Remove calls to service-create in devstack for now.
* The recommended backend for essex is the template backend.
 * Fixes bug 950213

Change-Id: I2f8bc9f74cee2d783cbadcc1d4d4e674ddb905b9
2012-03-09 15:49:53 -08:00
Dean Troyer
b7d1fbbe20 Cleanup keystone_data.sh
* Remove the compatibility code for older keystone client
* Reformat commands similar to keystone sample_data.sh
* Improve documentation

Change-Id: I2fc544555a1b936d28f11c3c4eaaf885b2cb6d17
2012-03-05 17:43:10 -06:00
Dean Troyer
b328838104 Add service account configuration
* Use username/password instead of service token for service auth to Keystone
* Updates files/glance-*-paste.ini and files/swift/proxy-server.conf
* keystone_data.sh creates 'service' tenant, 'nova' and 'glance' users
  ('swift' and 'quantum' if those services are enabled)
* Uses $SERVICE_PASSWORD for the service auth password. There is no default;
  to default to $ADMIN_PASSWORD, place the assignment in localrc.

Fixes bug 942983

Change-Id: If78eed1b509a9c1e8441bb4cfa095da9052f9395
2012-02-29 16:22:10 -06:00
Vishvananda Ishaya
5f9473e8b9 Add nova-volume endpoint to service catalog
Change-Id: Id04568d7f8eecc8c8e7c1a92990d37a46923caf7
2012-02-24 02:10:22 +00:00
Dean Troyer
f4565c4694 Make keystone_data.sh handle existing and updated keystone client
Keystone client commands and options have been normalized and
keystone_data.sh needs to support both versions for a transition
period.

The merge prop for the updated keystone client is
https://review.openstack.org/4375

Necessary for bug 396422

Also fix an intermittent problem extacting IDs from command output.

Change-Id: Ib13445a0bd3029fb02b0b7a86e8e0b8278717b57
2012-02-23 19:13:38 -06:00
Gabriel Hurley
a3a496f9c2 Adds quantum service and endpoint to keystone if quantum is enabled.
Change-Id: I41eac84a48e8e716b77b7c874244c626b5df3006
2012-02-21 13:50:00 -08:00
Vishvananda Ishaya
d1f5243d91 Uses keystone client instead of keystone-manage
* Depends on https://review.openstack.org/#change,3948
 * Depends on https://review.openstack.org/#change,3945
 * Fixes bug 928558

Change-Id: I83c337e3b92a9ab0dac254afe83673185867b7b0
2012-02-09 03:50:57 +00:00
Vishvananda Ishaya
658ac7a4cc create and store secret and access keys 2012-02-06 22:56:37 +00:00
Anthony Young
b0b6d315bd Changes to get devstack working again with ksl + trunk
Change-Id: I7261b2d88325d4f9cb3337478dbcbd04c25e52ed
2012-02-03 21:40:32 -08:00
termie
8a41c9dad4 update to get keystone working 2012-02-02 17:31:19 -08:00
Joe Heck
950bb4555a updating to match master ksl CLI options 2012-02-02 15:00:07 -08:00
termie
eacc5953d2 bunch of fixes 2012-02-02 15:00:04 -08:00
termie
82aa41a2bd oh, comment that out 2012-02-02 14:55:07 -08:00
termie
a96a418171 new keystone support 2012-02-02 14:55:05 -08:00
Anthony Young
af0f7cadb9 Downcase Admin user role to support nova's new policy engine
* Fixes bug 919373

Change-Id: If786f59995327f15fe72420950c7109e2eb0a307
2012-01-20 12:13:54 -08:00
Dean Troyer
6577b4685a Glance changes to stack.sh for https://review.openstack.org/3092
* Handle before/after upcoming Glance configuration file changes
* Add configuration vars for Keystone URIs to configure Glance
  and other services

Change-Id: I465065592ade11fb86c40cd04d29c4ae3f1706d7
2012-01-18 14:16:05 -06:00
Kiall Mac Innes
34694f1568 Fix the glance endpoint template URL. Fixes bug 909075.
Conflicts:

	files/keystone_data.sh

Change-Id: I82a45ef1e653a7de9ab3b48e7675f1440172b3f9
2011-12-30 19:04:33 +00:00
Anthony Young
1097c7ca91 Port work on SERVICE_HOST from stable/diablo. Allows user to specify service endpoint host separately from HOST_IP
* Improve openrc comment

Change-Id: Ib542b39350bae8d92b6c3c4cf6b5d9aabff7a61c
2011-12-27 23:22:47 -08:00
Jesse Andrews
b89c75178b remove unused splats
Change-Id: I7a321ba31c2b6cdcb9f60255055af71391934ae2
2011-12-21 23:17:42 -08:00
Jesse Andrews
e23f6de4d2 Add ec2 endpoint to service catalog
Change-Id: Id779d4d818621db042c420e034083577a3d3ab0d
blueprint: ec2-service-endpoint
2011-12-21 09:31:23 -08:00
Jesse Andrews
9c7c9083a4 initial devstack + essex
* update horizon apache config
* updates apts for horizon
* better logging for horizon
* keystone conf settings
* only add swift endpoint if it is enabled
* new nova paste

Change-Id: I1edacbe5d8adc4bd5265d36abcaf01ce5490aefd
2011-11-23 11:26:39 -08:00
Chmouel Boudjnah
45c5113701 Add keystone support with swift. 2011-11-02 17:07:19 +01:00
Vishvananda Ishaya
3a22d818cd create roles for demo user so ec2 api is happy 2011-10-28 12:11:18 -07:00
Vishvananda Ishaya
f56e395d82 Make ec2 credentials work properly 2011-10-24 16:31:19 -07:00
Vishvananda Ishaya
9b3536714a fix whitespace 2011-10-20 10:08:20 -07:00
Jesse Andrews
89358afe35 don't use secrete as admin password - fixes #34 2011-10-02 14:11:17 -04:00
Jesse Andrews
b96871e486 don't use the same keystone admin token for everything 2011-10-02 09:02:46 -07:00
Anthony Young
a449dd85d8 update port for keystone admin api 2011-09-30 15:52:18 -07:00
Anthony Young
f0f27ff805 use type='image' for glance 2011-09-29 16:22:05 -07:00
Anthony Young
c4a99fb957 updates to support most recent keystone 2011-09-29 22:31:46 +00:00
Anthony Young
34acee3699 latest keystone configuration for python-novaclient and dash 2011-09-27 00:12:52 -07:00
Anthony Young
49f2d02dc2 make admin part of tenant 2 2011-09-23 00:55:48 -07:00
Anthony Young
ea884c3804 config changes for the latest keystone 2011-09-23 03:24:27 +00:00