starlingx/config
Code Issues Proposed changes

Fix domain setting for Barbican during bootstrap

Browse Source 
Barbican returns "503 Service Unavailable" during bootstrap
phase of StarlingX. This happens because Keystone auth token
lacks domain details for Barbican. Need to explicitly specify
project_domain_name and user_domain_name in Barbican config.

Change-Id: I4bf6b275c1eb271b62a2e7a1bc72c049f193afc4
Closes-bug: 1834670
Signed-off-by: Alex Kozyrev <alex.kozyrev@windriver.com>
This commit is contained in:
Alex Kozyrev 2019-07-12 06:12:49 -04:00
parent 62d55a096a
commit 96ecfd2542
2 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
puppet-manifests/src/modules/openstack/manifests/barbican.pp
View File

@ -139,7 +139,10 @@ class openstack::barbican::bootstrap
configure_user_role => false, configure_user_role => false,
} }
class { '::barbican::keystone::authtoken': class { '::barbican::keystone::authtoken':
auth_url => 'http://localhost:5000', auth_url => 'http://localhost:5000',
project_name => 'services',
user_domain_name => 'Default',
project_domain_name => 'Default',
} }
$bu_name = $::barbican::keystone::auth::auth_name $bu_name = $::barbican::keystone::auth::auth_name

6
puppet-manifests/src/modules/openstack/manifests/keystone.pp
View File

@ -335,11 +335,7 @@ class openstack::keystone::endpoint::runtime {
include ::patching::keystone::auth include ::patching::keystone::auth
include ::nfv::keystone::auth include ::nfv::keystone::auth
include ::fm::keystone::auth include ::fm::keystone::auth
include ::barbican::keystone::auth
include ::openstack::barbican::params
if $::openstack::barbican::params::service_enabled {
include ::barbican::keystone::auth
}
if $::platform::params::distributed_cloud_role =='systemcontroller' { if $::platform::params::distributed_cloud_role =='systemcontroller' {
include ::dcorch::keystone::auth include ::dcorch::keystone::auth