Bug 976316

Summary: packstack: keystonerc_admin is not copied automatically to the computes during installation
Product: Red Hat OpenStack Reporter: Dafna Ron <dron>
Component: openstack-packstackAssignee: RHOS Maint <rhos-maint>
Status: CLOSED WONTFIX QA Contact: Nir Magnezi <nmagnezi>
Severity: medium Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: aortega, derekh, ykaul
Target Milestone: ---   
Target Release: 4.0   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-06-20 13:25:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
logs none

Description Dafna Ron 2013-06-20 11:15:37 UTC
Created attachment 763417 [details]
logs

Description of problem:

I installed an allinone+ a nova compute node. 
when I wanted to check status of instances and need to login through keystone_admin in the compute I noticed that the keystonerc_admin does not exists under /root. 

Version-Release number of selected component (if applicable):

openstack-packstack-2013.1.1-0.19.dev632.el6ost.noarch

How reproducible:

100%

Steps to Reproduce:
1. install two nova-computes using packstack
2. login to one of the computes and ls -l /root
3.

Actual results:

keystonerc_admin does not exists under /root in the second compute I installed 

Expected results:

we should copy the keystonerc_admin to all computes if user is installing through packstack or ask if they are interested in doing that during the installation

Additional info:

Comment 1 Perry Myers 2013-06-20 13:25:38 UTC
The keystonerc file is actually very security sensitive, and as such, we want to have as few copies of it as possible.  Copying it to every compute node would not be wise.

Packstack allows you to specify a machine that you want to use as your OpenStack client.  The rc file is copied to /root on that designated machine.  In an all-in-one install, that means the rc file is placed on the local machine in /root

You would not typically use a Compute Node as your OpenStack client machine (except in an all in one mode install)

So, this is not a feature we should implement.