Bug 984683

Summary: token_format should be configurable
Product: Red Hat OpenStack Reporter: Stephen Gordon <sgordon>
Component: doc-Getting_Started_GuideAssignee: Bruce Reeler <breeler>
Status: CLOSED CURRENTRELEASE QA Contact: ecs-bugs
Severity: urgent Docs Contact:
Priority: urgent    
Version: 3.0CC: ajeain, alyoung, aortega, apevec, ayoung, breeler, dallan, derekh, gfidente, jkt, lhh, mmagr, rlandman, sclewis, sgordon
Target Milestone: asyncKeywords: Documentation, Triaged, ZStream
Target Release: 3.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 978853 Environment:
Last Closed: 2014-01-17 00:33:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 975050, 975153    
Bug Blocks:    

Comment 4 Martin Magr 2013-07-18 07:44:52 UTC 
I will use Adam's explanation:

PKI tokens is the upstream default and has been since the start of the Grizzly development cycle.  However, the upstream Puppet package maintainers reversed this decsion when they ran into difficulty setting up the PKI certificaters.  Packstack uses the upstream puppet modules, and defaulted to UUID tokens.   We didn't discover this until late in the development cycle. At that point, all of the QA had been done on UUID tokens, and switching to PKI tokens was deemed too risky.

For the next release, the puppet modules have switched to using PKI tokens.
Comment 5 Bruce Reeler 2013-07-23 05:47:48 UTC 
Added the new configuration key CONFIG_KEYSTONE_TOKEN_FORMAT to "Table 4.1. PackStack Configuration Keys" in "4.3. Running PackStack Non-interactively" saying it can be set to UUID of PKI, and although UUID is default, PKI is recommended as it will become default in future.

PackStack in interactive mode does not prompt for token format, so nothing added to instructions under "4.2. Running PackStack Interactively".
Comment 7 Bruce Reeler 2013-07-25 05:48:21 UTC 
Added some further updates to "Table 4.1. PackStack Configuration Keys" in "4.3. Running PackStack Non-interactively", including correcting command argument formats.