Bug 984683 - token_format should be configurable
Summary: token_format should be configurable
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: doc-Getting_Started_Guide
Version: 3.0
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: async
: 3.0
Assignee: Bruce Reeler
QA Contact: ecs-bugs
URL:
Whiteboard:
Depends On: 975050 975153
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-07-15 16:51 UTC by Stephen Gordon
Modified: 2016-04-26 13:40 UTC (History)
15 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 978853
Environment:
Last Closed: 2014-01-17 00:33:17 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 33410 0 None None None Never
OpenStack gerrit 34694 0 None None None Never

Comment 4 Martin Magr 2013-07-18 07:44:52 UTC 
I will use Adam's explanation:

PKI tokens is the upstream default and has been since the start of the Grizzly development cycle.  However, the upstream Puppet package maintainers reversed this decsion when they ran into difficulty setting up the PKI certificaters.  Packstack uses the upstream puppet modules, and defaulted to UUID tokens.   We didn't discover this until late in the development cycle. At that point, all of the QA had been done on UUID tokens, and switching to PKI tokens was deemed too risky.

For the next release, the puppet modules have switched to using PKI tokens.
Comment 5 Bruce Reeler 2013-07-23 05:47:48 UTC 
Added the new configuration key CONFIG_KEYSTONE_TOKEN_FORMAT to "Table 4.1. PackStack Configuration Keys" in "4.3. Running PackStack Non-interactively" saying it can be set to UUID of PKI, and although UUID is default, PKI is recommended as it will become default in future.

PackStack in interactive mode does not prompt for token format, so nothing added to instructions under "4.2. Running PackStack Interactively".
Comment 7 Bruce Reeler 2013-07-25 05:48:21 UTC 
Added some further updates to "Table 4.1. PackStack Configuration Keys" in "4.3. Running PackStack Non-interactively", including correcting command argument formats.
Note You need to log in before you can comment on or make changes to this bug.