[Starlingx-discuss] Which code line created the users in keystone table local_user
Hi Bart and Don In keystone table 'local_user', there's lots of users created (see below), could you please point out which code line created these users? [cid:image002.jpg@01D4C7A5.D2DF2E40] The background: In code review https://review.openstack.org/#/c/633400/, we need to create an internal project and user for raw cache. Currently I use puppet to call cmd "openstack" to create/get the project/user id. I found the user(cinder) has already been created by some existing code, see above picture please. So I'm expecting to create internal project the same way as internal user. Thanks. Regards Liang
Liang, Today, the cinder user is created by puppet when it applies the ::cinder::keystone::auth class. You can see this class being included in stx-config/puppet-manifests/src/modules/openstack/manifests/cinder.pp. However, this puppet code will no longer be used, once we cut over to containers (in the next week or so I think). After that, the cinder user would be created by the application of helm charts. You can see the overrides for the cinder helm chart being populated at stx-config/sysinv/sysinv/sysinv/helm/cinder.py. I would recommend you start working with the helm charts in the containers environment, since the puppet code will be gone soon. Bart From: Fang, Liang A [mailto:liang.a.fang@intel.com] Sent: February 18, 2019 3:20 AM To: Wensley, Barton; Penney, Don Cc: Rowsell, Brent; starlingx-discuss@lists.starlingx.io Subject: Which code line created the users in keystone table local_user Hi Bart and Don In keystone table 'local_user', there's lots of users created (see below), could you please point out which code line created these users? [Bart] Table deleted due to mailing list size restrictions that were apparently defined when we were all using 300 baud modems... The background: In code review https://review.openstack.org/#/c/633400/, we need to create an internal project and user for raw cache. Currently I use puppet to call cmd "openstack" to create/get the project/user id. I found the user(cinder) has already been created by some existing code, see above picture please. So I'm expecting to create internal project the same way as internal user. Thanks. Regards Liang
Hi Bart I take a look of cinder.pp and now know the cinder user is created by openstack cmd(openstack client) finally in keystone.rb. Thanks. You said: "After that, the cinder user would be created by the application of helm charts", currently this code has not been checked-in in stx-config, right? I tried to find related code but with no luck. I believe the code is ready in somewhere because it is about to cut over. Could you please point out the code? Thanks. Currently my environment is deployed by an ISO which generated on Jan 1st 2019. Before the cut over finished, it is not possible to deploy an containerized starlingx environment through an official ISO, right? Appreciate if you can share something about how you are debugging with containerized starlingx. Regards Liang From: Wensley, Barton [mailto:Barton.Wensley@windriver.com] Sent: Tuesday, February 19, 2019 9:13 PM To: Fang, Liang A <liang.a.fang@intel.com>; Penney, Don <Don.Penney@windriver.com> Cc: Rowsell, Brent <Brent.Rowsell@windriver.com>; starlingx-discuss@lists.starlingx.io Subject: RE: Which code line created the users in keystone table local_user Liang, Today, the cinder user is created by puppet when it applies the ::cinder::keystone::auth class. You can see this class being included in stx-config/puppet-manifests/src/modules/openstack/manifests/cinder.pp. However, this puppet code will no longer be used, once we cut over to containers (in the next week or so I think). After that, the cinder user would be created by the application of helm charts. You can see the overrides for the cinder helm chart being populated at stx-config/sysinv/sysinv/sysinv/helm/cinder.py. I would recommend you start working with the helm charts in the containers environment, since the puppet code will be gone soon. Bart From: Fang, Liang A [mailto:liang.a.fang@intel.com] Sent: February 18, 2019 3:20 AM To: Wensley, Barton; Penney, Don Cc: Rowsell, Brent; starlingx-discuss@lists.starlingx.io<mailto:starlingx-discuss@lists.starlingx.io> Subject: Which code line created the users in keystone table local_user Hi Bart and Don In keystone table 'local_user', there's lots of users created (see below), could you please point out which code line created these users? [Bart] Table deleted due to mailing list size restrictions that were apparently defined when we were all using 300 baud modems... The background: In code review https://review.openstack.org/#/c/633400/, we need to create an internal project and user for raw cache. Currently I use puppet to call cmd "openstack" to create/get the project/user id. I found the user(cinder) has already been created by some existing code, see above picture please. So I'm expecting to create internal project the same way as internal user. Thanks. Regards Liang
Liang, Brent Rowsell added a comment to your inspection on February 16th that points you to the code you would need to modify. You can install a containerized environment with a recent ISO - instructions are found at https://wiki.openstack.org/wiki/StarlingX/Containers. Bart From: Fang, Liang A [mailto:liang.a.fang@intel.com] Sent: February 21, 2019 4:06 AM To: Wensley, Barton; Penney, Don Cc: Rowsell, Brent; starlingx-discuss@lists.starlingx.io Subject: RE: Which code line created the users in keystone table local_user Hi Bart I take a look of cinder.pp and now know the cinder user is created by openstack cmd(openstack client) finally in keystone.rb. Thanks. You said: "After that, the cinder user would be created by the application of helm charts", currently this code has not been checked-in in stx-config, right? I tried to find related code but with no luck. I believe the code is ready in somewhere because it is about to cut over. Could you please point out the code? Thanks. Currently my environment is deployed by an ISO which generated on Jan 1st 2019. Before the cut over finished, it is not possible to deploy an containerized starlingx environment through an official ISO, right? Appreciate if you can share something about how you are debugging with containerized starlingx. Regards Liang From: Wensley, Barton [mailto:Barton.Wensley@windriver.com] Sent: Tuesday, February 19, 2019 9:13 PM To: Fang, Liang A <liang.a.fang@intel.com>; Penney, Don <Don.Penney@windriver.com> Cc: Rowsell, Brent <Brent.Rowsell@windriver.com>; starlingx-discuss@lists.starlingx.io Subject: RE: Which code line created the users in keystone table local_user Liang, Today, the cinder user is created by puppet when it applies the ::cinder::keystone::auth class. You can see this class being included in stx-config/puppet-manifests/src/modules/openstack/manifests/cinder.pp. However, this puppet code will no longer be used, once we cut over to containers (in the next week or so I think). After that, the cinder user would be created by the application of helm charts. You can see the overrides for the cinder helm chart being populated at stx-config/sysinv/sysinv/sysinv/helm/cinder.py. I would recommend you start working with the helm charts in the containers environment, since the puppet code will be gone soon. Bart From: Fang, Liang A [mailto:liang.a.fang@intel.com] Sent: February 18, 2019 3:20 AM To: Wensley, Barton; Penney, Don Cc: Rowsell, Brent; starlingx-discuss@lists.starlingx.io<mailto:starlingx-discuss@lists.starlingx.io> Subject: Which code line created the users in keystone table local_user Hi Bart and Don In keystone table 'local_user', there's lots of users created (see below), could you please point out which code line created these users? [Bart] Table deleted due to mailing list size restrictions that were apparently defined when we were all using 300 baud modems... The background: In code review https://review.openstack.org/#/c/633400/, we need to create an internal project and user for raw cache. Currently I use puppet to call cmd "openstack" to create/get the project/user id. I found the user(cinder) has already been created by some existing code, see above picture please. So I'm expecting to create internal project the same way as internal user. Thanks. Regards Liang
participants (2)
-
Fang, Liang A
-
Wensley, Barton