Unfortunately, the test day scheduled for Tuesday happens to fall during my Family vacation. There are a couple of things I would love to have tested.
In Foslom, my largest feature is PKI Tokens and their revocation. I am not sure if the revocation code will land in the Fedora repo yet, as it was committed after the F3 milestone was cut. To check that is has been merged, look in the Keystone config file under the section [signing]
you should see a commented out value:
#token_format = PKI
To activate the PKI tokens, uncomment this value and restart Keystone.
When you run keystone token-get, the tokens should now be several lines long.
By default, the services like glance, nova, and the like store their cached version of certificates etc in ~/keystone-signing/. I tend to test against glance so after running
glance image-list
you will see:
$ ls ~/keystone-signing/ cacert.pem revoked.pem signing_cert.pem
To modify the place that these files get saved, to put them in the more correct location of /var/cache, create a directory /var/cache/$USER where $USER is glance, etc. Modify the config file for the appropriate service to set:
[signing] signing_dir = /var/cache/glance
This should also test Alan Pevec's change that configuration should be read from the paste-config file of the application, as opposed to Keystone's config file.
I just realized that the Revocation code made the cut, but the fix to make the request for the revocation list as admin did not. If the PKI token test fails with 401s it is probably due to the request for the revocation list being denied by Keystone. This is a known issue, and disregard the failure for now, as the fix is committed upstream, but not in the Fedora RPMS yet.
On 08/26/2012 01:46 AM, Adam Young wrote:
Unfortunately, the test day scheduled for Tuesday happens to fall during my Family vacation. There are a couple of things I would love to have tested.
Well Tuesday wasn't suitable for many reasons. Also there were no free slots that overlapped with any available Fedora test days. So instead we'll have a somewhat independent test day the following week on Tue Sep 4th.
In Foslom, my largest feature is PKI Tokens and their revocation. I am not sure if the revocation code will land in the Fedora repo yet, as it was committed after the F3 milestone was cut. To check that is has been merged, look in the Keystone config file under the section
We'll add PKI tokens as a test case here if appropriate to the folsom-3 based keystone currently available.
https://fedoraproject.org/wiki/Test_Day:2012-09-04_OpenStack
thanks, Pádraig.
Hi Pádraig, all,
https://fedoraproject.org/wiki/Test_Day:2012-09-04_OpenStack
Thanks for organizing another test day, the Essex / F17 test day in March was very useful for us.
Are the Folsom RC RPMs already available somewhere? Or should I be more patient?
thanks, cheers, Jan
On 08/26/2012 08:06 PM, Jan van Eldik wrote:
Hi Pádraig, all,
https://fedoraproject.org/wiki/Test_Day:2012-09-04_OpenStack
Thanks for organizing another test day, the Essex / F17 test day in March was very useful for us.
Are the Folsom RC RPMs already available somewhere? Or should I be more patient?
It'll be another day or so.
I'll announce the test day more formally very soon on this list, when folsom-3 rpms are testable.
cheers, Pádraig.