Unable Source admin.rc File After PMO 5.8 Upgrade
Problem
Sourcing the admin.rc with the main region FQDN mentioned as the OS_AUTH_URL, and specifying the sub-region in the
OS_REGION_NAME, ends up in the error "admin endpoint for identity service in <sub-region-name> region not found", which worked earlier in PMO 5.6 and below.
export OS_AUTH_URL=https://main-region.platform9.keystone/v3export OS_IDENTITY_API_VERSION=3export OS_REGION_NAME="sub-region"export OS_USERNAME=user@domain.comexport OS_PASSWORD=xxxxxxxxxxxecho "Please Enter Accessing Site: "read TENANT_IDexport OS_PROJECT_NAME=$TENANT_IDexport OS_PROJECT_DOMAIN_ID=${OS_PROJECT_DOMAIN_ID:-"default"}export OS_USER_DOMAIN_ID=${OS_USER_DOMAIN_ID:-"default"}export OS_PROJECT_ID=$(openstack project show -c id -f value $OS_PROJECT_NAME)Environment
- Platform9 Managed OpenStack - v5.8.0 and Higher.
Answer
Since the keystone in the main region needs to handle the authentication requests for other subregions, from PMO 5.8.0. version onwards, Platform9 reduced Keystone token catalog size by limiting to region scope for all service endpoints.
So for each subregions the admin.rc file should have OS_AUTH_URL value with the FQDN of the subregion as shown below:
export OS_AUTH_URL=https://sub-region.platform9.keystone/v3export OS_IDENTITY_API_VERSION=3export OS_REGION_NAME="sub-region"export OS_USERNAME=user@domain.comexport OS_PASSWORD=xxxxxxxxxxxecho "Please Enter Accessing Site: "read TENANT_IDexport OS_PROJECT_NAME=$TENANT_IDexport OS_PROJECT_DOMAIN_ID=${OS_PROJECT_DOMAIN_ID:-"default"}export OS_USER_DOMAIN_ID=${OS_USER_DOMAIN_ID:-"default"}export OS_PROJECT_ID=$(openstack project show -c id -f value $OS_PROJECT_NAME)Additional Information
Release note: https://platform9.com/docs/v5.8/openstack/release-notes-openstack
Was this page helpful?