Notes on using OpenStack with Juju

[Martin Packman]

On 04/12/2012, Thomas Leonard <tal at it-innovation.soton.ac.uk> wrote:
>
> The 7ed23f... bit is simply the (public) project ID, not any kind of access
> token. So how is Swift supposed to authorise the request?

Because the container should have been created with an anyone-can-read acl:

<http://bazaar.launchpad.net/~juju/juju/trunk/view/head:/juju/providers/openstack/client.py#L509>

Given you have the generic 'juju-tal' control-bucket rather than the
auto-generated name which is more likely to be unique, my first
suggestion would be to use a different name so the container gets
recreated and see if that helps.

If I understand you correctly, the value is correctly given to swift
so it should just be the anonymous access that's an issue. Have you
confirmed you can retrieve the correct value if you provide a token?

Also from your earlier mail,

On 23/11/2012, Thomas Leonard <tal at it-innovation.soton.ac.uk> wrote:
>
> The command it tries is in /var/lib/cloud/instance/cloud-config.txt:
>
> juju-admin initialize --instance-id=$(curl
> http://myhost:8080/juju-openstack-myproject-95ec-8c2083e67721/juju_master_id?Signature=B3ec2HhzK0RoCxDRhS1BSUYEHkA%3D&Expires=1668074520&AWSAccessKeyId=902987dd775f4701b6c607b52c0ed26b)
>      --admin-identity=admin:Ulx9XFU1PJJE2+KNWbNENrT83fI=
> --constraints-data=e3Byb3ZpZGVyLXR5cGU6IG9wZW5zdGFja19zMywgdWJ1bnR1LXNlcmllczogcHJlY2lzZX0K
>      --provider-type=openstack_s3'
>
> The problem is a lack of quoting in the curl command. Edit
> juju/providers/openstack/launch.py to add quotes.

Can you file a bug for this (and optionally attach your patch/propose
a merge on a branch containing it) please?

<https://bugs.launchpad.net/juju/+filebug>

Thanks for the detailed write up, it's really useful.

Martin