Once internal CA is used, that is not part of default trust store,
we need to ensure that openstack clients will use system-trust instead
of the default one provided by certifi library.
Change-Id: Ibe6b59b497fa665b722b648a57cb5568b1b29b5f
Since CentOS do not support C.UTF-8 locale[1] we're placing system
default inside openrc file. If locale can't be found from gathered facts
it's defaulted to C.UTF-8.
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1361965
Change-Id: I304bacf0e586b119ac41757b96fa237d2839aaf5
When there is a special char in the name of a server or something else,
openstack client cannot print the char and throw this error:
'ascii' codec can't encode character u'\xe8' in position 106729: ordinal not in range(128)
Changing the locale to C.UTF-8 fix this small issue.
Change-Id: I2607f1617c37181c5de2cd49634e6e487f7a22d9
It seems that most tools are expecting a literal 'true' or 'false' value
for env variables, so use that instead of '1' and empty values.
Change-Id: I36c5460165dba6acd1b94e82c712312f9fd307a9
If openrc_insecure is set to True, we need to export OS_INSECURE and
OS_VERIFY in order for API calls to not verify SSL vertificates. We
also need to add similar options to the clouds.yaml file as well.
Change-Id: I50e411c5ff974ff9a0b67aca6e9d7e48db596df7
For gnocchi cli this env var is mandatory in the openrc.
Default value: password
Closes-Bug: 1781552
Change-Id: I1e54d53dd131351dda70d3d166ae8e2029caa1cb
The logic which previously implemented a
check for v3 in the endpoint does not work
with versionless endpoints.
As versionless endpoints are likely to be
more common, and the v3 auth protocol is
now the defult and the norm, the check is
now done for a v2 endpoint instead.
Related-Bug: #1688320
Change-Id: If4818e6220aba921890e647cfb21e078bb254821
Use single quotes around OS_PASSWORD to prevent shell variable
expansion. Add a test to validate contents of the openrc file.
Closes-Bug: 1663185
Change-Id: I4b1e7b5cb83061ea35108db545fdfa33cef037a5
Unquoted OS_PASSWORD variable can break shell commands when special
characters are used.
Closes-Bug: #1663185
Change-Id: Ia61a4ea1861d0f8792355213443b202b15ab862c
Some service clients do not respect the old OS_ENDPOINT_TYPE
parameter, instead only supporting the newer fashion of
OS_INTERFACE which is viewed as less confusing. This adds support
for that option.
Failure to include this causes SSL certificate errors when the
service clients attempt to use the public endpoint with a self-
signed certificate on defaulted installs, particularly AIOs.
This error can be demonstrated by trying to use the Gnocchi or new
Aodh clients from a utility container, though only the Gnocchi
client is currently installed in the integrated build.
Change-Id: I60af4f0cf56964eaec8980264ec1ebadc550c0b8
Add OS_REGION_NAME to the openrc file. Replaces openrc_clouds_yml_region_name
with a common openrc_service_region variable.
Change-Id: I68cbd6b2aaa64ef655cfc617a96d428fb2c35d2b
Some clients still rely on OS_TENANT_NAME so we
should define and export it. The example client/tool
that appears to rely on it still is Rally, found during
development of:
https://github.com/trumant/openstack-ansible-os_rally
Change-Id: I5bc29ee6b459078f34bc6ac3a8e771a8192de4a1