)]}'
{"id":"openstack%2Fdevstack~210298","triplet_id":"openstack%2Fdevstack~master~If6fd02351b1a8be925cc5bb3f28339e2a6f54cd1","project":"openstack/devstack","branch":"master","topic":"bug/1482574","hashtags":[],"change_id":"If6fd02351b1a8be925cc5bb3f28339e2a6f54cd1","subject":"Fix keystone configuration for \u0027tls-proxy\u0027 service","status":"ABANDONED","created":"2015-08-07 10:13:48.000000000","updated":"2016-03-22 12:41:53.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"9e1611c36474a5d1aebc03aa3ad637c8ff1d4ed3","_number":210298,"virtual_id_number":210298,"owner":{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"all":[{"date":"2015-08-07 11:08:59.000000000","_account_id":10385,"name":"Citrix XenServer CI","username":"citrix_xenserver_ci","tags":["SERVICE_USER"]},{"value":-1,"date":"2016-01-02 13:24:32.000000000","_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},{"date":"2015-08-07 11:25:19.000000000","_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},{"date":"2015-08-07 11:30:36.000000000","_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},{"date":"2016-03-22 12:41:53.000000000","_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"recommended":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"disliked":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":10385,"name":"Citrix XenServer CI","username":"citrix_xenserver_ci","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":-1,"date":"2015-08-18 21:03:36.000000000","permitted_voting_range":{"min":-1,"max":1},"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"value":1,"date":"2015-08-18 01:23:22.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":-1,"default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":10385,"name":"Citrix XenServer CI","username":"citrix_xenserver_ci","tags":["SERVICE_USER"]},{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"date":"2015-08-18 01:23:18.000000000","_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},{"_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},{"value":0,"permitted_voting_range":{"min":-1,"max":0},"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":10385,"name":"Citrix XenServer CI","username":"citrix_xenserver_ci","tags":["SERVICE_USER"]},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":3,"name":"Jenkins","username":"jenkins"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},{"value":0,"permitted_voting_range":{"min":0,"max":2},"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"value":0,"permitted_voting_range":{"min":-1,"max":2},"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},{"_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},{"_account_id":10385,"name":"Citrix XenServer CI","username":"citrix_xenserver_ci","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2015-08-07 11:08:59.000000000","updated_by":{"_account_id":10385,"name":"Citrix XenServer CI","username":"citrix_xenserver_ci","tags":["SERVICE_USER"]},"reviewer":{"_account_id":10385,"name":"Citrix XenServer CI","username":"citrix_xenserver_ci","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2015-08-07 11:25:19.000000000","updated_by":{"_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},"reviewer":{"_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},"state":"REVIEWER"},{"updated":"2015-08-18 01:23:18.000000000","updated_by":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"reviewer":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"state":"REVIEWER"},{"updated":"2015-08-18 01:23:22.000000000","updated_by":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"reviewer":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"state":"REVIEWER"},{"updated":"2016-01-02 13:24:32.000000000","updated_by":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"reviewer":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"state":"REVIEWER"},{"updated":"2016-03-22 12:41:53.000000000","updated_by":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"reviewer":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"state":"REVIEWER"}],"messages":[{"id":"3fa9b1701850217a24d07a17d07af2b68a515a58","author":{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},"date":"2015-08-07 10:13:48.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"293c61c2c2c1b823fb9b0fd4298ceea47ce24312","author":{"_account_id":10385,"name":"Citrix XenServer CI","username":"citrix_xenserver_ci","tags":["SERVICE_USER"]},"date":"2015-08-07 11:08:59.000000000","message":"Patch Set 1:\n\nFailed using XenAPI driver with XenServer 6.2: Logs at http://dd6b71949550285df7dc-dda4e480e005aaa13ec303551d2d8155.r49.cf1.rackcdn.com/98/210298/1/7469/index.html\n\nUse \"xenserver: recheck\" to trigger only xenserver re-check.  XenServer CI contact: openstack@citrix.com.\n\nDebugging suggestions at https://wiki.openstack.org/wiki/Debugging_XenServer_CI_failures","accounts_in_message":[],"_revision_number":1},{"id":"5e3cad528729a18ff0eff57aac90147e56d04e11","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-08-07 11:25:07.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see http://docs.openstack.org/infra/manual/developers.html#automated-testing\n\n- gate-tempest-dsvm-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-full/c830551/ : SUCCESS in 49m 39s\n- gate-tempest-dsvm-postgres-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-postgres-full/99a561b/ : FAILURE in 52m 35s\n- gate-tempest-dsvm-neutron-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-neutron-full/200a749/ : SUCCESS in 1h 08m 26s\n- gate-grenade-dsvm http://logs.openstack.org/98/210298/1/check/gate-grenade-dsvm/3641984/ : SUCCESS in 53m 57s\n- gate-tempest-dsvm-large-ops http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-large-ops/081e13f/ : SUCCESS in 35m 59s\n- gate-tempest-dsvm-neutron-large-ops http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-neutron-large-ops/7b3610d/ : SUCCESS in 33m 03s\n- gate-devstack-bashate http://logs.openstack.org/98/210298/1/check/gate-devstack-bashate/a6ed22c/ : SUCCESS in 26s\n- gate-devstack-unit-tests http://logs.openstack.org/98/210298/1/check/gate-devstack-unit-tests/34bb90e/ : SUCCESS in 21s\n- gate-devstack-dsvm-cells http://logs.openstack.org/98/210298/1/check/gate-devstack-dsvm-cells/e2e7af3/ : SUCCESS in 22m 47s\n- gate-grenade-dsvm-partial-ncpu http://logs.openstack.org/98/210298/1/check/gate-grenade-dsvm-partial-ncpu/77c87bf/ : SUCCESS in 55m 36s\n- gate-tempest-dsvm-ironic-pxe_ssh http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-ironic-pxe_ssh/c558e19/ : SUCCESS in 41m 59s\n- gate-devstack-dsvm-updown http://logs.openstack.org/98/210298/1/check/gate-devstack-dsvm-updown/081328c/ : SUCCESS in 21m 43s\n- gate-tempest-dsvm-f21 http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-f21/8ebb7d9/ : FAILURE in 40m 01s (non-voting)\n- gate-tempest-dsvm-centos7 http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-centos7/24bd369/ : SUCCESS in 31m 06s (non-voting)\n- gate-devstack-publish-docs http://docs-draft.openstack.org/98/210298/1/check/gate-devstack-publish-docs/41218df//doc/build/html/ : SUCCESS in 1m 34s\n- gate-swift-dsvm-functional-nv http://logs.openstack.org/98/210298/1/check/gate-swift-dsvm-functional-nv/1871484/ : SUCCESS in 32m 24s (non-voting)\n- gate-grenade-dsvm-neutron http://logs.openstack.org/98/210298/1/check/gate-grenade-dsvm-neutron/dd45242/ : SUCCESS in 46m 42s\n- gate-tempest-dsvm-multinode-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-multinode-full/4710b5e/ : FAILURE in 57m 14s (non-voting)\n- gate-tempest-dsvm-neutron-multinode-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-neutron-multinode-full/ce84d1f/ : SUCCESS in 59m 59s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"cb561e18d0333bf6654e39115af54f6d9eeeccde","author":{"_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},"date":"2015-08-07 11:25:19.000000000","message":"Patch Set 1:\n\nI noticed jenkins failed, I think you hit bug(s):\n\n- gate-tempest-dsvm-postgres-full: https://bugs.launchpad.net/bugs/1355573\n\nIf you believe we\u0027ve correctly identified the failure, feel free to leave a \u0027recheck\u0027 comment to run the tests again.\nFor more details on this and other bugs, please see http://status.openstack.org/elastic-recheck/","accounts_in_message":[],"_revision_number":1},{"id":"80ed9a1d47c213c8988cd252b58460c2ceb7d05b","author":{"_account_id":8871,"name":"Elastic Recheck","username":"elasticrecheck"},"date":"2015-08-07 11:25:19.000000000","message":"Patch Set 1:\n\nI noticed jenkins failed, I think you hit bug(s):\n\n- gate-tempest-dsvm-postgres-full: https://bugs.launchpad.net/bugs/1355573\n\nIf you believe we\u0027ve correctly identified the failure, feel free to leave a \u0027recheck\u0027 comment to run the tests again.\nFor more details on this and other bugs, please see http://status.openstack.org/elastic-recheck/","accounts_in_message":[],"_revision_number":1},{"id":"11811de916558f49ab58524a0be5c8807cb20683","author":{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},"date":"2015-08-07 11:30:36.000000000","message":"Patch Set 1:\n\nrecheck bug 1355573","accounts_in_message":[],"_revision_number":1},{"id":"6d3fd2c5df33a35dca89bf7d4a1ee7e5378903a1","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2015-08-07 13:04:29.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-tempest-dsvm-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-full/e252d53/ : SUCCESS in 52m 44s\n- gate-tempest-dsvm-postgres-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-postgres-full/a62e2e1/ : SUCCESS in 50m 10s\n- gate-tempest-dsvm-neutron-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-neutron-full/5bc7478/ : SUCCESS in 1h 06m 21s\n- gate-grenade-dsvm http://logs.openstack.org/98/210298/1/check/gate-grenade-dsvm/ac30fc1/ : SUCCESS in 57m 35s\n- gate-tempest-dsvm-large-ops http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-large-ops/dfcc4d8/ : SUCCESS in 34m 15s\n- gate-tempest-dsvm-neutron-large-ops http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-neutron-large-ops/7deb40b/ : SUCCESS in 43m 30s\n- gate-devstack-bashate http://logs.openstack.org/98/210298/1/check/gate-devstack-bashate/6c5ca68/ : SUCCESS in 19s\n- gate-devstack-unit-tests http://logs.openstack.org/98/210298/1/check/gate-devstack-unit-tests/928230e/ : SUCCESS in 18s\n- gate-devstack-dsvm-cells http://logs.openstack.org/98/210298/1/check/gate-devstack-dsvm-cells/a3b17fd/ : SUCCESS in 35m 09s\n- gate-grenade-dsvm-partial-ncpu http://logs.openstack.org/98/210298/1/check/gate-grenade-dsvm-partial-ncpu/fd116b1/ : SUCCESS in 51m 15s\n- gate-tempest-dsvm-ironic-pxe_ssh http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-ironic-pxe_ssh/e7850e6/ : SUCCESS in 42m 22s\n- gate-devstack-dsvm-updown http://logs.openstack.org/98/210298/1/check/gate-devstack-dsvm-updown/dddabc5/ : SUCCESS in 28m 21s\n- gate-tempest-dsvm-f21 http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-f21/fc6f181/ : FAILURE in 43m 22s (non-voting)\n- gate-tempest-dsvm-centos7 http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-centos7/9a11722/ : SUCCESS in 29m 57s (non-voting)\n- gate-devstack-publish-docs http://docs-draft.openstack.org/98/210298/1/check/gate-devstack-publish-docs/764b0ab//doc/build/html/ : SUCCESS in 2m 19s\n- gate-swift-dsvm-functional-nv http://logs.openstack.org/98/210298/1/check/gate-swift-dsvm-functional-nv/7a9e091/ : SUCCESS in 36m 34s (non-voting)\n- gate-grenade-dsvm-neutron http://logs.openstack.org/98/210298/1/check/gate-grenade-dsvm-neutron/e853bd0/ : SUCCESS in 55m 31s\n- gate-tempest-dsvm-multinode-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-multinode-full/2d72f9e/ : SUCCESS in 1h 02m 00s (non-voting)\n- gate-tempest-dsvm-neutron-multinode-full http://logs.openstack.org/98/210298/1/check/gate-tempest-dsvm-neutron-multinode-full/1225bb3/ : SUCCESS in 1h 25m 26s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"e1672821150dbd491c8c88f364541f2ade70334f","author":{"_account_id":7350,"name":"Jordan Pittier","email":"jordan.pittier@gmail.com","username":"JordanP"},"date":"2015-08-11 10:59:03.000000000","message":"Patch Set 1:\n\nThose this patch really fix the reported bug ?\n\nAccording to https://github.com/openstack/keystone/blob/5fa3cdf94178da345ad34d4dfbdd3859c1ab4e5b/keystone/common/config.py#L35 this public_endpoint should have no effect on which keystone URL Glance is hitting.\n\nBut I am no expert in this area...","accounts_in_message":[],"_revision_number":1},{"id":"0b7ff5a0aa528c6fdd06d7d8a2a865c3db6ace4f","author":{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},"date":"2015-08-11 12:25:16.000000000","message":"Patch Set 1:\n\nHi Jordan,\n\nThis patch fixes the reported bug.\nIf you do not add \u0027public_endpoint\u0027 and \u0027admin_endpoint\u0027 to use \u0027https\u0027 then glance image create fails\nwith 401 Unauthorized error. Because of this devstack also fails, it do not try to start other services like\nnova, cinder. \n\nIf you do not provide \u0027public_endpoint\u0027 and \u0027admin_endpoint\u0027 then by default it uses \u0027http\u0027 not \u0027https\u0027.\n\nIf you do not add proper \u0027public_endpoint\u0027 and \u0027admin_endpoint\u0027 then by default keystone returns\nhttp endpoint as base host URL\n\nex.- \n\n$ curl -k -g -i -X GET https://10.69.4.179:5000/ -H \"Accept: application/json\" -H \"User-Agent: python-keystoneclient\"\n\n{\"versions\": {\"values\": [{\"status\": \"stable\", \"updated\": \"2015-03-30T00:00:00Z\", \"media-types\": [{\"base\": \"application/json\", \"type\": \"application/vnd.openstack.identity-v3+json\"}], \"id\": \"v3.4\", \"links\": [{\"href\": \"http://10.69.4.179:5000/v3/\", \"rel\": \"self\"}]}, {\"status\": \"stable\", \"updated\": \"2014-04-17T00:00:00Z\", \"media-types\": [{\"base\": \"application/json\", \"type\": \"application/vnd.openstack.identity-v2.0+json\"}], \"id\": \"v2.0\", \"links\": [{\"href\": \"http://10.69.4.179:5000/v2.0/\", \"rel\": \"self\"}, {\"href\": \"http://docs.openstack.org/\", \"type\": \"text/html\", \"rel\": \"describedby\"}]}]}}\n\nHere it will return href as \u0027http\u0027 not \u0027https\u0027. This \u0027href\u0027 url is used by openstack-clients and services to authenticate tokens, and as this url is not valid authentication will fail.","accounts_in_message":[],"_revision_number":1},{"id":"e9e357db2ba849298aa8d3d2000f114f043a8e30","author":{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},"date":"2015-08-11 12:31:02.000000000","message":"Patch Set 1:\n\nFor ex cinder list will fail when you do not configure \u0027public_endpoint\u0027, \u0027admin_endpoint\u0027 and tls-proxy (stud) is enabled - \n\n$ cinder --debug list\nDEBUG:keystoneclient.session:REQ: curl -g -i -X GET https://10.69.4.179:5000/v2.0 -H \"Accept: application/json\" -H \"User-Agent: python-keystoneclient\"\n/usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.\n  InsecurePlatformWarning\nDEBUG:keystoneclient.session:RESP: [200] content-length: 337 vary: X-Auth-Token keep-alive: timeout\u003d5, max\u003d100 server: Apache/2.4.7 (Ubuntu) connection: Keep-Alive date: Tue, 11 Aug 2015 12:19:02 GMT content-type: application/json x-openstack-request-id: req-fec04d8b-6ac0-4679-8606-67c12fadf892\nRESP BODY: {\"version\": {\"status\": \"stable\", \"updated\": \"2014-04-17T00:00:00Z\", \"media-types\": [{\"base\": \"application/json\", \"type\": \"application/vnd.openstack.identity-v2.0+json\"}], \"id\": \"v2.0\", \"links\": [{\"href\": \"http://10.69.4.179:5000/v2.0/\", \"rel\": \"self\"}, {\"href\": \"http://docs.openstack.org/\", \"type\": \"text/html\", \"rel\": \"describedby\"}]}}\n\nDEBUG:keystoneclient.auth.identity.v2:Making authentication request to http://10.69.4.179:5000/v2.0/tokens\nERROR: Unable to establish connection to http://10.69.4.179:5000/v2.0/tokens\n$","accounts_in_message":[],"_revision_number":1},{"id":"225559afbc7496881e96aab84117ca8dbf09fcb0","author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"date":"2015-08-18 01:23:22.000000000","message":"Patch Set 1: Code-Review+1\n\nthis seems about right, but I\u0027d like to ask the experts","accounts_in_message":[],"_revision_number":1},{"id":"35a0da4fd5c6a62c683bd3e1dd3a5d523a56983b","author":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"date":"2015-08-18 01:29:44.000000000","message":"Patch Set 1:\n\nThat solution should be ok in devstack, it\u0027s something we want to rely less upon in a larger setup though. \n\nTell me does setting https://github.com/openstack/keystone/blob/5fa3cdf94178da345ad34d4dfbdd3859c1ab4e5b/keystone/common/config.py#L106 to suggested HTTP_X_FORWARDED_PROTO work? I don\u0027t know if apache passes this through or not.","accounts_in_message":[],"_revision_number":1},{"id":"4a357c030ae0ce3cb0fd3b043593f046051fbd02","author":{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},"date":"2015-08-18 07:29:26.000000000","message":"Patch Set 1:\n\nHi Jamie,\n\nI have tried to set \u0027secure_proxy_ssl_header\u0027 to HTTP_X_FORWARDED_PROTO (and commented admin_endpoint, public_endpoint settings), but it is still returning \u0027http\u0027 instead of \u0027https\u0027.\n\nI have also tried this setting without apache (started keystone using \u0027keystone-all\u0027 command) but it is not returning \u0027https\u0027 links.","accounts_in_message":[],"_revision_number":1},{"id":"23b3a4ff6bb9231a097244c8180b1b676cb8fc89","author":{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},"date":"2015-08-18 10:13:04.000000000","message":"Patch Set 1:\n\nHi Jamie,\n\nSorry for above wrong comment.\n\nConfig setting \u0027secure_proxy_ssl_header \u003d HTTP_X_FORWARDED_PROTO\u0027 works but we need to send request with header \"X-Forwarded-Proto: https\".\n\n$ curl -k -g -i -X GET https://10.69.4.179:5000/ -H \"Accept: application/json\" -H \"User-Agent: python-keystoneclient\" -H \"X-Forwarded-Proto: https\"\n\nHTTP/1.1 300 Multiple Choices\nDate: Tue, 18 Aug 2015 09:50:54 GMT\nServer: Apache/2.4.7 (Ubuntu)\nVary: X-Auth-Token\nContent-Length: 593\nContent-Type: application/json\n\n{\"versions\": {\"values\": [{\"status\": \"stable\", \"updated\": \"2015-03-30T00:00:00Z\", \"media-types\": [{\"base\": \n\"application/json\", \"type\": \"application/vnd.openstack.identity-v3+json\"}], \"id\": \"v3.4\", \"links\": [{\"href\": \n\"https://10.69.4.179:5000/v3/\", \"rel\": \"self\"}]}, {\"status\": \"stable\", \"updated\": \"2014-04-17T00:00:00Z\", \n\"media-types\": [{\"base\": \"application/json\", \"type\": \"application/vnd.openstack.identity-v2.0+json\"}], \"id\": \"v2.0\", \n\"links\": [{\"href\": \"https://10.69.4.179:5000/v2.0/\", \"rel\": \"self\"}, {\"href\": \"http://docs.openstack.org/\", \"type\": \"text/html\", \"rel\": \"describedby\"}]}]}}\n\nBut if we do not send request with header \u0027X-Forwarded-Proto: https\u0027, keystone returns \u0027http\u0027 links.\n\nAlso is there any way we can add this header (\u0027X-Forwarded-Proto: https\u0027) to keystone backend request from stud proxy?","accounts_in_message":[],"_revision_number":1},{"id":"515a280099878bc28770e68c852a62ab56aaf32b","author":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"date":"2015-08-18 21:03:36.000000000","message":"Patch Set 1: Code-Review-1\n\nX-Forwarded-For is something that is typically set via your load balancer/SSL terminator, not something you should need to set yourself. \n\n\nThis review is a duplicate of https://review.openstack.org/#/c/187346/ do you need the changes listed there as well? we should probably just push the existing one through.","accounts_in_message":[],"_revision_number":1},{"id":"ef7a574d45e2f7fdea8038224a3c554d391ecb9b","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2016-01-02 13:24:32.000000000","message":"Patch Set 1: Verified-1\n\nMerge Failed.\n\nThis change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset.","accounts_in_message":[],"_revision_number":1},{"id":"f8c04fb58680a915947c3e2b3b8e1d730f1cad15","author":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"date":"2016-03-22 12:41:53.000000000","message":"Patch Set 1:\n\nThis review is \u003e 4 weeks without comment, and failed Jenkins the last time it was checked. We are abandoning this for now. Feel free to reactivate the review by pressing the restore button and leaving a \u0027recheck\u0027 comment to get fresh test results.","accounts_in_message":[],"_revision_number":1},{"id":"8081df2362f0814e13e5a09e7432d463685dfe10","author":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"date":"2016-03-22 12:41:53.000000000","message":"Abandoned\n\nThis review is \u003e 4 weeks without comment, and failed Jenkins the last time it was checked. We are abandoning this for now. Feel free to reactivate the review by pressing the restore button and leaving a \u0027recheck\u0027 comment to get fresh test results.","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"586aead97063d8aa3e4f916e16e8bd3c9ba321d9","revisions":{"586aead97063d8aa3e4f916e16e8bd3c9ba321d9":{"kind":"REWORK","_number":1,"created":"2015-08-07 10:13:48.000000000","uploader":{"_account_id":8300,"name":"Abhijeet Malawade","email":"abhijeet.malawade@gmail.com","username":"abhijeet"},"ref":"refs/changes/98/210298/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/devstack","ref":"refs/changes/98/210298/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/devstack refs/changes/98/210298/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/devstack refs/changes/98/210298/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/devstack refs/changes/98/210298/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/devstack refs/changes/98/210298/1"}}},"commit":{"parents":[{"commit":"2da606da2e47b7260732bb6ef43f1cbf6b4a1559","subject":"add ebtables to world dump","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/2da606da2e47b7260732bb6ef43f1cbf6b4a1559"}]}],"author":{"name":"Abhijeet Malawade","email":"Abhijeet.Malawade@nttdata.com","date":"2015-08-07 09:55:44.000000000","tz":-420},"committer":{"name":"Abhijeet Malawade","email":"Abhijeet.Malawade@nttdata.com","date":"2015-08-07 10:13:47.000000000","tz":-420},"subject":"Fix keystone configuration for \u0027tls-proxy\u0027 service","message":"Fix keystone configuration for \u0027tls-proxy\u0027 service\n\nSet \u0027public_endpoint\u0027 and \u0027admin_endpoint\u0027 keystone configuration\nparameters to use \u0027https\u0027 after enabling \u0027tls-proxy\u0027 service.\nIf these parameters are not set after enabling \u0027tls-proxy\u0027 service,\nthen default value is getting used which is http://server:5000.\nThis needs to be https://server:5000 after enabling \u0027tls-proxy\u0027.\n\nChange-Id: If6fd02351b1a8be925cc5bb3f28339e2a6f54cd1\nCloses-Bug: #1482574\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/586aead97063d8aa3e4f916e16e8bd3c9ba321d9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/devstack/commit/586aead97063d8aa3e4f916e16e8bd3c9ba321d9"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}