Unable Source admin.rc File After PMO 5.8 Upgrade

Problem

Sourcing the admin.rc with the main region FQDN mentioned as the OS_AUTH_URL, and specifying the sub-region in the

OS_REGION_NAME, ends up in the error "admin endpoint for identity service in <sub-region-name> region not found", which worked earlier in PMO 5.6 and below.

admin.rc
    
xxxxxxxxxx
 
export OS_AUTH_URL=https://main-region.platform9.keystone/v3export OS_IDENTITY_API_VERSION=3export OS_REGION_NAME="sub-region"export OS_USERNAME=user@domain.comexport OS_PASSWORD=xxxxxxxxxxxecho "Please Enter Accessing Site: "read TENANT_IDexport OS_PROJECT_NAME=$TENANT_IDexport OS_PROJECT_DOMAIN_ID=${OS_PROJECT_DOMAIN_ID:-"default"}export OS_USER_DOMAIN_ID=${OS_USER_DOMAIN_ID:-"default"}export OS_PROJECT_ID=$(openstack project show -c id -f value $OS_PROJECT_NAME)
Copy

Environment

Platform9 Managed OpenStack - v5.8.0 and Higher.

Since the keystone in the main region needs to handle the authentication requests for other subregions, from PMO 5.8.0. version onwards, Platform9 reduced Keystone token catalog size by limiting to region scope for all service endpoints.

So for each subregions the admin.rc file should have OS_AUTH_URL value with the FQDN of the subregion as shown below:

Updated admin.rc
    
xxxxxxxxxx
 
export OS_AUTH_URL=https://sub-region.platform9.keystone/v3export OS_IDENTITY_API_VERSION=3export OS_REGION_NAME="sub-region"export OS_USERNAME=user@domain.comexport OS_PASSWORD=xxxxxxxxxxxecho "Please Enter Accessing Site: "read TENANT_IDexport OS_PROJECT_NAME=$TENANT_IDexport OS_PROJECT_DOMAIN_ID=${OS_PROJECT_DOMAIN_ID:-"default"}export OS_USER_DOMAIN_ID=${OS_USER_DOMAIN_ID:-"default"}export OS_PROJECT_ID=$(openstack project show -c id -f value $OS_PROJECT_NAME)
Copy

Additional Information

Release note: https://platform9.com/docs/v5.8/openstack/release-notes-openstack

Last updated on

Was this page helpful?

Unable Source admin.rc File After PMO 5.8 Upgrade

Problem

Environment

Answer