Install: Swift updates for Mitaka

Update swift configuration for Mitaka. The swift client lacks
support for OS_AUTH_URL without a version and the OpenStack
client has a bug that prevents downloading files, so most of
this patch involves workarounds. Also move the RDO SELinux
workaround to a better location and improve some wording.

Implements: bp installguide-mitaka

Change-Id: Ibb0532f486681c22c8c7d7d4765345b9135e6b51

doc/install-guide/source/swift-controller-include.txt

@@ -82,4 +82,4 @@ following actions:
      [filter:cache]
      use = egg:swift#memcache
      ...
-     memcache_servers = 127.0.0.1:11211
+     memcache_servers = controller:11211

doc/install-guide/source/swift-finalize-installation.rst

@@ -144,15 +144,6 @@ Finalize installation
          # systemctl start openstack-swift-object.service openstack-swift-object-auditor.service \
            openstack-swift-object-replicator.service openstack-swift-object-updater.service
 
-   7. If SELinux errors appear in the ``/var/log/audit/audit.log`` file,
-      change the security context of the ``/srv/node`` directory to the lowest
-      security level (``s0``) for the ``swift_data_t`` type, ``object_r`` role and the
-      ``system_u`` user:
-
-      .. code-block:: console
-
-         # chcon -R system_u:object_r:swift_data_t:s0 /srv/node
-
 .. only:: obs
 
    3. On all nodes, ensure proper ownership of the configuration directory:

doc/install-guide/source/swift-verify.rst

@@ -7,13 +7,29 @@ Verify operation of the Object Storage service.
 
    Perform these steps on the controller node.
 
-#. In each client environment script, configure the Object Storage
+.. only:: rdo
-   service client to use the Identity API version 3:
+
+   .. warning::
+
+      If one or more of these steps do not work, check the
+      ``/var/log/audit/audit.log`` file for SELinux messages indicating denial
+      of actions for the ``swift`` processes. If present, change the security
+      context of the ``/srv/node`` directory to the lowest security level (s0)
+      for the ``swift_data_t`` type, ``object_r`` role and the ``system_u``
+      user:
 
       .. code-block:: console
 
-      $ echo "export OS_AUTH_VERSION=3" \
+         # chcon -R system_u:object_r:swift_data_t:s0 /srv/node
-        | tee -a admin-openrc.sh demo-openrc.sh
+
+#. Due to a
+   `bug <https://bugs.launchpad.net/python-swiftclient/+bug/1554885>`_,
+   you must add a version to the ``OS_AUTH_URL`` variable in the environment
+   scripts. For example:
+
+   .. code-block:: bash
+
+      export OS_AUTH_URL=http://controller:5000/v3
 
 #. Source the ``demo`` credentials:
 
@@ -39,29 +55,42 @@ Verify operation of the Object Storage service.
                          Content-Type: text/plain; charset=utf-8
                         Accept-Ranges: bytes
 
-#. Upload a test file:
+#. Upload a test file to the ``container1`` container:
 
    .. code-block:: console
 
-      $ swift upload container1 FILE
+      $ openstack object create container1 FILE
-      FILE
+      +--------+------------+----------------------------------+
+      | object | container  | etag                             |
+      +--------+------------+----------------------------------+
+      | FILE   | container1 | ee1eca47dc88f4879d8a229cc70a07c6 |
+      +--------+------------+----------------------------------+
 
    Replace ``FILE`` with the name of a local file to upload to the
    ``container1`` container.
 
-#. List containers:
+#. List files in the ``container1`` container:
 
    .. code-block:: console
 
-      $ swift list
+      $ openstack object list container1
-      container1
+      +------+
+      | Name |
+      +------+
+      | FILE |
+      +------+
 
-#. Download a test file:
+#. Download a test file from the ``container1`` container:
 
    .. code-block:: console
 
       $ swift download container1 FILE
-      FILE [auth 0.295s, headers 0.339s, total 0.339s, 0.005 MB/s]
+        FILE [auth 0.410s, headers 0.746s, total 1.001s, 22.494 MB/s]
 
    Replace ``FILE`` with the name of the file uploaded to the
    ``container1`` container.
+
+   .. note::
+
+      Due to a bug with the OpenStack client, you must use the conventional
+      ``swift`` client or other compatible client to download files.