Stack users don't have heat_stack_user role

Bug #1271190 reported by Steven Hardy
20
This bug affects 3 people
Affects Status Importance Assigned to Milestone
OpenStack Heat
Fix Released
Critical
Steven Hardy
tripleo
Fix Released
Critical
Unassigned

Bug Description

https://review.openstack.org/#/c/66646/2/heat/common/heat_keystoneclient.py

Has caused a regression due to expecting this keystoneclient patch which is not yet merged:

https://review.openstack.org/#/c/65985/

The logs show:

ERROR heat.common.keystoneclient [-] Failed to add user ua516789-user-c7hl5wxvl7fk to role heat_stack_user, check role exists!

The problem is keystoneclient doesn't support filtering by name yet, so we'll have to do a brute-force lookup locally until it does.

Steven Hardy (shardy)
Changed in heat:
status: New → In Progress
importance: Undecided → Critical
milestone: none → icehouse-2
assignee: nobody → Steven Hardy (shardy)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (master)

Fix proposed to branch: master
Review: https://review.openstack.org/68135

Revision history for this message
Clint Byrum (clint-fewbar) wrote :

Linking to TripleO so users can find it and cherry-pick the fix above.

Changed in tripleo:
status: New → Triaged
importance: Undecided → Critical
Thierry Carrez (ttx)
Changed in heat:
milestone: icehouse-2 → icehouse-3
Thierry Carrez (ttx)
Changed in heat:
milestone: icehouse-3 → icehouse-2
Revision history for this message
Thierry Carrez (ttx) wrote :

Just failed tests, can't afford to wait for another run, so tagging icehouse-2 without this...

Changed in heat:
milestone: icehouse-2 → icehouse-3
Revision history for this message
Steven Hardy (shardy) wrote :

> Just failed tests, can't afford to wait for another run, so tagging icehouse-2 without this...

:(

I've just kicked off a reverify, looks like https://bugs.launchpad.net/openstack-ci/+bug/1268732

Revision history for this message
Matt Riedemann (mriedem) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (master)

Reviewed: https://review.openstack.org/68135
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=a4cbd9cdb38ae38887323bad5dc434532bacee19
Submitter: Jenkins
Branch: master

commit a4cbd9cdb38ae38887323bad5dc434532bacee19
Author: Steven Hardy <email address hidden>
Date: Tue Jan 21 14:51:16 2014 +0000

    Fix adding heat_stack_user role via v3 API

    A regression was introduced via 301a894 because it expects
    keystoneclient functionality which is not yet merged/released,
    so instead of passing the name to roles.list() we must filter
    the results locally to lookup the role ID.

    The lack of filtering support is a general issue with the v3
    keystoneclient interfaces, so when it's fixed we can remove
    this workaround.

    Closes-Bug: #1271190
    Change-Id: I1b29cc131496e4b19493a8cd8e6d4ed913db0938

Changed in heat:
status: In Progress → Fix Committed
Changed in tripleo:
status: Triaged → Fix Released
Thierry Carrez (ttx)
Changed in heat:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in heat:
milestone: icehouse-3 → 2014.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.