Wrong tenant is used for trust generation

Bug #1318706 reported by Dmitry Mescheryakov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Sahara
Fix Released
High
Dmitry Mescheryakov
Icehouse
Fix Released
High
Dmitry Mescheryakov

Bug Description

Transient clusters do not work if CONF.os_admin_username does not have access to user's tenant. The reason is that they wrongly generate trust. In
https://github.com/openstack/sahara/blob/2014.1/sahara/service/trusts.py#L34

we get Keystone client using CONF.os_admin_username and user's tenant. That is incorrect as CONF.os_admin_username user might have no access to the user's tenant, we should use CONF.os_admin_tenant_name instead.

Changed in sahara:
assignee: nobody → Dmitry Mescheryakov (dmitrymex)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to sahara (master)

Fix proposed to branch: master
Review: https://review.openstack.org/93322

Changed in sahara:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to sahara (stable/icehouse)

Fix proposed to branch: stable/icehouse
Review: https://review.openstack.org/97453

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to sahara (master)

Reviewed: https://review.openstack.org/93322
Committed: https://git.openstack.org/cgit/openstack/sahara/commit/?id=7a3459a6433e3be5fc1619d8ba9f7875ccca6335
Submitter: Jenkins
Branch: master

commit 7a3459a6433e3be5fc1619d8ba9f7875ccca6335
Author: Dmitry Mescheryakov <email address hidden>
Date: Mon May 12 19:23:28 2014 +0400

    Create trusts for admin user with correct tenant name

    See the bug description for details.

    Closes-Bug: 1318706
    Change-Id: Iaed2b9f2ff8964df3d2c5753dcfaf2688046828c

Changed in sahara:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to sahara (stable/icehouse)

Reviewed: https://review.openstack.org/97453
Committed: https://git.openstack.org/cgit/openstack/sahara/commit/?id=af48075d1f9e3b66f9e2600a2ff3153fc6769a8d
Submitter: Jenkins
Branch: stable/icehouse

commit af48075d1f9e3b66f9e2600a2ff3153fc6769a8d
Author: Dmitry Mescheryakov <email address hidden>
Date: Mon May 12 19:23:28 2014 +0400

    Create trusts for admin user with correct tenant name

    See the bug description for details.

    Closes-Bug: 1318706
    Change-Id: Iaed2b9f2ff8964df3d2c5753dcfaf2688046828c

tags: added: in-stable-icehouse
Changed in sahara:
milestone: none → juno-1
importance: Undecided → High
Thierry Carrez (ttx)
Changed in sahara:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in sahara:
milestone: juno-1 → 2014.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.