[astute] openrc needs to be updated after an auth info is changed on live cluster

Bug #1347542 reported by Sergey Vasilenko
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Triaged
Low
Andrew Woodward
Mitaka
Won't Fix
Low
Andrew Woodward
Newton
Triaged
Low
Andrew Woodward

Bug Description

When you change password of admin from admin tenant in horizon or in cli you need to actualize data in /root/openrc

Changed in fuel:
status: New → Confirmed
importance: Undecided → Medium
Dmitry Ilyin (idv1985)
summary: - openrc needs to be updated after an auth info is changed on live cluster
+ [astute] openrc needs to be updated after an auth info is changed on
+ live cluster
Changed in fuel:
milestone: 5.1 → 6.0
Dmitry Pyzhov (dpyzhov)
Changed in fuel:
assignee: nobody → Fuel Astute Team (fuel-astute)
Changed in fuel:
milestone: 6.0 → 6.1
Revision history for this message
Dima Shulyak (dshulyak) wrote :

Can someone explain what is expected behaviour?
fuel control plane doesnt monitor horizon or openrc, therefore it is impossible to know about fact of change

Changed in fuel:
status: Confirmed → Incomplete
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to fuel-library (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/158091

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Related fix proposed to branch: master
Review: https://review.openstack.org/158995

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Related fix proposed to branch: master
Review: https://review.openstack.org/158996

Changed in fuel:
status: Incomplete → In Progress
assignee: Fuel Astute Team (fuel-astute) → Andrew Woodward (xarses)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/158091
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=498cb1d2479464e03a2b349cd696c8e7fb4a8f08
Submitter: Jenkins
Branch: master

commit 498cb1d2479464e03a2b349cd696c8e7fb4a8f08
Author: Andrew Woodward <email address hidden>
Date: Sat Feb 21 13:15:37 2015 -0800

    Move admin user and openrc up so that its not relied on

    The admin user defined in nailgun should not be used for any service
    purpose. This pulls the user out of the lower levels of the manifests
    so that it's harder to abuse this as a usage.

    Commonly other modules have an their own admin {user,password,tenant}
    parameters which should not be confused with this admin user which is
    only for the enduser to consume.

    Related-bug: #1396594
    Related-bug: #1347542

    Change-Id: Ie991a64617919727724638d582af301ee4519655

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to fuel-library (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/164038

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/164038
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=f9d7cea16048b1805908d3d61fe930fbd0aa0f7d
Submitter: Jenkins
Branch: master

commit f9d7cea16048b1805908d3d61fe930fbd0aa0f7d
Author: Andrew Woodward <email address hidden>
Date: Tue Mar 10 16:12:22 2015 -0700

    Remove un-used filter_quantum_ports.py

    I can find no evidence of filter_quantum_ports.py being used by the
    components we deploy, therefor it should be removed.

    Change-Id: I5d830bf43cc4958700e53a3126b60dee4a0b1a87
    Related-bug: #1347542
    Related-bug: #1396594

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Reviewed: https://review.openstack.org/158996
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=fa44e4ac5ef4428e58b4d1c8e93ba57b58e15818
Submitter: Jenkins
Branch: master

commit fa44e4ac5ef4428e58b4d1c8e93ba57b58e15818
Author: Andrew Woodward <email address hidden>
Date: Sun Feb 22 08:58:09 2015 -0800

    Remove openrc/admin-token usage in q-agent-cleanup.py

    Removes the openrc/admin-token deps in q-agent-cleanup.py. Instead it will
    read the neutron service credentials out of neutron.conf. This has the
    advantage that it must be up to date for neutron to function so if the
    credential is modified it will have to be updated by the administrator.

    Related-bug: #1347542
    Closes-bug: #1396594

    Change-Id: Iee0968a079deacef24b56f34e9314b0ebecad0ae

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Reviewed: https://review.openstack.org/158995
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=39ffb27264509b5f7722922847efe9c4567d3045
Submitter: Jenkins
Branch: master

commit 39ffb27264509b5f7722922847efe9c4567d3045
Author: Andrew Woodward <email address hidden>
Date: Tue Feb 24 17:12:12 2015 -0800

    Dont rely on /root/openrc

    Instead of relying on the presence of /root/openrc file all calls should
    asume it doesn't exist and pass credentials, or set up the env vars
    themselves. In these cases we use existing service users instead of the
    more volitile admin credentials.

    We still create /root/openrc, but it's use is only for the end user.

    Also removes the old and unused openstack::test_file

    Related-bug: #1396594
    Related-bug: #1347542

    Change-Id: I66a20d09d8515f21a7c71a6b8056bc483f6ea3f6

Changed in fuel:
milestone: 6.1 → 7.0
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to fuel-library (stable/6.0)

Related fix proposed to branch: stable/6.0
Review: https://review.openstack.org/192127

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to fuel-library (stable/6.0)

Reviewed: https://review.openstack.org/192127
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=fa790193cbe218539ba341080815c4ead5a7fd12
Submitter: Jenkins
Branch: stable/6.0

commit fa790193cbe218539ba341080815c4ead5a7fd12
Author: Andrew Woodward <email address hidden>
Date: Sun Feb 22 08:58:09 2015 -0800

    Remove openrc/admin-token usage in q-agent-cleanup.py

    Removes the openrc/admin-token deps in q-agent-cleanup.py. Instead it will
    read the neutron service credentials out of neutron.conf. This has the
    advantage that it must be up to date for neutron to function so if the
    credential is modified it will have to be updated by the administrator.

    Related-bug: #1347542
    Closes-bug: #1396594

    Conflicts:
     deployment/puppet/cluster/files/q-agent-cleanup.py
     utils/jenkins/python-test-requirements.txt

    Change-Id: Iee0968a079deacef24b56f34e9314b0ebecad0ae

Revision history for this message
Vladimir Kuklin (vkuklin) wrote :

We no more depend on openrc and the only implication is that user will need to change passwords in openrc by himself instead of puppet. Lowering bug priority.

Changed in fuel:
importance: Medium → Low
milestone: 7.0 → 8.0
status: In Progress → Triaged
Revision history for this message
Mike Scherbakov (mihgen) wrote :

Vladimir, can you please fix description of the bug then? I don't really get what are clear steps to reproduce, and what is expected behavior here.

tags: added: feature
Dmitry Pyzhov (dpyzhov)
tags: added: area-library
Changed in fuel:
milestone: 8.0 → 9.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.