parallel deployment race conditions for keystone roles

Bug #1350036 reported by Vladimir Kuklin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
High
Vladimir Kuklin

Bug Description

{"build_id": "2014-07-29_21-55-53", "ostf_sha": "9c0454b2197756051fc9cee3cfd856cf2a4f0875", "build_number": "371", "auth_required": true, "api": "1.0", "nailgun_sha": "8cf375f7687d7d0797e7f085a909df8087fc82a6", "production": "docker", "fuelmain_sha": "83cb086fd292d23cb6b9d431ff30bfa28c8992cd", "astute_sha": "b16efcec6b4af1fb8669055c053fbabe188afa67", "feature_groups": ["mirantis"], "release": "5.1", "fuellib_sha": "5873ab37df3fd73074a0b443c1fa1fdf27cbab54"}

in Logs on the second controller running in parallel with the third one:

Execution of '/usr/bin/keystone --os-token XZpulEDf --os-endpoint http://10.108.2.4:35357/v2.0/ user-role-remove --user-id 4fbd26962cbf4696b2d0676ae8988ade --tenant-id d56ffbb1343b4b918fe09a7a508efaaf --role-id 9fe2ff9ee4384b1894a90878d3e92bab' returned 1: Cannot remove role that has not been granted, 9fe2ff9ee4384b1894a90878d3e92bab (HTTP 404)

We need to handle the situation when user role is already deleted

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/110469

Changed in fuel:
assignee: Fuel Library Team (fuel-library) → Vladimir Kuklin (vkuklin)
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/110469
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=28e12abb9270b598aae8105735fce6bd2e703254
Submitter: Jenkins
Branch: master

commit 28e12abb9270b598aae8105735fce6bd2e703254
Author: Vladimir Kuklin <email address hidden>
Date: Wed Jul 30 00:51:18 2014 +0400

    Make keystone user role removal idempotent

    Catch 404 error for role removal
    in keystone puppet provider

    Change-Id: I97c64a5f68b842f706f9792c914ce46fa112d3dd
    Closes-bug: #1350036

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
Anastasia Palkina (apalkina) wrote :

Verified on ISO #390
"build_id": "2014-08-04_02-01-14",
"ostf_sha": "a3fa823ea0e4e03beb637ae07a91adea82c33182",
"build_number": "390",
"auth_required": true,
"api": "1.0",
"nailgun_sha": "bd0127be0061029f9f910547db5e633c82244942",
"production": "docker",
"fuelmain_sha": "e99879292cf6e96b8991300d947df76b69134bb1",
"astute_sha": "ce86172e77661026c91fdf1ff8066d7df1f7d89d",
"feature_groups": ["mirantis", "experimental"],
"release": "5.1",
"fuellib_sha": "4e3fdd75f8dabde8e5d07067545d8043a70a176b"

Changed in fuel:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.