heat is DOA in mitaka-3

[Steven Dake]

using the demos/heat scripts (launch) the following happens:

STDAKE-M-J2VL:demo sdake$ heat event-list steak
+---------------+--------------------------------------+------------------------+-----------------+---------------------+
| resource_name | id | resource_status_reason | resource_status | event_time |
+---------------+--------------------------------------+------------------------+-----------------+---------------------+
| steak | 07f2c79f-44c6-4a62-84ae-c52b1a401240 | Authorization failed. | CREATE_FAILED | 2016-03-05T18:48:39 |
+---------------+--------------------------------------+------------------------+-----------------+---------------------+

[Vikram Hosakote (vhosakot)]

I dug into this bug a bit, and here is my analysis.

Error in log:

$ docker exec cron grep -r ERROR /var/log/kolla/heat/ | grep Domain
/var/log/kolla/heat/heat-engine.log:2016-03-14 22:26:12.371 26 ERROR heat.common.keystoneclient [req-7d2215bb-9656-4fbf-9663-65938e60826d - admin - default default] Domain admin client authentication failed

Per the Liberty Heat install guide http://docs.openstack.org/liberty/install-guide-ubuntu/heat-install.html, I ran the following commands and still see the same error.

openstack role add --project service --user heat admin
openstack service create --name heat-cfn --description "Orchestration" cloudformation
openstack endpoint create --region RegionOne cloudformation public http://192.168.122.202:8000/v1
openstack endpoint create --region RegionOne cloudformation internal http://192.168.122.202:8000/v1
openstack endpoint create --region RegionOne cloudformation admin http://192.168.122.202:8000/v1
openstack role add --project admin --user admin heat_stack_owner

Below are two heat bugs related to this issue.

https://bugs.launchpad.net/heat/+bug/1471870

https://bugs.launchpad.net/heat/+bug/1470567

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/295025

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/295025
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=59298332fcce78d043692594177aa72e6ffb8d10
Submitter: Jenkins
Branch: master

commit 59298332fcce78d043692594177aa72e6ffb8d10
Author: SamYaple <email address hidden>
Date: Sun Mar 20 17:18:05 2016 +0000

    Fix heat endpoint registration

    This got lost in the keystone v3 switchover.

    Change-Id: I014c28e71335672153df79be2110e7585d7a21c0
    Related-Bug: 1553565

[Sam Yaple (s8m)]

I fixed the endpoints, but apparently that doesnt solve the whole issue. I dont have cycles to look into further issues. My guess would be trusts

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/296878

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/296878
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=7524b3770fedd730bf2c49d26a94135c5357781b
Submitter: Jenkins
Branch: master

commit 7524b3770fedd730bf2c49d26a94135c5357781b
Author: Steven Dake <email address hidden>
Date: Wed Mar 23 23:41:59 2016 -0400

    Make heat work

    Fix the domain user to point at heat instead of some nonsensenical
    value. Now stack-create works properly.

    Change-Id: If2bc57c2516ffe724999515bb6aa3eeb31a0c980
    Co-Authored-By: Angus Salkeld <email address hidden>
    Closes-Bug: #1553565

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/297200

[OpenStack Infra (hudson-openstack)]

Change abandoned by Swapnil Kulkarni (coolsvap) (<email address hidden>) on branch: stable/mitaka
Review: https://review.openstack.org/296992

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/297200
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=5b18913f367b417941ac348a572152fedd5ff756
Submitter: Jenkins
Branch: master

commit 5b18913f367b417941ac348a572152fedd5ff756
Author: SamYaple <email address hidden>
Date: Thu Mar 24 15:07:04 2016 +0000

    Change heat domain to heat_user_domain

    heat_user_domain is what is in the docs, but more importantly it is
    what we have in Liberty and will be a requirement to doing upgrades
    properly.

    Change-Id: I9cf53d43b4faaa5d1b0156cc50192722d2739602
    Closes-Bug: #1553565

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/297517

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/297517
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=a66678b138c11b11c892805abd10abc47b127181
Submitter: Jenkins
Branch: stable/mitaka

commit a66678b138c11b11c892805abd10abc47b127181
Author: SamYaple <email address hidden>
Date: Thu Mar 24 15:07:04 2016 +0000

    Change heat domain to heat_user_domain

    heat_user_domain is what is in the docs, but more importantly it is
    what we have in Liberty and will be a requirement to doing upgrades
    properly.

    Change-Id: I9cf53d43b4faaa5d1b0156cc50192722d2739602
    Closes-Bug: #1553565
    (cherry picked from commit 5b18913f367b417941ac348a572152fedd5ff756)

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/kolla 2.0.0 release.

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/kolla 1.1.0 release.

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/kolla 3.0.0.0b1 development milestone.