credentials is incorrect after transport updated

Bug #1697623 reported by huangtianhua
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Heat
Fix Released
High
huangtianhua

Bug Description

1. create a stack with a nova server and software_config_transport=POLL_SERVER_HEAT
***************
resources:
  my_server:
   type: OS::Nova::Server
   properties:
     user_data_format: SOFTWARE_CONFIG
     software_config_transport: {get_param: transport}
********************
2. stack create success, and we can get the resource metadata:
   {
  "os-collect-config": {
    "heat": {
      "password": "cf28968a97e145eaa3ea4de3cdcaa390",
      "user_id": "728bd79a64e94c6f96ed9376dd06612e",
      "stack_id": "s1/9dee60ee-5a19-46d8-abe5-545267372545",
      "resource_name": "th_server",
      "auth_url": "http://10.3.150.21/identity/v3/",
      "project_id": "aa72a55cf11e4549a18572f5ae81576e"
    },
    "collectors": [
      "ec2",
      "heat",
      "local"
    ]
  },
  "deployments": []
}
3. update the stack to change software_config_transport=ZAQAR_MESSAGE, then we get the resource metadata:
{
  "deployments": [],
  "os-collect-config": {
    "zaqar": {
      "project_id": "aa72a55cf11e4549a18572f5ae81576e",
      "auth_url": "http://10.3.150.21/identity/v3/",
      "password": "3c447e63a5e9403daa50922bb93abf43",
      "user_id": "728bd79a64e94c6f96ed9376dd06612e",
      "queue_id": "s1-th_server-42qyz6i2rhqv"
    },
    "heat": {
      "password": null,
      "user_id": null,
      "stack_id": null,
      "resource_name": null,
      "auth_url": null,
      "project_id": null
    },
    "collectors": [
      "ec2",
      "zaqar",
      "local"
    ]
  }
}
4. we can see that only the password is changed, but the user_id is unchanged. Although the stack is set to UPDATE_COMPLETE, but we can see heat-enging logs and there is an exception (Unauthorized) while updating software config transport, we just log it and ignore it: http://paste.openstack.org/show/612373/
5. the stack can not be deleted due the same reason: http://paste.openstack.org/show/612374/

Changed in heat:
assignee: nobody → huangtianhua (huangtianhua)
Changed in heat:
importance: Undecided → High
description: updated
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (master)

Fix proposed to branch: master
Review: https://review.openstack.org/473765

Changed in heat:
status: New → In Progress
Rico Lin (rico-lin)
Changed in heat:
milestone: none → pike-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (master)

Reviewed: https://review.openstack.org/473765
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=e23fcfe93aa2755903e4a7f4b1d81ae4612fb88d
Submitter: Jenkins
Branch: master

commit e23fcfe93aa2755903e4a7f4b1d81ae4612fb88d
Author: huangtianhua <email address hidden>
Date: Tue Jun 13 17:46:39 2017 +0800

    Use correct user password as occ credential

    Don't generate/update user password again if
    the user has already been created, to make sure
    the occ credential works.

    Change-Id: Iffcb7aa0fb256d36aef64f5fd0ec37af4bf47be8
    Closes-Bug: #1697623

Changed in heat:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (stable/ocata)

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/475610

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (stable/ocata)

Reviewed: https://review.openstack.org/475610
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=2ca4aad532b25a9301427593a4a426691080616f
Submitter: Jenkins
Branch: stable/ocata

commit 2ca4aad532b25a9301427593a4a426691080616f
Author: huangtianhua <email address hidden>
Date: Tue Jun 13 17:46:39 2017 +0800

    Use correct user password as occ credential

    Don't generate/update user password again if
    the user has already been created, to make sure
    the occ credential works.

    Change-Id: Iffcb7aa0fb256d36aef64f5fd0ec37af4bf47be8
    Closes-Bug: #1697623
    (cherry picked from commit e23fcfe93aa2755903e4a7f4b1d81ae4612fb88d)

tags: added: in-stable-ocata
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/heat 9.0.0.0b3

This issue was fixed in the openstack/heat 9.0.0.0b3 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/heat 8.0.3

This issue was fixed in the openstack/heat 8.0.3 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.