Unable to dump policy
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
High
|
Lance Bragstad |
Bug Description
I'm having issues dumping policy from Keystone in Pike
root@aio1-
WARNING:
Traceback (most recent call last):
File "/openstack/
sys.
File "/openstack/
_generate_
File "/openstack/
enforcer = _get_enforcer(
File "/openstack/
enforcer = mgr[namespace].obj
File "/openstack/
return self._extension
KeyError: 'keystone'
Normally it works like this with Nova:
root@aio1-
"os_compute_
"os_compute_
"os_compute_
"os_compute_
"os_compute_
...
IRC convo regarding this bug:
[04:00:26PM] logan- hello. I'm trying to use oslopolicy-
[04:01:39PM] @lbragstad logan-: do you have keystone installed?
[04:01:57PM] @lbragstad let me see if i can recreate
[04:03:30PM] logan- o/ @lbragstad. yep keystone's installed. here's the venv and output for the oslopolicy command at the bottom: http://
[04:03:53PM] @lbragstad huh - weird
[04:03:56PM] @lbragstad i can recreate
[04:04:48PM] ayoung @lbragstad, logan- I bet it is a dependency issue
[04:05:25PM] ayoung trying to load Keystone fails cuz some other library is missing, and I bet that is pulled in from oslopolicy polgen
[04:07:05PM] ayoung oslo.policy.
[04:07:05PM] ayoung # With the move of default policy in code list_rules returns a list of
[04:07:05PM] ayoung # the default defined polices.
[04:07:05PM] ayoung keystone = keystone.
[04:07:12PM] ayoung that is from setup.cfg
[04:07:21PM] ayoung is that what iti is trying to load?
[04:07:36PM] @lbragstad well - it's should be an entrypoint in oslo.policy
[04:07:47PM] @lbragstad keystone is just responsible for exposing the namespace
[04:07:59PM] @lbragstad https:/
[04:08:26PM] @lbragstad which is the same as what nova defines
[04:08:28PM] @lbragstad https:/
[04:09:31PM] ayoung seems like it is not registered
[04:12:16PM] ayoung yep, reproduced it here, too
[04:15:32PM] @lbragstad i think we're missing this entrypoint
[04:15:33PM] @lbragstad https:/
[04:15:45PM] @lbragstad which just needs something to return the _ENFORCER
[04:15:55PM] @lbragstad so keystone.
[04:15:59PM] @lbragstad or something like that
[04:16:24PM] @lbragstad logan-: certainly a bug
[04:16:35PM] @lbragstad logan-: would you be able to open up something in launchpad?
[04:16:53PM] @lbragstad we can get a patch up shortly, i think we're missing something with how we wire up the entry poionts
Changed in keystone: | |
status: | New → Confirmed |
importance: | Undecided → High |
tags: | added: office-hours |
Changed in keystone: | |
milestone: | none → queens-rc1 |
milestone: | queens-rc1 → queens-3 |
Fix proposed to branch: master /review. openstack. org/530828
Review: https:/