keystone auth url not updated when switching from http to https
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
charm-openstack-service-checks |
Fix Released
|
High
|
Unassigned |
Bug Description
openstack-
Steps to reproduce:
Deploy openstack-
Ensure keystone is configured as http.
Add relation keystone:
Reconfigure keystone to use ssl.
Cause an Openstack Service endpoint change. That will trigger identity-
Todo: update nagios.novarc file upon keystone auth url change.
Related branches
- Chris Sanders (community): Approve
- Giuseppe Petralia: Approve
- Zachary Zehring: Pending requested
-
Diff: 409 lines (+196/-56)4 files modifiedlib/lib_openstack_service_checks.py (+49/-12)
reactive/openstack_service_checks.py (+17/-6)
tests/functional/test_deploy.py (+105/-38)
tests/unit/test_lib.py (+25/-0)
tags: | added: field-high |
Changed in charm-openstack-service-checks: | |
importance: | Undecided → High |
assignee: | nobody → Zachary Zehring (zzehring) |
status: | New → In Progress |
Changed in charm-openstack-service-checks: | |
status: | In Progress → Incomplete |
summary: |
- adding ca-cert does not render new nagios-novarc template + keystone auth url not updated when switching from http to https |
description: | updated |
Changed in charm-openstack-service-checks: | |
status: | Triaged → In Progress |
Changed in charm-openstack-service-checks: | |
assignee: | nobody → Adam Dyess (addyess) |
Changed in charm-openstack-service-checks: | |
status: | In Progress → Fix Committed |
Changed in charm-openstack-service-checks: | |
milestone: | none → 20.08 |
Changed in charm-openstack-service-checks: | |
assignee: | Adam Dyess (addyess) → nobody |
It looks like there are two issues here:
1. save_creds() does not save cacert. marker. to/oTj3Ay
http://
2. The auth_url is pointing to http instead of https. notifications- relation- changed {'username': 'nagios', 'password': 'WyTyJSFs8m6qcT 4B3wC7hx8ZMTk3C 776356ZmjW6sHPB BZzzTsRwzksMMyN KLkB6', 'region': 'RegionOne', 'project_name': 'services', 'auth_version': '3', 'user_domain_name': 'service_domain', 'project_ domain_ name': 'service_domain', 'auth_url': 'http:// keystoneinterna l.production. solutionsqa: 35357/v3'}
020-06-10 14:34:03 DEBUG identity-