horizon always assumes keystone admin endpoint is configured

Bug #1950659 reported by Vishal Manchanda
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
Fix Released
High
Akihiro Motoki

Bug Description

Some horizon integration tests[1] start failing after devstack stops
creating default keystone admin endpoint[2].

(amotoki)
horizon always assume keystone admin endpoint is configured. Otherwise horizon does not work. keystone does not distinguish public and admin endpoints anymore after Train
and there is no functional difference from other endpoints.
There is no need that horizon requires 'admin' endpoint is configured.
It is better to use OPENSTACK_ENDPOINT_TYPE setting (which defaults to 'publicURL') for all operations.

[1] https://paste.openstack.org/show/810942/
[2] https://review.opendev.org/c/openstack/devstack/+/777345

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to horizon (master)

Reviewed: https://review.opendev.org/c/openstack/horizon/+/817558
Committed: https://opendev.org/openstack/horizon/commit/f9bab3fe195eb13635aa70cb910d94df98d66cf3
Submitter: "Zuul (22348)"
Branch: master

commit f9bab3fe195eb13635aa70cb910d94df98d66cf3
Author: manchandavishal <email address hidden>
Date: Thu Nov 11 18:50:53 2021 +0530

    Create Keystone admin endpoint for horizon integartion job

    CI job "horizon-integration-tests" needs an admin endpoint. Since
    [1] devstack does not create it by default. This patch enables it
    in this job now.

    [1] https://review.opendev.org/c/openstack/devstack/+/777345

    Related-Bug: #1950659
    Change-Id: I5a81344ea3aaa182d8b4d6a15a6240d3c99557cf

Changed in horizon:
importance: Undecided → Critical
Akihiro Motoki (amotoki)
Changed in horizon:
assignee: nobody → Akihiro Motoki (amotoki)
status: New → Triaged
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to horizon (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/horizon/+/835172

Changed in horizon:
status: Triaged → In Progress
Akihiro Motoki (amotoki)
summary: - Horizon Integration tests Fails after devstack sop creating a keystone
- admin endpoint by default
+ horizon always assumes keystone admin endpoint is configured
description: updated
Akihiro Motoki (amotoki)
Changed in horizon:
importance: Critical → High
Revision history for this message
Akihiro Motoki (amotoki) wrote :

Changing the priority to High.
horizon assumes 'admin' endpoint in previous releases, so it does not affect upgrades.
For new deployments, 'admin' endpoint may need to be configured explicitly (depending on deployment tools), so it is nice to fix it soon.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to horizon (stable/yoga)

Fix proposed to branch: stable/yoga
Review: https://review.opendev.org/c/openstack/horizon/+/835143

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to horizon (master)

Reviewed: https://review.opendev.org/c/openstack/horizon/+/835172
Committed: https://opendev.org/openstack/horizon/commit/35a490f4ec734156d8573d43d7ac3225379433c7
Submitter: "Zuul (22348)"
Branch: master

commit 35a490f4ec734156d8573d43d7ac3225379433c7
Author: Akihiro Motoki <email address hidden>
Date: Fri Mar 25 14:08:17 2022 +0900

    Do not assume keystone admin endpoint

    keystone does not distinguish public and admin endpoints since
    Train [1], so there is no need to use a separate endpoint for
    keystone admin operations. admin endpoint still can be configured
    but there is no functional difference anymore from other endpoints.
    We do not need to require admin endpoint and can use an endpoint
    specified by OPENSTACK_ENDPOINT_TYPE for all API operations.

    This commit reverts commit f9bab3fe195eb13635aa70cb910d94df98d66cf3
    as we no longer need the workaround.

    [1] https://review.opendev.org/c/openstack/keystone/+/664246

    Closes-Bug: #1950659
    Change-Id: I2660fd2df8081e1d2d9c84626037f94bd9d137a5

Changed in horizon:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to horizon (stable/yoga)

Reviewed: https://review.opendev.org/c/openstack/horizon/+/835143
Committed: https://opendev.org/openstack/horizon/commit/3a6569960247c578441ee34c1b054da8e77f6481
Submitter: "Zuul (22348)"
Branch: stable/yoga

commit 3a6569960247c578441ee34c1b054da8e77f6481
Author: Akihiro Motoki <email address hidden>
Date: Fri Mar 25 14:08:17 2022 +0900

    Do not assume keystone admin endpoint

    keystone does not distinguish public and admin endpoints since
    Train [1], so there is no need to use a separate endpoint for
    keystone admin operations. admin endpoint still can be configured
    but there is no functional difference anymore from other endpoints.
    We do not need to require admin endpoint and can use an endpoint
    specified by OPENSTACK_ENDPOINT_TYPE for all API operations.

    This commit reverts commit f9bab3fe195eb13635aa70cb910d94df98d66cf3
    as we no longer need the workaround.

    [1] https://review.opendev.org/c/openstack/keystone/+/664246

    Closes-Bug: #1950659
    Change-Id: I2660fd2df8081e1d2d9c84626037f94bd9d137a5

tags: added: in-stable-yoga
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/horizon 22.1.0

This issue was fixed in the openstack/horizon 22.1.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/horizon 22.2.0

This issue was fixed in the openstack/horizon 22.2.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.