| 2016-08-10 23:18:50 |
Brad Marshall |
bug |
|
|
added bug |
| 2016-08-10 23:19:10 |
Brad Marshall |
bug |
|
|
added subscriber The Canonical Sysadmins |
| 2016-09-06 09:38:44 |
James Page |
glance-simplestreams-sync (Juju Charms Collection): status |
New |
Triaged |
|
| 2016-09-06 09:38:46 |
James Page |
glance-simplestreams-sync (Juju Charms Collection): milestone |
|
16.10 |
|
| 2016-09-06 09:38:48 |
James Page |
glance-simplestreams-sync (Juju Charms Collection): importance |
Undecided |
High |
|
| 2016-09-15 13:18:33 |
Liam Young |
glance-simplestreams-sync (Juju Charms Collection): assignee |
|
Liam Young (gnuoy) |
|
| 2016-09-19 09:13:10 |
Liam Young |
bug task added |
|
glance-simplestreams-sync-charm |
|
| 2016-09-19 09:34:46 |
Liam Young |
branch linked |
|
lp:~gnuoy/charms/trusty/glance-simplestreams-sync/ksv3 |
|
| 2016-09-19 09:42:31 |
Liam Young |
branch linked |
|
lp:~gnuoy/charm-helpers/api-domain-id |
|
| 2016-10-14 09:04:35 |
James Page |
glance-simplestreams-sync (Juju Charms Collection): milestone |
16.10 |
17.01 |
|
| 2016-10-28 10:18:42 |
Edward Hope-Morley |
tags |
canonical-bootstack |
canonical-bootstack ks-v3 openstack |
|
| 2017-02-23 20:42:41 |
James Page |
charm-glance-simplestreams-sync: importance |
Undecided |
High |
|
| 2017-02-23 20:42:41 |
James Page |
charm-glance-simplestreams-sync: status |
New |
Triaged |
|
| 2017-02-23 20:42:41 |
James Page |
charm-glance-simplestreams-sync: assignee |
|
Liam Young (gnuoy) |
|
| 2017-02-23 20:42:42 |
James Page |
glance-simplestreams-sync (Juju Charms Collection): status |
Triaged |
Invalid |
|
| 2017-06-07 07:47:40 |
Sandor Zeestraten |
bug |
|
|
added subscriber Sandor Zeestraten |
| 2017-06-13 11:11:14 |
Alex Kavanagh |
charm-glance-simplestreams-sync: assignee |
Liam Young (gnuoy) |
Alex Kavanagh (ajkavanagh) |
|
| 2017-09-02 07:22:41 |
Nobuto Murata |
bug |
|
|
added subscriber Nobuto Murata |
| 2017-09-15 18:16:07 |
Felipe Reyes |
glance-simplestreams-sync (Juju Charms Collection): assignee |
Liam Young (gnuoy) |
|
|
| 2017-09-17 03:30:28 |
Dominique Poulain |
bug |
|
|
added subscriber Dominique Poulain |
| 2017-09-18 13:41:10 |
Alex Kavanagh |
charm-glance-simplestreams-sync: assignee |
Alex Kavanagh (ajkavanagh) |
|
|
| 2017-09-20 16:07:34 |
Felipe Reyes |
glance-simplestreams-sync-charm: status |
New |
Invalid |
|
| 2017-09-28 13:16:01 |
Nobuto Murata |
tags |
canonical-bootstack ks-v3 openstack |
canonical-bootstack cpe-onsite ks-v3 openstack |
|
| 2017-12-13 09:29:11 |
Ante Karamatić |
bug |
|
|
added subscriber Ante Karamatić |
| 2018-03-08 11:14:10 |
Alvaro Uria |
bug |
|
|
added subscriber Legacy - Canonical WTFB |
| 2018-04-05 10:56:58 |
Junien F |
bug |
|
|
added subscriber Junien Fridrick |
| 2018-04-05 12:51:01 |
Tom Haddon |
bug |
|
|
added subscriber Canonical Field High |
| 2018-04-09 15:50:09 |
Scott Moser |
description |
I was deploying a Mitaka Trusty 16.04 charm based Openstack cloud (using the cloud archives), including glance-simplestreams-sync, using keystone v3.
Once I had everything deployed, the glance-simplestreams-sync service couldn't authenticate because it's using keystone v2, not v3, as you can see from the following:
INFO * 08-10 23:16:01 [PID:33554] * root * glance-simplestreams-sync started.
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * REQ: curl -i -X POST http://x.y.z.240:5000/v2.0/tokens -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient" -d '{"auth": {"passwordCredentials": {"username": "image-stream", "password": "thisisnotapassword"}, "tenantId": "blahblahtenantidblahblah"}}'
INFO * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * Starting new HTTP connection (1): x.y.z.240
DEBUG * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * Setting read timeout to None
DEBUG * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * "POST /v2.0/tokens HTTP/1.1" 401 114
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * RESP: [401] CaseInsensitiveDict({'content-length': '114', 'vary': 'X-Auth-Token', 'server': 'Apache/2.4.7 (Ubuntu)', 'date': 'Wed, 10 Aug 2016 23:16:01 GMT', 'www-authenticate': 'Keystone uri="http://x.y.z.240:5000"', 'x-openstack-request-id': 'req-f8aaf12d-01ea-46be-869a-6948ab38361b', 'content-type': 'application/json', 'x-distribution': 'Ubuntu'})
RESP BODY: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * Request returned failure status: 401
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.v2_0.client * Authorization Failed.
Please update the charm to understand when its using keystone v3 and use the right auth methods. |
I was deploying a Mitaka Trusty 16.04 charm based Openstack cloud (using the cloud archives), including glance-simplestreams-sync, using keystone v3.
Once I had everything deployed, the glance-simplestreams-sync service couldn't authenticate because it's using keystone v2, not v3, as you can see from the following:
INFO * 08-10 23:16:01 [PID:33554] * root * glance-simplestreams-sync started.
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * REQ: curl -i -X POST http://x.y.z.240:5000/v2.0/tokens -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient" -d '{"auth": {"passwordCredentials": {"username": "image-stream", "password": "thisisnotapassword"}, "tenantId": "blahblahtenantidblahblah"}}'
INFO * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * Starting new HTTP connection (1): x.y.z.240
DEBUG * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * Setting read timeout to None
DEBUG * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * "POST /v2.0/tokens HTTP/1.1" 401 114
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * RESP: [401] CaseInsensitiveDict({'content-length': '114', 'vary': 'X-Auth-Token', 'server': 'Apache/2.4.7 (Ubuntu)', 'date': 'Wed, 10 Aug 2016 23:16:01 GMT', 'www-authenticate': 'Keystone uri="http://x.y.z.240:5000"', 'x-openstack-request-id': 'req-f8aaf12d-01ea-46be-869a-6948ab38361b', 'content-type': 'application/json', 'x-distribution': 'Ubuntu'})
RESP BODY: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * Request returned failure status: 401
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.v2_0.client * Authorization Failed.
Please update the charm to understand when its using keystone v3 and use the right auth methods.
Related bugs:
* bug 1686437: glance sync: need keystone v3 auth support |
|
| 2018-04-09 16:06:36 |
Scott Moser |
merge proposal linked |
|
https://code.launchpad.net/~smoser/ubuntu/+source/simplestreams/+git/simplestreams/+merge/341215 |
|
| 2018-04-09 16:07:15 |
Scott Moser |
merge proposal linked |
|
https://code.launchpad.net/~smoser/ubuntu/+source/simplestreams/+git/simplestreams/+merge/341214 |
|
| 2018-04-09 16:55:38 |
Dan Streetman |
bug |
|
|
added subscriber Dan Streetman |
| 2018-04-12 16:32:18 |
Scott Moser |
branch linked |
|
lp:~thedac/simplestreams/lp1611987 |
|
| 2018-04-12 16:32:34 |
Scott Moser |
bug task added |
|
simplestreams |
|
| 2018-04-12 16:32:45 |
Scott Moser |
bug task added |
|
simplestreams (Ubuntu) |
|
| 2018-04-12 16:32:54 |
Scott Moser |
simplestreams (Ubuntu): status |
New |
Confirmed |
|
| 2018-04-12 16:32:59 |
Scott Moser |
simplestreams (Ubuntu): importance |
Undecided |
Medium |
|
| 2018-04-12 16:33:03 |
Scott Moser |
simplestreams: status |
New |
Confirmed |
|
| 2018-04-12 16:33:06 |
Scott Moser |
simplestreams: importance |
Undecided |
Medium |
|
| 2018-04-12 16:33:12 |
Scott Moser |
simplestreams: assignee |
|
David Ames (thedac) |
|
| 2018-04-12 16:33:20 |
Scott Moser |
nominated for series |
|
Ubuntu Bionic |
|
| 2018-04-12 16:33:20 |
Scott Moser |
bug task added |
|
simplestreams (Ubuntu Bionic) |
|
| 2018-04-12 16:33:20 |
Scott Moser |
nominated for series |
|
Ubuntu Artful |
|
| 2018-04-12 16:33:20 |
Scott Moser |
bug task added |
|
simplestreams (Ubuntu Artful) |
|
| 2018-04-12 16:33:20 |
Scott Moser |
nominated for series |
|
Ubuntu Xenial |
|
| 2018-04-12 16:33:20 |
Scott Moser |
bug task added |
|
simplestreams (Ubuntu Xenial) |
|
| 2018-04-12 16:33:29 |
Scott Moser |
simplestreams (Ubuntu Xenial): status |
New |
Confirmed |
|
| 2018-04-12 16:33:32 |
Scott Moser |
simplestreams (Ubuntu Artful): status |
New |
Confirmed |
|
| 2018-04-12 16:33:35 |
Scott Moser |
simplestreams (Ubuntu Xenial): importance |
Undecided |
Medium |
|
| 2018-04-12 16:33:38 |
Scott Moser |
simplestreams (Ubuntu Artful): importance |
Undecided |
Medium |
|
| 2018-04-12 16:40:53 |
Launchpad Janitor |
branch linked |
|
lp:simplestreams |
|
| 2018-04-12 17:50:56 |
Ryan Beisner |
charm-glance-simplestreams-sync: assignee |
|
Ryan Beisner (1chb1n) |
|
| 2018-04-12 17:51:00 |
Ryan Beisner |
charm-glance-simplestreams-sync: milestone |
|
18.05 |
|
| 2018-04-12 17:57:45 |
Ryan Beisner |
charm-glance-simplestreams-sync: status |
Triaged |
In Progress |
|
| 2018-04-12 18:27:02 |
Ryan Beisner |
charm-glance-simplestreams-sync: status |
In Progress |
Fix Committed |
|
| 2018-04-13 07:07:45 |
William Grant |
bug |
|
|
added subscriber William Grant |
| 2018-04-13 11:24:20 |
Launchpad Janitor |
simplestreams (Ubuntu Bionic): status |
Confirmed |
Fix Released |
|
| 2018-04-24 21:01:51 |
Felipe Reyes |
description |
I was deploying a Mitaka Trusty 16.04 charm based Openstack cloud (using the cloud archives), including glance-simplestreams-sync, using keystone v3.
Once I had everything deployed, the glance-simplestreams-sync service couldn't authenticate because it's using keystone v2, not v3, as you can see from the following:
INFO * 08-10 23:16:01 [PID:33554] * root * glance-simplestreams-sync started.
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * REQ: curl -i -X POST http://x.y.z.240:5000/v2.0/tokens -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient" -d '{"auth": {"passwordCredentials": {"username": "image-stream", "password": "thisisnotapassword"}, "tenantId": "blahblahtenantidblahblah"}}'
INFO * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * Starting new HTTP connection (1): x.y.z.240
DEBUG * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * Setting read timeout to None
DEBUG * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * "POST /v2.0/tokens HTTP/1.1" 401 114
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * RESP: [401] CaseInsensitiveDict({'content-length': '114', 'vary': 'X-Auth-Token', 'server': 'Apache/2.4.7 (Ubuntu)', 'date': 'Wed, 10 Aug 2016 23:16:01 GMT', 'www-authenticate': 'Keystone uri="http://x.y.z.240:5000"', 'x-openstack-request-id': 'req-f8aaf12d-01ea-46be-869a-6948ab38361b', 'content-type': 'application/json', 'x-distribution': 'Ubuntu'})
RESP BODY: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * Request returned failure status: 401
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.v2_0.client * Authorization Failed.
Please update the charm to understand when its using keystone v3 and use the right auth methods.
Related bugs:
* bug 1686437: glance sync: need keystone v3 auth support |
[Impact]
simplestreams can't sync images when keystone is configured to use v3, keystone v2 is deprecated since mitaka[0] (the version shipped with xenial)
The OpenStack Keystone charm supports v3 only since Queens and later[1]
[Test Case]
* deploy a openstack environment with keystone v3 enabled
- get a copy of the bundle available at http://paste.ubuntu.com/p/hkhsHKqt4h/ , this bundle deploys a minimal version of xenial-mitaka.
Expected result:
- "glance image-list" lists trusty and xenial images
- the file glance-simplestreams-sync/0:/var/log/glance-simplestreams-sync.log contains details of the images pulled from cloud-images.u.c (example: https://pastebin.ubuntu.com/p/RWG8QrkVDz/ )
Actual result:
- "glance image-list" is empty
- the file glance-simplestreams-sync/0:/var/log/glance-simplestreams-sync.log contains the following stacktrace
INFO * 04-09 22:04:06 [PID:14571] * root * Calling DryRun mirror to get item list
ERROR * 04-09 22:04:06 [PID:14571] * root * Exception during syncing:
Traceback (most recent call last):
File "/usr/share/glance-simplestreams-sync/glance-simplestreams-sync.py", line 471, in main
do_sync(charm_conf, status_exchange)
File "/usr/share/glance-simplestreams-sync/glance-simplestreams-sync.py", line 232, in do_sync
objectstore=store)
File "/usr/lib/python2.7/dist-packages/simplestreams/mirrors/glance.py", line 374, in __init__
super(ItemInfoDryRunMirror, self).__init__(config, objectstore)
File "/usr/lib/python2.7/dist-packages/simplestreams/mirrors/glance.py", line 126, in __init__
self.keystone_creds = openstack.load_keystone_creds()
File "/usr/lib/python2.7/dist-packages/simplestreams/openstack.py", line 61, in load_keystone_creds
raise ValueError("(tenant_id or tenant_name)")
ValueError: (tenant_id or tenant_name)
[Regression Potential]
* A possible regression will manifest itself figuring out if v2 or v3 should be used, after the connection is made there are no further changes introduced by this SRU
[Other Info]
I was deploying a Mitaka Trusty 16.04 charm based Openstack cloud (using the cloud archives), including glance-simplestreams-sync, using keystone v3.
Once I had everything deployed, the glance-simplestreams-sync service couldn't authenticate because it's using keystone v2, not v3, as you can see from the following:
INFO * 08-10 23:16:01 [PID:33554] * root * glance-simplestreams-sync started.
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * REQ: curl -i -X POST http://x.y.z.240:5000/v2.0/tokens -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient" -d '{"auth": {"passwordCredentials": {"username": "image-stream", "password": "thisisnotapassword"}, "tenantId": "blahblahtenantidblahblah"}}'
INFO * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * Starting new HTTP connection (1): x.y.z.240
DEBUG * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * Setting read timeout to None
DEBUG * 08-10 23:16:01 [PID:33554] * urllib3.connectionpool * "POST /v2.0/tokens HTTP/1.1" 401 114
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * RESP: [401] CaseInsensitiveDict({'content-length': '114', 'vary': 'X-Auth-Token', 'server': 'Apache/2.4.7 (Ubuntu)', 'date': 'Wed, 10 Aug 2016 23:16:01 GMT', 'www-authenticate': 'Keystone uri="http://x.y.z.240:5000"', 'x-openstack-request-id': 'req-f8aaf12d-01ea-46be-869a-6948ab38361b', 'content-type': 'application/json', 'x-distribution': 'Ubuntu'})
RESP BODY: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.session * Request returned failure status: 401
DEBUG * 08-10 23:16:01 [PID:33554] * keystoneclient.v2_0.client * Authorization Failed.
Please update the charm to understand when its using keystone v3 and use the right auth methods.
Related bugs:
* bug 1686437: glance sync: need keystone v3 auth support |
|
| 2018-04-24 21:02:01 |
Felipe Reyes |
summary |
glance-simplestreams-sync charm doesn't support keystone v3 |
[SRU] glance-simplestreams-sync charm doesn't support keystone v3 |
|
| 2018-04-30 14:31:26 |
Edward Hope-Morley |
tags |
canonical-bootstack cpe-onsite ks-v3 openstack |
canonical-bootstack cpe-onsite ks-v3 openstack sts |
|
| 2018-05-11 23:10:43 |
Vern Hart |
bug |
|
|
added subscriber Vern Hart |
| 2018-06-11 22:12:01 |
David Ames |
charm-glance-simplestreams-sync: status |
Fix Committed |
Fix Released |
|
| 2018-10-05 15:23:58 |
Dan Streetman |
removed subscriber Dan Streetman |
|
|
|
| 2018-12-19 08:59:37 |
Alex Kavanagh |
simplestreams: status |
Confirmed |
Fix Released |
|
| 2018-12-19 08:59:45 |
Alex Kavanagh |
simplestreams: assignee |
David Ames (thedac) |
|
|
| 2019-09-17 09:15:58 |
Joshua Powers |
simplestreams (Ubuntu Artful): status |
Confirmed |
Won't Fix |
|
| 2019-09-17 09:18:10 |
Joshua Powers |
simplestreams (Ubuntu Xenial): assignee |
|
Joshua Powers (powersj) |
|
| 2019-09-17 09:18:22 |
Joshua Powers |
simplestreams (Ubuntu Xenial): assignee |
Joshua Powers (powersj) |
Rafael David Tinoco (rafaeldtinoco) |
|
| 2019-09-18 07:29:42 |
Rafael David Tinoco |
bug |
|
|
added subscriber Canonical Server Team |
| 2019-09-20 09:46:55 |
Rafael David Tinoco |
simplestreams (Ubuntu Xenial): status |
Confirmed |
In Progress |
|
| 2019-09-20 10:16:14 |
Launchpad Janitor |
merge proposal linked |
|
https://code.launchpad.net/~rafaeldtinoco/ubuntu/+source/simplestreams/+git/simplestreams/+merge/373030 |
|
| 2019-10-16 15:21:07 |
Rafael David Tinoco |
simplestreams (Ubuntu Xenial): status |
In Progress |
Won't Fix |
|
| 2019-10-16 15:22:36 |
Rafael David Tinoco |
simplestreams (Ubuntu Xenial): assignee |
Rafael David Tinoco (rafaeldtinoco) |
|
|
| 2019-10-16 15:22:37 |
Rafael David Tinoco |
simplestreams (Ubuntu Bionic): assignee |
|
Rafael David Tinoco (rafaeldtinoco) |
|
| 2019-11-04 18:34:48 |
Rafael David Tinoco |
simplestreams (Ubuntu Bionic): assignee |
Rafael David Tinoco (rafaeldtinoco) |
|
|
