detach-keystone plugin with murano without SSL fails

[Anastasia Kuznetsova]

Steps to reproduce:
1. Enable FUEL plugins:
https://github.com/stackforge/fuel-plugin-detach-database
https://github.com/stackforge/fuel-plugin-detach-keystone

2. Create FUEL environment with following configuration:
Qemu, No Ceph, No TLS, Murano
1 controller, 1 compute, 3 nodes with Cinder, Keystone, Database (or just 1 node with Cinder, Keystone, Database)

3. Send env to deploy

Observer result:
Error
Deployment has failed. Timeout of deployment is exceeded.

Error on controller node logs 2015-09-24 12:55:08 ERR Timeout waiting for HAProxy backend: 'keystone-1' status to become: 'up' after 600 seconds!

ISO:
{"build_id": "301", "build_number": "301", "release_versions": {"2015.1.0-7.0": {"VERSION": {"build_id": "301", "build_number": "301", "api": "1.0", "fuel-library_sha": "5d50055aeca1dd0dc53b43825dc4c8f7780be9dd", "nailgun_sha": "4162b0c15adb425b37608c787944d1983f543aa8", "feature_groups": ["mirantis"], "fuel-nailgun-agent_sha": "d7027952870a35db8dc52f185bb1158cdd3d1ebd", "openstack_version": "2015.1.0-7.0", "fuel-agent_sha": "50e90af6e3d560e9085ff71d2950cfbcca91af67", "production": "docker", "python-fuelclient_sha": "486bde57cda1badb68f915f66c61b544108606f3", "astute_sha": "6c5b73f93e24cc781c809db9159927655ced5012", "fuel-ostf_sha": "2cd967dccd66cfc3a0abd6af9f31e5b4d150a11c", "release": "7.0", "fuelmain_sha": "a65d453215edb0284a2e4761be7a156bb5627677"}}}, "auth_required": true, "api": "1.0", "fuel-library_sha": "5d50055aeca1dd0dc53b43825dc4c8f7780be9dd", "nailgun_sha": "4162b0c15adb425b37608c787944d1983f543aa8", "feature_groups": ["mirantis"], "fuel-nailgun-agent_sha": "d7027952870a35db8dc52f185bb1158cdd3d1ebd", "openstack_version": "2015.1.0-7.0", "fuel-agent_sha": "50e90af6e3d560e9085ff71d2950cfbcca91af67", "production": "docker", "python-fuelclient_sha": "486bde57cda1badb68f915f66c61b544108606f3", "astute_sha": "6c5b73f93e24cc781c809db9159927655ced5012", "fuel-ostf_sha": "2cd967dccd66cfc3a0abd6af9f31e5b4d150a11c", "release": "7.0", "fuelmain_sha": "a65d453215edb0284a2e4761be7a156bb5627677"}

[Matthew Mosesohn (raytrac3r)]

Murano manifests point to management/public VIPs and not the Keystone VIP in the tasks. We have a workaround for public SSL in keystone that may make it work.

We missed murano/sahara coverage for 7.0, but I can fix this for 8.0.

[Vladimir Khlyunev (vkhlyunev)]

@Anastasia please place an information description that this bug is related to murano without TSL (ideally in the title) - it will helpful in searching the bug in launchpad.

[Matthew Mosesohn (raytrac3r)]

Vladimir, I fixed the bug title.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/234345

[Matthew Mosesohn (raytrac3r)]

This bug is stalled because Murano/Sahara don't deploy correctly in Liberty yet.

[OpenStack Infra (hudson-openstack)]

Change abandoned by Matthew Mosesohn (<email address hidden>) on branch: master
Review: https://review.openstack.org/234345
Reason: Moving to public endpoints should have fixed this.

[Matthew Mosesohn (raytrac3r)]

This should already be fixed since murano and sahara now point to public keystone endpoint

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/260965

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/260965
Committed: https://git.openstack.org/cgit/openstack/fuel-plugin-detach-keystone/commit/?id=73b7c6e2861c9023e2b79114b578f8d1269fa732
Submitter: Jenkins
Branch: master

commit 73b7c6e2861c9023e2b79114b578f8d1269fa732
Author: Matthew Mosesohn <email address hidden>
Date: Wed Dec 23 15:24:49 2015 +0300

    Enable haproxy on controller role in all cases

    Previously haproxy was enabled only on controller for
    SSL mode. Now it's enabled for all modes in order to
    fix murano deployment.

    Change-Id: I4c356f9622ad340e6915f5e4d446aaf8eb15149f
    Closes-Bug: #1499375

[Dmitriy Kruglov (dkruglov)]

Verified in MOS 8.0, build 367. The issue is fixed.

VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "8.0"
  api: "1.0"
  build_number: "367"
  build_id: "367"
  fuel-nailgun_sha: "20ff1666ea6171a085051ffd77444c52f972b7e7"
  python-fuelclient_sha: "4f234669cfe88a9406f4e438b1e1f74f1ef484a5"
  fuel-agent_sha: "1d2f6bc1123b9364ba65b41afcc0608662bb25b9"
  fuel-nailgun-agent_sha: "92ebd5ade6fab60897761bfa084aefc320bff246"
  astute_sha: "c7ca63a49216744e0bfdfff5cb527556aad2e2a5"
  fuel-library_sha: "6ec90013ed909997097563cddc762937dc873eb3"
  fuel-ostf_sha: "889ddb0f1a4fa5f839fd4ea0c0017a3c181aa0c1"
  fuel-mirror_sha: "8bb8c70efc61bcf633e02d6054dbf5ec8dcf6699"
  fuelmenu_sha: "824f6d3ebdc10daf2f7195c82a8ca66da5abee99"
  shotgun_sha: "63645dea384a37dde5c01d4f8905566978e5d906"
  network-checker_sha: "9f0ba4577915ce1e77f5dc9c639a5ef66ca45896"
  fuel-upgrade_sha: "616a7490ec7199f69759e97e42f9b97dfc87e85b"
  fuelmain_sha: "5dd650b541d40251e07afde4072d948be577dc0c"