Unlock settings tab: Changes of openstack admin user do not purge previous users
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Fuel for OpenStack |
Fix Committed
|
High
|
Stanislaw Bogatkin | ||
Mitaka |
Fix Released
|
High
|
Stanislaw Bogatkin |
Bug Description
Detailed bug description:
Unlock settings tab: Changes in openstack data do not replaced existing one, they just extend it
Steps to reproduce:
1. Setup master node
2. Create any environment
3. Go to settings tab and put next data for openstack user: admin rados, password : rados, project: rados
4. Deploy environment
5. For ready environment - go to the setting tab and change openstack data to something else: admin test-123, password: test 123, project test 123
6. Redeploy
7. ssh on ready controller, check keystone project list, check keystone user list ---> RADOS user/project is present here
8. Change openrc for usage of rados user/password, get project/user list / update password for new user test123 -----> rados user is active and has admin permission for all operation
Expected results:
Old admin user were replaced with new one(from updated settings data) so it should not be active/existing after successful re-deployment
Actual result:
It is still here and has admine permission , so can easily update password/tenant for new admin user
http://
Version:
[root@nailgun ~]# shotgun2 short-report
cat /etc/fuel_build_id:
250
cat /etc/fuel_
250
cat /etc/fuel_release:
9.0
cat /etc/fuel_
mitaka-9.0
rpm -qa | egrep 'fuel|astute|
fuel-release-
fuel-misc-
fuel-mirror-
shotgun-
fuel-openstack
fuel-notify-
fuel-ostf-
fuel-provision
python-
fuel-9.
fuel-utils-
fuel-nailgun-
rubygem-
fuel-library9.
network-
fuel-agent-
fuel-ui-
fuel-setup-
nailgun-
python-
fuelmenu-
fuel-bootstrap
fuel-migrate-
[root@nailgun ~]#
Version: iso 250
Changed in fuel: | |
status: | New → Confirmed |
tags: | added: area-python |
Changed in fuel: | |
assignee: | Alexey Shtokolov (ashtokolov) → Fuel Toolbox (fuel-toolbox) |
Changed in fuel: | |
assignee: | Fuel Toolbox (fuel-toolbox) → Stanislaw Bogatkin (sbogatkin) |
summary: |
- Unlock settings tab: Changes in openstack data do not replaced existing - one, they just extend it + Unlock settings tab: Changes of openstack admin user do not purge + previous users |
Changed in fuel: | |
assignee: | Stanislaw Bogatkin (sbogatkin) → Alexey Shtokolov (ashtokolov) |
Changed in fuel: | |
assignee: | Alexey Shtokolov (ashtokolov) → Vladimir Kuklin (vkuklin) |
tags: |
added: move-to-mu removed: in-stable-mitaka |
Changed in fuel: | |
assignee: | Vladimir Kuklin (vkuklin) → Stanislaw Bogatkin (sbogatkin) |
tags: | added: 9.1-proposed |
tags: | added: on-verification |
Set to high according to issue leads to bad user UX as well as some admin data became unsafely