Turn off reauthentication for Heat + RadosGW

Bug #1611031 reported by Oleksii Chuprykov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Committed
High
Oleksiy Molchanov
Mitaka
Fix Released
High
Oleksiy Molchanov

Bug Description

I found that on deployments with RadosGW we have reauthentication_auth_method = trusts in heat.conf. In this case heat will use trust tokens to interact with other services. But current version of RadosGW that shipped with MOS9.0 doesn't work with OS-TRUST tokens.
We shouldn't set this option on deployments with RadosGW.

Tags: area-library
tags: added: area-library
Changed in fuel:
status: New → Confirmed
importance: Undecided → High
assignee: nobody → Fuel Sustaining (fuel-sustaining-team)
milestone: none → 9.1
Dmitry Pyzhov (dpyzhov)
Changed in fuel:
milestone: 9.1 → 10.0
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/352972

Changed in fuel:
assignee: Fuel Sustaining (fuel-sustaining-team) → Oleksiy Molchanov (omolchanov)
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/352972
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=549155f8a9fe620e1011a44b4e5dc0c55cb78b5e
Submitter: Jenkins
Branch: master

commit 549155f8a9fe620e1011a44b4e5dc0c55cb78b5e
Author: Oleksiy Molchanov <email address hidden>
Date: Tue Aug 9 18:22:24 2016 +0300

    Fix heat reauthentication_auth_method with Radosgw

    * Set reauthentication_auth_method = trusts only when Radosgw is not used
    * Update YAQL expression for heat

    Change-Id: I4f5d8b0bfabfb7a8b8a47cecb3c00a69698c7bf3
    Closes-Bug: 1611031

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (stable/mitaka)

Reviewed: https://review.openstack.org/357847
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=fbf091b29c41bc4ba008d723b833ff2f851b8903
Submitter: Jenkins
Branch: stable/mitaka

commit fbf091b29c41bc4ba008d723b833ff2f851b8903
Author: Oleksiy Molchanov <email address hidden>
Date: Tue Aug 9 18:22:24 2016 +0300

    Fix heat reauthentication_auth_method with Radosgw

    * Set reauthentication_auth_method = trusts only when Radosgw is not used
    * Update YAQL expression for heat

    Change-Id: I4f5d8b0bfabfb7a8b8a47cecb3c00a69698c7bf3
    Closes-Bug: 1611031
    (cherry picked from commit 549155f8a9fe620e1011a44b4e5dc0c55cb78b5e)

tags: added: on-verification
Revision history for this message
TatyanaGladysheva (tgladysheva) wrote :

Verified on 9.1 snapshot #238.

tags: removed: on-verification
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/fuel-library 10.0.0rc1

This issue was fixed in the openstack/fuel-library 10.0.0rc1 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/fuel-library 10.0.0

This issue was fixed in the openstack/fuel-library 10.0.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.