inspector only supports keystoneclient.v2_0

Bug #1531236 reported by Dan Prince
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Ironic Inspector
Fix Released
High
Sam Betts

Bug Description

I'm trying to update Ironic inspector to use versionless (or hard coded /v3 keystone) URLs. Both seem to fail.

I tried both of these:

[ironic]
os_auth_url =http://172.19.0.3:5000/

[ironic]
os_auth_url =http://172.19.0.3:5000/v3/

Using these settings I see the following sorts of errors in the log files:

.917 15493 ERROR ironic_inspector.main File "/usr/lib/python2.7/site-packages/ironic_inspector/firewall.py", line 124, in update_filters
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main ironic = utils.get_client() if ironic is None else ironic
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main File "/usr/lib/python2.7/site-packages/ironic_inspector/utils.py", line 93, in get_client
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main return client.get_client(1, **args)
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main File "/usr/lib/python2.7/site-packages/ironicclient/client.py", line 86, in get_client
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main _ksclient = _get_ksclient(**ks_kwargs)
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main File "/usr/lib/python2.7/site-packages/ironicclient/client.py", line 35, in _get_ksclient
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main insecure=kwargs.get('insecure'))
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main File "/usr/lib/python2.7/site-packages/keystoneclient/v2_0/client.py", line 166, in __init__
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main self.authenticate()
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main File "/usr/lib/python2.7/site-packages/keystoneclient/utils.py", line 337, in inner
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main return func(*args, **kwargs)
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main File "/usr/lib/python2.7/site-packages/keystoneclient/httpclient.py", line 589, in authenticate
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main resp = self.get_raw_token_from_identity_service(**kwargs)
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main File "/usr/lib/python2.7/site-packages/keystoneclient/v2_0/client.py", line 210, in get_raw_token_from_identity_service
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main _("Authorization Failed: %s") % e)
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main AuthorizationFailure: Authorization Failed: The resource could not be found. (HTTP 404)
Jan 05 18:31:32 instack.localdomain ironic-inspector[15493]: 2016-01-05 18:31:32.917 15493 ERROR ironic_inspector.main

Dan Prince (dan-prince)
Changed in ironic-inspector:
status: New → Triaged
importance: Undecided → High
Dan Prince (dan-prince)
summary: - ironic os_auth_url doesn't support keystone v3
+ inspector only supports keystoneclient.v2_0
Sam Betts (sambetts)
Changed in ironic-inspector:
assignee: nobody → Sam Betts (sambetts)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ironic-inspector (master)

Fix proposed to branch: master
Review: https://review.openstack.org/274720

Changed in ironic-inspector:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ironic-inspector (master)

Reviewed: https://review.openstack.org/274720
Committed: https://git.openstack.org/cgit/openstack/ironic-inspector/commit/?id=40c17e30fc1b457ac4975a2faa3e3b341defdf32
Submitter: Jenkins
Branch: master

commit 40c17e30fc1b457ac4975a2faa3e3b341defdf32
Author: Sam Betts <email address hidden>
Date: Mon Feb 1 15:37:36 2016 +0000

    Enable Keystone v3 endpoints for Inspector

    Change-Id: Iaa6d1b9dcca401987ac5f8ccc37e337736905b92
    Closes-Bug: #1531236

Changed in ironic-inspector:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ironic-inspector (stable/liberty)

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/275699

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on ironic-inspector (stable/liberty)

Change abandoned by Sam Betts (<email address hidden>) on branch: stable/liberty
Review: https://review.openstack.org/275699
Reason: Backport too risky

Revision history for this message
Davanum Srinivas (DIMS) (dims-v) wrote : Fix included in openstack/ironic-inspector 3.1.0

This issue was fixed in the openstack/ironic-inspector 3.1.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.