install guide is out of sync with proper way to configure auth for service users

Bug #1628842 reported by Pavlo Shchelokovskyy
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ironic
Fix Released
Medium
Pavlo Shchelokovskyy

Bug Description

Install guide is advising to configure Ironic-conductor to use [keystone_authtoken] section with deprecated options.

Using this section to provide credentials for service users used by Ironic-conductor is actually deprecated in Newton release, and proper way is to configure appropriate credentials for service user in config section for every service Ironic communicates to.

Changed in ironic:
assignee: nobody → Pavlo Shchelokovskyy (pshchelo)
Dmitry Tantsur (divius)
tags: added: low-hanging-fruit
Changed in ironic:
status: New → Triaged
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ironic (master)

Fix proposed to branch: master
Review: https://review.openstack.org/382358

Changed in ironic:
status: Triaged → In Progress
Changed in ironic:
assignee: Pavlo Shchelokovskyy (pshchelo) → Ruby Loo (rloo)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ironic (master)

Reviewed: https://review.openstack.org/382358
Committed: https://git.openstack.org/cgit/openstack/ironic/commit/?id=492e67a64d058265683d695a07e47d5c75856cac
Submitter: Jenkins
Branch: master

commit 492e67a64d058265683d695a07e47d5c75856cac
Author: Pavlo Shchelokovskyy <email address hidden>
Date: Wed Oct 5 14:49:13 2016 +0300

    [install-guide] describe service clients auth

    Currently install guide incorrectly advises operators to configure
    access for service users used by ironic-conductor in
    [keystone_authtoken] section.

    Such way of configuration was deprecated in Newton release, and using it
    will result in a warning log message.

    This patch changes the advised way of configuring service users to an
    appropriate one using config sections corresponding to each service client
    to be used, as well as proper options for keystoneauth plugins and
    sessions instead of legacy options.

    Change-Id: I96967682f18988d9e32f2ecfa7792aa0e653db3f
    Closes-Bug: #1628842

Changed in ironic:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ironic (stable/newton)

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/395648

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ironic (stable/newton)

Reviewed: https://review.openstack.org/395648
Committed: https://git.openstack.org/cgit/openstack/ironic/commit/?id=fd2e2fa310890a8614db7f8c5e0e1f9037d5d14c
Submitter: Jenkins
Branch: stable/newton

commit fd2e2fa310890a8614db7f8c5e0e1f9037d5d14c
Author: Pavlo Shchelokovskyy <email address hidden>
Date: Wed Oct 5 14:49:13 2016 +0300

    [install-guide] describe service clients auth

    Currently install guide incorrectly advises operators to configure
    access for service users used by ironic-conductor in
    [keystone_authtoken] section.

    Such way of configuration was deprecated in Newton release, and using it
    will result in a warning log message.

    This patch changes the advised way of configuring service users to an
    appropriate one using config sections corresponding to each service client
    to be used, as well as proper options for keystoneauth plugins and
    sessions instead of legacy options.

    Change-Id: I96967682f18988d9e32f2ecfa7792aa0e653db3f
    Closes-Bug: #1628842
    (cherry picked from commit 492e67a64d058265683d695a07e47d5c75856cac)

tags: added: in-stable-newton
Ruby Loo (rloo)
Changed in ironic:
assignee: Ruby Loo (rloo) → Pavlo Shchelokovskyy (pshchelo)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/ironic 6.2.2

This issue was fixed in the openstack/ironic 6.2.2 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/ironic 7.0.0

This issue was fixed in the openstack/ironic 7.0.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.