| 2014-08-18 13:25:59 |
Curtis Hovey |
description |
Canonistack swift access has spontaneously combusted. First juju-qa lost
access. Now orangesquad has lost access. Juju cannot get permission to
use swift. juju-qa and orangesquad can not use swift-client after juju's
configs were changed to match the setup recommended by
juju init
Both accounts lost access when control-bucket and admin-secret were
removed from the juju configs. In both cases, there were no jenv files
left behind nor where there any running environments when the change
was made. An example config looks like this:
test-cloud-canonistack:
# juju --show-log bootstrap -e test-release-canonistack
type: openstack
test-mode: true
use-floating-ip: false
auth-url: https://keystone.canonistack.canonical.com:443/v2.0/
authorized-keys: |
ssh-rsa <SECRET>
username: juju-qa
password: <SECRET>
tenant-name: <SECRET>
region: lcy02
default-series: precise
tools-metadata-url: https://swift.canonistack.canonical.com/v1/AUTH_526ad877f3e3464589dc1145dfeaac60/juju-dist/tools
The output of bootstrap showed this:
juju --show-log bootstrap -e test-cloud-canonistack --constraints mem=2G
2014-04-23 14:45:35 INFO juju.cmd supercommand.go:297 running juju-1.18.0-precise-amd64 [gc]
2014-04-23 14:45:35 INFO juju.provider.openstack provider.go:202 opening environment "test-cloud-canonistack"
2014-04-23 14:45:36 WARNING juju.environs open.go:289 failed to write bootstrap-verify file: cannot make Swift control container: failed to create container: 17338a9c21264d6b8e5b34b9e443c049
caused by: Resource at https://swift.canonistack.canonical.com/v1/AUTH_bfbb283705034a7c8eeefb918b2e8df8/17338a9c21264d6b8e5b34b9e443c049 not found
caused by: request (https://swift.canonistack.canonical.com/v1/AUTH_bfbb283705034a7c8eeefb918b2e8df8/17338a9c21264d6b8e5b34b9e443c049) returned unexpected status: 404; error info: 404 Not Found
The resource could not be found.
After juju tried to create a container, swift shows this (after the lib was hacked to survive the report a a unicode error):
swift list
Account GET failed:
https://swift.canonistack.canonical.com/v1/AUTH_bbda63d64a9e4dfda1072e7743704f1e?
format=json 403 Forbidden
JMN+THII-IMb
CI is not testing canonistack since juju and its accounts are crippled. |
Canonistack swift access has spontaneously combusted. First juju-qa lost
access. Now orangesquad has lost access. Juju cannot get permission to
use swift. juju-qa and orangesquad can not use swift-client after juju's
configs were changed to match the setup recommended by
juju init
Both accounts lost access when control-bucket and admin-secret were
removed from the juju configs. In both cases, there were no jenv files
left behind nor where there any running environments when the change
was made. An example config looks like this:
test-cloud-canonistack:
# juju --show-log bootstrap -e test-release-canonistack
type: openstack
test-mode: true
use-floating-ip: false
auth-url: https://keystone.canonistack.canonical.com:443/v2.0/
authorized-keys: |
ssh-rsa <SECRET>
username: juju-qa
password: <SECRET>
tenant-name: <SECRET>
region: lcy02
default-series: precise
tools-metadata-url: https://swift.canonistack.canonical.com/v1/AUTH_526ad877f3e3464589dc1145dfeaac60/juju-dist/tools
The output of bootstrap showed this:
juju --show-log bootstrap -e test-cloud-canonistack --constraints mem=2G
2014-04-23 14:45:35 INFO juju.cmd supercommand.go:297 running juju-1.18.0-precise-amd64 [gc]
2014-04-23 14:45:35 INFO juju.provider.openstack provider.go:202 opening environment "test-cloud-canonistack"
2014-04-23 14:45:36 WARNING juju.environs open.go:289 failed to write bootstrap-verify file: cannot make Swift control container: failed to create container: 17338a9c21264d6b8e5b34b9e443c049
caused by: Resource at https://swift.canonistack.canonical.com/v1/AUTH_bfbb283705034a7c8eeefb918b2e8df8/17338a9c21264d6b8e5b34b9e443c049 not found
caused by: request (https://swift.canonistack.canonical.com/v1/AUTH_bfbb283705034a7c8eeefb918b2e8df8/17338a9c21264d6b8e5b34b9e443c049) returned unexpected status: 404; error info: 404 Not Found
The resource could not be found.
After juju tried to create a container, swift shows this (after the lib was hacked to survive the report a a unicode error):
swift list
Account GET failed:
https://swift.canonistack.canonical.com/v1/AUTH_bbda63d64a9e4dfda1072e7743704f1e?
format=json 403 Forbidden
JMN+THII-IMb
CI is not testing canonistack since juju and its accounts are crippled.
WORK AROUND:
Always include "admin-secret", do not let Juju create one for you.
If you are affected by this, swift will not be usable until the token expires, about 2 weeks. |
|
