Need Rally deployment create support on domain_id or domain_name in order to support keystone v3 test (which needs domain scoped token). The current project scoped token only works in service API but not keystone v3 API (DTUG domain, user, group...).
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Invalid
|
Undecided
|
Unassigned | ||
Rally |
In Progress
|
Medium
|
Unassigned |
Bug Description
For keystone v3 testing, most test should based on domain scoped token but not project scoped token. And either domain_
Failed validating 'anyOf' in schema:
{'anyOf': [{'properties': {'admin': {'$ref': '#/definitions/
'definitions': {'user': {'oneOf': [{'properties': {'tenant_name': {'type': 'string'}},
'properties': {'auth_url': {'type': 'string'},
'type': 'object'}
Here's a test:
Project scoped token deployment looks fine, but domain scoped token deployment failed. Check the following test:
1. Project scoped token deploy:
$ cat m.json
{
"admin": {
"password": "admin",
"username": "admin"
},
"auth_url": "https:/
"endpoint_
"https_cacert": "/usr/local/
"https_
"region_name": "regionOne",
"type": "ExistingCloud",
}
$ rally deployment create --filename=m.json --name=
+------
| uuid | created_at | name | status | active |
+------
| 01ca22c6-
+------
Using deployment: 01ca22c6-
~/.rally/openrc was updated
HINTS:
* To get your cloud resources, run:
rally show [flavors|
* To use standard OpenStack clients, set up your env by running:
source ~/.rally/openrc
OpenStack clients are now configured, e.g run:
glance image-list
$ rally deployment check
keystone endpoints are valid and following services are available:
+------
| services | type | status |
+------
| ceilometer | metering | Available |
| cinder | volume | Available |
| cinderv2 | volumev2 | Available |
| ec2 | ec2 | Available |
| glance | image | Available |
| heat | orchestration | Available |
| keystone | identity | Available |
| neutron | network | Available |
| nova | compute | Available |
| sherpa | hp-catalog | Available |
| swift | object-store | Available |
+------
$ rally task start ../keystonecase
-------
Preparing input task
-------
Input task is:
{
"KeystoneBa
{
"args": {
},
}
}
]
}
-------
Task 76a1c52c-
-------
Benchmarking... This can take a while...
To track task status use:
rally task status
or
rally task detailed
2015-04-07 22:34:40.916 20445 WARNING rally.common.broker [-] Failed to consume a task from the queue: You are not authorized to perform the requested action: identity:get_domain (HTTP 403)
-------
Task 76a1c52c-
-------
<class 'rally.
Unable to setup context 'users': 'Failed to create the requested number of tenants.'
For more details run:
rally -vd task detailed 76a1c52c-
Using task: 76a1c52c-
2. Project scoped token deploy failed: - I just updated one line in this config -> from ""project_name": "admin"," to ""domain_name": "Default",":
$ cat u.json
{
"admin": {
"password": "admin",
"username": "admin"
},
"auth_url": "https:/
"endpoint_
"https_cacert": "/usr/local/
"https_
"region_name": "regionOne",
"type": "ExistingCloud",
}
$ rally deployment create --filename=u.json --name=
2015-04-07 22:36:18.996 20739 ERROR rally.api [-] Deployment 44f819e6-
Config schema validation error: {'endpoint_type': 'public', 'auth_url': 'https:/
Failed validating 'anyOf' in schema:
{'anyOf': [{'properties': {'admin': {'$ref': '#/definitions/
'definitions': {'user': {'oneOf': [{'properties': {'tenant_name': {'type': 'string'}},
'properties': {'auth_url': {'type': 'string'},
'type': 'object'}
On instance:
{'admin': {'domain_name': 'Default',
'auth_url': 'https:/
'endpoint_
'https_
'https_
'region_name': 'regionOne',
'type': 'ExistingCloud'}.
Changed in rally: | |
status: | New → Triaged |
importance: | Undecided → Medium |
tags: |
added: deployment removed: rally |
Changed in keystone: | |
assignee: | nobody → Kavitha (kavitha-subramaniam) |
assignee: | Kavitha (kavitha-subramaniam) → nobody |
Changed in rally: | |
assignee: | nobody → Kavitha (kavitha-subramaniam) |
status: | Fix Committed → In Progress |
NOTE: user/group/ project/ role/.. . DTUG.
Before move on keystone v3 test, we need to get domain scoped token work in rally.
Project scoped token is only for service operation but not for keystone domain/