kolla-ansible

Octavia service auth project not created

Bug #1922100 reported by Mark Goddard
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Medium
Unassigned
Ussuri
Fix Committed
Medium
Unassigned
Victoria
Fix Committed
Medium
Unassigned
Wallaby
Fix Committed
Medium
Unassigned
Xena
Fix Released
Medium
Unassigned

Bug Description

Kolla Ansible supports configuration of the project used by Octavia to communicate with other services, via octavia_service_auth_project. Until Ussuri, this was set to admin. In Ussuri it changed to service. It may also be set to a different value.

Kolla Ansible currently gives the octavia user the admin role in the project, but it does not ensure that the project exists. For admin and service projects, this is not a problem. If the project has been customised however, it will not necessarily exist, which will cause Octavia deployment to fail.

Mark Goddard (mgoddard)
Changed in kolla-ansible:
importance: Undecided → Medium
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/784090
Committed: https://opendev.org/openstack/kolla-ansible/commit/fbd80bcdc869cf22330d5d3c8770ec11bb28b4cd
Submitter: "Zuul (22348)"
Branch: master

commit fbd80bcdc869cf22330d5d3c8770ec11bb28b4cd
Author: Mark Goddard <email address hidden>
Date: Wed Mar 31 10:51:20 2021 +0100

    octavia: Ensure service auth project exists

    Kolla Ansible supports configuration of the project used by Octavia to
    communicate with other services, via octavia_service_auth_project. Until
    Ussuri, this was set to admin. In Ussuri it changed to service. It may
    also be set to a different value.

    Kolla Ansible currently gives the octavia user the admin role in the
    project, but it does not ensure that the project exists. For admin and
    service projects, this is not a problem. If the project has been
    customised however, it will not necessarily exist, which will cause
    Octavia deployment to fail.

    This change fixes the issue by ensuring that the service auth project
    exists, in addition to the service project.

    Closes-Bug: #1922100
    Change-Id: I968efbf3ad1de676548b4e3aeefc20bf80ca94a0

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/wallaby)

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/797110

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/victoria)

Fix proposed to branch: stable/victoria
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/797111

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/ussuri)

Fix proposed to branch: stable/ussuri
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/797112

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/797110
Committed: https://opendev.org/openstack/kolla-ansible/commit/cbd474cc4801b1918b7e267e0ad6e23282079974
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit cbd474cc4801b1918b7e267e0ad6e23282079974
Author: Mark Goddard <email address hidden>
Date: Wed Mar 31 10:51:20 2021 +0100

    octavia: Ensure service auth project exists

    Kolla Ansible supports configuration of the project used by Octavia to
    communicate with other services, via octavia_service_auth_project. Until
    Ussuri, this was set to admin. In Ussuri it changed to service. It may
    also be set to a different value.

    Kolla Ansible currently gives the octavia user the admin role in the
    project, but it does not ensure that the project exists. For admin and
    service projects, this is not a problem. If the project has been
    customised however, it will not necessarily exist, which will cause
    Octavia deployment to fail.

    This change fixes the issue by ensuring that the service auth project
    exists, in addition to the service project.

    Closes-Bug: #1922100
    Change-Id: I968efbf3ad1de676548b4e3aeefc20bf80ca94a0
    (cherry picked from commit fbd80bcdc869cf22330d5d3c8770ec11bb28b4cd)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/victoria)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/797111
Committed: https://opendev.org/openstack/kolla-ansible/commit/1d6906bbb8b43a046dc3810d34e0522e7ff9c836
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit 1d6906bbb8b43a046dc3810d34e0522e7ff9c836
Author: Mark Goddard <email address hidden>
Date: Wed Mar 31 10:51:20 2021 +0100

    octavia: Ensure service auth project exists

    Kolla Ansible supports configuration of the project used by Octavia to
    communicate with other services, via octavia_service_auth_project. Until
    Ussuri, this was set to admin. In Ussuri it changed to service. It may
    also be set to a different value.

    Kolla Ansible currently gives the octavia user the admin role in the
    project, but it does not ensure that the project exists. For admin and
    service projects, this is not a problem. If the project has been
    customised however, it will not necessarily exist, which will cause
    Octavia deployment to fail.

    This change fixes the issue by ensuring that the service auth project
    exists, in addition to the service project.

    Closes-Bug: #1922100
    Change-Id: I968efbf3ad1de676548b4e3aeefc20bf80ca94a0
    (cherry picked from commit fbd80bcdc869cf22330d5d3c8770ec11bb28b4cd)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/ussuri)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/797112
Committed: https://opendev.org/openstack/kolla-ansible/commit/a343753a7c224a64d2fb77471083d17bcc78d05e
Submitter: "Zuul (22348)"
Branch: stable/ussuri

commit a343753a7c224a64d2fb77471083d17bcc78d05e
Author: Mark Goddard <email address hidden>
Date: Wed Mar 31 10:51:20 2021 +0100

    octavia: Ensure service auth project exists

    Kolla Ansible supports configuration of the project used by Octavia to
    communicate with other services, via octavia_service_auth_project. Until
    Ussuri, this was set to admin. In Ussuri it changed to service. It may
    also be set to a different value.

    Kolla Ansible currently gives the octavia user the admin role in the
    project, but it does not ensure that the project exists. For admin and
    service projects, this is not a problem. If the project has been
    customised however, it will not necessarily exist, which will cause
    Octavia deployment to fail.

    This change fixes the issue by ensuring that the service auth project
    exists, in addition to the service project.

    Closes-Bug: #1922100
    Change-Id: I968efbf3ad1de676548b4e3aeefc20bf80ca94a0
    (cherry picked from commit fbd80bcdc869cf22330d5d3c8770ec11bb28b4cd)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 12.0.0.0rc2

This issue was fixed in the openstack/kolla-ansible 12.0.0.0rc2 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 11.1.0

This issue was fixed in the openstack/kolla-ansible 11.1.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 10.3.0

This issue was fixed in the openstack/kolla-ansible 10.3.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 13.0.0.0rc1

This issue was fixed in the openstack/kolla-ansible 13.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.