Swift S3 API Broken In Zed

Bug #2060121 reported by lakcaj
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
kolla-ansible
Status tracked in Caracal
Antelope
In Progress
Undecided
Unassigned
Bobcat
In Progress
Undecided
Unassigned
Caracal
Fix Released
Undecided
Sven Kieske

Bug Description

What Happened:

Between Yoga and Zed, the /v3 suffix for the auth_url in the [filter:s3token] section was removed:

https://opendev.org/openstack/kolla-ansible/src/branch/master/ansible/roles/swift/templates/proxy-server.conf.j2#L102

With debug logging enabled, Keystone returns a 404 when Swift queries for credentials, and the S3 API completely breaks.

Re-adding the /v3 suffix has been confirmed to fix the S3 API in two separate test deployments.

What I Expect To Happen: The Swift S3 API working correctly

How To Reproduce: On any Zed deployment, enable the Swift S3 API, add ec2 credentials, and attempt to use the S3 API through any type of client (Ansible, awscli, mc, etc)

Sven Kieske (s-kieske)
Changed in kolla-ansible:
assignee: nobody → Sven Kieske (s-kieske)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)
Changed in kolla-ansible:
status: New → In Progress
Revision history for this message
Sven Kieske (s-kieske) wrote :

I'll also try to extend the testing to catch this in the future.

afaik we only need to set "enable_swift_s3api" in swift scenario for this.

But I will do that in another patch, so we can cleanly backport this.

also none of the swift jobs are voting currently.

Revision history for this message
Sven Kieske (s-kieske) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to kolla-ansible (master)

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/914967

Revision history for this message
RJ (rjbugreporting) wrote :

Chiming in to confirm this bug affects me on Bobcat (2023.2)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/914965
Committed: https://opendev.org/openstack/kolla-ansible/commit/1c51e125c1281d1e3fea31eaceabe9b61800ee1b
Submitter: "Zuul (22348)"
Branch: master

commit 1c51e125c1281d1e3fea31eaceabe9b61800ee1b
Author: Sven Kieske <email address hidden>
Date: Wed Apr 3 14:52:32 2024 +0200

    fix swift keystone auth url

    Closes-Bug: #2060121

    Bug introduced in https://review.opendev.org/c/openstack/kolla-ansible/+/843748

    Signed-off-by: Sven Kieske <email address hidden>
    Change-Id: Ibdf107d27f1523d57787726685f68ff27e9db7bc

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/2023.2)

Fix proposed to branch: stable/2023.2
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/917442

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/2023.1)

Fix proposed to branch: stable/2023.1
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/917443

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.