| 2018-06-07 03:50:12 |
Xav Paice |
bug |
|
|
added bug |
| 2018-06-12 06:16:42 |
Xav Paice |
bug task added |
|
layer-openstack |
|
| 2018-06-12 07:39:24 |
Seyeong Kim |
bug |
|
|
added subscriber Seyeong Kim |
| 2018-06-12 23:21:23 |
Xav Paice |
bug task added |
|
charm-gnocchi |
|
| 2018-06-12 23:23:50 |
Xav Paice |
summary |
gnocchi_external_project_owner default is 'service' which does not exist |
Service accounts duplicated in domains, causes some heat stack actions to fail |
|
| 2018-06-12 23:26:51 |
Xav Paice |
description |
Refer to https://docs.openstack.org/aodh/latest/configuration/aodh-config-file.html - the gnocchi_external_project_owner option defaults to a project named 'service' which doesn't exist in our default deployments. This should be set in the template:
[api]
gnocchi_external_project_owner = services |
On building Gnocchi and Aodh, the user account for the services is created both in 'default' domain plus the 'service_domain', and a project 'services' rather than 'service' (the default).
This causes a few issues, noticed in our case when rolling a heat stack that includes gnocchi based aodh alarms:
openstack stack create --wait -t web.yaml test1
2018-06-11 21:56:01Z [test1]: CREATE_IN_PROGRESS Stack CREATE started
2018-06-11 21:56:02Z [test1.cpu_alarm_low]: CREATE_IN_PROGRESS state changed
2018-06-11 21:56:03Z [test1.router]: CREATE_IN_PROGRESS state changed
2018-06-11 21:56:03Z [test1.router]: CREATE_FAILED StackValidationFailed: resources.router: Property error: Properties.external_gateway_info.network: Unable to find network with name or id 'floating_nonprod'
2018-06-11 21:56:03Z [test1]: CREATE_FAILED Resource CREATE failed: StackValidationFailed: resources.router: Property error: router.Properties.external_gateway_info.network: Unable to find network with name or id 'floating_nonprod'
2018-06-11 21:56:05Z [test1.cpu_alarm_low]: CREATE_FAILED ClientException: resources.cpu_alarm_low: You are not authorized to perform the requested action: identity:list_projects. (HTTP 403) (Request-ID: req-75cd8caf-3544-417e-9baf-5ed45ccc827b) (HTTP 500) (Request-ID: req-26f153d9-efac-4809-a842-96e99fdba78e)
2018-06-11 21:56:05Z [test1]: CREATE_FAILED Resource CREATE failed: ClientException: resources.cpu_alarm_low: You are not authorized to perform the requested action: identity:list_projects. (HTTP 403) (Request-ID: req-75cd8caf-3544-417e-9baf-5ed45ccc827b) (HTTP 500) (Request-ID: req-26f153d9-efac-4
Stack test1 CREATE_FAILED
Refer to https://docs.openstack.org/aodh/latest/configuration/aodh-config-file.html - the gnocchi_external_project_owner option defaults to a project named 'service' which doesn't exist in our default deployments. This should be set in the template:
In aodh.conf:
[api]
gnocchi_external_project_owner = services |
|
| 2018-07-17 19:13:31 |
James Page |
charm-aodh: status |
New |
Fix Committed |
|
| 2018-07-17 19:13:33 |
James Page |
charm-aodh: importance |
Undecided |
Medium |
|
| 2018-07-17 19:13:37 |
James Page |
layer-openstack: status |
New |
Fix Committed |
|
| 2018-07-17 19:13:40 |
James Page |
layer-openstack: importance |
Undecided |
Medium |
|
| 2018-07-17 19:14:11 |
James Page |
charm-gnocchi: status |
New |
Triaged |
|
| 2018-07-17 19:14:14 |
James Page |
charm-gnocchi: importance |
Undecided |
Medium |
|
| 2018-09-06 14:46:03 |
David Ames |
charm-aodh: milestone |
|
18.08 |
|
| 2018-09-06 14:46:07 |
David Ames |
layer-openstack: milestone |
|
18.08 |
|
| 2018-09-12 20:49:44 |
James Page |
charm-aodh: status |
Fix Committed |
Fix Released |
|
| 2018-09-12 20:49:45 |
James Page |
layer-openstack: status |
Fix Committed |
Fix Released |
|
| 2018-10-10 06:48:11 |
Alvaro Uria |
bug |
|
|
added subscriber The Canonical Sysadmins |
| 2018-10-10 06:48:18 |
Alvaro Uria |
bug |
|
|
added subscriber Canonical IS BootStack |
