Certificate creation for cluster in magnum failed maybe because of keystone/trust
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack-Ansible |
Fix Released
|
Undecided
|
Kevin Lefevre | ||
puppet-magnum |
Fix Released
|
Undecided
|
yatin |
Bug Description
Hi, on OSA master when deploying magnum cluster, instances sign certificates with the Magnum API.
It failed with OSA, here are the Keystone logs :
There is either no auth token in the request or the certificate is
suer is not trusted. No auth context will be set. fill_context /openstack/
2017-03-06 13:11:40.966 1878 INFO keystone.
2017-03-06 13:11:40.966 1878 WARNING keystone.
ot of type 'string'
After talking with magnum team, the issues is not on devstack, the policy.json for magnum role has been updated recently which is good. I stumble across this patch https:/
After talking with the magnum team. In devstack, there is a
[keystone_auth]
auth_url = http://
user_domain_id = default
project_domain_id = default
project_name = service
password = password
username = magnum
auth_type = password
which is not in magnum role. When I add it in magnum.conf it works. I don't really know why, but on devstack it works without this section. It might be a mix of magnum and keystone conf I don't know :/
I'm willing to continue investigating this but need some help
summary: |
- Certificate for cluster in magnum failed maybe because of - keystone/truste + Certificate for cluster in magnum failed maybe because of keystone/trust |
summary: |
- Certificate for cluster in magnum failed maybe because of keystone/trust + Certificate creattion for cluster in magnum failed maybe because of + keystone/trust |
summary: |
- Certificate creattion for cluster in magnum failed maybe because of + Certificate creation for cluster in magnum failed maybe because of keystone/trust |
Changed in magnum: | |
status: | New → Fix Released |
assignee: | nobody → Kevin Lefevre (archifleks) |
no longer affects: | magnum |
Changed in packstack: | |
assignee: | nobody → yatin (yatinkarel) |
affects: | packstack → puppet-magnum |
Fix proposed to branch: master /review. openstack. org/442321
Review: https:/