identity not working in horizon with xena

[Dwane Pottratz]

Doing fresh install using the stable/xena branch horizon Identity is not working.

Clicking on Projects returns:
{"versions": {"values": [{"id": "v3.14", "status": "stable", "updated": "2020-04-07T00:00:00Z", "links": [{"rel": "self", "href": "https://osa/identity/v3/"}], "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}]}]}}

Clicking on users, groups, roles, or application credentials returns:
Not Found
The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

I have verified that Identity tabs work correctly in stable/wallaby with the same OSA configuration and deployment methods.

keystone API is working. I can get information from the CLI.

All other functions that I have enable are working in horizon.

[Dwane Pottratz (dpcsar)]

Here is my openstack_user_config.yml

I am also trying using containers. I have been doing bare metal deploys.

[Dmitriy Rabotyagov (noonedeadpunk)]

I was able to reproduce mentioned bug on master branch.

[Dmitriy Rabotyagov (noonedeadpunk)]

I believe this might be related to our replacement of Nginx with Apache for keystone. As horizon uses different path to keystone this likely not handled properly on keystone side.

Continue investigating.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/828519

[Dmitriy Rabotyagov (noonedeadpunk)]

Can you kindly check if proposed fix does solve your issue with horizon?

[Dwane Pottratz (dpcsar)]

I have verified that patch fixes the issue. Thx.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/828519
Committed: https://opendev.org/openstack/openstack-ansible-os_keystone/commit/790d0c3482ba8d98c97ee941c595bd2ffd80d810
Submitter: "Zuul (22348)"
Branch: master

commit 790d0c3482ba8d98c97ee941c595bd2ffd80d810
Author: Dmitriy Rabotyagov <email address hidden>
Date: Wed Feb 9 13:44:27 2022 +0200

    Drop ProxyPass out of VHost

    As ProxyPass defined out of VHost, it has global effect, resulting
    in Horizon Identity section to be jsut proxied to keystone API
    instead of rederred by Django as instructed by Horizon VHost.

    Change-Id: I596614f55a8db8e814b1d24a78c3f1a9d0e00bb2
    Closes-Bug: #1960342

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/xena
Review: https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/828838

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/828838
Committed: https://opendev.org/openstack/openstack-ansible-os_keystone/commit/fbad6161cb1872e5b8bf89c00019f56ac68224fb
Submitter: "Zuul (22348)"
Branch: stable/xena

commit fbad6161cb1872e5b8bf89c00019f56ac68224fb
Author: Dmitriy Rabotyagov <email address hidden>
Date: Wed Feb 9 13:44:27 2022 +0200

    Drop ProxyPass out of VHost

    As ProxyPass defined out of VHost, it has global effect, resulting
    in Horizon Identity section to be jsut proxied to keystone API
    instead of rederred by Django as instructed by Horizon VHost.

    Change-Id: I596614f55a8db8e814b1d24a78c3f1a9d0e00bb2
    Closes-Bug: #1960342
    (cherry picked from commit 790d0c3482ba8d98c97ee941c595bd2ffd80d810)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_keystone yoga-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_keystone xena-eom release.