[orchestration] api-paste.ini has wrong authtoken factory

Bug #1433152 reported by Mark Vanderwiel on 2015-03-17
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack + Chef
Medium
Mark Vanderwiel

Bug Description

The auth_token middleware for heat is configured in /etc/heat/api-paste.ini:

# Auth middleware that validates token against keystone
[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory

This should be:

# Auth middleware that validates token against keystone
[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory

See https://github.com/openstack/heat/blob/master/etc/heat/api-paste.ini#L87

This effects master/kilo and stable juno

description: updated

Fix proposed to branch: master
Review: https://review.openstack.org/165114

Changed in openstack-chef:
status: New → In Progress
JJ Asghar (d-jj) on 2015-03-24
Changed in openstack-chef:
importance: Undecided → Medium

Reviewed: https://review.openstack.org/165114
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-orchestration/commit/?id=ebd8c3a994d711285926191af443b42247395a3a
Submitter: Jenkins
Branch: master

commit ebd8c3a994d711285926191af443b42247395a3a
Author: Mark Vanderwiel <email address hidden>
Date: Tue Mar 17 10:42:01 2015 -0500

    Remove api-paste.ini as it provided by package

    Since we have no attribute overrides for api-paste.ini, no
    need to have a template resource for it. Until we need to
    have some attribute, removing this will take away burden of
    keeping in sync with base openstack code.

    Change-Id: I4cb0aec2dc39c9b7f4c8096f24acc28399ae95a8
    Closes-Bug: #1433152

Changed in openstack-chef:
status: In Progress → Fix Released

Reviewed: https://review.openstack.org/165124
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-image/commit/?id=9a2fb451d815abe1411b0b2739e19d1ea0cae4cb
Submitter: Jenkins
Branch: master

commit 9a2fb451d815abe1411b0b2739e19d1ea0cae4cb
Author: Mark Vanderwiel <email address hidden>
Date: Tue Mar 17 11:08:00 2015 -0500

    Remove api-paste.ini as it provided by package

    Since we have no attribute overrides for api-paste.ini, no
    need to have a template resource for it. Until we need to
    have some attribute, removing this will take away burden of
    keeping in sync with base openstack code.

    Change-Id: I8ebf93a04916789afc8125303e372ed285b0d799
    Related-Bug: #1433152

Reviewed: https://review.openstack.org/165127
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-block-storage/commit/?id=33fd5eee2c46324c9503455451f5e593dd1e3851
Submitter: Jenkins
Branch: master

commit 33fd5eee2c46324c9503455451f5e593dd1e3851
Author: Mark Vanderwiel <email address hidden>
Date: Tue Mar 17 11:13:10 2015 -0500

    Remove api-paste.ini as it provided by package

    Since we have no attribute overrides for api-paste.ini, no
    need to have a template resource for it. Until we need to
    have some attribute, removing this will take away burden of
    keeping in sync with base openstack code.

    Change-Id: Ic72c638ba61929bc06061b04d13ce986514b0460
    Related-Bug: #1433152

Reviewed: https://review.openstack.org/165122
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-network/commit/?id=0712addc7a081a797a9775a8c539c36aec106f83
Submitter: Jenkins
Branch: master

commit 0712addc7a081a797a9775a8c539c36aec106f83
Author: Mark Vanderwiel <email address hidden>
Date: Tue Mar 17 10:59:09 2015 -0500

    Remove api-paste.ini as it provided by package

    Since we have no attribute overrides for api-paste.ini, no
    need to have a template resource for it. Until we need to
    have some attribute, removing this will take away burden of
    keeping in sync with base openstack code.

    Change-Id: I918b3dfc3d17fe122300d32d678addbf828df771
    Related-Bug: #1433152

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers