[orchestration] api-paste.ini has wrong authtoken factory

Bug #1433152 reported by Mark Vanderwiel
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack + Chef
Fix Released
Medium
Mark Vanderwiel

Bug Description

The auth_token middleware for heat is configured in /etc/heat/api-paste.ini:

# Auth middleware that validates token against keystone
[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory

This should be:

# Auth middleware that validates token against keystone
[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory

See https://github.com/openstack/heat/blob/master/etc/heat/api-paste.ini#L87

This effects master/kilo and stable juno

description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to cookbook-openstack-orchestration (master)

Fix proposed to branch: master
Review: https://review.openstack.org/165114

Changed in openstack-chef:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-network (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/165122

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-image (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/165124

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-block-storage (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/165127

JJ Asghar (d-jj)
Changed in openstack-chef:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to cookbook-openstack-orchestration (master)

Reviewed: https://review.openstack.org/165114
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-orchestration/commit/?id=ebd8c3a994d711285926191af443b42247395a3a
Submitter: Jenkins
Branch: master

commit ebd8c3a994d711285926191af443b42247395a3a
Author: Mark Vanderwiel <email address hidden>
Date: Tue Mar 17 10:42:01 2015 -0500

    Remove api-paste.ini as it provided by package

    Since we have no attribute overrides for api-paste.ini, no
    need to have a template resource for it. Until we need to
    have some attribute, removing this will take away burden of
    keeping in sync with base openstack code.

    Change-Id: I4cb0aec2dc39c9b7f4c8096f24acc28399ae95a8
    Closes-Bug: #1433152

Changed in openstack-chef:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-image (master)

Reviewed: https://review.openstack.org/165124
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-image/commit/?id=9a2fb451d815abe1411b0b2739e19d1ea0cae4cb
Submitter: Jenkins
Branch: master

commit 9a2fb451d815abe1411b0b2739e19d1ea0cae4cb
Author: Mark Vanderwiel <email address hidden>
Date: Tue Mar 17 11:08:00 2015 -0500

    Remove api-paste.ini as it provided by package

    Since we have no attribute overrides for api-paste.ini, no
    need to have a template resource for it. Until we need to
    have some attribute, removing this will take away burden of
    keeping in sync with base openstack code.

    Change-Id: I8ebf93a04916789afc8125303e372ed285b0d799
    Related-Bug: #1433152

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-block-storage (master)

Reviewed: https://review.openstack.org/165127
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-block-storage/commit/?id=33fd5eee2c46324c9503455451f5e593dd1e3851
Submitter: Jenkins
Branch: master

commit 33fd5eee2c46324c9503455451f5e593dd1e3851
Author: Mark Vanderwiel <email address hidden>
Date: Tue Mar 17 11:13:10 2015 -0500

    Remove api-paste.ini as it provided by package

    Since we have no attribute overrides for api-paste.ini, no
    need to have a template resource for it. Until we need to
    have some attribute, removing this will take away burden of
    keeping in sync with base openstack code.

    Change-Id: Ic72c638ba61929bc06061b04d13ce986514b0460
    Related-Bug: #1433152

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-network (master)

Reviewed: https://review.openstack.org/165122
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-network/commit/?id=0712addc7a081a797a9775a8c539c36aec106f83
Submitter: Jenkins
Branch: master

commit 0712addc7a081a797a9775a8c539c36aec106f83
Author: Mark Vanderwiel <email address hidden>
Date: Tue Mar 17 10:59:09 2015 -0500

    Remove api-paste.ini as it provided by package

    Since we have no attribute overrides for api-paste.ini, no
    need to have a template resource for it. Until we need to
    have some attribute, removing this will take away burden of
    keeping in sync with base openstack code.

    Change-Id: I918b3dfc3d17fe122300d32d678addbf828df771
    Related-Bug: #1433152

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/cookbook-openstack-orchestration ocata-eol

This issue was fixed in the openstack/cookbook-openstack-orchestration ocata-eol release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.