Having /root/openrc filled with v2 auth_url makes keystone_user fails.

Bug #1522541 reported by Sofer Athlan-Guyot
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
puppet-keystone
Fix Released
High
Sofer Athlan-Guyot

Bug Description

Assuming that /root/openrc exists and is filled with:

#!/bin/sh
export OS_NO_CACHE='true'
export OS_TENANT_NAME='openstack'
export OS_USERNAME='admin'
export OS_PASSWORD='a_big_secret'
export OS_AUTH_URL='http://127.0.0.1:5000/v2.0/'
export OS_AUTH_STRATEGY='keystone'
export OS_REGION_NAME='RegionOne'
export CINDER_ENDPOINT_TYPE='publicURL'
export GLANCE_ENDPOINT_TYPE='publicURL'
export KEYSTONE_ENDPOINT_TYPE='publicURL'
export NOVA_ENDPOINT_TYPE='publicURL'
export NEUTRON_ENDPOINT_TYPE='publicURL'

Then puppet will fail on any keystone_user resource. For instance having:

      keystone_user { 'foo':
        ensure => present,
        enabled => true,
        email => '<email address hidden>',
        password => 'a_big_secret',
      }

will result in this error:

    Error: /Stage[main]/Main/Keystone_user[foo]: Could not evaluate: Execution of '/bin/openstack token issue --format value' returned 1: ERROR: openstack The resource could not be found. (HTTP 404) (Request-ID: req-1cf22b9e-29a8-4529-a35b-53a844568c45)

Verified with HEAD(>=7.0.0) and 6.1.0, 6.0.0

A temporary fix is to remove the openrc (or commenting the OS_AUTH_URL).

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/253157

Changed in puppet-keystone:
assignee: nobody → Sofer Athlan-Guyot (sofer-athlan-guyot)
status: New → In Progress
Changed in puppet-keystone:
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-keystone (stable/liberty)

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/253188

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-keystone (stable/kilo)

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/253189

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (master)

Reviewed: https://review.openstack.org/253157
Committed: https://git.openstack.org/cgit/openstack/puppet-keystone/commit/?id=a0fc779b26f12784aa506a1bd47e0b43c5da1827
Submitter: Jenkins
Branch: master

commit a0fc779b26f12784aa506a1bd47e0b43c5da1827
Author: Sofer Athlan-Guyot <email address hidden>
Date: Thu Dec 3 20:24:51 2015 +0100

    Keystone_user fails with v2 openrc.

    When /root/openrc is present and has a v2 auth_url, then keystone_user
    resource will fail to check the password.

    Change-Id: I4e7eb383800348ac55f11c68f45437c567507b79
    Closes-Bug: #1522541

Changed in puppet-keystone:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-keystone (stable/liberty)

Change abandoned by Clayton O'Neill (<email address hidden>) on branch: stable/liberty
Review: https://review.openstack.org/253188

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-keystone (stable/kilo)

Change abandoned by Clayton O'Neill (<email address hidden>) on branch: stable/kilo
Review: https://review.openstack.org/253189

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (stable/liberty)

Reviewed: https://review.openstack.org/253188
Committed: https://git.openstack.org/cgit/openstack/puppet-keystone/commit/?id=cc3086abc24b1b7a267eb0ed60b6d7c70a6e4efe
Submitter: Jenkins
Branch: stable/liberty

commit cc3086abc24b1b7a267eb0ed60b6d7c70a6e4efe
Author: Sofer Athlan-Guyot <email address hidden>
Date: Thu Dec 3 20:24:51 2015 +0100

    Keystone_user fails with v2 openrc.

    When /root/openrc is present and has a v2 auth_url, then keystone_user
    resource will fail to check the password.

    Change-Id: I4e7eb383800348ac55f11c68f45437c567507b79
    Closes-Bug: #1522541
    (cherry picked from commit a0fc779b26f12784aa506a1bd47e0b43c5da1827)

tags: added: in-stable-liberty
Matt Fischer (mfisch)
Changed in puppet-keystone:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.