puppet-keystone

keystone::federation::openidc does not load the required apache modules

Bug #2006924 reported by Takashi Kajinami
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
puppet-keystone
Fix Released
High
Takashi Kajinami

Bug Description

The auth_openidc module requires the following two modules, but the current implementation does not enable these two explicitly.
 - authn_core
 - authz_user

This results in missing modules in case apache::default_mods::all is false.

OpenStack Infra (hudson-openstack)
Changed in puppet-keystone:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to puppet-keystone (master)

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/puppet-keystone/+/873359

Takashi Kajinami (kajinamit)
Changed in puppet-keystone:
importance: Undecided → High
assignee: nobody → Takashi Kajinami (kajinamit)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (master)

Reviewed: https://review.opendev.org/c/openstack/puppet-keystone/+/873358
Committed: https://opendev.org/openstack/puppet-keystone/commit/6c52159c7b68c0da839cfb92e78876fff41afefc
Submitter: "Zuul (22348)"
Branch: master

commit 6c52159c7b68c0da839cfb92e78876fff41afefc
Author: Takashi Kajinami <email address hidden>
Date: Fri Feb 10 19:07:24 2023 +0900

    OIDC: Make sure the dependent auth modules are loaded

    The following two modules are required to use auth_openidc.
     - authn_core
     - authz_user

    This ensures these modules are loaded.

    Closes-Bug: #2006924
    Change-Id: I13c36b10d80e9518d1d4af44c0b8a69fcfe911d3

Changed in puppet-keystone:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to puppet-keystone (master)

Reviewed: https://review.opendev.org/c/openstack/puppet-keystone/+/873359
Committed: https://opendev.org/openstack/puppet-keystone/commit/fe95db4cb068a80ce1ea1390a30abe7864b92633
Submitter: "Zuul (22348)"
Branch: master

commit fe95db4cb068a80ce1ea1390a30abe7864b92633
Author: Takashi Kajinami <email address hidden>
Date: Fri Feb 10 19:26:01 2023 +0900

    Use puppetlabs-apache to load auth modules.

    ... so that we don't have to maintain the required logics to enable
    the module in our modules.

    Related-Bug: #2006924
    Change-Id: Ia46deea226a58638e74eee0c0172f0c3c5fa62e7

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-keystone (stable/zed)

Fix proposed to branch: stable/zed
Review: https://review.opendev.org/c/openstack/puppet-keystone/+/873773

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-keystone (stable/yoga)

Fix proposed to branch: stable/yoga
Review: https://review.opendev.org/c/openstack/puppet-keystone/+/873777

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-keystone (stable/xena)

Fix proposed to branch: stable/xena
Review: https://review.opendev.org/c/openstack/puppet-keystone/+/873778

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-keystone (stable/wallaby)

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/puppet-keystone/+/873779

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (stable/yoga)

Reviewed: https://review.opendev.org/c/openstack/puppet-keystone/+/873777
Committed: https://opendev.org/openstack/puppet-keystone/commit/26e0525c2a7040e61589df784485c48914d100d7
Submitter: "Zuul (22348)"
Branch: stable/yoga

commit 26e0525c2a7040e61589df784485c48914d100d7
Author: Takashi Kajinami <email address hidden>
Date: Fri Feb 10 19:07:24 2023 +0900

    OIDC: Make sure the dependent auth modules are loaded

    The following two modules are required to use auth_openidc.
     - authn_core
     - authz_user

    This ensures these modules are loaded.

    Closes-Bug: #2006924
    Change-Id: I13c36b10d80e9518d1d4af44c0b8a69fcfe911d3
    (cherry picked from commit 6c52159c7b68c0da839cfb92e78876fff41afefc)
    (cherry picked from commit 6e56955c888603b5cc2091c50da1dddedc79fccc)

tags: added: in-stable-yoga
tags: added: in-stable-xena
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (stable/xena)

Reviewed: https://review.opendev.org/c/openstack/puppet-keystone/+/873778
Committed: https://opendev.org/openstack/puppet-keystone/commit/ca43d642d5609bc02b206cae25d9da7a226445c1
Submitter: "Zuul (22348)"
Branch: stable/xena

commit ca43d642d5609bc02b206cae25d9da7a226445c1
Author: Takashi Kajinami <email address hidden>
Date: Fri Feb 10 19:07:24 2023 +0900

    OIDC: Make sure the dependent auth modules are loaded

    The following two modules are required to use auth_openidc.
     - authn_core
     - authz_user

    This ensures these modules are loaded.

    Closes-Bug: #2006924
    Change-Id: I13c36b10d80e9518d1d4af44c0b8a69fcfe911d3
    (cherry picked from commit 6c52159c7b68c0da839cfb92e78876fff41afefc)
    (cherry picked from commit 6e56955c888603b5cc2091c50da1dddedc79fccc)
    (cherry picked from commit 26e0525c2a7040e61589df784485c48914d100d7)

tags: added: in-stable-wallaby
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/puppet-keystone/+/873779
Committed: https://opendev.org/openstack/puppet-keystone/commit/67ff2875dda9f441b6e630639a9afdaf143ebf66
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit 67ff2875dda9f441b6e630639a9afdaf143ebf66
Author: Takashi Kajinami <email address hidden>
Date: Fri Feb 10 19:07:24 2023 +0900

    OIDC: Make sure the dependent auth modules are loaded

    The following two modules are required to use auth_openidc.
     - authn_core
     - authz_user

    This ensures these modules are loaded.

    Closes-Bug: #2006924
    Change-Id: I13c36b10d80e9518d1d4af44c0b8a69fcfe911d3
    (cherry picked from commit 6c52159c7b68c0da839cfb92e78876fff41afefc)
    (cherry picked from commit 6e56955c888603b5cc2091c50da1dddedc79fccc)
    (cherry picked from commit 26e0525c2a7040e61589df784485c48914d100d7)
    (cherry picked from commit ca43d642d5609bc02b206cae25d9da7a226445c1)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (stable/zed)

Reviewed: https://review.opendev.org/c/openstack/puppet-keystone/+/873773
Committed: https://opendev.org/openstack/puppet-keystone/commit/6e56955c888603b5cc2091c50da1dddedc79fccc
Submitter: "Zuul (22348)"
Branch: stable/zed

commit 6e56955c888603b5cc2091c50da1dddedc79fccc
Author: Takashi Kajinami <email address hidden>
Date: Fri Feb 10 19:07:24 2023 +0900

    OIDC: Make sure the dependent auth modules are loaded

    The following two modules are required to use auth_openidc.
     - authn_core
     - authz_user

    This ensures these modules are loaded.

    Closes-Bug: #2006924
    Change-Id: I13c36b10d80e9518d1d4af44c0b8a69fcfe911d3
    (cherry picked from commit 6c52159c7b68c0da839cfb92e78876fff41afefc)

tags: added: in-stable-zed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/puppet-keystone 22.0.0

This issue was fixed in the openstack/puppet-keystone 22.0.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/puppet-keystone 19.5.0

This issue was fixed in the openstack/puppet-keystone 19.5.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/puppet-keystone 20.4.0

This issue was fixed in the openstack/puppet-keystone 20.4.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/puppet-keystone wallaby-eom

This issue was fixed in the openstack/puppet-keystone wallaby-eom release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.